$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8eefcb71-042e-3011-9c4c-a4c1dae3119d.roa File: 8eefcb71-042e-3011-9c4c-a4c1dae3119d.roa (raw, json) Hash identifier: xkohLur+Vhex5TZbmiDZ8m87kSa6x4typMFQgzNo61I= Subject key identifier: 78:47:61:3B:23:E4:AF:30:F9:6B:8F:75:D0:98:E1:76:77:88:B9:9A Certificate issuer: /CN=8a8a1a2d-c949-4896-93b9-71f917048e79 Certificate serial: 010D0C9F4328584917DC2B31AC5EF93F7EA0FF00 Authority key identifier: CA:65:E2:79:44:A5:9C:CA:6F:1B:C6:65:BC:37:0B:8D:6F:B8:CF:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8eefcb71-042e-3011-9c4c-a4c1dae3119d.roa Signing time: Thu 06 Mar 2025 02:00:39 +0000 ROA not before: Thu 06 Mar 2025 02:00:39 +0000 ROA not after: Wed 04 Jun 2025 01:00:39 +0000 asID: 399804 IP address blocks: 2606:65c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8a8a1a2d-c949-4896-93b9-71f917048e79.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8a8a1a2d-c949-4896-93b9-71f917048e79.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:17:dc:2b:31:ac:5e:f9:3f:7e:a0:ff:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a8a1a2d-c949-4896-93b9-71f917048e79 Validity Not Before: Mar 6 02:00:39 2025 GMT Not After : Jun 4 01:00:39 2025 GMT Subject: CN=0ba73698-4b8a-4070-8738-2f456fe93a03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:9b:2c:ff:f1:c3:c4:9d:02:c1:20:36:3d:47: 66:38:4a:b4:e4:83:86:45:f2:f9:79:16:f4:c5:fe: a7:89:1a:8e:39:b2:5f:70:9d:8b:e4:17:2f:6a:0b: 8c:b7:24:a8:f6:13:0e:b5:4c:ce:0a:26:75:04:89: e9:53:eb:e7:9c:6f:cd:c7:92:fc:3e:3d:15:7f:99: 11:6b:12:cf:38:7f:f9:0c:2b:8e:00:22:17:fc:c0: 24:0b:35:21:9f:c1:62:b2:a4:b0:50:c3:9d:f4:9e: 07:4f:13:43:b3:c0:b2:26:1f:31:d2:d9:a3:1c:d8: 03:03:ef:cd:c8:e6:57:e2:fc:6a:77:a8:6d:a4:c6: e6:59:70:b8:a2:6e:5e:1a:4b:ce:85:de:16:75:72: 60:cd:c7:3d:e5:a6:0b:1f:29:af:e9:38:98:1f:4c: 84:aa:05:41:07:5d:50:37:6b:66:e7:bf:d9:a0:2d: b6:d2:14:7d:84:d1:27:00:55:79:66:a7:3c:4a:11: bf:b6:ca:fe:14:07:af:e0:86:b2:37:87:29:24:5c: 99:e8:56:d9:78:ba:88:3d:bc:61:35:f8:c4:ac:69: 94:21:50:5c:16:54:ea:f3:9d:87:1d:cd:ea:bb:30: f7:ef:67:06:04:54:06:f0:b2:24:22:78:18:4c:11: 57:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:47:61:3B:23:E4:AF:30:F9:6B:8F:75:D0:98:E1:76:77:88:B9:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8eefcb71-042e-3011-9c4c-a4c1dae3119d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8a8a1a2d-c949-4896-93b9-71f917048e79.crl X509v3 Authority Key Identifier: keyid:CA:65:E2:79:44:A5:9C:CA:6F:1B:C6:65:BC:37:0B:8D:6F:B8:CF:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79.cer sbgp-ipAddrBlock: critical IPv6: 2606:65c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:f3:85:12:dd:3d:aa:69:6f:e6:71:cd:2a:49:50:53:bf:83: c3:fc:0a:36:a8:da:c2:9b:7a:f3:4e:fc:dc:80:d1:df:85:e8: ad:0f:50:48:cc:a7:00:d6:7c:1b:2a:69:45:6e:4f:29:3c:9e: 0a:aa:0b:68:4b:fc:df:4b:2b:ac:a0:19:9c:b2:3c:5d:fb:92: 0b:6f:3e:a8:3f:f2:e8:a1:83:94:af:d1:97:c6:c3:1a:23:6c: 35:ab:e6:51:f5:f3:d1:b7:d9:ca:68:ae:3f:19:98:77:74:ce: 72:ea:92:c5:b2:7f:eb:30:7a:bc:88:bd:86:66:52:18:61:64: 3f:c1:f8:96:08:1c:a0:0b:d5:31:4d:eb:ee:60:22:04:cc:84: 03:b0:d1:67:bd:a0:86:9b:55:06:d6:79:6e:ce:66:45:3b:b9: 61:63:63:9c:4e:a9:5f:89:59:b1:5d:23:dd:eb:ce:d6:df:92: 86:b3:9e:dc:b4:a3:59:73:34:17:e1:97:38:c3:df:be:70:b8: 73:f4:5b:6b:0b:9a:24:b9:12:8d:96:67:21:f7:18:1c:50:2d: 1f:d9:d2:25:23:2f:58:95:9f:05:99:23:f6:d5:0e:91:22:d1: 23:fe:8d:27:38:4e:32:91:36:3d:cc:65:c4:54:f9:7d:f0:95: 0e:04:c9:4b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkX3CsxrF75P36g/wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE4YTFhMmQtYzk0OS00ODk2LTkzYjktNzFmOTE3MDQ4 ZTc5MB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk MGJhNzM2OTgtNGI4YS00MDcwLTg3MzgtMmY0NTZmZTkzYTAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJss//HDxJ0CwSA2PUdmOEq05IOGRfL5eRb0 xf6niRqOObJfcJ2L5BcvaguMtySo9hMOtUzOCiZ1BInpU+vnnG/Nx5L8Pj0Vf5kR axLPOH/5DCuOACIX/MAkCzUhn8FisqSwUMOd9J4HTxNDs8CyJh8x0tmjHNgDA+/N yOZX4vxqd6htpMbmWXC4om5eGkvOhd4WdXJgzcc95aYLHymv6TiYH0yEqgVBB11Q N2tm57/ZoC220hR9hNEnAFV5Zqc8ShG/tsr+FAev4IayN4cpJFyZ6FbZeLqIPbxh NfjErGmUIVBcFlTq852HHc3quzD372cGBFQG8LIkIngYTBFX/QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHhHYTsj5K8w+WuPddCY4XZ3iLmaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84YThh MWEyZC1jOTQ5LTQ4OTYtOTNiOS03MWY5MTcwNDhlNzkvOGVlZmNiNzEtMDQyZS0z MDExLTljNGMtYTRjMWRhZTMxMTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGE4YTFhMmQtYzk0OS00ODk2LTkz YjktNzFmOTE3MDQ4ZTc5LzhhOGExYTJkLWM5NDktNDg5Ni05M2I5LTcxZjkxNzA0 OGU3OS5jcmwwHwYDVR0jBBgwFoAUymXieUSlnMpvG8ZlvDcLjW+4z+swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84YThhMWEyZC1jOTQ5LTQ4OTYtOTNiOS03MWY5 MTcwNDhlNzkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgZlwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBZ84US3T2qaW/mcc0qSVBTv4PD/Ao2qNrCm3rzTvzcgNHfheitD1BI zKcA1nwbKmlFbk8pPJ4KqgtoS/zfSyusoBmcsjxd+5ILbz6oP/LooYOUr9GXxsMa I2w1q+ZR9fPRt9nKaK4/GZh3dM5y6pLFsn/rMHq8iL2GZlIYYWQ/wfiWCBygC9Ux TevuYCIEzIQDsNFnvaCGm1UG1nluzmZFO7lhY2OcTqlfiVmxXSPd687W35KGs57c tKNZczQX4Zc4w9++cLhz9FtrC5okuRKNlmch9xgcUC0f2dIlIy9YlZ8FmSP21Q6R ItEj/o0nOE4ykTY9zGXEVPl98JUOBMlL -----END CERTIFICATE-----Generated at Mon Apr 28 15:02:12 2025 by rpki-client