$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/6fe90c1a-d9b9-3595-9a8c-cf8cc029b97a.roa File: 6fe90c1a-d9b9-3595-9a8c-cf8cc029b97a.roa (raw, json) Hash identifier: vh7nry5ACFu5/EMewRS8z+X143MlPNWAjGf4iLSyvYM= Subject key identifier: DE:01:E6:60:C5:06:B8:80:2A:A8:38:18:E5:58:55:7B:DB:4C:74:5C Certificate issuer: /CN=706d4f00-fa89-4b22-8684-b968d577fab7 Certificate serial: 010D0C9F43285849849EFBBC5043251F02765DC0 Authority key identifier: 28:CD:22:12:7C:2F:19:D8:1B:64:4F:54:1F:12:27:FB:22:C9:E4:05 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/6fe90c1a-d9b9-3595-9a8c-cf8cc029b97a.roa Signing time: Mon 14 Apr 2025 01:00:43 +0000 ROA not before: Mon 14 Apr 2025 01:00:43 +0000 ROA not after: Sun 13 Jul 2025 01:00:43 +0000 asID: 7764 IP address blocks: 2610:20:2000::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:84:9e:fb:bc:50:43:25:1f:02:76:5d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=706d4f00-fa89-4b22-8684-b968d577fab7 Validity Not Before: Apr 14 01:00:43 2025 GMT Not After : Jul 13 01:00:43 2025 GMT Subject: CN=ae96ab00-ec90-4028-bd7c-cd9c77ed750f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:77:8e:c4:5a:c4:ca:99:29:32:c3:7c:07:62: 65:87:20:92:ff:95:ec:68:37:0f:32:a8:75:8f:3a: 7c:12:04:f1:ec:56:3b:24:33:93:ba:5b:e1:8e:1b: e8:10:f9:c6:20:98:e6:01:83:68:fd:d1:a8:79:ac: 50:ca:6c:ec:f4:32:22:17:14:8e:fa:2b:ca:9f:c1: 05:99:66:d0:23:bc:15:b7:1d:02:c6:8e:46:8b:bb: ff:d7:fa:bd:06:6c:b7:3f:28:e0:32:c0:71:a4:58: 14:71:9a:f9:28:ec:92:60:80:b7:a8:46:ea:1c:64: dd:99:c3:0a:02:4a:52:64:c0:32:f5:bc:37:4a:34: 11:89:0a:9d:f7:3c:98:61:50:79:0f:31:89:b8:6b: fa:52:01:81:bd:3d:26:e4:af:c9:9d:bc:f0:65:f2: e0:fd:ef:48:54:17:53:c2:6b:65:c7:0a:bc:12:09: 2a:ad:1c:47:71:37:0e:d0:04:98:68:ce:28:f1:81: 4b:63:ec:82:2f:36:9c:fb:5a:1b:7a:f2:95:3d:b4: 0d:16:a4:58:0a:ab:60:23:93:25:00:6a:a2:bb:05: b6:e6:72:75:9d:ef:a6:43:ee:f3:ae:bb:5c:b2:8f: d7:76:e8:c0:ad:92:80:cf:8d:84:91:7a:e2:1f:63: a2:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:01:E6:60:C5:06:B8:80:2A:A8:38:18:E5:58:55:7B:DB:4C:74:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/6fe90c1a-d9b9-3595-9a8c-cf8cc029b97a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.crl X509v3 Authority Key Identifier: keyid:28:CD:22:12:7C:2F:19:D8:1B:64:4F:54:1F:12:27:FB:22:C9:E4:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer sbgp-ipAddrBlock: critical IPv6: 2610:20:2000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:5a:bb:a1:76:69:64:2f:11:b4:c9:89:82:87:06:96:ff:aa: b5:e9:ac:30:92:d6:92:10:f4:62:49:da:7a:ed:f6:76:9a:0e: df:b3:d2:51:96:8a:61:6e:6d:cb:b7:cf:59:85:f7:34:26:be: 85:1d:f9:99:28:bd:51:a5:07:45:ec:f8:10:03:dc:01:03:e1: c0:f0:95:89:43:36:86:47:c4:fd:f6:ad:62:1b:e0:b3:25:ba: 51:f1:ed:1c:3a:a0:fc:31:97:42:b5:63:12:b3:4b:e6:b2:af: 4f:da:23:d6:7a:0a:3e:ea:4e:a4:e1:65:8b:46:5e:89:1b:2a: b0:df:fb:5b:e1:01:af:77:29:f1:8d:0d:b5:7e:c2:d2:3f:d3: 20:81:8e:05:54:b5:72:f8:1f:c1:23:e1:02:72:85:99:6d:78: 97:f2:ed:eb:2b:d8:a7:b6:aa:5f:f2:b5:fd:82:56:1e:42:8b: 46:8e:16:ba:a5:1c:c6:11:28:07:e3:77:cd:4c:e7:b7:b9:1d: 04:84:3e:9d:75:5e:15:77:83:f9:1c:7b:6f:a3:ff:cb:f1:3c: 7b:25:d7:3a:ea:a0:07:d6:a7:0f:47:b9:de:43:2e:00:56:a0: d4:92:96:c8:70:42:f4:84:81:7f:09:c2:1e:ee:2d:21:51:26: c0:86:a8:e8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmEnvu8UEMlHwJ2XcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzA2ZDRmMDAtZmE4OS00YjIyLTg2ODQtYjk2OGQ1Nzdm YWI3MB4XDTI1MDQxNDAxMDA0M1oXDTI1MDcxMzAxMDA0M1owLzEtMCsGA1UEAxMk YWU5NmFiMDAtZWM5MC00MDI4LWJkN2MtY2Q5Yzc3ZWQ3NTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXeOxFrEypkpMsN8B2JlhyCS/5XsaDcPMqh1 jzp8EgTx7FY7JDOTulvhjhvoEPnGIJjmAYNo/dGoeaxQymzs9DIiFxSO+ivKn8EF mWbQI7wVtx0Cxo5Gi7v/1/q9Bmy3PyjgMsBxpFgUcZr5KOySYIC3qEbqHGTdmcMK AkpSZMAy9bw3SjQRiQqd9zyYYVB5DzGJuGv6UgGBvT0m5K/JnbzwZfLg/e9IVBdT wmtlxwq8EgkqrRxHcTcO0ASYaM4o8YFLY+yCLzac+1obevKVPbQNFqRYCqtgI5Ml AGqiuwW25nJ1ne+mQ+7zrrtcso/XdujArZKAz42EkXriH2OiMwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFN4B5mDFBriAKqg4GOVYVXvbTHRcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83MDZk NGYwMC1mYTg5LTRiMjItODY4NC1iOTY4ZDU3N2ZhYjcvNmZlOTBjMWEtZDliOS0z NTk1LTlhOGMtY2Y4Y2MwMjliOTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNzA2ZDRmMDAtZmE4OS00YjIyLTg2 ODQtYjk2OGQ1NzdmYWI3LzcwNmQ0ZjAwLWZhODktNGIyMi04Njg0LWI5NjhkNTc3 ZmFiNy5jcmwwHwYDVR0jBBgwFoAUKM0iEnwvGdgbZE9UHxIn+yLJ5AUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83MDZkNGYwMC1mYTg5LTRiMjItODY4NC1iOTY4 ZDU3N2ZhYjcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJhAAICAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACBau6F2aWQvEbTJiYKHBpb/qrXprDCS1pIQ9GJJ2nrt9naaDt+z 0lGWimFubcu3z1mF9zQmvoUd+ZkovVGlB0Xs+BAD3AED4cDwlYlDNoZHxP32rWIb 4LMlulHx7Rw6oPwxl0K1YxKzS+ayr0/aI9Z6Cj7qTqThZYtGXokbKrDf+1vhAa93 KfGNDbV+wtI/0yCBjgVUtXL4H8Ej4QJyhZlteJfy7esr2Ke2ql/ytf2CVh5Ci0aO FrqlHMYRKAfjd81M57e5HQSEPp11XhV3g/kce2+j/8vxPHsl1zrqoAfWpw9Hud5D LgBWoNSSlshwQvSEgX8Jwh7uLSFRJsCGqOg= -----END CERTIFICATE-----Generated at Sun Apr 27 22:05:01 2025 by rpki-client