$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/e83c5795-8197-350a-8f84-13a04f15b724.roa File: e83c5795-8197-350a-8f84-13a04f15b724.roa (raw, json) Hash identifier: +SPdHJ7RQAnzw3KrJHTtNHqRrCLb2XfdOG/xXt4KKU4= Subject key identifier: 97:C5:85:56:6E:70:AA:BA:7C:55:29:E1:3B:6F:94:C8:D8:85:29:54 Certificate issuer: /CN=6e9c5894-f794-4209-a00d-cf232363d7c6 Certificate serial: 010D0C9F43285849998F3DAD2CC631153D4011C0 Authority key identifier: EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/e83c5795-8197-350a-8f84-13a04f15b724.roa Signing time: Mon 21 Apr 2025 13:00:59 +0000 ROA not before: Mon 21 Apr 2025 13:00:59 +0000 ROA not after: Sun 20 Jul 2025 13:00:59 +0000 asID: 16509 IP address blocks: 2605:b040:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:99:8f:3d:ad:2c:c6:31:15:3d:40:11:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e9c5894-f794-4209-a00d-cf232363d7c6 Validity Not Before: Apr 21 13:00:59 2025 GMT Not After : Jul 20 13:00:59 2025 GMT Subject: CN=a66f029f-f3e2-47c7-9748-bb985592e309 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:42:1b:6b:b5:63:60:d5:a5:d8:78:97:7a:c2: fe:67:b3:30:29:15:20:b8:b6:a4:9a:41:bf:be:d8: b2:65:a7:6e:e0:2f:ef:84:7d:dd:06:6d:45:7f:6a: 2a:75:08:79:3c:70:73:c0:a2:b4:3e:ad:f6:59:d1: ce:81:62:8b:f0:cb:07:67:f4:79:6c:a9:01:7f:e8: e3:29:d4:c2:e6:88:ee:48:f0:9d:1b:60:ce:f2:56: 0b:74:74:4f:34:59:81:ed:c4:c8:ac:15:0e:ee:10: bd:8a:61:73:83:41:8b:be:70:92:a7:86:bb:67:fd: 07:c7:05:c2:3e:f1:08:3b:08:08:a1:4f:79:74:2b: 1a:7b:31:00:9b:69:e6:09:1c:63:60:29:9e:7b:73: 83:73:ea:fe:a5:7e:8c:53:45:ea:bd:0d:09:17:40: 7a:bd:a4:6c:85:d3:01:18:79:18:e2:37:da:66:ba: 65:fc:17:e8:88:3d:c0:d2:b5:b5:a0:e2:05:51:0e: d9:f5:5d:2f:fa:02:f9:10:6d:a5:21:58:30:4b:8e: 88:bb:b4:1e:65:25:fc:4d:3b:4f:64:48:7b:8a:cd: d6:7a:ad:bd:6b:a2:90:9d:d2:33:b2:45:31:ff:46: ee:0c:4d:17:28:17:33:e2:d5:80:94:17:43:7d:bc: 1e:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:C5:85:56:6E:70:AA:BA:7C:55:29:E1:3B:6F:94:C8:D8:85:29:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/e83c5795-8197-350a-8f84-13a04f15b724.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl X509v3 Authority Key Identifier: keyid:EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer sbgp-ipAddrBlock: critical IPv6: 2605:b040:3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:7e:f6:f8:f2:b2:d5:93:bd:80:16:7e:a7:b6:b4:df:53:8e: dd:bf:e6:c9:d3:52:1d:ec:af:5e:c8:4f:25:57:a2:b9:5a:af: e6:66:a5:99:3c:5a:d7:72:7a:63:c5:94:88:bb:59:c7:45:4e: 42:cd:70:d1:12:24:5b:ba:48:8e:ce:c0:64:e0:cc:08:0f:25: 89:86:56:5d:d1:82:00:99:af:22:aa:f7:68:3c:06:fb:d5:92: 31:25:88:70:f0:35:3d:a5:d8:95:86:de:e9:67:00:12:fc:f5: 5a:e2:a3:82:37:a2:2c:94:e4:34:ff:29:f8:e9:b8:2a:dd:eb: 4f:69:80:d5:bd:3a:e4:0e:ff:ca:23:68:97:7e:fb:27:32:29: 40:6e:ef:11:7e:2c:54:fd:84:13:65:c2:f5:9d:c8:e5:19:a2: 5f:c6:9f:34:72:bd:b2:64:d4:fa:3a:49:15:c6:05:5a:bd:5d: 15:14:05:e5:69:b9:22:72:1b:35:56:5a:c9:6c:ef:9c:fe:f7: 37:d3:c5:68:0f:5c:cf:da:bf:a1:05:2e:94:ca:9c:d4:2f:9f: 51:20:46:47:7d:2b:87:af:03:ac:d7:c2:43:12:e3:b8:30:39: c3:88:7b:81:26:c8:15:af:39:3e:49:b1:9f:ee:49:d9:37:7e: dd:f1:6e:28 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmZjz2tLMYxFT1AEcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmU5YzU4OTQtZjc5NC00MjA5LWEwMGQtY2YyMzIzNjNk N2M2MB4XDTI1MDQyMTEzMDA1OVoXDTI1MDcyMDEzMDA1OVowLzEtMCsGA1UEAxMk YTY2ZjAyOWYtZjNlMi00N2M3LTk3NDgtYmI5ODU1OTJlMzA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0Iba7VjYNWl2HiXesL+Z7MwKRUguLakmkG/ vtiyZadu4C/vhH3dBm1Ff2oqdQh5PHBzwKK0Pq32WdHOgWKL8MsHZ/R5bKkBf+jj KdTC5ojuSPCdG2DO8lYLdHRPNFmB7cTIrBUO7hC9imFzg0GLvnCSp4a7Z/0HxwXC PvEIOwgIoU95dCsaezEAm2nmCRxjYCmee3ODc+r+pX6MU0XqvQ0JF0B6vaRshdMB GHkY4jfaZrpl/BfoiD3A0rW1oOIFUQ7Z9V0v+gL5EG2lIVgwS46Iu7QeZSX8TTtP ZEh7is3Weq29a6KQndIzskUx/0buDE0XKBcz4tWAlBdDfbwe5wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJfFhVZucKq6fFUp4TtvlMjYhSlUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82ZTlj NTg5NC1mNzk0LTQyMDktYTAwZC1jZjIzMjM2M2Q3YzYvZTgzYzU3OTUtODE5Ny0z NTBhLThmODQtMTNhMDRmMTViNzI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNmU5YzU4OTQtZjc5NC00MjA5LWEw MGQtY2YyMzIzNjNkN2M2LzZlOWM1ODk0LWY3OTQtNDIwOS1hMDBkLWNmMjMyMzYz ZDdjNi5jcmwwHwYDVR0jBBgwFoAU620+1MghuZYRngwJ/123iIBSlIUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82ZTljNTg5NC1mNzk0LTQyMDktYTAwZC1jZjIz MjM2M2Q3YzYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWwQAAD MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHd+9vjystWTvYAWfqe2tN9Tjt2/5snTUh3sr17ITyVXorlar+Zm pZk8WtdyemPFlIi7WcdFTkLNcNESJFu6SI7OwGTgzAgPJYmGVl3RggCZryKq92g8 BvvVkjEliHDwNT2l2JWG3ulnABL89Vrio4I3oiyU5DT/KfjpuCrd609pgNW9OuQO /8ojaJd++ycyKUBu7xF+LFT9hBNlwvWdyOUZol/GnzRyvbJk1Po6SRXGBVq9XRUU BeVpuSJyGzVWWsls75z+9zfTxWgPXM/av6EFLpTKnNQvn1EgRkd9K4evA6zXwkMS 47gwOcOIe4EmyBWvOT5JsZ/uSdk3ft3xbig= -----END CERTIFICATE-----Generated at Sat Apr 26 14:56:27 2025 by rpki-client