$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/6b997278-2a81-3a43-9ad7-f906ffea2a68.roa File: 6b997278-2a81-3a43-9ad7-f906ffea2a68.roa (raw, json) Hash identifier: GJ1cBaxRe7hHLpRW+7Knz5rM6L0TgPh/Z6HAlRoYvTs= Subject key identifier: F3:6F:1C:D5:FD:C6:13:41:7D:67:58:29:42:DE:16:E0:4C:96:79:98 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F43285848E0069BE48AFCC458632AA6E3 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/6b997278-2a81-3a43-9ad7-f906ffea2a68.roa Signing time: Fri 14 Feb 2025 02:00:39 +0000 ROA not before: Fri 14 Feb 2025 02:00:39 +0000 ROA not after: Thu 15 May 2025 01:00:39 +0000 asID: 33363 IP address blocks: 2605:a401:8999::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e0:06:9b:e4:8a:fc:c4:58:63:2a:a6:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Feb 14 02:00:39 2025 GMT Not After : May 15 01:00:39 2025 GMT Subject: CN=bfdf51d7-2f54-49b9-8edb-1812c4703b1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d2:5a:67:52:54:8d:8c:fe:fa:8a:b3:1c:dd: 71:06:e7:9f:ae:27:95:d0:c0:54:32:20:79:b3:6f: 6c:88:e3:c5:58:74:e7:dc:ab:ab:06:a9:5e:93:02: ee:f8:d8:35:a9:e0:fe:43:f3:be:c8:1b:11:03:34: 4f:8c:5f:f2:9a:e8:58:97:ef:e5:d0:59:19:9c:18: 29:40:ee:db:b6:b5:9a:ff:b5:db:6f:ce:6a:c6:87: 44:87:71:3e:2a:0b:fb:1a:6b:29:b7:13:aa:52:21: 05:47:5b:5f:ae:13:09:54:e8:5b:55:be:33:31:96: fb:54:59:78:c8:3c:7b:35:bc:43:fb:c1:0a:24:63: e6:16:a2:7e:9e:9d:a1:7d:35:4f:79:89:1a:c9:85: e8:f0:f8:e5:4a:05:e7:17:8a:82:9c:77:6c:36:e9: 54:c4:a2:e2:01:57:5c:6b:f4:15:7b:5f:fb:0f:9f: e7:f7:b5:aa:39:80:91:bb:1b:89:b4:31:1b:61:79: a4:07:63:c5:af:b7:94:ad:2c:3a:0c:4a:38:eb:86: 50:0f:5d:29:99:ee:c2:ed:d0:d0:d4:bd:5a:ee:bf: 8e:61:96:a8:14:da:9f:2e:d6:8a:0f:72:1b:5d:98: 84:af:19:79:ab:fb:b7:33:64:b0:59:8b:57:85:df: e6:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:6F:1C:D5:FD:C6:13:41:7D:67:58:29:42:DE:16:E0:4C:96:79:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/6b997278-2a81-3a43-9ad7-f906ffea2a68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv6: 2605:a401:8999::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:cd:86:e2:c3:9d:e6:b8:1a:0d:cb:38:65:37:b8:b0:6e:19: 8a:6e:ea:8b:da:6b:29:0a:2f:e1:f5:8d:3a:1c:27:04:8e:1b: 51:97:2a:0f:e4:cf:06:42:c5:1c:a3:e9:49:63:a5:15:2c:2b: e5:ce:b1:e5:f9:12:f7:70:6c:93:cc:49:ed:23:72:21:a7:9c: 7f:46:bf:53:aa:27:d2:b4:a6:d7:cd:32:a2:7e:86:40:eb:69: 7d:4e:62:44:df:b3:76:6e:b7:35:dd:3a:68:f4:07:68:76:20: da:42:45:e1:30:0d:bb:9e:94:b9:03:d6:ed:ae:23:19:18:5c: 0b:f7:b9:84:f7:45:03:0d:3e:6f:2c:08:70:73:cb:e0:c9:6d: c3:ff:62:67:60:34:c2:9c:97:d8:30:75:d7:7d:ab:04:97:fb: a5:cb:7b:f0:24:93:f5:a9:29:52:d8:6e:f9:b3:50:e8:14:03: 43:78:f7:bc:0b:34:18:13:22:2a:b6:b8:5f:56:ff:b7:61:45: 82:fc:85:1f:e2:77:cf:2f:41:18:0a:08:d6:37:66:44:8a:ab: 0d:40:be:67:19:3b:1d:e7:43:80:fb:d0:21:dc:c5:27:52:2c: 21:7f:04:20:d0:54:20:d8:96:89:60:37:39:46:c8:1e:15:7c: 7c:9b:e4:a5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjgBpvkivzEWGMqpuMwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MDIxNDAyMDAzOVoXDTI1MDUxNTAxMDAzOVowLzEtMCsGA1UEAxMk YmZkZjUxZDctMmY1NC00OWI5LThlZGItMTgxMmM0NzAzYjFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dJaZ1JUjYz++oqzHN1xBuefrieV0MBUMiB5 s29siOPFWHTn3KurBqlekwLu+Ng1qeD+Q/O+yBsRAzRPjF/ymuhYl+/l0FkZnBgp QO7btrWa/7Xbb85qxodEh3E+Kgv7GmsptxOqUiEFR1tfrhMJVOhbVb4zMZb7VFl4 yDx7NbxD+8EKJGPmFqJ+np2hfTVPeYkayYXo8PjlSgXnF4qCnHdsNulUxKLiAVdc a/QVe1/7D5/n97WqOYCRuxuJtDEbYXmkB2PFr7eUrSw6DEo464ZQD10pme7C7dDQ 1L1a7r+OYZaoFNqfLtaKD3IbXZiErxl5q/u3M2SwWYtXhd/mewIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPNvHNX9xhNBfWdYKULeFuBMlnmYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvNmI5OTcyNzgtMmE4MS0z YTQzLTlhZDctZjkwNmZmZWEyYTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWkAYmZ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG7NhuLDnea4Gg3LOGU3uLBuGYpu6ovaaykKL+H1jTocJwSOG1GX Kg/kzwZCxRyj6UljpRUsK+XOseX5EvdwbJPMSe0jciGnnH9Gv1OqJ9K0ptfNMqJ+ hkDraX1OYkTfs3ZutzXdOmj0B2h2INpCReEwDbuelLkD1u2uIxkYXAv3uYT3RQMN Pm8sCHBzy+DJbcP/YmdgNMKcl9gwddd9qwSX+6XLe/Akk/WpKVLYbvmzUOgUA0N4 97wLNBgTIiq2uF9W/7dhRYL8hR/id88vQRgKCNY3ZkSKqw1AvmcZOx3nQ4D70CHc xSdSLCF/BCDQVCDYlolgNzlGyB4VfHyb5KU= -----END CERTIFICATE-----Generated at Tue Apr 29 12:56:49 2025 by rpki-client