$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69e9bd0e-daed-4b94-96a5-e28b698e9d37/952bc161-991d-39ce-9362-1f60a57f0877.roa File: 952bc161-991d-39ce-9362-1f60a57f0877.roa (raw, json) Hash identifier: D9sr5o50DXaUmrX1X3q5l7BZK/tpsezJNpY+pYTXjNI= Subject key identifier: 5C:BF:35:C1:AB:65:96:88:C6:D8:23:6E:F5:6B:E3:E0:51:3D:F3:22 Certificate issuer: /CN=69e9bd0e-daed-4b94-96a5-e28b698e9d37 Certificate serial: 010D0C9F43285849CE9A4DAEB2F8BE5C8C704680 Authority key identifier: 06:EE:74:E1:3C:F4:AB:F9:07:8C:76:D9:29:2B:9A:E4:8D:73:AE:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69e9bd0e-daed-4b94-96a5-e28b698e9d37.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69e9bd0e-daed-4b94-96a5-e28b698e9d37/952bc161-991d-39ce-9362-1f60a57f0877.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 11525 IP address blocks: 2606:5d00::/28 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69e9bd0e-daed-4b94-96a5-e28b698e9d37/69e9bd0e-daed-4b94-96a5-e28b698e9d37.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69e9bd0e-daed-4b94-96a5-e28b698e9d37/69e9bd0e-daed-4b94-96a5-e28b698e9d37.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69e9bd0e-daed-4b94-96a5-e28b698e9d37.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:4d:ae:b2:f8:be:5c:8c:70:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69e9bd0e-daed-4b94-96a5-e28b698e9d37 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=712d5175-115e-404b-a831-00102d15c558 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:72:eb:7d:cd:71:5d:b7:17:39:43:90:f7:54: e4:f6:c6:1b:dc:c6:a8:60:b6:c3:7f:93:19:92:5a: c3:ed:ca:f1:e6:74:03:3f:ca:dc:2e:e0:08:56:f5: 78:8c:7e:53:f8:f9:a9:8e:06:da:f7:dd:52:c1:ab: 44:7c:0b:ee:7f:c8:38:58:6d:e7:8d:7d:08:29:e0: 82:26:33:71:49:f1:8a:e6:dc:36:62:e2:dc:a0:0b: 63:51:0c:d3:c3:50:ad:77:03:fe:e8:52:26:a1:b7: 1b:9a:b3:17:ad:4e:c5:ea:39:39:bf:23:0f:8e:2b: 09:67:ab:fe:f2:25:2d:08:7c:2f:29:04:cd:1d:30: 95:b0:cb:eb:8a:be:83:13:c3:25:f4:35:1a:18:3e: c5:64:4c:dc:97:99:c5:e5:d8:bf:90:13:22:83:51: 31:d5:a8:38:51:fe:96:e7:3f:43:1b:cb:80:9b:d9: 5e:b6:75:94:79:4c:db:9a:27:b3:f1:17:82:67:61: 15:24:88:55:37:7e:7e:86:65:d6:0f:72:30:b4:18: ea:a7:9e:f5:be:3c:cb:3a:cf:d2:4c:25:3a:02:fc: 8c:bb:e6:57:ca:db:19:83:cf:43:63:95:8f:bc:f1: 32:d8:82:c6:d8:cf:af:57:1f:d3:9c:d6:21:c4:cd: ae:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:BF:35:C1:AB:65:96:88:C6:D8:23:6E:F5:6B:E3:E0:51:3D:F3:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69e9bd0e-daed-4b94-96a5-e28b698e9d37/952bc161-991d-39ce-9362-1f60a57f0877.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69e9bd0e-daed-4b94-96a5-e28b698e9d37/69e9bd0e-daed-4b94-96a5-e28b698e9d37.crl X509v3 Authority Key Identifier: keyid:06:EE:74:E1:3C:F4:AB:F9:07:8C:76:D9:29:2B:9A:E4:8D:73:AE:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69e9bd0e-daed-4b94-96a5-e28b698e9d37.cer sbgp-ipAddrBlock: critical IPv6: 2606:5d00::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:c4:46:7e:49:28:f8:93:16:c3:83:14:22:6e:7b:0a:59:a0: 7d:9e:4b:69:32:96:49:42:21:66:a5:04:b7:d2:dc:fc:bf:a6: 5d:50:ce:89:0b:53:d4:a1:56:89:64:70:5e:ff:06:bf:8a:33: a3:66:28:eb:f9:97:b7:21:24:74:75:c2:0b:90:30:26:fb:5c: 9d:83:7e:bf:f2:b4:9e:0d:55:67:db:1c:2f:5b:bb:da:55:79: f4:06:95:c3:35:b0:69:62:ed:90:c1:6a:30:13:2c:53:f4:8e: b2:b1:2a:0b:20:a3:9a:d5:36:3d:dd:65:95:4f:5a:49:a9:f2: 2a:d5:b3:f9:83:bf:37:a3:64:e3:25:23:d6:50:00:c8:fa:24: ef:41:ce:3f:1b:00:7c:9f:74:43:d4:52:ec:62:e2:a2:51:82: da:74:ca:76:da:46:ad:24:7a:49:0a:41:49:a0:f2:3f:7a:42: 9c:c4:79:d1:cd:fe:ec:0d:72:ae:a0:a2:1d:fc:0b:74:dd:e6: 1c:60:40:94:14:3b:9d:2a:36:a2:89:39:27:02:2c:4a:01:e9: 47:c4:35:e0:07:6d:65:08:2a:73:79:1f:fb:ef:a9:c3:98:af: 8a:3a:00:fb:9f:66:9b:5e:6f:d3:63:14:b6:3f:08:e7:d7:d1: 51:cd:5e:a4 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEnOmk2usvi+XIxwRoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjllOWJkMGUtZGFlZC00Yjk0LTk2YTUtZTI4YjY5OGU5 ZDM3MB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk NzEyZDUxNzUtMTE1ZS00MDRiLWE4MzEtMDAxMDJkMTVjNTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHLrfc1xXbcXOUOQ91Tk9sYb3MaoYLbDf5MZ klrD7crx5nQDP8rcLuAIVvV4jH5T+Pmpjgba991SwatEfAvuf8g4WG3njX0IKeCC JjNxSfGK5tw2YuLcoAtjUQzTw1CtdwP+6FImobcbmrMXrU7F6jk5vyMPjisJZ6v+ 8iUtCHwvKQTNHTCVsMvrir6DE8Ml9DUaGD7FZEzcl5nF5di/kBMig1Ex1ag4Uf6W 5z9DG8uAm9letnWUeUzbmiez8ReCZ2EVJIhVN35+hmXWD3IwtBjqp571vjzLOs/S TCU6AvyMu+ZXytsZg89DY5WPvPEy2ILG2M+vVx/TnNYhxM2uGwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFy/NcGrZZaIxtgjbvVr4+BRPfMiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82OWU5 YmQwZS1kYWVkLTRiOTQtOTZhNS1lMjhiNjk4ZTlkMzcvOTUyYmMxNjEtOTkxZC0z OWNlLTkzNjItMWY2MGE1N2YwODc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjllOWJkMGUtZGFlZC00Yjk0LTk2 YTUtZTI4YjY5OGU5ZDM3LzY5ZTliZDBlLWRhZWQtNGI5NC05NmE1LWUyOGI2OThl OWQzNy5jcmwwHwYDVR0jBBgwFoAUBu504Tz0q/kHjHbZKSua5I1zrr4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82OWU5YmQwZS1kYWVkLTRiOTQtOTZhNS1lMjhi Njk4ZTlkMzcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgZdADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA0xEZ+SSj4kxbDgxQibnsKWaB9nktpMpZJQiFmpQS30tz8v6ZdUM6J C1PUoVaJZHBe/wa/ijOjZijr+Ze3ISR0dcILkDAm+1ydg36/8rSeDVVn2xwvW7va VXn0BpXDNbBpYu2QwWowEyxT9I6ysSoLIKOa1TY93WWVT1pJqfIq1bP5g783o2Tj JSPWUADI+iTvQc4/GwB8n3RD1FLsYuKiUYLadMp22katJHpJCkFJoPI/ekKcxHnR zf7sDXKuoKId/At03eYcYECUFDudKjaiiTknAixKAelHxDXgB21lCCpzeR/776nD mK+KOgD7n2abXm/TYxS2Pwjn19FRzV6k -----END CERTIFICATE-----Generated at Sun May 11 21:41:24 2025 by rpki-client