$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5553566f-cbda-48fe-ba4a-9ce4cb36a6c5/68be3c50-4093-3e0b-aa1b-e8f06f849002.roa File: 68be3c50-4093-3e0b-aa1b-e8f06f849002.roa (raw, json) Hash identifier: K4Ob8cmr+ekMOJ+LD4XslmoWghNuyPvwS4j6uJiNSzc= Subject key identifier: 61:D1:7E:F5:A4:68:8E:A1:22:89:6D:8F:92:49:37:B9:AB:06:6B:2A Certificate issuer: /CN=5553566f-cbda-48fe-ba4a-9ce4cb36a6c5 Certificate serial: 010D0C9F4328584900216513AD2BCDF6E1D53400 Authority key identifier: 72:9E:02:D1:42:AA:4B:6A:97:7E:8C:D8:BB:26:FE:0F:5F:41:94:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5553566f-cbda-48fe-ba4a-9ce4cb36a6c5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5553566f-cbda-48fe-ba4a-9ce4cb36a6c5/68be3c50-4093-3e0b-aa1b-e8f06f849002.roa Signing time: Tue 25 Feb 2025 14:00:52 +0000 ROA not before: Tue 25 Feb 2025 14:00:52 +0000 ROA not after: Mon 26 May 2025 13:00:52 +0000 asID: 6649 IP address blocks: 2606:5240:bacb::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5553566f-cbda-48fe-ba4a-9ce4cb36a6c5/5553566f-cbda-48fe-ba4a-9ce4cb36a6c5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5553566f-cbda-48fe-ba4a-9ce4cb36a6c5/5553566f-cbda-48fe-ba4a-9ce4cb36a6c5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5553566f-cbda-48fe-ba4a-9ce4cb36a6c5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:00:21:65:13:ad:2b:cd:f6:e1:d5:34:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5553566f-cbda-48fe-ba4a-9ce4cb36a6c5 Validity Not Before: Feb 25 14:00:52 2025 GMT Not After : May 26 13:00:52 2025 GMT Subject: CN=a18a1428-e1ae-4fe8-a706-2706d74350c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:89:f7:70:e2:6c:ff:bc:47:22:32:25:1c:65: 0d:37:85:4c:2c:e1:87:e6:4b:a9:41:d1:8a:01:76: dd:d1:1d:9c:1b:a2:65:aa:af:8e:a4:1e:f0:9a:11: d6:af:2e:f0:17:92:e9:26:51:88:94:df:d7:05:9f: 81:e2:a0:ce:aa:44:99:d0:7e:9f:53:32:2a:7e:86: 70:b5:cf:ed:48:87:a4:56:a7:a6:53:ce:15:ef:34: ad:40:4f:f8:1c:3f:ed:6a:71:3c:12:a9:da:7d:4b: 09:51:02:6d:d9:18:6a:07:6b:35:ad:dc:de:84:b7: 91:ed:fb:2b:03:72:0b:49:3e:33:f8:60:77:7c:78: 9b:68:5b:62:b8:3d:3a:2f:22:89:77:52:0f:d7:68: 1c:bd:cb:ba:7e:96:4e:c7:cc:6f:14:4c:04:7c:5a: e6:70:9d:d6:8c:47:8c:f1:9e:17:09:f0:7f:3e:c2: 31:3a:73:9b:88:6b:dd:86:66:45:55:22:23:1d:27: 5a:7e:03:63:a7:e6:09:f1:24:a2:68:22:76:c4:7c: 49:0f:3b:0c:74:54:cc:07:b1:1e:89:10:32:85:15: 0b:fb:15:b2:6e:50:00:8d:7c:4a:e6:54:3f:1c:aa: 8f:07:e0:15:49:94:14:29:af:9d:a7:81:03:45:e5: ae:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:D1:7E:F5:A4:68:8E:A1:22:89:6D:8F:92:49:37:B9:AB:06:6B:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5553566f-cbda-48fe-ba4a-9ce4cb36a6c5/68be3c50-4093-3e0b-aa1b-e8f06f849002.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5553566f-cbda-48fe-ba4a-9ce4cb36a6c5/5553566f-cbda-48fe-ba4a-9ce4cb36a6c5.crl X509v3 Authority Key Identifier: keyid:72:9E:02:D1:42:AA:4B:6A:97:7E:8C:D8:BB:26:FE:0F:5F:41:94:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5553566f-cbda-48fe-ba4a-9ce4cb36a6c5.cer sbgp-ipAddrBlock: critical IPv6: 2606:5240:bacb::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:d6:bc:5f:f5:f6:a2:bc:12:20:64:6e:57:0f:3a:9e:21:c7: 1d:d6:76:b2:4e:36:57:27:96:7a:a8:08:d5:22:e1:dd:45:20: 13:3c:df:26:31:1b:f1:3a:a7:6c:1e:27:44:80:73:db:92:43: d5:a2:00:20:bb:c3:88:65:fb:48:33:e8:25:d3:87:7e:ca:0b: e2:45:37:6f:80:17:fc:e0:a9:27:91:f7:e7:6a:96:52:19:4c: a8:be:ac:40:36:47:09:50:1a:8a:4b:4b:fc:d1:6e:11:3e:83: 5d:91:8f:fb:c4:bb:ea:7f:ff:04:c5:b3:75:37:ff:b4:67:54: 18:07:97:0c:a9:2e:5a:5e:e6:44:6a:05:0c:f5:6a:65:48:7d: f0:77:8a:f1:a0:17:d0:16:cc:11:fb:10:40:a2:40:03:d4:b8: ba:d6:fe:2e:aa:48:da:cc:58:06:33:b9:ba:3a:92:3a:4a:ce: 13:a2:db:46:48:47:6c:52:a1:e9:3f:4d:03:e7:34:de:86:0a: 91:4f:6f:e8:77:ab:8e:13:db:49:c0:2b:17:8a:b8:66:81:75: 5a:c9:f5:1a:6b:7c:ac:6f:d8:84:25:10:ed:46:c6:81:91:8f: a3:33:bc:7b:29:f7:4e:8d:04:34:91:82:ff:29:54:19:05:cb: 45:25:8d:fd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkAIWUTrSvN9uHVNAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTU1MzU2NmYtY2JkYS00OGZlLWJhNGEtOWNlNGNiMzZh NmM1MB4XDTI1MDIyNTE0MDA1MloXDTI1MDUyNjEzMDA1MlowLzEtMCsGA1UEAxMk YTE4YTE0MjgtZTFhZS00ZmU4LWE3MDYtMjcwNmQ3NDM1MGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04n3cOJs/7xHIjIlHGUNN4VMLOGH5kupQdGK AXbd0R2cG6Jlqq+OpB7wmhHWry7wF5LpJlGIlN/XBZ+B4qDOqkSZ0H6fUzIqfoZw tc/tSIekVqemU84V7zStQE/4HD/tanE8EqnafUsJUQJt2RhqB2s1rdzehLeR7fsr A3ILST4z+GB3fHibaFtiuD06LyKJd1IP12gcvcu6fpZOx8xvFEwEfFrmcJ3WjEeM 8Z4XCfB/PsIxOnObiGvdhmZFVSIjHSdafgNjp+YJ8SSiaCJ2xHxJDzsMdFTMB7Ee iRAyhRUL+xWyblAAjXxK5lQ/HKqPB+AVSZQUKa+dp4EDReWukwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGHRfvWkaI6hIoltj5JJN7mrBmsqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81NTUz NTY2Zi1jYmRhLTQ4ZmUtYmE0YS05Y2U0Y2IzNmE2YzUvNjhiZTNjNTAtNDA5My0z ZTBiLWFhMWItZThmMDZmODQ5MDAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTU1MzU2NmYtY2JkYS00OGZlLWJh NGEtOWNlNGNiMzZhNmM1LzU1NTM1NjZmLWNiZGEtNDhmZS1iYTRhLTljZTRjYjM2 YTZjNS5jcmwwHwYDVR0jBBgwFoAUcp4C0UKqS2qXfozYuyb+D19BlCEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81NTUzNTY2Zi1jYmRhLTQ4ZmUtYmE0YS05Y2U0 Y2IzNmE2YzUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZSQLrL MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADXWvF/19qK8EiBkblcPOp4hxx3WdrJONlcnlnqoCNUi4d1FIBM8 3yYxG/E6p2weJ0SAc9uSQ9WiACC7w4hl+0gz6CXTh37KC+JFN2+AF/zgqSeR9+dq llIZTKi+rEA2RwlQGopLS/zRbhE+g12Rj/vEu+p//wTFs3U3/7RnVBgHlwypLlpe 5kRqBQz1amVIffB3ivGgF9AWzBH7EECiQAPUuLrW/i6qSNrMWAYzubo6kjpKzhOi 20ZIR2xSoek/TQPnNN6GCpFPb+h3q44T20nAKxeKuGaBdVrJ9RprfKxv2IQlEO1G xoGRj6MzvHsp906NBDSRgv8pVBkFy0Uljf0= -----END CERTIFICATE-----Generated at Wed Apr 30 03:46:45 2025 by rpki-client