$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/e9128337-e876-3422-ae8a-af2cddaa7fe7.roa File: e9128337-e876-3422-ae8a-af2cddaa7fe7.roa (raw, json) Hash identifier: kIqUhGKv3okPtz0atUTGnoFYl2x6rK9uwrS1dxpO0Kk= Subject key identifier: CE:5A:CF:DD:08:87:C1:F8:50:BB:C0:61:49:3B:98:27:7F:4F:CA:AC Certificate issuer: /CN=6e9c5894-f794-4209-a00d-cf232363d7c6 Certificate serial: 010D0C9F43285849998F3DDAB90C32D7728B6980 Authority key identifier: EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/e9128337-e876-3422-ae8a-af2cddaa7fe7.roa Signing time: Mon 21 Apr 2025 13:00:59 +0000 ROA not before: Mon 21 Apr 2025 13:00:59 +0000 ROA not after: Sun 20 Jul 2025 13:00:59 +0000 asID: 16509 IP address blocks: 2605:b040:100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:99:8f:3d:da:b9:0c:32:d7:72:8b:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e9c5894-f794-4209-a00d-cf232363d7c6 Validity Not Before: Apr 21 13:00:59 2025 GMT Not After : Jul 20 13:00:59 2025 GMT Subject: CN=1928bad9-9f89-4398-9f7f-8f411332d54e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:90:d1:3b:78:fe:c9:a7:ae:5d:6a:81:80:33: d1:9b:6f:f4:0e:be:f3:56:0b:20:e4:4c:ed:dc:9e: 87:13:6e:02:b4:2b:10:0b:e5:91:7c:86:e5:81:b4: 51:f8:b7:43:0e:27:10:50:e2:09:ce:6e:5a:b3:37: 6f:e9:0e:32:bf:a9:fb:e4:0c:69:a4:b4:91:f3:00: bf:4d:bd:3d:ad:e7:80:78:2a:15:9f:ca:22:49:2c: a0:8b:28:de:0b:22:bd:b3:16:21:3e:e0:67:05:e3: 43:87:79:af:91:46:6b:17:7c:a2:6f:b9:c4:8d:3c: 5f:9a:be:f1:6d:7c:4d:92:26:70:89:51:d4:72:36: 20:50:68:4d:11:40:3f:03:cd:69:e6:8f:e1:15:05: 05:d0:9d:39:db:4d:6f:11:54:d0:6a:f1:6b:4a:f9: f7:df:cb:16:ee:3d:d9:54:4f:9f:41:6e:68:1c:60: 97:91:14:c1:ff:31:8a:b7:36:74:e9:32:35:e7:b3: 1c:57:32:d7:aa:bc:91:67:4e:cf:8d:bd:8a:13:35: 18:85:0b:25:37:91:5f:7b:aa:c1:19:c2:07:34:f3: 20:db:7b:1f:7d:1e:14:6c:30:27:9c:e7:9e:36:bb: 65:a5:c6:76:5f:ff:ae:a4:ac:c1:ca:60:19:1c:d6: e5:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:5A:CF:DD:08:87:C1:F8:50:BB:C0:61:49:3B:98:27:7F:4F:CA:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/e9128337-e876-3422-ae8a-af2cddaa7fe7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl X509v3 Authority Key Identifier: keyid:EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer sbgp-ipAddrBlock: critical IPv6: 2605:b040:100::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:ca:c0:66:79:af:f0:de:0f:a1:e6:80:d8:09:ee:1a:38:c1: 99:f7:30:b5:93:91:0f:6c:dc:dc:8f:ca:1f:b3:52:9b:29:aa: 73:db:86:e8:6c:92:26:a4:f1:71:0a:76:ce:18:73:56:36:e2: 5d:ce:84:2c:ee:cd:5f:d3:3d:ec:dd:e4:fb:1a:e1:cc:38:50: dc:00:0d:ee:82:79:0c:c4:ce:e2:87:2f:d9:01:84:94:d1:78: ac:06:ee:0d:36:c3:e3:46:55:65:2a:09:de:59:3a:49:4e:12: 49:4f:5a:c3:ce:b9:dc:4a:d7:ff:21:66:fb:0e:98:76:08:cd: a5:cd:3b:d3:c8:88:3b:8b:75:5c:ce:3a:36:9b:43:10:26:7c: 52:4a:94:18:79:a3:86:94:e8:87:89:4b:cd:1b:c6:d7:1e:46: b8:71:9c:a8:eb:72:81:56:05:c8:76:fb:b2:a9:00:63:7f:aa: 18:d9:35:b9:a9:55:20:05:3d:28:af:cd:6a:86:50:2a:a1:64: 6e:b8:b1:df:e3:c1:3b:69:5c:c0:47:26:ff:c1:df:4c:5f:9f: f1:6a:ff:2e:86:c3:f2:be:91:2d:15:d8:33:13:72:b7:d6:46: 94:1b:17:63:ab:1a:17:75:27:62:dd:58:bb:97:7a:b3:4a:8d: 50:cc:b1:ad -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmZjz3auQwy13KLaYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmU5YzU4OTQtZjc5NC00MjA5LWEwMGQtY2YyMzIzNjNk N2M2MB4XDTI1MDQyMTEzMDA1OVoXDTI1MDcyMDEzMDA1OVowLzEtMCsGA1UEAxMk MTkyOGJhZDktOWY4OS00Mzk4LTlmN2YtOGY0MTEzMzJkNTRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5DRO3j+yaeuXWqBgDPRm2/0Dr7zVgsg5Ezt 3J6HE24CtCsQC+WRfIblgbRR+LdDDicQUOIJzm5aszdv6Q4yv6n75AxppLSR8wC/ Tb09reeAeCoVn8oiSSygiyjeCyK9sxYhPuBnBeNDh3mvkUZrF3yib7nEjTxfmr7x bXxNkiZwiVHUcjYgUGhNEUA/A81p5o/hFQUF0J05201vEVTQavFrSvn338sW7j3Z VE+fQW5oHGCXkRTB/zGKtzZ06TI157McVzLXqryRZ07Pjb2KEzUYhQslN5Ffe6rB GcIHNPMg23sffR4UbDAnnOeeNrtlpcZ2X/+upKzBymAZHNbl1wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFM5az90Ih8H4ULvAYUk7mCd/T8qsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82ZTlj NTg5NC1mNzk0LTQyMDktYTAwZC1jZjIzMjM2M2Q3YzYvZTkxMjgzMzctZTg3Ni0z NDIyLWFlOGEtYWYyY2RkYWE3ZmU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNmU5YzU4OTQtZjc5NC00MjA5LWEw MGQtY2YyMzIzNjNkN2M2LzZlOWM1ODk0LWY3OTQtNDIwOS1hMDBkLWNmMjMyMzYz ZDdjNi5jcmwwHwYDVR0jBBgwFoAU620+1MghuZYRngwJ/123iIBSlIUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82ZTljNTg5NC1mNzk0LTQyMDktYTAwZC1jZjIz MjM2M2Q3YzYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWwQAEA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABzKwGZ5r/DeD6HmgNgJ7ho4wZn3MLWTkQ9s3NyPyh+zUpspqnPb huhskiak8XEKds4Yc1Y24l3OhCzuzV/TPezd5Psa4cw4UNwADe6CeQzEzuKHL9kB hJTReKwG7g02w+NGVWUqCd5ZOklOEklPWsPOudxK1/8hZvsOmHYIzaXNO9PIiDuL dVzOOjabQxAmfFJKlBh5o4aU6IeJS80bxtceRrhxnKjrcoFWBch2+7KpAGN/qhjZ NbmpVSAFPSivzWqGUCqhZG64sd/jwTtpXMBHJv/B30xfn/Fq/y6Gw/K+kS0V2DMT crfWRpQbF2OrGhd1J2LdWLuXerNKjVDMsa0= -----END CERTIFICATE-----Generated at Sat Apr 26 16:08:36 2025 by rpki-client