$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853/d6f6aaca-ed6b-3db8-b03c-829187f0d236.roa File: d6f6aaca-ed6b-3db8-b03c-829187f0d236.roa (raw, json) Hash identifier: EepVbg4uEkwecitLxcd2bk9JIaMQp/hOF/fmGbbwP2A= Subject key identifier: C8:71:A5:3E:80:AE:43:04:C6:67:96:E2:EF:3F:E7:94:B5:4F:A3:FE Certificate issuer: /CN=5bac54b9-66dc-4956-863d-1804cfb9e853 Certificate serial: 010D0C9F4328584900216D1D797978EFCA5B5EC0 Authority key identifier: 7F:4A:9A:A7:40:62:CD:6D:BF:70:19:16:CE:FD:9B:2A:27:E6:2E:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853/d6f6aaca-ed6b-3db8-b03c-829187f0d236.roa Signing time: Tue 25 Feb 2025 14:00:52 +0000 ROA not before: Tue 25 Feb 2025 14:00:52 +0000 ROA not after: Mon 26 May 2025 13:00:52 +0000 asID: 399077 IP address blocks: 2606:4dc0:1::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853/5bac54b9-66dc-4956-863d-1804cfb9e853.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853/5bac54b9-66dc-4956-863d-1804cfb9e853.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:00:21:6d:1d:79:79:78:ef:ca:5b:5e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5bac54b9-66dc-4956-863d-1804cfb9e853 Validity Not Before: Feb 25 14:00:52 2025 GMT Not After : May 26 13:00:52 2025 GMT Subject: CN=6bd20bf8-68c2-4afc-b832-79e310cde9d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:88:ac:96:a9:5e:45:58:8c:c1:61:1a:4b:9d: 71:6e:ad:8a:d6:78:5a:52:5d:a0:01:28:08:5f:88: 91:51:fd:a3:da:1c:e8:15:02:39:0c:78:53:8a:d8: 52:bb:9e:45:c0:2e:c5:b7:32:30:a0:7d:76:f8:06: c4:1e:3f:2e:0b:05:45:55:6d:b9:c5:6b:50:10:78: ed:2b:e7:29:c8:28:7b:60:85:ac:cc:a3:5a:a1:b5: ba:84:81:50:07:74:1e:0d:ec:58:12:95:4b:b6:20: eb:fa:9a:c0:cd:e4:3b:6d:84:d6:c5:4a:81:0b:64: 5a:3a:de:cd:75:2b:a6:36:0f:3d:5a:09:bd:32:1b: 6e:44:1f:54:5c:d5:f5:03:3f:cf:4a:b9:25:79:18: 0f:88:bd:03:f1:e7:3b:91:a2:d2:a4:03:42:7d:92: a7:78:6d:6a:c2:4b:fa:bd:43:5d:22:bb:f5:b5:03: 10:0c:13:bd:ee:0e:f7:55:69:23:01:58:d4:4f:34: 0d:42:5e:82:56:1f:3a:95:02:65:ad:7a:4e:49:16: 79:2b:ee:f4:0d:aa:1f:d8:f1:c0:f4:46:f8:13:77: 9d:e5:91:b5:49:67:94:64:aa:8f:f3:4c:15:05:05: 40:5a:30:26:dc:51:81:59:53:44:a2:a3:a9:b1:3c: 80:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:71:A5:3E:80:AE:43:04:C6:67:96:E2:EF:3F:E7:94:B5:4F:A3:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853/d6f6aaca-ed6b-3db8-b03c-829187f0d236.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853/5bac54b9-66dc-4956-863d-1804cfb9e853.crl X509v3 Authority Key Identifier: keyid:7F:4A:9A:A7:40:62:CD:6D:BF:70:19:16:CE:FD:9B:2A:27:E6:2E:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853.cer sbgp-ipAddrBlock: critical IPv6: 2606:4dc0:1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:83:83:6b:b8:dc:e0:00:b7:b3:7b:dd:ab:51:1d:0a:93:68: 35:ab:4f:54:aa:67:47:7d:41:cc:fa:bb:c1:ec:26:d6:07:8c: c2:f9:db:28:2c:ae:6d:d1:28:c4:4a:4a:36:da:74:da:dd:e0: 5e:b3:96:78:55:c1:01:83:3b:a2:e9:c6:c9:f6:1c:68:0e:bb: fe:af:73:2a:9f:99:f3:5b:a6:71:e2:91:b4:d6:e7:06:8d:94: 42:17:81:f1:86:95:1d:70:4c:c6:ec:d1:d7:77:50:83:0b:a1: 05:d6:c1:44:97:ca:92:e6:0c:6a:e1:5c:e4:2e:86:9d:15:3f: 40:78:bb:4f:7d:1e:f1:e2:17:6d:70:dc:2a:e0:43:bc:67:6b: 20:11:f0:6a:99:ea:24:1f:a7:95:70:46:d5:e5:f6:90:ac:0a: 14:a9:cf:56:35:3e:ca:e0:48:72:72:9c:8b:9f:a9:40:f3:de: 9a:2f:b3:0a:ba:47:8a:99:43:ed:3b:b1:02:a5:98:49:1c:61: 66:a8:a7:93:70:3a:57:1b:60:8c:cd:3c:f3:ad:c5:41:e8:7b: 4c:5f:cb:3e:b0:0d:9c:ec:01:4e:f0:93:aa:f5:63:b2:e4:7f: fd:89:cd:11:b8:29:b5:3b:93:8c:b3:3c:46:e0:b9:36:7b:b5: e2:35:39:1d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkAIW0deXl478pbXsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWJhYzU0YjktNjZkYy00OTU2LTg2M2QtMTgwNGNmYjll ODUzMB4XDTI1MDIyNTE0MDA1MloXDTI1MDUyNjEzMDA1MlowLzEtMCsGA1UEAxMk NmJkMjBiZjgtNjhjMi00YWZjLWI4MzItNzllMzEwY2RlOWQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4islqleRViMwWEaS51xbq2K1nhaUl2gASgI X4iRUf2j2hzoFQI5DHhTithSu55FwC7FtzIwoH12+AbEHj8uCwVFVW25xWtQEHjt K+cpyCh7YIWszKNaobW6hIFQB3QeDexYEpVLtiDr+prAzeQ7bYTWxUqBC2RaOt7N dSumNg89Wgm9MhtuRB9UXNX1Az/PSrkleRgPiL0D8ec7kaLSpANCfZKneG1qwkv6 vUNdIrv1tQMQDBO97g73VWkjAVjUTzQNQl6CVh86lQJlrXpOSRZ5K+70Daof2PHA 9Eb4E3ed5ZG1SWeUZKqP80wVBQVAWjAm3FGBWVNEoqOpsTyAfwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMhxpT6ArkMExmeW4u8/55S1T6P+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81YmFj NTRiOS02NmRjLTQ5NTYtODYzZC0xODA0Y2ZiOWU4NTMvZDZmNmFhY2EtZWQ2Yi0z ZGI4LWIwM2MtODI5MTg3ZjBkMjM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNWJhYzU0YjktNjZkYy00OTU2LTg2 M2QtMTgwNGNmYjllODUzLzViYWM1NGI5LTY2ZGMtNDk1Ni04NjNkLTE4MDRjZmI5 ZTg1My5jcmwwHwYDVR0jBBgwFoAUf0qap0BizW2/cBkWzv2bKifmLp4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC81YmFjNTRiOS02NmRjLTQ5NTYtODYzZC0xODA0 Y2ZiOWU4NTMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZNwAAB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC2Dg2u43OAAt7N73atRHQqTaDWrT1SqZ0d9Qcz6u8HsJtYHjML5 2ygsrm3RKMRKSjbadNrd4F6zlnhVwQGDO6Lpxsn2HGgOu/6vcyqfmfNbpnHikbTW 5waNlEIXgfGGlR1wTMbs0dd3UIMLoQXWwUSXypLmDGrhXOQuhp0VP0B4u099HvHi F21w3CrgQ7xnayAR8GqZ6iQfp5VwRtXl9pCsChSpz1Y1PsrgSHJynIufqUDz3pov swq6R4qZQ+07sQKlmEkcYWaop5NwOlcbYIzNPPOtxUHoe0xfyz6wDZzsAU7wk6r1 Y7Lkf/2JzRG4KbU7k4yzPEbguTZ7teI1OR0= -----END CERTIFICATE-----Generated at Sat Apr 26 16:36:01 2025 by rpki-client