$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/1849bc6d-da2c-377f-9bd4-ff6dc638837c.roa File: 1849bc6d-da2c-377f-9bd4-ff6dc638837c.roa (raw, json) Hash identifier: orQAGLtvmvoBtsAyigccG5bgAdR30zN0gPOC+DHNV6g= Subject key identifier: 74:65:E6:C1:72:6A:99:EC:1B:48:AF:E1:88:8B:D9:36:29:16:F6:5B Certificate issuer: /CN=8ac31463-974b-4676-9328-200202ae4d6e Certificate serial: 010D0C9F432858495ABEC6874EFCCD4DF6629E80 Authority key identifier: 66:4A:CF:7A:87:80:2E:D5:96:69:93:6E:0E:BD:6C:EA:41:57:66:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/1849bc6d-da2c-377f-9bd4-ff6dc638837c.roa Signing time: Sun 30 Mar 2025 01:00:47 +0000 ROA not before: Sun 30 Mar 2025 01:00:47 +0000 ROA not after: Sat 28 Jun 2025 01:00:47 +0000 asID: 33211 IP address blocks: 2606:ca40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5a:be:c6:87:4e:fc:cd:4d:f6:62:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ac31463-974b-4676-9328-200202ae4d6e Validity Not Before: Mar 30 01:00:47 2025 GMT Not After : Jun 28 01:00:47 2025 GMT Subject: CN=ca38be3f-674d-4c80-b8c8-9caaf98de36f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:db:de:4f:16:a0:04:5a:10:18:b7:f7:d7:85: 9e:7b:8c:e3:51:a4:ad:4e:67:62:70:58:22:86:b9: fa:04:f7:fe:e8:e2:ca:c8:b0:b0:d1:01:f9:62:c5: 86:6a:0f:cf:c5:e5:1c:5e:8c:e4:c2:08:1c:69:ba: 1c:61:b2:5e:a3:7b:d9:4c:57:12:20:16:64:f1:61: 03:8c:a3:4a:b9:1e:dd:83:3f:46:41:cb:16:20:2e: e6:23:f6:6d:3a:8a:06:d4:08:00:d9:68:6d:e7:ba: a5:fd:90:4b:29:00:64:c4:93:48:cb:e6:42:83:ce: 04:e0:81:e6:e1:5c:91:f3:ed:7d:1c:ff:a8:6b:dd: e2:46:fc:ce:6b:05:38:ad:02:2a:67:3e:07:51:d7: 21:33:25:ce:f5:6c:a1:2c:1d:4b:b1:6a:f2:7e:67: 7d:b3:4f:31:8b:ff:30:90:53:88:fa:0c:71:3b:ad: cf:d2:74:cd:6b:07:50:05:0a:bc:72:a9:98:42:c8: 7a:9d:eb:f6:73:c6:5f:62:8b:63:56:56:a1:11:7c: ef:e3:38:1d:06:86:95:b5:e1:f6:26:96:0c:90:dd: 75:32:39:ee:2d:55:81:68:d4:c7:54:0f:30:f3:34: 45:f7:88:86:cf:ef:f4:4f:cf:53:f8:85:62:50:bb: d0:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:65:E6:C1:72:6A:99:EC:1B:48:AF:E1:88:8B:D9:36:29:16:F6:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/1849bc6d-da2c-377f-9bd4-ff6dc638837c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.crl X509v3 Authority Key Identifier: keyid:66:4A:CF:7A:87:80:2E:D5:96:69:93:6E:0E:BD:6C:EA:41:57:66:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer sbgp-ipAddrBlock: critical IPv6: 2606:ca40::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:1d:c2:91:b1:0b:f3:e5:1a:01:8a:37:23:d2:f5:a0:54:3e: 4d:99:d7:1f:0a:2f:17:5e:95:eb:da:c7:8d:62:89:08:55:a4: 27:26:e3:a5:42:1b:f3:15:0c:32:bc:1f:97:76:f4:b7:d0:af: bb:4b:6e:71:d7:45:cd:39:47:41:07:0b:e3:46:65:52:0b:58: 67:14:a8:44:3e:a9:b3:58:44:ea:30:66:fa:46:a7:35:ec:99: 19:3e:2a:c4:74:59:41:59:17:09:7c:87:5c:51:94:8e:13:89: 2f:d0:03:0c:24:00:7a:0c:4b:de:a5:fa:71:ab:6d:11:08:34: ef:6c:e5:38:78:22:0f:26:a3:da:4c:8c:8c:d2:72:85:d3:8c: 1e:ae:ee:36:74:da:42:85:2c:74:b7:4c:b5:8a:fd:1c:e8:92: 25:3d:ba:14:63:c9:4c:31:86:71:27:73:79:f3:50:2b:6f:51: 55:a0:dc:11:a8:76:e9:d5:08:b8:69:73:8b:c9:28:ea:6f:7e: 74:16:fa:ab:cd:3c:34:f1:3a:1c:b2:22:7b:65:1c:0b:10:a1: f6:53:18:42:dd:45:61:3f:ec:d1:80:c9:6b:80:00:a5:07:09: 8e:cc:ba:10:f2:11:33:2d:f1:0f:27:84:db:36:8c:3e:2f:dd: 8f:ac:d7:06 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElavsaHTvzNTfZinoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGFjMzE0NjMtOTc0Yi00Njc2LTkzMjgtMjAwMjAyYWU0 ZDZlMB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk Y2EzOGJlM2YtNjc0ZC00YzgwLWI4YzgtOWNhYWY5OGRlMzZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtveTxagBFoQGLf314Wee4zjUaStTmdicFgi hrn6BPf+6OLKyLCw0QH5YsWGag/PxeUcXozkwggcabocYbJeo3vZTFcSIBZk8WED jKNKuR7dgz9GQcsWIC7mI/ZtOooG1AgA2Wht57ql/ZBLKQBkxJNIy+ZCg84E4IHm 4VyR8+19HP+oa93iRvzOawU4rQIqZz4HUdchMyXO9WyhLB1LsWryfmd9s08xi/8w kFOI+gxxO63P0nTNawdQBQq8cqmYQsh6nev2c8ZfYotjVlahEXzv4zgdBoaVteH2 JpYMkN11MjnuLVWBaNTHVA8w8zRF94iGz+/0T89T+IViULvQEQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHRl5sFyapnsG0iv4YiL2TYpFvZbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84YWMz MTQ2My05NzRiLTQ2NzYtOTMyOC0yMDAyMDJhZTRkNmUvMTg0OWJjNmQtZGEyYy0z NzdmLTliZDQtZmY2ZGM2Mzg4MzdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOGFjMzE0NjMtOTc0Yi00Njc2LTkz MjgtMjAwMjAyYWU0ZDZlLzhhYzMxNDYzLTk3NGItNDY3Ni05MzI4LTIwMDIwMmFl NGQ2ZS5jcmwwHwYDVR0jBBgwFoAUZkrPeoeALtWWaZNuDr1s6kFXZvYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84YWMzMTQ2My05NzRiLTQ2NzYtOTMyOC0yMDAy MDJhZTRkNmUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgbKQAAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADYdwpGxC/PlGgGKNyPS9aBUPk2Z1x8KLxdelevax41iiQhVpCcm 46VCG/MVDDK8H5d29LfQr7tLbnHXRc05R0EHC+NGZVILWGcUqEQ+qbNYROowZvpG pzXsmRk+KsR0WUFZFwl8h1xRlI4TiS/QAwwkAHoMS96l+nGrbREINO9s5Th4Ig8m o9pMjIzScoXTjB6u7jZ02kKFLHS3TLWK/RzokiU9uhRjyUwxhnEnc3nzUCtvUVWg 3BGodunVCLhpc4vJKOpvfnQW+qvNPDTxOhyyIntlHAsQofZTGELdRWE/7NGAyWuA AKUHCY7MuhDyETMt8Q8nhNs2jD4v3Y+s1wY= -----END CERTIFICATE-----Generated at Thu May 1 00:14:31 2025 by rpki-client