$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/2be83e4c-7a12-332c-a9df-49e3f5fcb1af.roa File: 2be83e4c-7a12-332c-a9df-49e3f5fcb1af.roa (raw, json) Hash identifier: BubfVxPaDjJAn4ALUHaseTVuTe00ntiZSeq7jbpGNaY= Subject key identifier: CE:51:48:CF:87:82:69:22:E0:E2:59:7D:A7:E7:56:8E:72:FB:77:27 Certificate issuer: /CN=259fe7c8-f7fa-4637-a746-873dbeadbf3c Certificate serial: 010D0C9F43285848DE903463956CE831BB998000 Authority key identifier: 74:52:69:C2:2F:FC:3B:AB:B9:E6:7E:15:F6:B1:FD:A3:E9:5B:E6:EA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/2be83e4c-7a12-332c-a9df-49e3f5fcb1af.roa Signing time: Thu 13 Feb 2025 13:26:54 +0000 ROA not before: Thu 13 Feb 2025 13:26:54 +0000 ROA not after: Wed 14 May 2025 12:26:54 +0000 asID: 36549 IP address blocks: 2606:b200::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/259fe7c8-f7fa-4637-a746-873dbeadbf3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/259fe7c8-f7fa-4637-a746-873dbeadbf3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:de:90:34:63:95:6c:e8:31:bb:99:80:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=259fe7c8-f7fa-4637-a746-873dbeadbf3c Validity Not Before: Feb 13 13:26:54 2025 GMT Not After : May 14 12:26:54 2025 GMT Subject: CN=7e40d7bd-3dd9-42e4-9329-a87a8182fd13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:96:5c:eb:c7:25:9e:d3:22:a6:b2:73:b0:79: 90:20:f5:c0:4d:1b:02:49:9b:7e:c0:18:68:f8:38: f0:fe:48:96:96:3f:48:1f:77:04:31:b6:cf:61:dd: 13:7b:50:15:2b:68:c3:69:17:4b:77:61:84:a2:d4: 6c:f3:7c:c4:0b:7e:de:8e:46:2d:d1:04:0c:a0:31: 69:c2:36:ae:15:c1:7f:e0:3d:74:9b:c5:be:5a:d0: 47:06:ca:90:97:b9:17:64:c6:9a:6c:c1:ce:f8:f0: 14:e8:89:ef:45:82:ad:ee:df:29:c4:10:2a:e4:b0: 01:78:68:dd:90:24:40:13:50:4d:33:3c:1e:fd:35: 56:03:f8:16:2a:39:21:7f:1e:7b:29:38:ae:3a:be: da:e1:8f:92:4e:00:ee:3d:8c:9c:1b:96:8c:e0:ec: c9:7a:0b:49:b1:f3:bb:46:7b:69:dd:f8:1e:2d:69: a4:c1:44:58:f6:2d:1c:6e:83:65:6d:6d:5b:33:6f: fb:bd:5c:c7:28:29:c5:b0:74:1d:38:fd:7a:01:46: c9:45:80:48:0a:b3:41:8c:42:62:49:01:94:1b:d3: 0c:ea:fe:30:7c:01:93:ef:1d:73:0e:e5:f7:76:15: 71:76:0f:9b:d1:b1:2b:61:60:29:30:05:2a:66:18: a6:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:51:48:CF:87:82:69:22:E0:E2:59:7D:A7:E7:56:8E:72:FB:77:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/2be83e4c-7a12-332c-a9df-49e3f5fcb1af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/259fe7c8-f7fa-4637-a746-873dbeadbf3c.crl X509v3 Authority Key Identifier: keyid:74:52:69:C2:2F:FC:3B:AB:B9:E6:7E:15:F6:B1:FD:A3:E9:5B:E6:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c.cer sbgp-ipAddrBlock: critical IPv6: 2606:b200::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d9:4f:8b:fd:7b:34:fb:eb:d2:ec:f0:02:8d:2f:8e:84:5b:0a: 7f:1d:40:88:d4:6f:a8:94:28:58:cf:e6:05:f9:69:6b:5f:57: 0a:54:ef:03:c4:0c:17:6f:66:82:5f:bd:b0:55:7c:14:62:3d: a8:03:55:bb:63:8f:71:08:22:2e:71:2d:63:33:90:18:b8:8d: 8f:ba:14:9b:a7:bd:0e:46:14:59:22:42:fd:c3:eb:bb:d9:28: b0:57:7c:11:54:0a:c6:bb:65:77:ad:11:c5:1a:6f:5c:52:63: 40:5c:ff:76:f3:cb:80:26:44:2e:93:f5:c5:76:65:7c:eb:96: cd:cf:a0:d8:41:5b:72:ef:ff:66:18:0d:41:18:0b:c1:e1:c3: 04:35:77:e9:89:83:66:26:e6:bc:9e:b0:0b:6c:57:d5:d0:53: 89:fa:bb:3a:08:30:b4:a1:d7:b0:e9:43:fc:38:9a:b9:7c:64: cf:a5:e4:ba:09:03:9f:a7:09:ac:7d:d7:6d:f2:c3:51:a9:c5: d6:02:70:76:5d:b1:f2:99:c8:24:4a:6c:22:7f:da:93:42:b8: 07:f6:ae:4f:1e:f1:77:57:06:e0:c2:e8:c4:45:e1:e2:a6:ea: 8b:41:ab:bb:d5:23:94:d1:f0:8b:21:e9:97:88:34:27:35:99: 8a:c2:25:9f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjekDRjlWzoMbuZgAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjU5ZmU3YzgtZjdmYS00NjM3LWE3NDYtODczZGJlYWRi ZjNjMB4XDTI1MDIxMzEzMjY1NFoXDTI1MDUxNDEyMjY1NFowLzEtMCsGA1UEAxMk N2U0MGQ3YmQtM2RkOS00MmU0LTkzMjktYTg3YTgxODJmZDEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5Zc68clntMiprJzsHmQIPXATRsCSZt+wBho +Djw/kiWlj9IH3cEMbbPYd0Te1AVK2jDaRdLd2GEotRs83zEC37ejkYt0QQMoDFp wjauFcF/4D10m8W+WtBHBsqQl7kXZMaabMHO+PAU6InvRYKt7t8pxBAq5LABeGjd kCRAE1BNMzwe/TVWA/gWKjkhfx57KTiuOr7a4Y+STgDuPYycG5aM4OzJegtJsfO7 Rntp3fgeLWmkwURY9i0cboNlbW1bM2/7vVzHKCnFsHQdOP16AUbJRYBICrNBjEJi SQGUG9MM6v4wfAGT7x1zDuX3dhVxdg+b0bErYWApMAUqZhimGwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFM5RSM+Hgmki4OJZfafnVo5y+3cnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yNTlm ZTdjOC1mN2ZhLTQ2MzctYTc0Ni04NzNkYmVhZGJmM2MvMmJlODNlNGMtN2ExMi0z MzJjLWE5ZGYtNDllM2Y1ZmNiMWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjU5ZmU3YzgtZjdmYS00NjM3LWE3 NDYtODczZGJlYWRiZjNjLzI1OWZlN2M4LWY3ZmEtNDYzNy1hNzQ2LTg3M2RiZWFk YmYzYy5jcmwwHwYDVR0jBBgwFoAUdFJpwi/8O6u55n4V9rH9o+lb5uowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yNTlmZTdjOC1mN2ZhLTQ2MzctYTc0Ni04NzNk YmVhZGJmM2MuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgayADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQDZT4v9ezT769Ls8AKNL46EWwp/HUCI1G+olChYz+YF+WlrX1cKVO8D xAwXb2aCX72wVXwUYj2oA1W7Y49xCCIucS1jM5AYuI2PuhSbp70ORhRZIkL9w+u7 2SiwV3wRVArGu2V3rRHFGm9cUmNAXP9288uAJkQuk/XFdmV865bNz6DYQVty7/9m GA1BGAvB4cMENXfpiYNmJua8nrALbFfV0FOJ+rs6CDC0odew6UP8OJq5fGTPpeS6 CQOfpwmsfddt8sNRqcXWAnB2XbHymcgkSmwif9qTQrgH9q5PHvF3VwbgwujEReHi puqLQau71SOU0fCLIemXiDQnNZmKwiWf -----END CERTIFICATE-----Generated at Mon Apr 28 02:14:46 2025 by rpki-client