$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/36bdb9f6-a9aa-3c34-b7fc-b79ba39abbb5.roa File: 36bdb9f6-a9aa-3c34-b7fc-b79ba39abbb5.roa (raw, json) Hash identifier: rxSY4kmaxlOnnJusGcEUP9BxJwVLW8osKR3d9ZdlOuo= Subject key identifier: 91:64:5B:D2:F5:F4:3C:57:D9:98:44:6F:FD:95:04:B1:BC:37:B1:1C Certificate issuer: /CN=8322c61d-99cf-48fc-b867-b2c2cce4d324 Certificate serial: 010D0C9F4328584913AC35B974FBF9EF2335D600 Authority key identifier: 23:EC:CD:25:07:2E:B6:D8:45:A9:F0:04:86:BA:91:6D:90:8F:B8:FA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/36bdb9f6-a9aa-3c34-b7fc-b79ba39abbb5.roa Signing time: Tue 04 Mar 2025 14:00:52 +0000 ROA not before: Tue 04 Mar 2025 14:00:52 +0000 ROA not after: Mon 02 Jun 2025 13:00:52 +0000 asID: 8070 IP address blocks: 2606:e540:c02::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/8322c61d-99cf-48fc-b867-b2c2cce4d324.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/8322c61d-99cf-48fc-b867-b2c2cce4d324.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:13:ac:35:b9:74:fb:f9:ef:23:35:d6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8322c61d-99cf-48fc-b867-b2c2cce4d324 Validity Not Before: Mar 4 14:00:52 2025 GMT Not After : Jun 2 13:00:52 2025 GMT Subject: CN=e16f1f2e-f553-45ab-92e4-d6c9af66eb48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:07:f5:59:48:c8:15:83:5a:b8:64:9a:31:78: 34:b0:a1:76:12:34:0e:d1:d3:5a:fd:67:67:99:c3: ec:2a:22:c4:fc:56:98:bd:15:38:83:7a:3a:cd:a7: 79:f9:06:49:14:de:00:7d:a6:71:8c:b0:47:20:bd: 91:4a:92:0e:bc:fc:92:85:77:b1:8f:47:20:9f:e0: a8:fa:39:06:ae:a4:c1:e0:c7:60:28:19:5f:a0:a3: 02:8b:7f:09:05:6e:37:81:3f:b5:c0:09:f5:59:7d: f7:97:62:15:e9:b3:84:f5:f7:2e:0e:ce:3c:4a:b1: 72:84:7c:82:0f:07:2b:ed:e9:47:ea:23:8a:99:f7: b9:51:60:54:1e:b9:59:c3:26:ed:f3:5f:c8:2d:fa: 03:fd:5e:35:7c:8d:3e:05:c0:96:bd:b1:d6:06:91: 07:7a:69:05:87:56:0b:d8:77:74:9c:be:fe:9f:af: 59:ac:3c:d4:e9:0f:e9:67:51:cc:22:0c:2a:88:1b: a1:69:35:38:13:eb:80:1c:f3:bc:24:67:a1:15:20: 1a:44:f4:d0:13:35:56:f0:4d:1b:1c:9b:f0:c5:9e: 38:91:40:d1:1c:27:5c:70:08:cd:d1:b7:0d:75:bd: 34:d9:2c:a9:72:d9:d7:4f:4c:22:ac:30:ba:7b:26: 38:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:64:5B:D2:F5:F4:3C:57:D9:98:44:6F:FD:95:04:B1:BC:37:B1:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/36bdb9f6-a9aa-3c34-b7fc-b79ba39abbb5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/8322c61d-99cf-48fc-b867-b2c2cce4d324.crl X509v3 Authority Key Identifier: keyid:23:EC:CD:25:07:2E:B6:D8:45:A9:F0:04:86:BA:91:6D:90:8F:B8:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324.cer sbgp-ipAddrBlock: critical IPv6: 2606:e540:c02::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:b4:c1:be:c7:97:8d:43:ac:58:ca:24:d2:7c:80:09:1f:b4: 57:46:26:7f:0c:0c:13:6e:66:2c:10:1f:c8:6b:c3:06:90:40: f3:94:90:04:fa:d3:25:78:e9:b9:a6:61:1a:b9:04:6c:72:c3: 93:c1:03:59:a6:bf:7d:df:33:a2:2c:dc:a3:0c:c5:02:6c:49: 2f:f0:1c:da:49:b6:63:40:f1:36:04:4f:2f:00:03:f0:d6:66: 1f:23:02:89:33:0f:1d:ab:80:70:7d:0e:b9:1e:cd:0f:00:d8: a2:77:e0:a5:90:36:44:84:48:2e:41:df:7b:f2:a5:15:e7:c1: 87:6f:1d:ae:41:07:9c:43:a6:46:2b:28:59:bf:17:ea:0b:f2: dd:00:cd:a3:2b:12:7a:a7:5b:ea:bc:79:8c:ce:61:d8:b8:5b: d3:f6:fb:02:3e:83:15:36:74:33:44:43:2c:33:cb:e0:c7:a3: 1d:bb:ef:7e:a2:3c:16:e6:06:12:98:78:57:62:a4:2c:46:04: 09:5a:6f:e1:27:57:f3:03:d6:53:9d:1a:48:22:48:e9:f3:be: b4:6f:6e:b1:b6:5d:b2:05:d6:de:fc:b9:33:f9:5f:30:ab:bb: a0:c2:43:8a:1c:c6:1a:bf:a5:bd:52:3d:13:9f:f1:a5:8a:1c: 04:89:35:e2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkTrDW5dPv57yM11gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMyMmM2MWQtOTljZi00OGZjLWI4NjctYjJjMmNjZTRk MzI0MB4XDTI1MDMwNDE0MDA1MloXDTI1MDYwMjEzMDA1MlowLzEtMCsGA1UEAxMk ZTE2ZjFmMmUtZjU1My00NWFiLTkyZTQtZDZjOWFmNjZlYjQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Qf1WUjIFYNauGSaMXg0sKF2EjQO0dNa/Wdn mcPsKiLE/FaYvRU4g3o6zad5+QZJFN4AfaZxjLBHIL2RSpIOvPyShXexj0cgn+Co +jkGrqTB4MdgKBlfoKMCi38JBW43gT+1wAn1WX33l2IV6bOE9fcuDs48SrFyhHyC Dwcr7elH6iOKmfe5UWBUHrlZwybt81/ILfoD/V41fI0+BcCWvbHWBpEHemkFh1YL 2Hd0nL7+n69ZrDzU6Q/pZ1HMIgwqiBuhaTU4E+uAHPO8JGehFSAaRPTQEzVW8E0b HJvwxZ44kUDRHCdccAjN0bcNdb002SypctnXT0wirDC6eyY4qwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJFkW9L19DxX2ZhEb/2VBLG8N7EcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MzIy YzYxZC05OWNmLTQ4ZmMtYjg2Ny1iMmMyY2NlNGQzMjQvMzZiZGI5ZjYtYTlhYS0z YzM0LWI3ZmMtYjc5YmEzOWFiYmI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODMyMmM2MWQtOTljZi00OGZjLWI4 NjctYjJjMmNjZTRkMzI0LzgzMjJjNjFkLTk5Y2YtNDhmYy1iODY3LWIyYzJjY2U0 ZDMyNC5jcmwwHwYDVR0jBBgwFoAUI+zNJQcutthFqfAEhrqRbZCPuPowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MzIyYzYxZC05OWNmLTQ4ZmMtYjg2Ny1iMmMy Y2NlNGQzMjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgblQAwC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGa0wb7Hl41DrFjKJNJ8gAkftFdGJn8MDBNuZiwQH8hrwwaQQPOU kAT60yV46bmmYRq5BGxyw5PBA1mmv33fM6Is3KMMxQJsSS/wHNpJtmNA8TYETy8A A/DWZh8jAokzDx2rgHB9DrkezQ8A2KJ34KWQNkSESC5B33vypRXnwYdvHa5BB5xD pkYrKFm/F+oL8t0AzaMrEnqnW+q8eYzOYdi4W9P2+wI+gxU2dDNEQywzy+DHox27 736iPBbmBhKYeFdipCxGBAlab+EnV/MD1lOdGkgiSOnzvrRvbrG2XbIF1t78uTP5 XzCru6DCQ4ocxhq/pb1SPROf8aWKHASJNeI= -----END CERTIFICATE-----Generated at Sun Apr 27 23:08:40 2025 by rpki-client