$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/dad3a400-0e8e-36d0-8c10-a806d8dab007.roa File: dad3a400-0e8e-36d0-8c10-a806d8dab007.roa (raw, json) Hash identifier: llHNs3V1i3G5GDUT4q9y1tReEryllbo6wNj5LsrOvmg= Subject key identifier: B8:2C:88:F5:B1:5D:7E:10:2E:22:8C:4B:EC:5F:EF:D4:5E:7B:E7:83 Certificate issuer: /CN=1a7ff5cc-e8ae-40f8-bcb9-390810eb821e Certificate serial: 010D0C9F432858498CFF0D3926BEEB25A8612D00 Authority key identifier: 8D:CA:88:55:22:9C:3A:1D:A0:17:3F:5E:36:B1:D2:A7:0D:2F:60:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/dad3a400-0e8e-36d0-8c10-a806d8dab007.roa Signing time: Thu 17 Apr 2025 01:00:45 +0000 ROA not before: Thu 17 Apr 2025 01:00:45 +0000 ROA not after: Wed 16 Jul 2025 01:00:45 +0000 asID: 209261 IP address blocks: 2606:fdc0::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8c:ff:0d:39:26:be:eb:25:a8:61:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a7ff5cc-e8ae-40f8-bcb9-390810eb821e Validity Not Before: Apr 17 01:00:45 2025 GMT Not After : Jul 16 01:00:45 2025 GMT Subject: CN=8c009e92-e222-4213-95da-80005b7f4020 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:86:3b:76:46:22:7a:43:91:24:b2:98:b5:48: 7b:a5:f5:d7:fc:bb:3a:c5:75:5b:4f:0b:51:60:8e: e7:82:83:5c:fd:2e:ae:4a:f1:17:79:9b:d2:f3:3c: 5f:2d:44:df:93:9d:2d:54:82:24:24:01:60:d7:e1: f7:0c:1c:2c:31:c0:df:ac:92:9e:1f:d2:89:17:ec: da:85:0a:1c:a5:62:a6:00:6d:e4:bd:60:4b:b9:79: 49:c9:0a:28:90:d9:61:ac:44:44:06:e7:a5:dc:3b: 43:41:45:0d:3a:a9:bc:b6:8c:4d:5e:a3:9c:d8:1a: f7:c8:2e:cb:15:5f:73:ab:0c:c2:29:ed:56:44:a6: cf:8f:3c:fe:69:f8:2e:ec:22:d4:16:44:d4:90:e9: 5d:21:32:16:6d:d4:35:f4:11:eb:6f:14:55:23:de: 46:81:f5:d3:b7:b6:f0:6c:a7:98:0c:1d:d3:9a:28: 2f:b6:f4:bb:e2:7f:cb:c1:37:7d:d3:e0:ed:9e:26: 76:44:0d:50:73:29:b2:c1:07:2e:62:12:d2:0a:13: 14:3d:fb:a6:f0:30:ee:9b:58:59:3c:f4:e3:29:81: 36:fb:75:df:e3:38:32:5c:ac:5c:c3:00:f0:ed:30: cd:5e:90:5c:0f:f6:4a:7b:5f:56:b6:4a:5c:0e:fb: 93:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:2C:88:F5:B1:5D:7E:10:2E:22:8C:4B:EC:5F:EF:D4:5E:7B:E7:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/dad3a400-0e8e-36d0-8c10-a806d8dab007.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.crl X509v3 Authority Key Identifier: keyid:8D:CA:88:55:22:9C:3A:1D:A0:17:3F:5E:36:B1:D2:A7:0D:2F:60:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.cer sbgp-ipAddrBlock: critical IPv6: 2606:fdc0::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:de:0c:61:2e:7a:10:3c:58:f8:f0:3d:12:62:74:f1:62:62: 08:a7:81:bb:6b:f8:c7:39:60:ab:8a:6f:1e:94:56:01:d5:1a: 17:2b:34:67:e4:f7:16:28:b7:15:81:24:a9:43:3f:c4:14:b4: 96:d5:cc:f9:15:da:57:d1:15:e7:84:32:50:07:4e:00:c1:72: 2a:64:c8:7e:61:b9:31:03:81:78:3a:36:10:59:4d:8b:4c:51: d3:64:03:76:67:dd:0e:88:74:7a:0c:48:e7:b2:74:2d:77:cb: 8c:28:52:06:0d:d2:c3:1f:e3:e0:0a:39:33:b1:05:64:50:f8: 34:dc:1e:23:d2:58:21:e4:55:61:0a:50:ca:52:5f:84:10:b4: 8a:77:23:d1:b4:73:09:45:90:6c:96:98:8e:83:64:fb:b4:51: c7:59:19:c8:9b:68:5d:34:1d:42:ba:ed:e5:cb:e0:44:7a:d4: eb:4d:2a:54:a6:eb:6a:f7:52:0d:52:1e:a0:62:7c:e6:1b:45: da:de:c4:e9:1e:33:29:19:6c:3a:65:68:04:ff:6f:a7:aa:71: cf:33:27:d7:bf:5d:3f:4b:5c:82:8b:8e:54:9a:df:c2:57:54: 4e:b1:f4:bb:c4:75:95:5f:f3:c4:df:f6:2a:4c:bc:29:38:c8: c7:07:06:27 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmM/w05Jr7rJahhLQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWE3ZmY1Y2MtZThhZS00MGY4LWJjYjktMzkwODEwZWI4 MjFlMB4XDTI1MDQxNzAxMDA0NVoXDTI1MDcxNjAxMDA0NVowLzEtMCsGA1UEAxMk OGMwMDllOTItZTIyMi00MjEzLTk1ZGEtODAwMDViN2Y0MDIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYY7dkYiekORJLKYtUh7pfXX/Ls6xXVbTwtR YI7ngoNc/S6uSvEXeZvS8zxfLUTfk50tVIIkJAFg1+H3DBwsMcDfrJKeH9KJF+za hQocpWKmAG3kvWBLuXlJyQookNlhrEREBuel3DtDQUUNOqm8toxNXqOc2Br3yC7L FV9zqwzCKe1WRKbPjzz+afgu7CLUFkTUkOldITIWbdQ19BHrbxRVI95GgfXTt7bw bKeYDB3TmigvtvS74n/LwTd90+DtniZ2RA1QcymywQcuYhLSChMUPfum8DDum1hZ PPTjKYE2+3Xf4zgyXKxcwwDw7TDNXpBcD/ZKe19WtkpcDvuTcwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFLgsiPWxXX4QLiKMS+xf79Ree+eDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYTdm ZjVjYy1lOGFlLTQwZjgtYmNiOS0zOTA4MTBlYjgyMWUvZGFkM2E0MDAtMGU4ZS0z NmQwLThjMTAtYTgwNmQ4ZGFiMDA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWE3ZmY1Y2MtZThhZS00MGY4LWJj YjktMzkwODEwZWI4MjFlLzFhN2ZmNWNjLWU4YWUtNDBmOC1iY2I5LTM5MDgxMGVi ODIxZS5jcmwwHwYDVR0jBBgwFoAUjcqIVSKcOh2gFz9eNrHSpw0vYCYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYTdmZjVjYy1lOGFlLTQwZjgtYmNiOS0zOTA4 MTBlYjgyMWUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgb9wAAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAa94MYS56EDxY+PA9EmJ08WJiCKeBu2v4xzlgq4pvHpRWAdUaFys0 Z+T3Fii3FYEkqUM/xBS0ltXM+RXaV9EV54QyUAdOAMFyKmTIfmG5MQOBeDo2EFlN i0xR02QDdmfdDoh0egxI57J0LXfLjChSBg3Swx/j4Ao5M7EFZFD4NNweI9JYIeRV YQpQylJfhBC0incj0bRzCUWQbJaYjoNk+7RRx1kZyJtoXTQdQrrt5cvgRHrU600q VKbravdSDVIeoGJ85htF2t7E6R4zKRlsOmVoBP9vp6pxzzMn179dP0tcgouOVJrf wldUTrH0u8R1lV/zxN/2Kky8KTjIxwcGJw== -----END CERTIFICATE-----Generated at Mon Apr 28 17:51:02 2025 by rpki-client