$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cafbf9d6-fd0b-3826-b135-bb285fa61823.roa File: cafbf9d6-fd0b-3826-b135-bb285fa61823.roa (raw, json) Hash identifier: Y29k4JhVIhdva+XT/mN0EgNKz1l19nnqeux3gcbn7p8= Subject key identifier: 45:03:DB:3C:41:F5:72:C6:80:BD:0C:72:ED:96:9A:CB:3A:F1:CC:AF Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F432858491941728670875E6C78753520 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cafbf9d6-fd0b-3826-b135-bb285fa61823.roa Signing time: Thu 06 Mar 2025 14:00:52 +0000 ROA not before: Thu 06 Mar 2025 14:00:52 +0000 ROA not after: Wed 04 Jun 2025 13:00:52 +0000 asID: 13335 IP address blocks: 2606:4700:4000::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:19:41:72:86:70:87:5e:6c:78:75:35:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 6 14:00:52 2025 GMT Not After : Jun 4 13:00:52 2025 GMT Subject: CN=346ff1fa-8fec-4eb1-8671-35c35bcf7c78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e0:35:e0:d4:fa:54:a1:6f:c9:5f:d2:c4:ec: 76:82:a6:6e:20:dd:a3:2e:fd:ef:c6:62:71:e6:aa: 47:e7:c8:d5:45:c8:6c:fb:03:4a:72:6b:44:8a:d9: 3a:ef:ab:2d:91:03:ee:71:b3:51:75:a3:83:78:2a: c6:22:f5:41:25:01:5a:5a:47:18:8c:cc:2b:04:59: e2:22:9b:d3:53:ad:92:56:ff:56:56:44:0a:6b:2b: c9:84:f8:88:23:2c:c9:8b:13:d9:b3:0e:a1:d4:c5: 12:a9:d6:5b:c6:d1:aa:8c:4a:0d:a3:bd:c7:3c:99: c3:d8:4f:34:a7:b1:31:83:54:c3:be:e3:d6:3e:18: e8:a7:58:88:3a:0b:77:a8:59:9c:4b:39:78:b3:cc: b4:87:19:55:cc:b2:74:ff:d7:66:ef:46:24:e7:ff: 25:d4:b9:e8:4a:6f:43:5b:a9:e4:7d:c4:cf:42:59: e4:a7:c9:a8:c4:02:13:01:13:99:63:46:57:72:96: a3:7b:be:cf:5c:95:dd:e3:d5:e3:5e:98:d2:f5:83: 52:8c:89:6c:af:10:6f:26:51:2b:b0:9b:af:44:a1: ac:39:ab:23:54:b4:3b:e8:21:58:43:9f:8d:74:e7: 3d:0d:4c:2f:bd:e1:b8:66:53:bb:76:51:16:03:55: eb:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:03:DB:3C:41:F5:72:C6:80:BD:0C:72:ED:96:9A:CB:3A:F1:CC:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cafbf9d6-fd0b-3826-b135-bb285fa61823.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv6: 2606:4700:4000::/45 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:00:8b:f4:4b:ec:ce:02:9f:fa:f9:4a:ff:52:80:a4:19:73: c1:26:3e:b8:e8:da:8c:7c:90:8c:1b:94:2f:ac:66:cd:c0:83: 88:c2:e2:f0:7f:e8:f3:40:25:ff:71:77:7c:cc:0c:e6:8b:fb: c0:a8:e4:87:5c:83:17:e5:26:13:5f:c0:9a:40:5f:41:da:31: a8:45:e0:df:e1:69:67:19:89:b3:81:8f:ac:9c:d0:af:fa:dd: a0:66:a8:80:ac:42:ae:42:d4:91:9e:12:3b:fc:16:72:7a:aa: 10:a4:d8:8c:94:72:c6:e1:00:e9:cb:0b:12:9a:15:dd:3c:a8: f0:bf:3b:7a:80:59:6e:42:4b:5a:ac:45:fb:90:a2:75:78:64: 61:08:32:d4:94:d1:82:71:40:28:ec:57:87:d9:f8:99:d0:82: 9f:c2:c2:62:95:24:8f:9f:a9:09:4d:e4:1c:b4:72:02:9d:be: bf:3f:90:a0:44:59:d4:2a:7e:fe:69:b7:5c:45:39:e9:2f:77: ab:06:69:38:1f:43:29:94:8f:1b:77:09:55:df:f1:1e:f1:cc: 5b:77:87:3c:f5:2b:7a:a5:6b:77:da:07:d9:fa:8e:15:ca:50: 56:51:f2:34:70:89:ea:85:ac:b9:c5:28:45:84:a7:d1:7a:af: 90:59:9a:0e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkZQXKGcIdebHh1NSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDMwNjE0MDA1MloXDTI1MDYwNDEzMDA1MlowLzEtMCsGA1UEAxMk MzQ2ZmYxZmEtOGZlYy00ZWIxLTg2NzEtMzVjMzViY2Y3Yzc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+A14NT6VKFvyV/SxOx2gqZuIN2jLv3vxmJx 5qpH58jVRchs+wNKcmtEitk676stkQPucbNRdaODeCrGIvVBJQFaWkcYjMwrBFni IpvTU62SVv9WVkQKayvJhPiIIyzJixPZsw6h1MUSqdZbxtGqjEoNo73HPJnD2E80 p7Exg1TDvuPWPhjop1iIOgt3qFmcSzl4s8y0hxlVzLJ0/9dm70Yk5/8l1LnoSm9D W6nkfcTPQlnkp8moxAITAROZY0ZXcpaje77PXJXd49XjXpjS9YNSjIlsrxBvJlEr sJuvRKGsOasjVLQ76CFYQ5+NdOc9DUwvveG4ZlO7dlEWA1XrhQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEUD2zxB9XLGgL0Mcu2Wmss68cyvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvY2FmYmY5ZDYtZmQwYi0z ODI2LWIxMzUtYmIyODVmYTYxODIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDJgZHAEAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEgAi/RL7M4Cn/r5Sv9SgKQZc8EmPrjo2ox8kIwblC+sZs3Ag4jC 4vB/6PNAJf9xd3zMDOaL+8Co5IdcgxflJhNfwJpAX0HaMahF4N/haWcZibOBj6yc 0K/63aBmqICsQq5C1JGeEjv8FnJ6qhCk2IyUcsbhAOnLCxKaFd08qPC/O3qAWW5C S1qsRfuQonV4ZGEIMtSU0YJxQCjsV4fZ+JnQgp/CwmKVJI+fqQlN5By0cgKdvr8/ kKBEWdQqfv5pt1xFOekvd6sGaTgfQymUjxt3CVXf8R7xzFt3hzz1K3qla3faB9n6 jhXKUFZR8jRwieqFrLnFKEWEp9F6r5BZmg4= -----END CERTIFICATE-----Generated at Sat Apr 26 16:17:01 2025 by rpki-client