$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad5465a2-82c8-4447-b6da-7cabc017e3a9/c5be503d-4f2d-3c91-bfc4-2f7a6a1454d2.roa File: c5be503d-4f2d-3c91-bfc4-2f7a6a1454d2.roa (raw, json) Hash identifier: X+bDNi7BWjAfOsRevjwvOKnnRoer6smFlmWhSTtQIYQ= Subject key identifier: C4:A9:0E:2A:72:F9:38:47:9D:60:23:E2:1E:83:25:E7:E4:95:75:FC Certificate issuer: /CN=ad5465a2-82c8-4447-b6da-7cabc017e3a9 Certificate serial: 010D0C9F432858490CB164BA71EFC0987924CD40 Authority key identifier: 56:FA:4F:52:D3:E4:B6:52:26:99:0B:FB:CF:CD:F8:A1:5C:63:E4:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad5465a2-82c8-4447-b6da-7cabc017e3a9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad5465a2-82c8-4447-b6da-7cabc017e3a9/c5be503d-4f2d-3c91-bfc4-2f7a6a1454d2.roa Signing time: Sun 02 Mar 2025 02:00:40 +0000 ROA not before: Sun 02 Mar 2025 02:00:40 +0000 ROA not after: Sat 31 May 2025 01:00:40 +0000 asID: 394911 IP address blocks: 2606:d8c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad5465a2-82c8-4447-b6da-7cabc017e3a9/ad5465a2-82c8-4447-b6da-7cabc017e3a9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad5465a2-82c8-4447-b6da-7cabc017e3a9/ad5465a2-82c8-4447-b6da-7cabc017e3a9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad5465a2-82c8-4447-b6da-7cabc017e3a9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0c:b1:64:ba:71:ef:c0:98:79:24:cd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad5465a2-82c8-4447-b6da-7cabc017e3a9 Validity Not Before: Mar 2 02:00:40 2025 GMT Not After : May 31 01:00:40 2025 GMT Subject: CN=32d740af-9332-417e-baff-57a6f2b12f36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:03:fb:60:6f:dd:aa:17:9c:3b:e1:27:66:b4: 1a:78:70:42:47:db:14:b4:b6:ca:53:a8:d2:c4:29: 97:76:55:b9:1e:e1:ff:19:90:24:86:b8:97:c0:6e: 01:8d:f4:ba:e9:54:3a:ea:7d:21:37:a7:a5:5c:a4: 20:b1:7c:7c:ae:a1:b1:0b:1e:ed:f5:c7:fa:42:ac: 83:8b:06:33:c7:5b:d0:eb:e4:df:b6:a0:ea:f3:61: 66:fa:41:13:02:80:f9:a9:8a:34:2c:81:b0:4f:b2: aa:bc:7e:32:d0:42:74:ec:41:a8:03:0b:02:02:44: 1e:8f:38:59:c9:38:63:ed:fd:84:3f:d8:e3:73:3f: 3b:a6:f7:40:ea:61:ca:22:0c:4e:e7:95:d4:40:5b: 21:97:94:4f:2f:54:9b:ed:d7:1c:7f:04:76:08:98: b5:e9:0e:42:d6:eb:42:e3:ea:bd:08:fa:5a:a1:54: 1e:94:fc:cc:cd:e3:e9:5f:53:68:a7:ee:4e:30:31: a8:14:d9:98:1e:73:58:51:63:50:e0:3c:e9:86:00: c6:a5:6c:88:d6:78:51:ca:64:33:dd:f2:af:de:c8: c2:38:b6:60:02:80:70:19:06:40:23:8b:68:6c:75: 06:16:79:a5:86:c4:bb:49:4d:a0:89:e0:47:c7:93: 40:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:A9:0E:2A:72:F9:38:47:9D:60:23:E2:1E:83:25:E7:E4:95:75:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad5465a2-82c8-4447-b6da-7cabc017e3a9/c5be503d-4f2d-3c91-bfc4-2f7a6a1454d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad5465a2-82c8-4447-b6da-7cabc017e3a9/ad5465a2-82c8-4447-b6da-7cabc017e3a9.crl X509v3 Authority Key Identifier: keyid:56:FA:4F:52:D3:E4:B6:52:26:99:0B:FB:CF:CD:F8:A1:5C:63:E4:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad5465a2-82c8-4447-b6da-7cabc017e3a9.cer sbgp-ipAddrBlock: critical IPv6: 2606:d8c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:54:f4:38:fd:a6:9d:f3:4c:07:fa:cf:94:d6:d5:8b:39:7e: ed:8e:60:cd:b1:f6:28:bf:e5:b9:c4:29:5d:c7:19:f7:09:9f: 30:e8:e6:93:61:f1:79:5b:45:01:78:db:eb:82:60:f0:60:ff: 35:d8:a5:30:37:37:56:da:65:f9:bc:e3:6b:a0:a6:32:a5:75: 00:f7:dc:5f:c7:95:05:e0:b2:bd:45:09:bd:23:38:30:b2:04: 29:c6:74:15:33:77:6b:e0:31:26:25:f2:92:9c:28:b1:19:26: b3:3b:a9:e0:3b:1f:85:c0:74:a7:61:87:bc:46:39:af:60:f9: 51:f4:2f:a0:7c:a6:41:87:44:ba:44:51:cf:12:3e:c2:23:d2: ec:b1:61:a4:79:d0:88:35:74:5b:26:66:95:9d:7d:2c:6e:2c: 71:f5:a2:04:d9:f8:63:7b:09:94:4f:b1:eb:8c:c8:23:a4:d3: 6c:6b:38:93:1d:54:51:25:96:d5:b2:ad:c2:00:37:b3:e8:91: 10:75:23:62:37:d8:83:f3:18:bd:ba:9d:4a:9f:a5:66:b7:69: 93:08:c7:04:af:73:14:5c:42:35:44:1e:e5:1d:88:92:47:d6: e2:f3:69:1a:9f:c9:61:53:5b:48:db:8e:f9:6a:d2:09:98:de: e9:1c:ba:ab -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkMsWS6ce/AmHkkzUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWQ1NDY1YTItODJjOC00NDQ3LWI2ZGEtN2NhYmMwMTdl M2E5MB4XDTI1MDMwMjAyMDA0MFoXDTI1MDUzMTAxMDA0MFowLzEtMCsGA1UEAxMk MzJkNzQwYWYtOTMzMi00MTdlLWJhZmYtNTdhNmYyYjEyZjM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogP7YG/dqhecO+EnZrQaeHBCR9sUtLbKU6jS xCmXdlW5HuH/GZAkhriXwG4BjfS66VQ66n0hN6elXKQgsXx8rqGxCx7t9cf6QqyD iwYzx1vQ6+TftqDq82Fm+kETAoD5qYo0LIGwT7KqvH4y0EJ07EGoAwsCAkQejzhZ yThj7f2EP9jjcz87pvdA6mHKIgxO55XUQFshl5RPL1Sb7dccfwR2CJi16Q5C1utC 4+q9CPpaoVQelPzMzePpX1Nop+5OMDGoFNmYHnNYUWNQ4DzphgDGpWyI1nhRymQz 3fKv3sjCOLZgAoBwGQZAI4tobHUGFnmlhsS7SU2gieBHx5NADwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMSpDipy+ThHnWAj4h6DJefklXX8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hZDU0 NjVhMi04MmM4LTQ0NDctYjZkYS03Y2FiYzAxN2UzYTkvYzViZTUwM2QtNGYyZC0z YzkxLWJmYzQtMmY3YTZhMTQ1NGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWQ1NDY1YTItODJjOC00NDQ3LWI2 ZGEtN2NhYmMwMTdlM2E5L2FkNTQ2NWEyLTgyYzgtNDQ0Ny1iNmRhLTdjYWJjMDE3 ZTNhOS5jcmwwHwYDVR0jBBgwFoAUVvpPUtPktlImmQv7z834oVxj5KkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hZDU0NjVhMi04MmM4LTQ0NDctYjZkYS03Y2Fi YzAxN2UzYTkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgbYwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBpVPQ4/aad80wH+s+U1tWLOX7tjmDNsfYov+W5xCldxxn3CZ8w6OaT YfF5W0UBeNvrgmDwYP812KUwNzdW2mX5vONroKYypXUA99xfx5UF4LK9RQm9Izgw sgQpxnQVM3dr4DEmJfKSnCixGSazO6ngOx+FwHSnYYe8RjmvYPlR9C+gfKZBh0S6 RFHPEj7CI9LssWGkedCINXRbJmaVnX0sbixx9aIE2fhjewmUT7HrjMgjpNNsaziT HVRRJZbVsq3CADez6JEQdSNiN9iD8xi9up1Kn6Vmt2mTCMcEr3MUXEI1RB7lHYiS R9bi82kan8lhU1tI2475atIJmN7pHLqr -----END CERTIFICATE-----Generated at Tue Apr 29 09:17:25 2025 by rpki-client