$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/f6422793-5a68-38d8-9dfa-1aa909f4e1bd.roa File: f6422793-5a68-38d8-9dfa-1aa909f4e1bd.roa (raw, json) Hash identifier: dnFgRjKn27FlE66XJlvqkjf3pcF5yAL+MM7Hkqa0D1k= Subject key identifier: A6:EC:99:F9:C9:B9:DE:84:29:E0:14:AB:2E:95:79:75:F1:87:52:17 Certificate issuer: /CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf Certificate serial: 010D0C9F43285849ABB4ACA44269620886443680 Authority key identifier: DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/f6422793-5a68-38d8-9dfa-1aa909f4e1bd.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 397543 IP address blocks: 2607:f8f0:c21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:ac:a4:42:69:62:08:86:44:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=3847776d-2e79-4231-9b2e-955dc0da6a17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:23:f2:d8:aa:63:b2:2d:92:c4:bb:0b:e0:88: b6:7e:eb:da:ee:46:a8:13:90:76:2e:c7:6f:d9:c4: d1:07:66:62:20:3d:93:5d:50:74:36:54:d5:6e:56: 6e:5b:ea:8d:5b:01:33:b1:2f:75:6a:ff:7f:a7:21: f3:6d:94:c9:c6:b5:44:64:dc:af:ac:e7:ca:98:d4: 60:eb:e1:df:09:65:a8:fd:20:69:cf:ed:2e:cc:69: c4:b3:7a:48:df:93:86:f9:f6:6c:10:cd:f5:e0:c8: 9e:57:48:67:e8:43:20:9f:00:0d:20:6d:ca:9c:ca: 15:de:13:8c:22:cf:3a:6b:0e:e9:02:3d:72:54:02: b2:34:49:dc:1c:1f:98:dc:e8:eb:f4:18:4c:bc:2c: 52:ba:d6:ee:25:81:3e:6a:69:e2:5b:de:f4:7f:de: 4b:96:d8:76:2a:da:ac:92:bc:f5:6e:63:31:6c:9d: d3:b4:be:a8:af:c2:d8:02:0f:10:02:a9:09:15:f6: ab:b9:42:8d:88:68:17:48:ab:b2:60:b4:08:3a:31: e0:32:ae:e7:73:95:c6:de:d6:1f:e5:02:be:a0:11: 36:ef:fd:e0:12:be:ea:31:0d:a1:4e:62:39:d0:dc: 1e:3a:ea:cf:37:2c:1e:ef:66:e2:12:51:68:0b:33: 91:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:EC:99:F9:C9:B9:DE:84:29:E0:14:AB:2E:95:79:75:F1:87:52:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/f6422793-5a68-38d8-9dfa-1aa909f4e1bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl X509v3 Authority Key Identifier: keyid:DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer sbgp-ipAddrBlock: critical IPv6: 2607:f8f0:c21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:b8:b1:1e:f6:fd:42:53:6d:08:c3:6b:3b:71:3c:22:c8:0d: 4e:11:4b:45:f2:37:6e:78:6b:9f:9c:4c:b0:6b:7c:8a:e7:d5: d8:78:ea:93:2b:67:9b:07:26:f9:86:40:0a:ce:d1:de:92:15: 08:19:c9:d0:e9:cf:d0:d7:fb:cd:0b:05:43:31:e5:a8:fa:6a: 0d:97:28:6c:6d:87:94:1a:65:22:44:34:d5:61:08:6c:26:82: 30:65:16:66:91:8d:21:5a:a6:75:27:42:f3:fc:4d:dd:cf:f1: 9c:38:74:a5:66:12:c6:57:1b:ec:04:df:ac:bd:fc:6c:3c:70: 96:aa:57:09:9c:f7:67:4c:aa:c5:d8:92:29:3c:68:26:ed:b6: de:93:95:a7:30:51:85:da:b1:7b:c1:dc:40:7f:f0:e5:97:b6: 87:61:1a:26:3c:fe:a1:06:e5:22:65:31:65:06:a5:c9:0f:86: 9e:f7:44:bb:3b:58:f1:b5:d9:6a:a6:b5:12:d1:2e:bc:41:78: ca:c4:db:d2:99:ca:70:31:01:39:f7:22:4d:f2:3d:0b:4e:38: c9:9d:bc:b4:b3:dd:c7:06:78:72:94:75:0a:59:9a:6a:a6:60: 71:76:2b:6c:d0:47:24:18:4c:8d:2e:eb:41:49:d6:07:89:1b: 99:7e:67:a1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmrtKykQmliCIZENoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTZhYjUwMWItNmM2OS00NmE0LWI5MjQtYTA5YjY4Y2Ux OGNmMB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk Mzg0Nzc3NmQtMmU3OS00MjMxLTliMmUtOTU1ZGMwZGE2YTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSPy2Kpjsi2SxLsL4Ii2fuva7kaoE5B2Lsdv 2cTRB2ZiID2TXVB0NlTVblZuW+qNWwEzsS91av9/pyHzbZTJxrVEZNyvrOfKmNRg 6+HfCWWo/SBpz+0uzGnEs3pI35OG+fZsEM314MieV0hn6EMgnwANIG3KnMoV3hOM Is86aw7pAj1yVAKyNEncHB+Y3Ojr9BhMvCxSutbuJYE+amniW970f95Llth2Ktqs krz1bmMxbJ3TtL6or8LYAg8QAqkJFfaruUKNiGgXSKuyYLQIOjHgMq7nc5XG3tYf 5QK+oBE27/3gEr7qMQ2hTmI50NweOurPNywe72biElFoCzORCQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKbsmfnJud6EKeAUqy6VeXXxh1IXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNmFi NTAxYi02YzY5LTQ2YTQtYjkyNC1hMDliNjhjZTE4Y2YvZjY0MjI3OTMtNWE2OC0z OGQ4LTlkZmEtMWFhOTA5ZjRlMWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTZhYjUwMWItNmM2OS00NmE0LWI5 MjQtYTA5YjY4Y2UxOGNmL2U2YWI1MDFiLTZjNjktNDZhNC1iOTI0LWEwOWI2OGNl MThjZi5jcmwwHwYDVR0jBBgwFoAU3NJzqCd+YUhl0UFSipG2IBCnAF4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNmFiNTAxYi02YzY5LTQ2YTQtYjkyNC1hMDli NjhjZTE4Y2YuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf48Awh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHG4sR72/UJTbQjDaztxPCLIDU4RS0XyN254a5+cTLBrfIrn1dh4 6pMrZ5sHJvmGQArO0d6SFQgZydDpz9DX+80LBUMx5aj6ag2XKGxth5QaZSJENNVh CGwmgjBlFmaRjSFapnUnQvP8Td3P8Zw4dKVmEsZXG+wE36y9/Gw8cJaqVwmc92dM qsXYkik8aCbttt6TlacwUYXasXvB3EB/8OWXtodhGiY8/qEG5SJlMWUGpckPhp73 RLs7WPG12WqmtRLRLrxBeMrE29KZynAxATn3Ik3yPQtOOMmdvLSz3ccGeHKUdQpZ mmqmYHF2K2zQRyQYTI0u60FJ1geJG5l+Z6E= -----END CERTIFICATE-----Generated at Mon Apr 28 12:33:42 2025 by rpki-client