$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fbdf9eae-6447-4d3b-9182-7a04ce6f2db9/06bbda12-d711-3cce-b40d-75c60650aa0f.roa File: 06bbda12-d711-3cce-b40d-75c60650aa0f.roa (raw, json) Hash identifier: PzJ7OX8PQ/wP29taUOPeCToV8DS0E7E22w6tfE7bPSo= Subject key identifier: 4A:C7:AC:4C:42:EE:90:E6:41:9A:B6:3F:10:F4:E9:54:AF:D1:F6:79 Certificate issuer: /CN=fbdf9eae-6447-4d3b-9182-7a04ce6f2db9 Certificate serial: 010D0C9F43285849942C6F9E5AE5834EF3E0D870 Authority key identifier: 8D:A0:18:DD:26:B1:2A:09:B4:2C:C7:69:CF:06:B1:46:EF:83:CB:6C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fbdf9eae-6447-4d3b-9182-7a04ce6f2db9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fbdf9eae-6447-4d3b-9182-7a04ce6f2db9/06bbda12-d711-3cce-b40d-75c60650aa0f.roa Signing time: Sat 19 Apr 2025 14:43:00 +0000 ROA not before: Sat 19 Apr 2025 14:43:00 +0000 ROA not after: Fri 18 Jul 2025 14:43:00 +0000 asID: 394445 IP address blocks: 2604:d0::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fbdf9eae-6447-4d3b-9182-7a04ce6f2db9/fbdf9eae-6447-4d3b-9182-7a04ce6f2db9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fbdf9eae-6447-4d3b-9182-7a04ce6f2db9/fbdf9eae-6447-4d3b-9182-7a04ce6f2db9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fbdf9eae-6447-4d3b-9182-7a04ce6f2db9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:94:2c:6f:9e:5a:e5:83:4e:f3:e0:d8:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fbdf9eae-6447-4d3b-9182-7a04ce6f2db9 Validity Not Before: Apr 19 14:43:00 2025 GMT Not After : Jul 18 14:43:00 2025 GMT Subject: CN=51e1f491-e452-4754-960c-6bf33cfdb039 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:26:ab:12:81:15:ba:e2:da:29:d3:88:88:0f: 88:99:b2:78:3c:ea:67:7f:41:f9:f6:9f:f8:1e:e0: 62:ad:f6:0b:df:c7:9e:65:a2:60:54:75:bb:85:32: b3:51:82:bc:b2:28:2b:44:84:67:67:8b:6d:7b:b1: 0c:89:25:65:9a:be:3c:97:1f:20:c0:42:3a:df:46: 6c:cb:ed:fd:bd:53:e8:1c:7d:81:f2:5d:2a:bb:5d: 88:72:ff:8d:b4:7f:fa:de:37:f0:8f:6f:58:32:39: 25:b8:e9:ce:2a:0c:db:02:57:2f:85:0a:34:ae:22: 48:93:8e:bb:86:b9:85:04:dd:a9:91:e0:96:91:53: 4a:b8:09:3f:03:0c:b7:81:5a:64:1e:ab:7b:60:90: 99:e6:5f:4b:0d:02:fe:34:de:f9:08:90:20:2a:f7: eb:f6:3b:13:8a:14:58:4a:ee:1a:9c:43:a6:02:a9: e8:5b:1d:18:9d:d7:6d:cb:c8:95:fc:01:0f:6c:4a: 22:c8:f6:a8:32:4d:9d:9a:c0:f3:e6:4c:d0:ef:85: cc:c7:c7:73:e3:c7:cf:b1:30:79:90:de:ab:b8:d6: 06:2e:92:87:e0:e3:94:f0:a9:e7:dd:89:e4:3e:17: 68:5f:f8:4e:95:c3:16:39:0e:af:6d:4d:98:07:a4: d8:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:C7:AC:4C:42:EE:90:E6:41:9A:B6:3F:10:F4:E9:54:AF:D1:F6:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fbdf9eae-6447-4d3b-9182-7a04ce6f2db9/06bbda12-d711-3cce-b40d-75c60650aa0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fbdf9eae-6447-4d3b-9182-7a04ce6f2db9/fbdf9eae-6447-4d3b-9182-7a04ce6f2db9.crl X509v3 Authority Key Identifier: keyid:8D:A0:18:DD:26:B1:2A:09:B4:2C:C7:69:CF:06:B1:46:EF:83:CB:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fbdf9eae-6447-4d3b-9182-7a04ce6f2db9.cer sbgp-ipAddrBlock: critical IPv6: 2604:d0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:1c:41:f1:30:f0:1a:e1:a0:29:d7:8c:e0:c9:a6:1f:d5:3f: 84:90:bb:08:bc:60:d4:81:1d:5a:10:c6:99:fe:bb:3b:ff:bb: e3:1a:89:eb:bd:c8:4c:80:08:3c:3d:49:a1:e4:df:ee:7f:57: 6c:a1:98:f3:33:c7:16:8d:46:5f:12:c9:cd:89:77:4e:11:83: 8b:c5:2d:86:bc:57:39:07:47:f9:58:f2:a8:ee:ff:35:21:58: 59:c7:a8:ca:87:53:30:e7:19:86:51:95:57:19:65:64:d2:0b: f4:4d:08:3f:9b:4e:5c:9c:8f:a8:71:49:35:22:bf:f9:a9:85: 30:31:b2:1f:c5:12:23:13:ce:2e:2e:08:c4:b2:c4:90:db:21: 85:af:f6:ff:99:d8:ab:58:b3:fb:88:33:a0:6f:06:60:e8:d8: 54:05:36:a3:41:3a:e6:77:28:27:09:31:57:80:cf:79:01:f0: cf:09:ed:7a:6c:07:b6:e1:1f:52:b2:f7:fe:92:a8:93:f0:fb: 66:80:23:78:b8:8c:2d:bc:ad:9c:f3:29:72:d7:61:14:79:8a: 79:7b:d7:9a:3e:31:54:ef:b6:0e:34:7b:d7:bf:57:36:fa:d5: 1b:fd:62:31:69:11:77:b9:4a:a4:ae:9a:b5:8d:a3:05:d5:fd: 6b:82:d8:83 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmULG+eWuWDTvPg2HAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmJkZjllYWUtNjQ0Ny00ZDNiLTkxODItN2EwNGNlNmYy ZGI5MB4XDTI1MDQxOTE0NDMwMFoXDTI1MDcxODE0NDMwMFowLzEtMCsGA1UEAxMk NTFlMWY0OTEtZTQ1Mi00NzU0LTk2MGMtNmJmMzNjZmRiMDM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiarEoEVuuLaKdOIiA+ImbJ4POpnf0H59p/4 HuBirfYL38eeZaJgVHW7hTKzUYK8sigrRIRnZ4tte7EMiSVlmr48lx8gwEI630Zs y+39vVPoHH2B8l0qu12Icv+NtH/63jfwj29YMjkluOnOKgzbAlcvhQo0riJIk467 hrmFBN2pkeCWkVNKuAk/Awy3gVpkHqt7YJCZ5l9LDQL+NN75CJAgKvfr9jsTihRY Su4anEOmAqnoWx0Ynddty8iV/AEPbEoiyPaoMk2dmsDz5kzQ74XMx8dz48fPsTB5 kN6ruNYGLpKH4OOU8Knn3YnkPhdoX/hOlcMWOQ6vbU2YB6TYAwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFErHrExC7pDmQZq2PxD06VSv0fZ5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mYmRm OWVhZS02NDQ3LTRkM2ItOTE4Mi03YTA0Y2U2ZjJkYjkvMDZiYmRhMTItZDcxMS0z Y2NlLWI0MGQtNzVjNjA2NTBhYTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZmJkZjllYWUtNjQ0Ny00ZDNiLTkx ODItN2EwNGNlNmYyZGI5L2ZiZGY5ZWFlLTY0NDctNGQzYi05MTgyLTdhMDRjZTZm MmRiOS5jcmwwHwYDVR0jBBgwFoAUjaAY3SaxKgm0LMdpzwaxRu+Dy2wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mYmRmOWVhZS02NDQ3LTRkM2ItOTE4Mi03YTA0 Y2U2ZjJkYjkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQA0DBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB+HEHxMPAa4aAp14zgyaYf1T+EkLsIvGDUgR1aEMaZ/rs7/7vjGonr vchMgAg8PUmh5N/uf1dsoZjzM8cWjUZfEsnNiXdOEYOLxS2GvFc5B0f5WPKo7v81 IVhZx6jKh1Mw5xmGUZVXGWVk0gv0TQg/m05cnI+ocUk1Ir/5qYUwMbIfxRIjE84u LgjEssSQ2yGFr/b/mdirWLP7iDOgbwZg6NhUBTajQTrmdygnCTFXgM95AfDPCe16 bAe24R9Ssvf+kqiT8PtmgCN4uIwtvK2c8yly12EUeYp5e9eaPjFU77YONHvXv1c2 +tUb/WIxaRF3uUqkrpq1jaMF1f1rgtiD -----END CERTIFICATE-----Generated at Tue Apr 29 20:30:21 2025 by rpki-client