$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/6687135c-e3b9-37b1-8160-bc72c0d5954e.roa File: 6687135c-e3b9-37b1-8160-bc72c0d5954e.roa (raw, json) Hash identifier: ReewYH7Ozgc5rOvMaOZjwtskhC5RZy/vo5G2DG6L1Gs= Subject key identifier: 3B:51:7B:3A:C6:FD:62:DB:5F:CD:5F:99:31:DA:02:32:0E:2D:22:8E Certificate issuer: /CN=9e1491d6-2ab7-4c14-bee6-122ee4531127 Certificate serial: 010D0C9F4328584988CF21DC5E35D73F68516300 Authority key identifier: C2:B5:FB:E5:85:57:E2:F0:2A:41:C4:C8:DA:D4:D7:06:C3:0E:9B:68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/6687135c-e3b9-37b1-8160-bc72c0d5954e.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 396417 IP address blocks: 2600:e800::/28 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/9e1491d6-2ab7-4c14-bee6-122ee4531127.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/9e1491d6-2ab7-4c14-bee6-122ee4531127.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:21:dc:5e:35:d7:3f:68:51:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e1491d6-2ab7-4c14-bee6-122ee4531127 Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=c1424f0a-8125-4319-be26-d7d35a5ddf71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:78:81:25:1c:81:95:eb:06:98:f1:6c:29:55: 10:0c:b5:fc:61:ed:c5:81:f3:ea:84:15:93:e9:6c: 3a:bc:c1:b3:24:21:ec:51:fa:09:d2:f3:5f:eb:56: f3:6b:e4:18:5d:c1:94:21:18:14:73:5f:03:6b:6d: 91:88:75:eb:9e:eb:16:48:58:e5:de:86:45:36:88: 7f:ac:c6:c7:ca:40:3e:41:13:97:83:1c:9b:0a:eb: 2e:a5:d9:ae:fc:cc:87:14:d5:db:b8:c7:13:5d:19: 76:0a:bb:09:c1:5f:6e:72:c8:c6:fe:3f:4c:c9:78: 88:41:66:14:b6:0b:d1:e2:de:4b:aa:3b:25:58:a3: ac:06:27:09:1b:e9:04:c5:81:62:a4:d7:4d:25:9a: 75:38:d4:65:8a:a2:43:2d:7f:0e:63:47:ba:e0:22: 79:d4:76:11:11:e3:86:75:6d:c8:b3:8b:9a:36:3f: e2:1e:d0:63:45:1c:f8:aa:de:76:ac:1d:5a:88:c2: 20:7d:b0:a6:17:d8:b3:2a:7b:61:ec:d9:32:b2:c8: c9:b1:9e:7d:81:db:77:9a:a5:e5:e9:9f:97:27:cc: 55:5c:20:e6:f4:54:78:d5:4c:fb:32:c4:55:4f:ec: be:b1:69:03:7e:2f:3a:ca:dd:a7:e8:05:b8:70:66: 9f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:51:7B:3A:C6:FD:62:DB:5F:CD:5F:99:31:DA:02:32:0E:2D:22:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/6687135c-e3b9-37b1-8160-bc72c0d5954e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/9e1491d6-2ab7-4c14-bee6-122ee4531127.crl X509v3 Authority Key Identifier: keyid:C2:B5:FB:E5:85:57:E2:F0:2A:41:C4:C8:DA:D4:D7:06:C3:0E:9B:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127.cer sbgp-ipAddrBlock: critical IPv6: 2600:e800::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:ef:7b:39:2f:f6:07:d9:89:ba:f3:be:bc:00:29:52:6f:9b: c9:5a:98:68:fd:d3:22:55:8a:94:6b:aa:5c:de:f4:dc:37:f8: 83:51:83:9c:58:fc:99:3b:43:46:9c:de:38:0b:80:9f:d1:b1: 05:e6:25:8d:b5:cb:63:97:d7:60:fb:03:f7:ea:01:fa:fa:b2: 9d:b5:cf:6d:a2:79:e8:94:19:0f:c7:b9:15:ac:12:5f:b1:67: 6d:77:94:e9:a5:48:ec:ea:0a:d0:1a:98:1c:03:b7:6c:24:b3: 53:11:d2:c0:4b:d1:3c:f6:09:3f:e3:78:b4:ec:4f:e8:5e:1c: 3b:e6:87:3f:57:a2:04:5b:de:11:31:cd:6b:dc:0a:4f:ef:05: d0:03:32:ab:ea:ef:fb:01:fa:6a:8d:ef:ee:f4:98:db:20:56: a5:fe:88:7b:79:07:5e:45:d8:cf:cc:28:a9:b8:4f:35:5f:bd: 4d:0e:a9:c9:d5:fc:5a:cc:5d:f7:d3:c2:8a:af:1a:bb:9d:21: 10:ae:53:4e:e2:ce:bd:05:91:1c:41:20:5f:42:22:82:e9:8d: 73:cf:75:a7:7f:1c:00:f6:e7:29:32:c8:d4:16:e6:10:f6:35: 31:b2:9c:ed:db:6a:b1:fb:a0:e0:17:bf:bc:46:80:0f:61:e5: 28:2f:41:64 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmIzyHcXjXXP2hRYwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWUxNDkxZDYtMmFiNy00YzE0LWJlZTYtMTIyZWU0NTMx MTI3MB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk YzE0MjRmMGEtODEyNS00MzE5LWJlMjYtZDdkMzVhNWRkZjcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhniBJRyBlesGmPFsKVUQDLX8Ye3FgfPqhBWT 6Ww6vMGzJCHsUfoJ0vNf61bza+QYXcGUIRgUc18Da22RiHXrnusWSFjl3oZFNoh/ rMbHykA+QROXgxybCusupdmu/MyHFNXbuMcTXRl2CrsJwV9ucsjG/j9MyXiIQWYU tgvR4t5LqjslWKOsBicJG+kExYFipNdNJZp1ONRliqJDLX8OY0e64CJ51HYREeOG dW3Is4uaNj/iHtBjRRz4qt52rB1aiMIgfbCmF9izKnth7NkyssjJsZ59gdt3mqXl 6Z+XJ8xVXCDm9FR41Uz7MsRVT+y+sWkDfi86yt2n6AW4cGafwQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDtRezrG/WLbX81fmTHaAjIOLSKOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85ZTE0 OTFkNi0yYWI3LTRjMTQtYmVlNi0xMjJlZTQ1MzExMjcvNjY4NzEzNWMtZTNiOS0z N2IxLTgxNjAtYmM3MmMwZDU5NTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWUxNDkxZDYtMmFiNy00YzE0LWJl ZTYtMTIyZWU0NTMxMTI3LzllMTQ5MWQ2LTJhYjctNGMxNC1iZWU2LTEyMmVlNDUz MTEyNy5jcmwwHwYDVR0jBBgwFoAUwrX75YVX4vAqQcTI2tTXBsMOm2gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85ZTE0OTFkNi0yYWI3LTRjMTQtYmVlNi0xMjJl ZTQ1MzExMjcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgDoADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBq73s5L/YH2Ym68768AClSb5vJWpho/dMiVYqUa6pc3vTcN/iDUYOc WPyZO0NGnN44C4Cf0bEF5iWNtctjl9dg+wP36gH6+rKdtc9tonnolBkPx7kVrBJf sWdtd5TppUjs6grQGpgcA7dsJLNTEdLAS9E89gk/43i07E/oXhw75oc/V6IEW94R Mc1r3ApP7wXQAzKr6u/7Afpqje/u9JjbIFal/oh7eQdeRdjPzCipuE81X71NDqnJ 1fxazF3308KKrxq7nSEQrlNO4s69BZEcQSBfQiKC6Y1zz3WnfxwA9ucpMsjUFuYQ 9jUxspzt22qx+6DgF7+8RoAPYeUoL0Fk -----END CERTIFICATE-----Generated at Sun Apr 27 02:24:33 2025 by rpki-client