$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/3a41c66c-7e29-38fb-9f24-8df2f5fd953f.roa File: 3a41c66c-7e29-38fb-9f24-8df2f5fd953f.roa (raw, json) Hash identifier: 7SDNmDIGq3sIxjbGc56Z52gIZd6A3jEDfOxBRhhdjJ8= Subject key identifier: FD:E9:9C:25:F6:35:6E:10:4B:E7:62:A9:F9:D1:CF:BD:19:19:1E:3D Certificate issuer: /CN=8322c61d-99cf-48fc-b867-b2c2cce4d324 Certificate serial: 010D0C9F432858494E2EAA7726F28CBC5ECBF300 Authority key identifier: 23:EC:CD:25:07:2E:B6:D8:45:A9:F0:04:86:BA:91:6D:90:8F:B8:FA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/3a41c66c-7e29-38fb-9f24-8df2f5fd953f.roa Signing time: Tue 25 Mar 2025 13:00:51 +0000 ROA not before: Tue 25 Mar 2025 13:00:51 +0000 ROA not after: Mon 23 Jun 2025 13:00:51 +0000 asID: 40382 IP address blocks: 2606:e540::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/8322c61d-99cf-48fc-b867-b2c2cce4d324.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/8322c61d-99cf-48fc-b867-b2c2cce4d324.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4e:2e:aa:77:26:f2:8c:bc:5e:cb:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8322c61d-99cf-48fc-b867-b2c2cce4d324 Validity Not Before: Mar 25 13:00:51 2025 GMT Not After : Jun 23 13:00:51 2025 GMT Subject: CN=068820d0-725c-4e95-ac90-4ab88fe90095 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1c:9b:88:6c:20:d3:77:31:d0:37:de:c1:fe: 8a:ad:1b:a1:dc:dc:d9:b9:26:80:df:31:7d:74:63: 9a:78:0e:c5:5b:8c:2f:eb:df:ea:7e:4d:01:5a:12: d0:53:bf:7f:2f:ff:bc:23:93:b6:66:8e:3a:89:ec: ab:eb:16:bd:93:68:0f:c0:a0:fa:a4:71:dc:d3:4c: d2:09:c7:46:cb:0f:63:41:6c:38:65:b8:62:89:d6: 43:ce:cf:3d:c2:4c:11:ab:1c:5d:8f:8d:4a:80:d2: cb:2a:ef:cf:fa:2f:1b:50:45:89:0c:85:10:bf:30: 14:ff:c4:93:ca:59:07:87:18:b6:46:fe:71:1a:65: 6e:73:81:57:5d:50:b1:c5:12:0d:e6:d0:4d:13:59: bf:6d:0a:d7:dd:c2:fe:d4:84:32:80:ab:d2:f4:1e: 3b:dc:31:c9:28:0e:2a:45:d3:6c:fb:c2:3a:ab:97: a3:10:68:5b:c8:bb:e2:a2:9b:83:a5:1b:37:77:18: 37:5d:e0:58:0d:dd:81:f4:85:d1:2b:7b:41:4e:dc: 40:80:cd:85:ae:64:7a:31:a3:69:d0:bc:a7:25:73: 31:e6:ec:e8:49:9d:c7:03:a1:8d:d9:4d:3c:0c:b7: 5d:f5:e4:7c:49:24:4f:7f:45:b6:ab:bf:8e:63:61: 82:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:E9:9C:25:F6:35:6E:10:4B:E7:62:A9:F9:D1:CF:BD:19:19:1E:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/3a41c66c-7e29-38fb-9f24-8df2f5fd953f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/8322c61d-99cf-48fc-b867-b2c2cce4d324.crl X509v3 Authority Key Identifier: keyid:23:EC:CD:25:07:2E:B6:D8:45:A9:F0:04:86:BA:91:6D:90:8F:B8:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324.cer sbgp-ipAddrBlock: critical IPv6: 2606:e540::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:bd:88:4a:68:15:c6:b8:51:9f:73:31:b0:03:c8:11:ba:16: 27:c3:25:22:e8:7b:ef:4c:cc:06:7c:be:ed:9a:29:1f:f7:92: 87:51:06:8b:af:16:16:6d:55:c5:aa:91:05:16:22:0e:3c:55: 27:b9:cc:87:e7:5a:10:13:8d:35:d3:33:5c:e5:b9:67:dd:b5: 20:6d:92:57:1e:bc:cb:5a:1d:a7:fd:ab:9e:9c:98:26:0e:c2: a1:38:a9:a0:f9:9a:7b:9e:ef:39:24:c5:51:52:17:e3:49:69: 7d:4e:e3:85:9c:ef:60:d7:c5:6c:43:8d:44:36:ee:19:6f:5b: 0e:0b:03:48:21:73:16:ef:35:73:70:1d:7b:0b:a9:fc:32:e4: 43:1c:b6:b3:bc:aa:00:c6:7a:3f:99:87:46:44:e0:bd:2e:5b: df:69:b8:e0:10:dd:32:f4:0f:38:d0:80:00:e5:ae:0f:ac:84: 5c:1f:8b:a9:07:e4:5e:a3:38:4a:4a:28:5e:bc:d1:0b:4e:e0: 70:53:da:01:0c:05:0e:eb:2b:88:2a:03:7c:fa:67:75:9e:9d: e0:3e:b8:8b:fb:b3:a6:84:04:9c:01:b6:e9:e2:8b:72:44:a0: 8b:7b:2a:32:64:44:02:10:60:be:ca:ad:84:94:1e:71:01:5b: 5d:b7:e1:98 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWElOLqp3JvKMvF7L8wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMyMmM2MWQtOTljZi00OGZjLWI4NjctYjJjMmNjZTRk MzI0MB4XDTI1MDMyNTEzMDA1MVoXDTI1MDYyMzEzMDA1MVowLzEtMCsGA1UEAxMk MDY4ODIwZDAtNzI1Yy00ZTk1LWFjOTAtNGFiODhmZTkwMDk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRybiGwg03cx0Dfewf6KrRuh3NzZuSaA3zF9 dGOaeA7FW4wv69/qfk0BWhLQU79/L/+8I5O2Zo46ieyr6xa9k2gPwKD6pHHc00zS CcdGyw9jQWw4ZbhiidZDzs89wkwRqxxdj41KgNLLKu/P+i8bUEWJDIUQvzAU/8ST ylkHhxi2Rv5xGmVuc4FXXVCxxRIN5tBNE1m/bQrX3cL+1IQygKvS9B473DHJKA4q RdNs+8I6q5ejEGhbyLviopuDpRs3dxg3XeBYDd2B9IXRK3tBTtxAgM2FrmR6MaNp 0LynJXMx5uzoSZ3HA6GN2U08DLdd9eR8SSRPf0W2q7+OY2GCHwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFP3pnCX2NW4QS+diqfnRz70ZGR49MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MzIy YzYxZC05OWNmLTQ4ZmMtYjg2Ny1iMmMyY2NlNGQzMjQvM2E0MWM2NmMtN2UyOS0z OGZiLTlmMjQtOGRmMmY1ZmQ5NTNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODMyMmM2MWQtOTljZi00OGZjLWI4 NjctYjJjMmNjZTRkMzI0LzgzMjJjNjFkLTk5Y2YtNDhmYy1iODY3LWIyYzJjY2U0 ZDMyNC5jcmwwHwYDVR0jBBgwFoAUI+zNJQcutthFqfAEhrqRbZCPuPowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MzIyYzYxZC05OWNmLTQ4ZmMtYjg2Ny1iMmMy Y2NlNGQzMjQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgblQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBqvYhKaBXGuFGfczGwA8gRuhYnwyUi6HvvTMwGfL7tmikf95KHUQaL rxYWbVXFqpEFFiIOPFUnucyH51oQE4010zNc5bln3bUgbZJXHrzLWh2n/auenJgm DsKhOKmg+Zp7nu85JMVRUhfjSWl9TuOFnO9g18VsQ41ENu4Zb1sOCwNIIXMW7zVz cB17C6n8MuRDHLazvKoAxno/mYdGROC9LlvfabjgEN0y9A840IAA5a4PrIRcH4up B+ReozhKSihevNELTuBwU9oBDAUO6yuIKgN8+md1np3gPriL+7OmhAScAbbp4oty RKCLeyoyZEQCEGC+yq2ElB5xAVtdt+GY -----END CERTIFICATE-----Generated at Mon Apr 28 09:09:52 2025 by rpki-client