$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/41468428-87df-33f3-9283-db2e559235a8.roa File: 41468428-87df-33f3-9283-db2e559235a8.roa (raw, json) Hash identifier: fDQEO2DJcpp1+KJ7CoB9jBgT6z7y0W9CRHDz4Ri0wXU= Subject key identifier: 97:63:46:BC:F3:EE:2F:C4:14:66:AC:DC:97:C9:E0:59:30:5F:81:10 Certificate issuer: /CN=6e9c5894-f794-4209-a00d-cf232363d7c6 Certificate serial: 010D0C9F43285849998F3D43FD4EEC5E867352F0 Authority key identifier: EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/41468428-87df-33f3-9283-db2e559235a8.roa Signing time: Mon 21 Apr 2025 13:00:59 +0000 ROA not before: Mon 21 Apr 2025 13:00:59 +0000 ROA not after: Sun 20 Jul 2025 13:00:59 +0000 asID: 14618 IP address blocks: 2605:b040:4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:99:8f:3d:43:fd:4e:ec:5e:86:73:52:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e9c5894-f794-4209-a00d-cf232363d7c6 Validity Not Before: Apr 21 13:00:59 2025 GMT Not After : Jul 20 13:00:59 2025 GMT Subject: CN=9c7cb5da-3db5-4886-975a-fd6e53ffda95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:42:10:2c:97:9f:6b:7e:8c:2b:1f:5a:00:a6: 94:61:37:8b:0a:e0:2d:6d:80:5e:db:0c:35:36:e0: 48:8c:1f:07:80:31:0c:e3:ee:ba:ca:fa:b4:7f:85: f9:72:e6:90:34:26:8a:32:c3:87:cb:be:23:63:a9: 76:99:57:e7:f5:38:3d:42:a1:08:0e:02:ea:b7:0a: 32:52:81:1f:8f:b4:32:83:3d:f5:83:98:fa:8a:83: 6f:7d:c5:d6:55:09:f0:7c:74:3f:2d:1a:3c:0c:13: fd:d9:9a:b7:51:b2:17:66:43:7a:d8:1f:fb:31:34: 3b:82:81:0a:28:66:a7:12:7b:14:fb:58:b9:dd:8f: 4b:8c:b0:7f:c5:c5:94:0a:20:c4:a3:2f:bf:56:f7: d4:34:46:8b:67:ff:ac:8b:af:64:8e:e5:37:e5:02: 58:d9:9a:1e:c1:5c:f1:b4:99:a6:b6:20:e4:a6:23: 8f:2d:e7:47:7f:a1:59:8b:3a:ce:2d:f1:18:11:1b: f2:88:6d:c1:4e:29:8a:0d:ee:ed:b8:09:bb:6c:e6: 2c:11:bf:8b:58:72:26:85:d9:67:56:62:db:48:1c: 0f:bd:27:7d:bd:51:84:0d:1d:e5:39:66:53:b6:41: d3:f5:89:66:a0:26:a8:b4:ad:46:8f:40:39:4a:3c: 0f:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:63:46:BC:F3:EE:2F:C4:14:66:AC:DC:97:C9:E0:59:30:5F:81:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/41468428-87df-33f3-9283-db2e559235a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl X509v3 Authority Key Identifier: keyid:EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer sbgp-ipAddrBlock: critical IPv6: 2605:b040:4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:28:d8:fd:50:e5:19:57:b9:b9:17:5d:78:a3:43:8f:0b:34: 8d:56:8d:86:4f:a0:90:47:05:cd:f5:ca:5f:6e:1d:9c:04:28: 66:68:3a:f0:b3:84:04:f9:0a:50:e9:9a:c4:7c:e6:40:38:de: 46:84:7b:3b:6c:34:7a:d6:23:e4:57:c5:5a:1d:69:11:37:49: 85:68:25:71:38:61:b3:d6:d0:dc:5e:d7:57:bd:6f:66:64:0a: 5f:d7:21:0f:1d:85:0a:ae:1e:09:12:4e:a8:47:7f:3a:16:e8: c5:a5:1a:66:14:01:0b:0f:79:07:06:76:f4:18:e9:a3:3f:ba: 7a:89:ed:f0:e4:33:a2:c6:29:31:a8:6f:b8:48:83:39:33:80: 6f:82:aa:e4:d1:3b:00:c0:c5:be:32:b8:3e:46:1c:c8:7e:71: c3:9c:d6:e9:59:74:3d:ec:ae:89:48:d3:bb:5c:83:80:ad:e7: c7:04:cc:34:2d:81:39:95:66:34:53:23:5f:e2:41:2e:f6:5a: e1:9c:7f:29:a2:bb:71:4c:06:14:a2:a1:30:19:51:5a:27:99: b4:4a:05:48:c4:2a:9e:fb:c6:d0:37:d7:e6:e7:4d:d1:02:94: bf:32:b4:74:dd:cf:52:fc:ec:f9:af:48:5e:fe:70:9e:cc:7a: 26:e2:6f:36 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmZjz1D/U7sXoZzUvAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmU5YzU4OTQtZjc5NC00MjA5LWEwMGQtY2YyMzIzNjNk N2M2MB4XDTI1MDQyMTEzMDA1OVoXDTI1MDcyMDEzMDA1OVowLzEtMCsGA1UEAxMk OWM3Y2I1ZGEtM2RiNS00ODg2LTk3NWEtZmQ2ZTUzZmZkYTk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkIQLJefa36MKx9aAKaUYTeLCuAtbYBe2ww1 NuBIjB8HgDEM4+66yvq0f4X5cuaQNCaKMsOHy74jY6l2mVfn9Tg9QqEIDgLqtwoy UoEfj7Qygz31g5j6ioNvfcXWVQnwfHQ/LRo8DBP92Zq3UbIXZkN62B/7MTQ7goEK KGanEnsU+1i53Y9LjLB/xcWUCiDEoy+/VvfUNEaLZ/+si69kjuU35QJY2ZoewVzx tJmmtiDkpiOPLedHf6FZizrOLfEYERvyiG3BTimKDe7tuAm7bOYsEb+LWHImhdln VmLbSBwPvSd9vVGEDR3lOWZTtkHT9YlmoCaotK1Gj0A5SjwP3QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJdjRrzz7i/EFGas3JfJ4FkwX4EQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82ZTlj NTg5NC1mNzk0LTQyMDktYTAwZC1jZjIzMjM2M2Q3YzYvNDE0Njg0MjgtODdkZi0z M2YzLTkyODMtZGIyZTU1OTIzNWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNmU5YzU4OTQtZjc5NC00MjA5LWEw MGQtY2YyMzIzNjNkN2M2LzZlOWM1ODk0LWY3OTQtNDIwOS1hMDBkLWNmMjMyMzYz ZDdjNi5jcmwwHwYDVR0jBBgwFoAU620+1MghuZYRngwJ/123iIBSlIUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82ZTljNTg5NC1mNzk0LTQyMDktYTAwZC1jZjIz MjM2M2Q3YzYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWwQAAE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACMo2P1Q5RlXubkXXXijQ48LNI1WjYZPoJBHBc31yl9uHZwEKGZo OvCzhAT5ClDpmsR85kA43kaEeztsNHrWI+RXxVodaRE3SYVoJXE4YbPW0Nxe11e9 b2ZkCl/XIQ8dhQquHgkSTqhHfzoW6MWlGmYUAQsPeQcGdvQY6aM/unqJ7fDkM6LG KTGob7hIgzkzgG+CquTROwDAxb4yuD5GHMh+ccOc1ulZdD3srolI07tcg4Ct58cE zDQtgTmVZjRTI1/iQS72WuGcfymiu3FMBhSioTAZUVonmbRKBUjEKp77xtA31+bn TdEClL8ytHTdz1L87PmvSF7+cJ7MeibibzY= -----END CERTIFICATE-----Generated at Sat Apr 26 13:26:36 2025 by rpki-client