$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/5636f4bd-70ef-3a93-9aa4-be6bd3855be9.roa File: 5636f4bd-70ef-3a93-9aa4-be6bd3855be9.roa (raw, json) Hash identifier: xfRPx0gQzskwDLTgrcLHVybOaHCQ9EHq1BeKqJcG9Y0= Subject key identifier: BD:65:9F:EE:E7:5E:89:AB:14:82:4C:C1:A5:64:AB:91:16:12:63:1E Certificate issuer: /CN=208edf3a-73a5-4614-9c76-5702d5c88977 Certificate serial: 010D0C9F43285848F7C144A7ED824879754D4600 Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/5636f4bd-70ef-3a93-9aa4-be6bd3855be9.roa Signing time: Sat 22 Feb 2025 14:00:52 +0000 ROA not before: Sat 22 Feb 2025 14:00:52 +0000 ROA not after: Fri 23 May 2025 13:00:52 +0000 asID: 216321 IP address blocks: 2605:dd40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f7:c1:44:a7:ed:82:48:79:75:4d:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977 Validity Not Before: Feb 22 14:00:52 2025 GMT Not After : May 23 13:00:52 2025 GMT Subject: CN=863ba37a-1e3d-48e9-a0fe-395012d1baee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:16:e2:75:08:90:12:dd:7e:48:62:45:44:3e: 87:3e:1a:9d:66:1d:17:2a:f4:7f:6d:85:ee:9a:be: f5:30:39:a9:5d:d3:be:04:66:3f:09:93:db:b8:36: e2:b1:5d:40:5c:5b:2e:53:72:10:d6:42:25:96:ee: 14:81:15:b4:74:21:14:d6:a9:51:90:85:e9:22:25: c4:0a:25:08:45:70:23:b2:c1:61:37:01:37:85:51: e2:f4:27:56:e3:96:08:4d:87:59:b6:86:7f:56:2c: d5:16:15:2d:69:73:52:77:87:95:67:a2:15:8b:df: d9:57:39:4a:e7:08:58:da:48:40:14:9f:04:ad:3e: 26:06:84:23:8f:a5:f4:b0:29:53:4b:25:b3:dc:06: d4:21:6a:0f:10:e4:9f:65:fc:b9:e5:6f:59:18:ae: dc:e0:c1:ba:a5:be:8f:d2:51:63:39:17:1b:2f:a4: e5:c7:25:0e:73:5a:21:70:e5:b9:1e:6d:92:78:12: e4:fa:58:28:f9:f6:82:c8:78:64:f3:67:a1:a4:81: 4c:60:56:b3:e5:0c:f1:14:2f:60:fc:bf:3d:78:81: a6:38:55:af:8c:ae:2f:a5:4c:49:f6:df:32:1f:80: ca:34:85:ac:46:c2:ac:ad:bd:ae:bc:ce:21:7b:1e: 07:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:65:9F:EE:E7:5E:89:AB:14:82:4C:C1:A5:64:AB:91:16:12:63:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/5636f4bd-70ef-3a93-9aa4-be6bd3855be9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl X509v3 Authority Key Identifier: keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer sbgp-ipAddrBlock: critical IPv6: 2605:dd40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:46:61:84:63:07:25:3e:f6:71:b1:19:69:bd:62:ee:15:36: d3:87:4a:5d:d8:06:45:8b:44:b2:3d:81:ef:ae:ea:b0:70:25: bb:5c:d9:46:81:80:7e:08:1e:7f:7b:61:85:0b:82:1b:a1:60: 0c:95:41:00:de:c4:27:7d:7b:63:b5:ec:cf:c9:91:e9:3b:6d: da:ac:6d:a5:e5:52:f7:90:71:27:d3:a6:0a:c9:36:c0:11:1b: 39:ff:1d:0a:1e:66:0a:01:f4:0d:cc:75:1e:7e:11:37:47:59: ac:4a:07:71:67:60:44:e1:70:31:9d:d2:37:da:87:01:d1:d0: 11:25:19:ae:98:b4:e4:53:e5:76:6d:b9:ec:0e:46:9a:1e:06: 3b:bc:29:bb:33:2c:84:3b:bc:f0:ec:a9:61:d1:eb:25:49:1e: 0f:df:ab:13:77:5b:4e:c5:a9:f0:30:e9:d3:16:a5:a4:f7:46: c9:5e:fc:c3:a3:a1:84:d8:97:54:1f:d4:2c:2f:35:70:ce:9c: 26:25:e4:5b:f3:d2:73:0f:31:7a:62:a9:92:28:09:9a:5c:49: 2a:32:52:29:ab:57:8b:e4:5b:4b:a6:a9:24:97:e9:8e:b9:e8: 9c:07:95:55:04:4a:5b:ab:f7:3b:cb:f7:87:9a:95:7c:b1:ea: 17:ef:9a:5c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEj3wUSn7YJIeXVNRgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjA4ZWRmM2EtNzNhNS00NjE0LTljNzYtNTcwMmQ1Yzg4 OTc3MB4XDTI1MDIyMjE0MDA1MloXDTI1MDUyMzEzMDA1MlowLzEtMCsGA1UEAxMk ODYzYmEzN2EtMWUzZC00OGU5LWEwZmUtMzk1MDEyZDFiYWVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhbidQiQEt1+SGJFRD6HPhqdZh0XKvR/bYXu mr71MDmpXdO+BGY/CZPbuDbisV1AXFsuU3IQ1kIllu4UgRW0dCEU1qlRkIXpIiXE CiUIRXAjssFhNwE3hVHi9CdW45YITYdZtoZ/VizVFhUtaXNSd4eVZ6IVi9/ZVzlK 5whY2khAFJ8ErT4mBoQjj6X0sClTSyWz3AbUIWoPEOSfZfy55W9ZGK7c4MG6pb6P 0lFjORcbL6TlxyUOc1ohcOW5Hm2SeBLk+lgo+faCyHhk82ehpIFMYFaz5QzxFC9g /L89eIGmOFWvjK4vpUxJ9t8yH4DKNIWsRsKsrb2uvM4hex4HHQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFL1ln+7nXomrFIJMwaVkq5EWEmMeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yMDhl ZGYzYS03M2E1LTQ2MTQtOWM3Ni01NzAyZDVjODg5NzcvNTYzNmY0YmQtNzBlZi0z YTkzLTlhYTQtYmU2YmQzODU1YmU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjA4ZWRmM2EtNzNhNS00NjE0LTlj NzYtNTcwMmQ1Yzg4OTc3LzIwOGVkZjNhLTczYTUtNDYxNC05Yzc2LTU3MDJkNWM4 ODk3Ny5jcmwwHwYDVR0jBBgwFoAUjiG5m/w/KlKClNSwhb33vM87VUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yMDhlZGYzYS03M2E1LTQ2MTQtOWM3Ni01NzAy ZDVjODg5NzcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgXdQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQC2RmGEYwclPvZxsRlpvWLuFTbTh0pd2AZFi0SyPYHvruqwcCW7XNlG gYB+CB5/e2GFC4IboWAMlUEA3sQnfXtjtezPyZHpO23arG2l5VL3kHEn06YKyTbA ERs5/x0KHmYKAfQNzHUefhE3R1msSgdxZ2BE4XAxndI32ocB0dARJRmumLTkU+V2 bbnsDkaaHgY7vCm7MyyEO7zw7Klh0eslSR4P36sTd1tOxanwMOnTFqWk90bJXvzD o6GE2JdUH9QsLzVwzpwmJeRb89JzDzF6YqmSKAmaXEkqMlIpq1eL5FtLpqkkl+mO ueicB5VVBEpbq/c7y/eHmpV8seoX75pc -----END CERTIFICATE-----Generated at Tue Apr 29 04:40:36 2025 by rpki-client