$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/2255066e-9ff0-38c8-9ca9-da39b830dabd.roa File: 2255066e-9ff0-38c8-9ca9-da39b830dabd.roa (raw, json) Hash identifier: X2Gy1TTvQ6RCUW8VCkkz3lhS1x6Y+0iPG9BVtoYh6tU= Subject key identifier: 0F:60:3E:EC:1A:06:53:E8:39:BB:9A:8F:F7:6A:61:3A:5D:AD:B7:F3 Certificate issuer: /CN=a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1 Certificate serial: 010D0C9F4328584925B3AA1129C3D56726782400 Authority key identifier: 5E:DC:0E:02:DA:6E:E4:15:BF:E2:23:91:E4:DC:A3:27:51:0B:7A:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/2255066e-9ff0-38c8-9ca9-da39b830dabd.roa Signing time: Tue 11 Mar 2025 01:00:40 +0000 ROA not before: Tue 11 Mar 2025 01:00:40 +0000 ROA not after: Mon 09 Jun 2025 01:00:40 +0000 asID: 21766 IP address blocks: 2605:6600::/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:25:b3:aa:11:29:c3:d5:67:26:78:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1 Validity Not Before: Mar 11 01:00:40 2025 GMT Not After : Jun 9 01:00:40 2025 GMT Subject: CN=e8dd53dd-ec6f-462a-8643-677532321f95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:9c:a7:8e:d0:c2:8e:cc:9e:eb:9c:20:13:ae: c7:8d:fa:ab:3c:f4:cf:f5:97:26:c9:8b:e5:f7:91: 55:55:d2:a9:e8:2e:c7:e2:a7:c1:1f:73:7c:34:2c: 59:19:22:9e:56:15:bf:68:03:3b:49:b8:0f:e3:26: 76:b4:72:9d:9c:df:bf:8b:42:cb:c4:df:3f:f0:7e: 25:52:76:a8:86:94:f8:e7:86:4a:35:f9:18:4e:5f: 2b:d0:09:94:d3:fa:f8:86:3c:95:af:27:10:02:61: f8:a8:8d:95:54:cd:17:13:cb:f1:d2:f0:ee:1b:7e: 37:b5:aa:5c:c2:2f:8b:8e:87:14:35:e4:72:09:5e: cf:a5:43:6d:26:f2:fa:36:cd:61:d5:2e:4a:da:cf: 54:13:21:17:f5:72:f1:81:d4:14:f6:d0:26:58:20: 9b:ea:69:8c:3f:ba:7b:02:2b:65:b3:27:2b:42:bb: d4:67:72:a1:21:8c:b5:91:15:57:73:0d:61:ee:0e: 77:44:32:ed:22:d8:f4:46:b0:98:7d:2e:92:f5:fc: f2:be:17:7a:11:4f:82:b0:71:98:84:f1:f1:0b:c3: 2b:81:cb:5c:b1:25:b5:b4:5f:cb:7f:04:89:cb:4b: f2:b3:86:68:56:c9:cb:4f:91:c4:a9:19:c3:e1:34: 98:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:60:3E:EC:1A:06:53:E8:39:BB:9A:8F:F7:6A:61:3A:5D:AD:B7:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/2255066e-9ff0-38c8-9ca9-da39b830dabd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.crl X509v3 Authority Key Identifier: keyid:5E:DC:0E:02:DA:6E:E4:15:BF:E2:23:91:E4:DC:A3:27:51:0B:7A:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer sbgp-ipAddrBlock: critical IPv6: 2605:6600::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:d7:4e:6a:a2:c8:50:9d:ca:8d:8d:cf:a2:7b:3e:bd:91:ad: 24:ee:c5:19:ef:00:9f:86:0f:f9:7a:84:58:a1:f9:58:72:95: ba:d8:44:1d:f6:d0:fb:39:3f:f9:a3:11:9d:41:c8:55:3b:f6: f3:d1:24:4d:71:e0:7c:97:c1:6d:85:d4:e8:98:7c:50:83:24: 67:01:41:58:90:45:fd:8b:3d:cd:4b:d1:78:bf:0b:30:f2:e0: 73:a6:af:07:99:19:92:4b:73:ac:34:51:9d:62:b8:06:a8:be: 30:7f:5f:e2:28:f3:d3:2f:d2:02:a4:b0:ac:7c:59:dd:43:3b: f4:5d:a3:83:70:a7:37:fc:51:0b:9a:fa:37:05:6b:28:1f:1f: 25:39:43:a5:c9:88:15:1a:a6:6e:bc:c8:70:82:e1:3c:46:e6: f5:15:a9:a2:2b:e0:9a:2a:98:50:96:35:5b:5b:d2:72:4b:c1: f1:93:74:9a:41:27:5a:cb:dd:a4:44:da:05:3d:e2:5d:90:f8: eb:41:a1:0f:93:87:de:2c:43:ad:5c:b0:35:49:5a:fc:1a:03: 17:71:3a:02:72:16:a9:62:db:4c:03:ed:9d:c6:01:6d:62:fe: 12:3b:66:f2:11:d6:0c:df:26:11:a4:d0:ec:83:16:29:bf:e2: fc:fc:5a:b8 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkls6oRKcPVZyZ4JAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTdkN2YxNGUtNzJjNC00N2U0LWFkMDYtYTFiNzJmOTRj N2IxMB4XDTI1MDMxMTAxMDA0MFoXDTI1MDYwOTAxMDA0MFowLzEtMCsGA1UEAxMk ZThkZDUzZGQtZWM2Zi00NjJhLTg2NDMtNjc3NTMyMzIxZjk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJynjtDCjsye65wgE67HjfqrPPTP9ZcmyYvl 95FVVdKp6C7H4qfBH3N8NCxZGSKeVhW/aAM7SbgP4yZ2tHKdnN+/i0LLxN8/8H4l UnaohpT454ZKNfkYTl8r0AmU0/r4hjyVrycQAmH4qI2VVM0XE8vx0vDuG343tapc wi+LjocUNeRyCV7PpUNtJvL6Ns1h1S5K2s9UEyEX9XLxgdQU9tAmWCCb6mmMP7p7 AitlsycrQrvUZ3KhIYy1kRVXcw1h7g53RDLtItj0RrCYfS6S9fzyvhd6EU+CsHGY hPHxC8MrgctcsSW1tF/LfwSJy0vys4ZoVsnLT5HEqRnD4TSYRQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFA9gPuwaBlPoObuaj/dqYTpdrbfzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hN2Q3 ZjE0ZS03MmM0LTQ3ZTQtYWQwNi1hMWI3MmY5NGM3YjEvMjI1NTA2NmUtOWZmMC0z OGM4LTljYTktZGEzOWI4MzBkYWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTdkN2YxNGUtNzJjNC00N2U0LWFk MDYtYTFiNzJmOTRjN2IxL2E3ZDdmMTRlLTcyYzQtNDdlNC1hZDA2LWExYjcyZjk0 YzdiMS5jcmwwHwYDVR0jBBgwFoAUXtwOAtpu5BW/4iOR5NyjJ1ELeg0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hN2Q3ZjE0ZS03MmM0LTQ3ZTQtYWQwNi1hMWI3 MmY5NGM3YjEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgVmADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBc105qoshQncqNjc+iez69ka0k7sUZ7wCfhg/5eoRYoflYcpW62EQd 9tD7OT/5oxGdQchVO/bz0SRNceB8l8FthdTomHxQgyRnAUFYkEX9iz3NS9F4vwsw 8uBzpq8HmRmSS3OsNFGdYrgGqL4wf1/iKPPTL9ICpLCsfFndQzv0XaODcKc3/FEL mvo3BWsoHx8lOUOlyYgVGqZuvMhwguE8Rub1FamiK+CaKphQljVbW9JyS8Hxk3Sa QSday92kRNoFPeJdkPjrQaEPk4feLEOtXLA1SVr8GgMXcToCchapYttMA+2dxgFt Yv4SO2byEdYM3yYRpNDsgxYpv+L8/Fq4 -----END CERTIFICATE-----Generated at Mon Apr 28 15:21:26 2025 by rpki-client