$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/5d8f3fe1-e905-3bc4-a6f1-e1ffa46eeb09.roa File: 5d8f3fe1-e905-3bc4-a6f1-e1ffa46eeb09.roa (raw, json) Hash identifier: wTcUAJl/mZNRk7AMJ41WFqK7WZlnCrE1/p1TOqantFo= Subject key identifier: 75:6E:F7:E1:93:A8:B7:A0:92:82:39:22:49:D1:8A:8F:D9:10:E1:00 Certificate issuer: /CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a Certificate serial: 010D0C9F432858492183FCB40A94EA729C566080 Authority key identifier: 1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/5d8f3fe1-e905-3bc4-a6f1-e1ffa46eeb09.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 55081 IP address blocks: 2607:6b80:65::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:83:fc:b4:0a:94:ea:72:9c:56:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=7c48a4bc-7bce-4ae4-9d5f-9fa7b1eb98fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ef:4c:30:6b:9e:a5:5b:be:b2:d0:2e:46:36: 14:30:7b:3c:b9:3d:fc:a0:b3:76:b3:21:7d:85:dc: b9:d6:a3:57:6f:95:0b:59:10:d6:24:18:97:15:50: cc:7f:d9:1c:4d:02:24:15:63:80:fb:a8:8b:95:0f: 8e:18:d6:6e:18:4e:da:85:a3:5d:35:c2:60:f5:e7: 23:b8:c3:7e:89:4a:bc:af:d7:9d:bd:c6:e9:51:72: d7:94:fd:b2:2b:c6:83:04:6e:0c:9d:d8:2f:d3:1e: 49:93:b2:72:01:40:c9:eb:0b:6b:71:a6:2b:7d:f8: e2:91:7b:11:81:50:47:c8:fb:62:47:2d:a9:71:d6: d6:f3:b1:f0:86:db:9a:5b:18:f5:6c:55:d2:34:81: a5:24:7b:e6:81:23:8b:9f:0e:79:5e:43:84:b8:71: 4a:43:8a:46:bb:71:aa:c6:00:56:8d:d7:10:6f:a0: b3:15:ad:44:a3:da:dd:52:44:1d:ec:8f:35:b9:2f: 85:23:ff:b0:29:88:11:0e:5b:bc:ac:d3:ab:8e:70: d8:87:de:b6:20:e4:75:d0:cb:65:5f:4a:7a:27:22: 50:83:79:3a:28:dd:4d:bd:2a:ca:61:ff:5c:d4:59: e0:8f:c8:f7:2f:a0:65:e1:38:7c:c1:77:ad:c3:3c: 7a:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:6E:F7:E1:93:A8:B7:A0:92:82:39:22:49:D1:8A:8F:D9:10:E1:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/5d8f3fe1-e905-3bc4-a6f1-e1ffa46eeb09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl X509v3 Authority Key Identifier: keyid:1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer sbgp-ipAddrBlock: critical IPv6: 2607:6b80:65::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:de:38:86:a4:3c:bc:97:bc:8b:a2:80:5f:cd:0e:bd:66:c8: e2:b1:6e:d3:e8:24:c9:0e:ac:0a:0f:5f:2a:25:71:e1:7c:0c: b0:f0:54:53:54:53:7a:de:c0:de:81:a5:d7:c7:e6:fb:2c:7a: e8:c0:d0:fd:25:91:7d:c6:d6:fb:a7:ef:5e:4b:36:fd:8a:5a: 13:2f:3c:65:45:ae:e7:33:14:ef:02:0c:de:63:87:88:ed:1f: 21:63:56:b1:6a:f9:1d:53:4e:61:bc:ca:5e:6d:1f:ca:9c:e8: b1:d7:b9:33:9b:6b:b7:c0:4e:8e:68:9c:70:b4:36:be:1f:9b: af:63:fd:60:8a:35:b3:cc:cf:6e:d3:23:ba:ce:84:61:61:4e: 0f:ed:72:0c:39:fe:fa:e6:75:dc:ff:f9:e3:ec:c2:46:7c:56: 66:88:11:22:ea:e4:e1:1a:2e:b2:66:02:ab:16:8c:13:4e:92: 4d:69:54:9d:bc:4d:8b:0c:d2:5d:a2:60:ab:8a:7e:16:a2:da: da:f1:af:08:71:55:d4:4d:46:1a:f5:59:ba:36:3f:70:89:66: 13:05:4f:4e:cb:ae:50:48:cc:8c:26:eb:a6:2e:50:98:79:1e: b2:26:90:87:7d:c4:97:dd:93:ab:a7:e7:98:d5:11:58:fa:2f: 3f:93:6b:f3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkhg/y0CpTqcpxWYIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjVkYWUyYTAtMGNiNy00NmU4LWFlMTctYWJlYjA2MDA3 ZTFhMB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk N2M0OGE0YmMtN2JjZS00YWU0LTlkNWYtOWZhN2IxZWI5OGZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAje9MMGuepVu+stAuRjYUMHs8uT38oLN2syF9 hdy51qNXb5ULWRDWJBiXFVDMf9kcTQIkFWOA+6iLlQ+OGNZuGE7ahaNdNcJg9ecj uMN+iUq8r9edvcbpUXLXlP2yK8aDBG4Mndgv0x5Jk7JyAUDJ6wtrcaYrffjikXsR gVBHyPtiRy2pcdbW87HwhtuaWxj1bFXSNIGlJHvmgSOLnw55XkOEuHFKQ4pGu3Gq xgBWjdcQb6CzFa1Eo9rdUkQd7I81uS+FI/+wKYgRDlu8rNOrjnDYh962IOR10Mtl X0p6JyJQg3k6KN1NvSrKYf9c1Fngj8j3L6Bl4Th8wXetwzx6IQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHVu9+GTqLegkoI5IknRio/ZEOEAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82NWRh ZTJhMC0wY2I3LTQ2ZTgtYWUxNy1hYmViMDYwMDdlMWEvNWQ4ZjNmZTEtZTkwNS0z YmM0LWE2ZjEtZTFmZmE0NmVlYjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjVkYWUyYTAtMGNiNy00NmU4LWFl MTctYWJlYjA2MDA3ZTFhLzY1ZGFlMmEwLTBjYjctNDZlOC1hZTE3LWFiZWIwNjAw N2UxYS5jcmwwHwYDVR0jBBgwFoAUGkmdi3ejOt8fzU66Ucwao/qj9iUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82NWRhZTJhMC0wY2I3LTQ2ZTgtYWUxNy1hYmVi MDYwMDdlMWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgdrgABl MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEneOIakPLyXvIuigF/NDr1myOKxbtPoJMkOrAoPXyolceF8DLDw VFNUU3rewN6BpdfH5vsseujA0P0lkX3G1vun715LNv2KWhMvPGVFruczFO8CDN5j h4jtHyFjVrFq+R1TTmG8yl5tH8qc6LHXuTOba7fATo5onHC0Nr4fm69j/WCKNbPM z27TI7rOhGFhTg/tcgw5/vrmddz/+ePswkZ8VmaIESLq5OEaLrJmAqsWjBNOkk1p VJ28TYsM0l2iYKuKfhai2trxrwhxVdRNRhr1Wbo2P3CJZhMFT07LrlBIzIwm66Yu UJh5HrImkId9xJfdk6un55jVEVj6Lz+Ta/M= -----END CERTIFICATE-----Generated at Mon Apr 28 19:02:11 2025 by rpki-client