$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/f9f3527f-abeb-351e-a52d-3988f3d8cad3.roa File: f9f3527f-abeb-351e-a52d-3988f3d8cad3.roa (raw, json) Hash identifier: Vq3PrAIyzdE/ZxTuVYKzFiD6hG3+HvKc9hFaBmOcT0A= Subject key identifier: 70:8B:0A:8B:32:02:40:86:CF:76:CD:67:E5:E2:39:C4:30:62:B0:54 Certificate issuer: /CN=6e9c5894-f794-4209-a00d-cf232363d7c6 Certificate serial: 010D0C9F43285849998F3DC029FB61FEBAE0EC00 Authority key identifier: EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/f9f3527f-abeb-351e-a52d-3988f3d8cad3.roa Signing time: Mon 21 Apr 2025 13:00:59 +0000 ROA not before: Mon 21 Apr 2025 13:00:59 +0000 ROA not after: Sun 20 Jul 2025 13:00:59 +0000 asID: 16509 IP address blocks: 2605:b040:4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:99:8f:3d:c0:29:fb:61:fe:ba:e0:ec:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e9c5894-f794-4209-a00d-cf232363d7c6 Validity Not Before: Apr 21 13:00:59 2025 GMT Not After : Jul 20 13:00:59 2025 GMT Subject: CN=bf0aaa80-0ec1-474f-8ea6-500fb66a2a8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:13:4c:41:8e:a0:23:06:59:16:bf:46:78:c9: 4a:10:00:fd:80:c9:63:d4:ed:ea:9d:1a:78:dc:fb: 3e:70:44:7c:02:45:bf:3a:fc:48:54:fd:f8:ec:d8: a5:d7:dd:89:31:5b:b3:4d:a2:2e:e0:8c:d8:31:84: e2:b1:19:4d:bc:0f:34:96:07:1c:04:06:fe:5d:66: 94:a8:31:78:56:45:ce:b9:d7:2c:44:83:f8:5f:cb: 0f:e6:ba:5a:7e:c9:ed:a3:d6:e4:51:68:c4:91:ed: 46:73:5c:fd:06:e5:93:90:ad:c3:08:9e:6d:61:71: 30:da:17:57:a0:bc:4b:7e:66:a4:5a:0b:28:8b:ad: 7c:68:29:b1:3a:cb:83:92:6e:a6:fc:a3:7c:58:b2: c4:27:4f:93:eb:35:27:a9:ae:bd:60:09:48:4d:36: 5c:d3:64:d6:14:4a:43:53:f8:fc:5b:06:44:86:22: 56:c0:c2:c9:e8:5e:9b:8a:44:e8:f4:8a:09:f8:9b: f2:2b:79:33:47:02:b4:5e:bc:31:c4:4f:2c:1f:47: 56:3c:5f:ec:df:91:47:72:41:9f:2c:d5:37:86:a2: ae:0b:a7:b7:29:cb:88:cb:8c:af:8e:47:c6:2c:b8: d3:eb:18:d7:ce:93:a3:f2:9f:62:ad:72:20:86:fa: c4:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:8B:0A:8B:32:02:40:86:CF:76:CD:67:E5:E2:39:C4:30:62:B0:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/f9f3527f-abeb-351e-a52d-3988f3d8cad3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl X509v3 Authority Key Identifier: keyid:EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer sbgp-ipAddrBlock: critical IPv6: 2605:b040:4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:a6:aa:3c:cd:e5:99:ed:d2:04:d0:3a:e9:a5:97:77:b4:5a: 69:44:6f:c4:b3:40:e7:90:a9:3c:5b:db:78:c7:56:a4:c3:bd: f9:53:18:fe:3e:17:fa:b6:64:97:44:e4:14:59:ef:2b:e4:02: 19:0c:92:18:97:6f:5f:4e:97:92:ee:93:0d:02:c5:ce:9f:50: 3a:5a:11:c0:d2:f8:f1:0e:8c:92:32:1f:28:41:fa:44:3b:a3: 79:42:ac:1c:3d:70:de:eb:80:03:9f:43:17:f1:33:8a:65:3c: 54:fb:99:1c:5f:a1:45:72:20:a3:b2:03:c4:2d:13:db:08:83: 1e:f7:a3:57:c1:af:de:9b:bf:26:63:a6:b0:59:2d:76:55:03: ac:71:b2:bf:8a:cf:4e:41:fb:5f:87:7d:7e:ab:be:f1:66:6f: 5d:de:9b:4c:59:19:c3:9b:e2:5a:64:31:a4:bd:89:8d:ce:3d: a0:a9:c1:34:d0:88:c7:18:45:eb:f4:fe:f3:87:aa:13:37:80: 90:94:fb:55:b8:82:1b:91:2b:cb:39:f8:67:bb:13:93:2c:b9: 1a:ad:b6:81:ee:bc:1e:4a:7a:4e:12:fb:9b:81:5c:99:78:a9: 2f:12:89:d9:69:0e:b7:bb:19:34:07:9b:4c:ae:05:fe:c5:a8: 73:5b:1b:ce -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmZjz3AKfth/rrg7AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmU5YzU4OTQtZjc5NC00MjA5LWEwMGQtY2YyMzIzNjNk N2M2MB4XDTI1MDQyMTEzMDA1OVoXDTI1MDcyMDEzMDA1OVowLzEtMCsGA1UEAxMk YmYwYWFhODAtMGVjMS00NzRmLThlYTYtNTAwZmI2NmEyYThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxNMQY6gIwZZFr9GeMlKEAD9gMlj1O3qnRp4 3Ps+cER8AkW/OvxIVP347Nil192JMVuzTaIu4IzYMYTisRlNvA80lgccBAb+XWaU qDF4VkXOudcsRIP4X8sP5rpafsnto9bkUWjEke1Gc1z9BuWTkK3DCJ5tYXEw2hdX oLxLfmakWgsoi618aCmxOsuDkm6m/KN8WLLEJ0+T6zUnqa69YAlITTZc02TWFEpD U/j8WwZEhiJWwMLJ6F6bikTo9IoJ+JvyK3kzRwK0XrwxxE8sH0dWPF/s35FHckGf LNU3hqKuC6e3KcuIy4yvjkfGLLjT6xjXzpOj8p9irXIghvrEywIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHCLCosyAkCGz3bNZ+XiOcQwYrBUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82ZTlj NTg5NC1mNzk0LTQyMDktYTAwZC1jZjIzMjM2M2Q3YzYvZjlmMzUyN2YtYWJlYi0z NTFlLWE1MmQtMzk4OGYzZDhjYWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNmU5YzU4OTQtZjc5NC00MjA5LWEw MGQtY2YyMzIzNjNkN2M2LzZlOWM1ODk0LWY3OTQtNDIwOS1hMDBkLWNmMjMyMzYz ZDdjNi5jcmwwHwYDVR0jBBgwFoAU620+1MghuZYRngwJ/123iIBSlIUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82ZTljNTg5NC1mNzk0LTQyMDktYTAwZC1jZjIz MjM2M2Q3YzYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWwQAAE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACymqjzN5Znt0gTQOumll3e0WmlEb8SzQOeQqTxb23jHVqTDvflT GP4+F/q2ZJdE5BRZ7yvkAhkMkhiXb19Ol5Lukw0Cxc6fUDpaEcDS+PEOjJIyHyhB +kQ7o3lCrBw9cN7rgAOfQxfxM4plPFT7mRxfoUVyIKOyA8QtE9sIgx73o1fBr96b vyZjprBZLXZVA6xxsr+Kz05B+1+HfX6rvvFmb13em0xZGcOb4lpkMaS9iY3OPaCp wTTQiMcYRev0/vOHqhM3gJCU+1W4ghuRK8s5+Ge7E5MsuRqttoHuvB5Kek4S+5uB XJl4qS8SidlpDre7GTQHm0yuBf7FqHNbG84= -----END CERTIFICATE-----Generated at Sun Apr 27 03:02:12 2025 by rpki-client