$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c66b7cab-031d-4c4c-8595-19848efd3058/2689cc5e-73a4-3934-b73d-56b59b54c522.roa File: 2689cc5e-73a4-3934-b73d-56b59b54c522.roa (raw, json) Hash identifier: 7NRrAHqCY7mWGNWH00qv19G4GFmFETTSGkoOBbsvoRk= Subject key identifier: 2A:53:4B:6F:68:F5:89:DF:E4:A7:94:DE:B0:B5:F5:3F:91:0A:E1:37 Certificate issuer: /CN=c66b7cab-031d-4c4c-8595-19848efd3058 Certificate serial: 010D0C9F4328584930DE704D4A7F1354B4762680 Authority key identifier: B7:C5:02:AC:4D:E6:B8:C7:69:C9:D5:F6:04:F7:1A:A5:14:48:76:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c66b7cab-031d-4c4c-8595-19848efd3058.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c66b7cab-031d-4c4c-8595-19848efd3058/2689cc5e-73a4-3934-b73d-56b59b54c522.roa Signing time: Sat 15 Mar 2025 01:00:39 +0000 ROA not before: Sat 15 Mar 2025 01:00:39 +0000 ROA not after: Fri 13 Jun 2025 01:00:39 +0000 asID: 400339 IP address blocks: 2606:ab40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c66b7cab-031d-4c4c-8595-19848efd3058/c66b7cab-031d-4c4c-8595-19848efd3058.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c66b7cab-031d-4c4c-8595-19848efd3058/c66b7cab-031d-4c4c-8595-19848efd3058.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c66b7cab-031d-4c4c-8595-19848efd3058.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:30:de:70:4d:4a:7f:13:54:b4:76:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66b7cab-031d-4c4c-8595-19848efd3058 Validity Not Before: Mar 15 01:00:39 2025 GMT Not After : Jun 13 01:00:39 2025 GMT Subject: CN=c4a83fe0-7f85-416d-8931-d3c3a4ebe3ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:bd:f9:a5:e3:88:80:0b:f7:d9:b3:82:4c:a4: cb:c4:14:46:2e:71:2b:04:25:f8:72:68:f1:bc:4f: 9f:de:4e:a9:50:f0:e7:2e:31:78:48:07:b9:81:3f: bb:7b:8c:da:57:15:4e:6b:c0:61:d8:dc:39:ce:61: a3:b2:67:08:b4:f0:09:1b:5d:b7:5e:77:ea:78:02: e5:e3:dc:c7:62:0e:19:cd:bb:d5:c2:8e:74:7c:2f: 7f:3e:06:ca:f7:d5:33:8d:d3:cf:6d:a6:77:9a:00: 3d:1c:97:67:40:ed:51:3f:56:ad:b2:68:19:3a:f9: 85:ab:ef:86:08:9c:77:70:db:54:d5:da:bd:cd:5d: e9:88:6b:85:b1:60:9b:5a:18:9e:65:8a:79:61:cf: 66:48:54:ce:71:5e:24:5e:5e:97:73:9b:a1:91:dc: 60:8e:a2:68:3f:39:19:c4:09:5c:13:ae:45:5b:51: 72:fb:23:63:f8:7a:a4:c3:db:97:38:c4:32:a4:19: b5:c1:ec:37:39:7b:d6:a3:aa:06:1a:aa:b3:09:80: 95:6c:6d:ea:74:be:ad:88:1d:42:9b:8f:99:67:7e: bb:a1:77:2a:97:3a:38:83:fa:7a:9d:3e:c0:7b:46: 59:68:ce:0e:a3:39:78:da:28:c6:57:db:85:22:5d: c4:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:53:4B:6F:68:F5:89:DF:E4:A7:94:DE:B0:B5:F5:3F:91:0A:E1:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c66b7cab-031d-4c4c-8595-19848efd3058/2689cc5e-73a4-3934-b73d-56b59b54c522.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c66b7cab-031d-4c4c-8595-19848efd3058/c66b7cab-031d-4c4c-8595-19848efd3058.crl X509v3 Authority Key Identifier: keyid:B7:C5:02:AC:4D:E6:B8:C7:69:C9:D5:F6:04:F7:1A:A5:14:48:76:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c66b7cab-031d-4c4c-8595-19848efd3058.cer sbgp-ipAddrBlock: critical IPv6: 2606:ab40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:65:de:79:a1:79:9d:b9:7d:6f:32:05:c8:fb:96:87:dc:96: d7:fb:79:11:50:5a:b6:58:5f:3f:78:8b:32:17:c2:bf:72:22: 62:a3:0e:1b:9b:88:db:f8:8e:ad:52:5a:24:b9:39:d5:0c:c8: 7d:62:aa:ec:12:8e:e0:2a:4c:68:3e:71:11:15:3b:ad:96:29: 14:04:da:01:ed:3b:8b:1c:c2:4a:ea:66:a2:56:2e:4f:71:f8: e3:45:a2:55:7c:61:c3:e1:70:ab:ee:8b:4c:18:45:0d:d0:20: a0:25:64:ae:cd:5a:41:ab:73:23:a3:7e:68:c9:9c:01:68:a4: 13:cd:99:0b:ad:5e:50:5b:8f:71:c7:04:da:0e:94:0a:a3:1b: 13:5d:07:0e:e2:da:f3:64:a2:fc:fd:04:eb:59:90:ca:94:0c: 4c:99:c8:72:59:23:97:a6:7a:40:8c:94:09:c7:bc:ef:ca:dc: dd:be:4d:23:ee:80:af:b1:2a:27:53:9e:12:2b:65:1e:88:d5: 07:0d:27:c6:a2:f6:89:3c:d9:c1:17:29:f0:23:87:d3:ac:10: b9:b6:bd:f3:80:ca:6e:e1:8f:10:9a:9e:bf:0e:f5:b6:c1:83: 34:63:13:a3:2e:74:94:48:90:e4:72:e1:24:8b:9d:10:b1:7a: 12:0b:85:02 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkw3nBNSn8TVLR2JoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzY2YjdjYWItMDMxZC00YzRjLTg1OTUtMTk4NDhlZmQz MDU4MB4XDTI1MDMxNTAxMDAzOVoXDTI1MDYxMzAxMDAzOVowLzEtMCsGA1UEAxMk YzRhODNmZTAtN2Y4NS00MTZkLTg5MzEtZDNjM2E0ZWJlM2VjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnr35peOIgAv32bOCTKTLxBRGLnErBCX4cmjx vE+f3k6pUPDnLjF4SAe5gT+7e4zaVxVOa8Bh2Nw5zmGjsmcItPAJG123XnfqeALl 49zHYg4ZzbvVwo50fC9/PgbK99UzjdPPbaZ3mgA9HJdnQO1RP1atsmgZOvmFq++G CJx3cNtU1dq9zV3piGuFsWCbWhieZYp5Yc9mSFTOcV4kXl6Xc5uhkdxgjqJoPzkZ xAlcE65FW1Fy+yNj+Hqkw9uXOMQypBm1wew3OXvWo6oGGqqzCYCVbG3qdL6tiB1C m4+ZZ367oXcqlzo4g/p6nT7Ae0ZZaM4Oozl42ijGV9uFIl3E/wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCpTS29o9Ynf5KeU3rC19T+RCuE3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jNjZi N2NhYi0wMzFkLTRjNGMtODU5NS0xOTg0OGVmZDMwNTgvMjY4OWNjNWUtNzNhNC0z OTM0LWI3M2QtNTZiNTliNTRjNTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzY2YjdjYWItMDMxZC00YzRjLTg1 OTUtMTk4NDhlZmQzMDU4L2M2NmI3Y2FiLTAzMWQtNGM0Yy04NTk1LTE5ODQ4ZWZk MzA1OC5jcmwwHwYDVR0jBBgwFoAUt8UCrE3muMdpydX2BPcapRRIdkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jNjZiN2NhYi0wMzFkLTRjNGMtODU5NS0xOTg0 OGVmZDMwNTguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgarQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBOZd55oXmduX1vMgXI+5aH3JbX+3kRUFq2WF8/eIsyF8K/ciJiow4b m4jb+I6tUlokuTnVDMh9YqrsEo7gKkxoPnERFTutlikUBNoB7TuLHMJK6maiVi5P cfjjRaJVfGHD4XCr7otMGEUN0CCgJWSuzVpBq3Mjo35oyZwBaKQTzZkLrV5QW49x xwTaDpQKoxsTXQcO4trzZKL8/QTrWZDKlAxMmchyWSOXpnpAjJQJx7zvytzdvk0j 7oCvsSonU54SK2UeiNUHDSfGovaJPNnBFynwI4fTrBC5tr3zgMpu4Y8Qmp6/DvW2 wYM0YxOjLnSUSJDkcuEki50QsXoSC4UC -----END CERTIFICATE-----Generated at Tue Apr 29 16:12:10 2025 by rpki-client