$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/2df31e3e-1bda-3c7a-9152-b51c6aeb5443.roa File: 2df31e3e-1bda-3c7a-9152-b51c6aeb5443.roa (raw, json) Hash identifier: iIU6LRgKVH4YDRYauk/wOlPb1VqhBwnf+NuPO9DsRpU= Subject key identifier: 63:F5:D8:FC:A8:7A:F7:98:FE:5B:00:27:7A:35:4B:FA:F6:85:51:CE Certificate issuer: /CN=1d639366-c044-456e-b8c8-0de04a543a0c Certificate serial: 010D0C9F4328584965E9737A261F6B410D289AA2 Authority key identifier: FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/2df31e3e-1bda-3c7a-9152-b51c6aeb5443.roa Signing time: Thu 03 Apr 2025 01:00:46 +0000 ROA not before: Thu 03 Apr 2025 01:00:46 +0000 ROA not after: Wed 02 Jul 2025 01:00:46 +0000 asID: 6181 IP address blocks: 2600:2b00::/28 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:65:e9:73:7a:26:1f:6b:41:0d:28:9a:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d639366-c044-456e-b8c8-0de04a543a0c Validity Not Before: Apr 3 01:00:46 2025 GMT Not After : Jul 2 01:00:46 2025 GMT Subject: CN=bbc71cd2-7c41-4439-bfe7-eed8e929562a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:75:3c:39:e1:28:37:3d:2e:2c:4b:69:99:83: 54:34:81:f2:18:1e:54:df:7b:f6:f6:8c:d1:72:43: 7d:cb:b7:54:b4:82:9d:84:5b:f3:14:7b:aa:6d:34: 78:01:97:63:ab:63:6c:c7:da:26:3f:2a:3f:95:7f: fd:ea:3c:23:a1:0b:a7:04:ab:fa:70:00:5e:94:a2: 89:ba:1e:b8:da:25:f9:42:c4:3d:22:ed:6c:09:38: 13:81:80:4b:e7:ec:d5:da:da:61:d7:a8:fa:d0:4e: 05:3b:e8:91:24:1e:9b:cb:80:2d:9d:ef:6f:19:16: 2d:f0:2e:a4:d1:2d:4f:a9:71:b0:1b:65:e1:48:c4: 4f:87:4b:82:8d:c9:9a:f0:1f:2a:b4:9c:3d:38:56: bf:66:ec:28:ef:87:62:20:5c:49:bf:ad:41:af:41: 5d:ee:25:13:5c:f7:91:a4:c4:2c:f1:13:9d:ec:0e: 92:db:17:90:5a:81:2d:58:b5:71:ba:06:68:7e:cc: 61:b6:fb:37:26:60:36:cc:79:d9:06:b7:48:eb:46: 7a:19:3c:26:95:01:77:fe:f0:32:b4:4d:a6:16:1e: d7:b5:10:47:e0:af:6b:05:a2:92:6a:80:ef:57:73: a0:9b:ae:ce:14:0e:21:fb:6c:41:5c:09:80:0a:09: b1:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:F5:D8:FC:A8:7A:F7:98:FE:5B:00:27:7A:35:4B:FA:F6:85:51:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/2df31e3e-1bda-3c7a-9152-b51c6aeb5443.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl X509v3 Authority Key Identifier: keyid:FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer sbgp-ipAddrBlock: critical IPv6: 2600:2b00::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:4a:65:f8:5f:4c:ce:bd:ae:e8:c5:33:da:b6:b7:79:76:49: cf:3c:5d:4f:38:d8:c2:bb:29:41:69:2e:2b:c8:14:07:48:ad: dc:e8:94:d3:6e:2c:78:26:69:8f:13:07:a0:7e:00:37:34:7b: 13:b6:d6:9e:52:a1:a0:2c:5a:68:3c:24:40:65:fc:fe:ae:ca: 2d:5b:8b:fd:b3:68:94:3c:5b:5a:3e:f9:e5:34:9f:1a:21:b2: 2f:4f:b8:a0:63:a8:19:7d:bb:8f:bd:74:b1:03:47:af:24:79: 48:db:ce:28:3f:c9:64:23:68:97:5b:ea:e4:96:0d:d5:7c:cd: 37:4b:37:9d:1b:e0:69:3a:83:fc:96:01:fc:1c:94:f4:fb:a4: 55:e9:aa:0a:8b:fb:e2:9d:4e:6a:7a:45:a2:f9:cf:cb:05:cd: 2a:f9:ab:8b:da:10:6b:f8:b0:49:b2:18:32:bb:da:5d:ce:2c: 0d:38:e7:7c:9c:6d:43:ca:2b:d3:c6:e8:85:51:78:e3:59:6c: b0:34:b6:2d:19:24:43:23:31:db:c5:89:64:fe:a3:4a:b7:cc: 8d:d3:f9:56:7c:5e:22:a7:e5:a3:b2:a2:7a:01:37:b4:71:5c: 21:59:76:ca:b2:96:70:66:08:74:f4:22:2e:0c:14:97:07:3c: 23:fe:04:d8 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEll6XN6Jh9rQQ0omqIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQ2MzkzNjYtYzA0NC00NTZlLWI4YzgtMGRlMDRhNTQz YTBjMB4XDTI1MDQwMzAxMDA0NloXDTI1MDcwMjAxMDA0NlowLzEtMCsGA1UEAxMk YmJjNzFjZDItN2M0MS00NDM5LWJmZTctZWVkOGU5Mjk1NjJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXU8OeEoNz0uLEtpmYNUNIHyGB5U33v29ozR ckN9y7dUtIKdhFvzFHuqbTR4AZdjq2Nsx9omPyo/lX/96jwjoQunBKv6cABelKKJ uh642iX5QsQ9Iu1sCTgTgYBL5+zV2tph16j60E4FO+iRJB6by4Atne9vGRYt8C6k 0S1PqXGwG2XhSMRPh0uCjcma8B8qtJw9OFa/Zuwo74diIFxJv61Br0Fd7iUTXPeR pMQs8ROd7A6S2xeQWoEtWLVxugZofsxhtvs3JmA2zHnZBrdI60Z6GTwmlQF3/vAy tE2mFh7XtRBH4K9rBaKSaoDvV3Ogm67OFA4h+2xBXAmACgmxZwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGP12PyoeveY/lsAJ3o1S/r2hVHOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZDYz OTM2Ni1jMDQ0LTQ1NmUtYjhjOC0wZGUwNGE1NDNhMGMvMmRmMzFlM2UtMWJkYS0z YzdhLTkxNTItYjUxYzZhZWI1NDQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWQ2MzkzNjYtYzA0NC00NTZlLWI4 YzgtMGRlMDRhNTQzYTBjLzFkNjM5MzY2LWMwNDQtNDU2ZS1iOGM4LTBkZTA0YTU0 M2EwYy5jcmwwHwYDVR0jBBgwFoAU/DVXyQ49tRkFhaSn5xDpZWoEZ4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZDYzOTM2Ni1jMDQ0LTQ1NmUtYjhjOC0wZGUw NGE1NDNhMGMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgArADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCFSmX4X0zOva7oxTPatrd5dknPPF1PONjCuylBaS4ryBQHSK3c6JTT bix4JmmPEwegfgA3NHsTttaeUqGgLFpoPCRAZfz+rsotW4v9s2iUPFtaPvnlNJ8a IbIvT7igY6gZfbuPvXSxA0evJHlI284oP8lkI2iXW+rklg3VfM03SzedG+BpOoP8 lgH8HJT0+6RV6aoKi/vinU5qekWi+c/LBc0q+auL2hBr+LBJshgyu9pdziwNOOd8 nG1DyivTxuiFUXjjWWywNLYtGSRDIzHbxYlk/qNKt8yN0/lWfF4ip+WjsqJ6ATe0 cVwhWXbKspZwZgh09CIuDBSXBzwj/gTY -----END CERTIFICATE-----Generated at Mon Apr 28 13:14:05 2025 by rpki-client