$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/efecd37b-b85c-330f-a2a8-5abf025d13d8.roa File: efecd37b-b85c-330f-a2a8-5abf025d13d8.roa (raw, json) Hash identifier: KMp+uh4/zq+KS72MeLVrHeSM/gAoR60Tu3DC4kJkrsE= Subject key identifier: 4F:68:01:78:A4:BB:69:8E:E8:6A:9B:3C:C3:30:5A:96:AE:E2:D9:29 Certificate issuer: /CN=8ce84fb2-c539-46e7-8212-12b9730afeba Certificate serial: 010D0C9F432858494B64127F82ACD2F5A51B6A9F Authority key identifier: D3:8A:39:65:E1:53:C3:03:64:C1:56:0F:C9:45:83:B6:FA:B1:38:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/efecd37b-b85c-330f-a2a8-5abf025d13d8.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 22773 IP address blocks: 2606:8940::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/8ce84fb2-c539-46e7-8212-12b9730afeba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/8ce84fb2-c539-46e7-8212-12b9730afeba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:12:7f:82:ac:d2:f5:a5:1b:6a:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ce84fb2-c539-46e7-8212-12b9730afeba Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=e0d9d6b3-24fe-4536-b5a3-8d35c64981f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:3a:05:8b:bb:17:47:fb:48:36:97:25:ad:fb: 73:a0:95:07:d0:83:cb:0c:3f:bb:2c:40:5d:70:6c: 28:63:5f:21:a8:b1:77:fc:d9:17:9f:e0:37:b0:33: ed:52:2f:d6:54:ea:3e:ee:d9:3e:ee:25:f4:aa:56: e5:96:1d:94:af:e4:e6:aa:95:37:dc:97:87:df:19: b1:ca:90:42:08:21:50:9e:ad:93:00:e7:d9:ce:02: 0d:ec:d4:13:8f:e9:77:36:c1:ee:14:7d:b8:1b:1c: 93:78:51:89:ab:d8:34:62:83:13:5a:b5:c2:7d:2f: f8:1f:a6:42:ae:cf:3a:65:31:ec:d0:4a:38:3d:46: 73:cb:66:d4:12:fd:ea:e7:4c:79:f8:ee:fe:a1:30: 34:d2:36:13:8d:16:bd:74:a5:7e:ed:9a:d7:15:db: 6c:41:2f:17:0a:87:b8:42:89:0d:f7:ea:ce:42:eb: 1a:9b:ad:36:bc:f3:59:ec:b6:ef:0e:f5:b0:3b:42: 8f:98:14:b3:c6:18:8f:bc:36:61:35:b1:0c:57:07: 27:75:b2:6a:35:e3:8e:f6:08:22:1e:60:89:c1:88: d4:51:c8:a6:72:a2:65:ff:ae:d4:5c:83:a0:1e:62: bd:92:dc:f2:1e:23:a6:29:ed:76:0e:97:82:72:19: fd:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:68:01:78:A4:BB:69:8E:E8:6A:9B:3C:C3:30:5A:96:AE:E2:D9:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/efecd37b-b85c-330f-a2a8-5abf025d13d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/8ce84fb2-c539-46e7-8212-12b9730afeba.crl X509v3 Authority Key Identifier: keyid:D3:8A:39:65:E1:53:C3:03:64:C1:56:0F:C9:45:83:B6:FA:B1:38:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba.cer sbgp-ipAddrBlock: critical IPv6: 2606:8940::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:95:d7:59:f1:c4:92:70:a5:6b:99:fa:04:79:f0:7a:be:8e: 9a:57:57:16:10:cc:db:34:70:71:40:f5:a2:82:d2:ee:ce:ff: ce:f1:d9:77:12:15:66:ff:28:fa:f3:b8:02:d3:27:d6:be:54: c6:27:45:5e:1f:4a:89:09:b9:ba:76:b0:6a:c6:2d:1c:a2:4a: ba:28:54:5b:9d:65:ef:e4:c5:0b:5f:7e:fe:f8:c4:79:71:08: 7a:d6:33:41:19:15:0f:d1:2c:10:5d:b4:f7:4c:23:cb:9c:48: d6:67:90:84:f5:6d:bf:25:80:1c:07:cc:4e:3c:bd:60:f6:fd: 63:1d:ad:6f:4b:6a:c4:c7:d5:eb:6f:6c:50:21:f1:2a:69:6a: ee:19:2a:c8:e8:49:d4:d7:46:2b:78:ec:0d:4a:c2:4d:2c:37: b5:df:a0:93:7d:fc:7f:36:48:16:8e:73:e5:30:16:cb:22:f9: 75:5a:ea:20:67:d9:3d:d6:ed:db:dc:46:2e:de:da:0e:96:de: bb:72:6a:ac:79:73:fe:eb:a5:81:1f:af:9e:e0:bc:55:0e:46: 22:a2:d3:b0:3c:f4:f8:65:ba:31:f4:94:6c:d1:a5:5a:3e:94: 14:25:5f:b3:c8:6f:81:c5:6a:80:d6:ea:e6:95:79:03:90:87: c4:8a:43:a3 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWElLZBJ/gqzS9aUbap8wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGNlODRmYjItYzUzOS00NmU3LTgyMTItMTJiOTczMGFm ZWJhMB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk ZTBkOWQ2YjMtMjRmZS00NTM2LWI1YTMtOGQzNWM2NDk4MWY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjoFi7sXR/tINpclrftzoJUH0IPLDD+7LEBd cGwoY18hqLF3/NkXn+A3sDPtUi/WVOo+7tk+7iX0qlbllh2Ur+TmqpU33JeH3xmx ypBCCCFQnq2TAOfZzgIN7NQTj+l3NsHuFH24GxyTeFGJq9g0YoMTWrXCfS/4H6ZC rs86ZTHs0Eo4PUZzy2bUEv3q50x5+O7+oTA00jYTjRa9dKV+7ZrXFdtsQS8XCoe4 QokN9+rOQusam602vPNZ7LbvDvWwO0KPmBSzxhiPvDZhNbEMVwcndbJqNeOO9ggi HmCJwYjUUcimcqJl/67UXIOgHmK9ktzyHiOmKe12DpeCchn9OQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFE9oAXiku2mO6GqbPMMwWpau4tkpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84Y2U4 NGZiMi1jNTM5LTQ2ZTctODIxMi0xMmI5NzMwYWZlYmEvZWZlY2QzN2ItYjg1Yy0z MzBmLWEyYTgtNWFiZjAyNWQxM2Q4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOGNlODRmYjItYzUzOS00NmU3LTgy MTItMTJiOTczMGFmZWJhLzhjZTg0ZmIyLWM1MzktNDZlNy04MjEyLTEyYjk3MzBh ZmViYS5jcmwwHwYDVR0jBBgwFoAU04o5ZeFTwwNkwVYPyUWDtvqxONswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84Y2U4NGZiMi1jNTM5LTQ2ZTctODIxMi0xMmI5 NzMwYWZlYmEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgaJQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAFlddZ8cSScKVrmfoEefB6vo6aV1cWEMzbNHBxQPWigtLuzv/O8dl3 EhVm/yj687gC0yfWvlTGJ0VeH0qJCbm6drBqxi0cokq6KFRbnWXv5MULX37++MR5 cQh61jNBGRUP0SwQXbT3TCPLnEjWZ5CE9W2/JYAcB8xOPL1g9v1jHa1vS2rEx9Xr b2xQIfEqaWruGSrI6EnU10YreOwNSsJNLDe136CTffx/NkgWjnPlMBbLIvl1Wuog Z9k91u3b3EYu3toOlt67cmqseXP+66WBH6+e4LxVDkYiotOwPPT4Zbox9JRs0aVa PpQUJV+zyG+BxWqA1urmlXkDkIfEikOj -----END CERTIFICATE-----Generated at Sun Apr 27 01:27:41 2025 by rpki-client