$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5bd8a989-3eef-391f-8f8f-4689d322f774.roa File: 5bd8a989-3eef-391f-8f8f-4689d322f774.roa (raw, json) Hash identifier: mImbmNiVX+MIOQ1RvdjMdN5VVH/Bj3HBBHHeyqjXJLQ= Subject key identifier: 7D:55:7B:59:2E:4E:41:15:89:72:99:F6:59:B9:95:21:E0:A9:40:1B Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849B149F5B9F8041402C61CEAA0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5bd8a989-3eef-391f-8f8f-4689d322f774.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 0 IP address blocks: 2606:4700:7000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:49:f5:b9:f8:04:14:02:c6:1c:ea:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=a76447db-c70c-4da3-9841-ff93ce6457dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:31:e4:67:38:ea:56:07:61:b1:28:3f:04:aa: 09:00:3e:f7:f9:84:6b:6d:ab:81:48:f1:9a:8d:67: 29:ba:09:4d:f7:44:9a:cc:d1:80:b6:3a:44:df:a4: 8b:49:66:11:68:b7:79:13:80:40:66:f4:94:09:30: df:cb:96:59:42:11:ee:fe:92:2c:2b:d7:04:e6:43: 3b:c2:dc:56:a2:2c:4d:38:c5:f8:ae:f1:4f:d5:2e: a7:0c:99:44:2d:e8:2c:f4:f0:4c:1a:52:39:5e:80: 98:d1:2d:e8:92:f7:cc:ab:22:ef:8b:4e:f2:0f:2f: 58:e8:d5:3d:d2:14:f3:5d:e3:a2:5a:7e:e2:11:3b: df:4d:e5:c6:83:e5:73:74:2a:60:5d:90:09:47:55: 5a:69:5f:31:e1:00:18:50:54:a7:13:88:f4:c9:50: fe:34:65:8a:f5:d0:98:81:5a:f1:4c:e5:bd:75:74: 0d:44:ac:0e:a2:7c:92:de:db:ae:a5:fa:0c:0b:f3: 20:8a:56:d0:6e:8f:08:6b:0b:cd:89:a7:5c:9f:74: c8:24:55:f3:4e:e6:ea:8b:0e:5f:7c:a5:76:25:82: dc:ef:93:7a:5b:d6:51:f0:83:02:2d:e7:6a:29:46: 97:0f:52:63:27:43:77:ab:58:5c:e3:0e:4a:bf:e1: 72:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:55:7B:59:2E:4E:41:15:89:72:99:F6:59:B9:95:21:E0:A9:40:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5bd8a989-3eef-391f-8f8f-4689d322f774.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv6: 2606:4700:7000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:9b:90:22:dc:e7:5e:e2:de:d6:f2:3f:4b:a7:41:5b:da:b7: 40:ff:bf:63:45:fa:04:6a:6f:3f:a6:05:58:6b:b8:26:d5:f8: 05:46:46:57:b7:64:70:ec:00:ff:17:d9:8d:d5:9a:be:e7:c7: 97:e2:26:a4:b6:36:d6:c0:f1:be:a0:eb:96:de:f7:f6:b0:36: a5:17:c5:f5:63:ee:50:21:88:b8:5c:59:a4:ff:12:2c:9e:72: 07:e2:17:25:b1:19:7f:4e:8f:0a:53:de:c3:17:84:ca:f6:c6: a6:ef:1e:fb:f9:9e:9a:44:ba:4a:e2:d7:b2:b3:01:4e:2b:48: d1:67:0a:9c:95:24:76:a8:ec:ba:8e:52:65:3d:5f:05:c0:f1: 4d:f5:c4:ec:32:5f:7c:18:88:ed:ba:22:5f:2b:f9:1b:8a:7e: 86:f5:ea:38:ed:80:31:d0:13:37:83:df:07:0d:ad:76:b7:af: f6:dc:bc:14:38:76:ed:43:35:48:9f:ba:80:dd:dc:fd:36:3c: 69:fb:21:4b:83:54:47:e8:2d:ce:8d:e1:1f:44:a7:ed:89:af: aa:b4:13:ae:ab:c3:a0:fb:f1:fa:39:47:9c:06:d8:4d:f1:a7: 88:a9:f1:e7:70:80:4e:8a:96:6f:10:ef:23:50:2a:a1:96:f0: e8:24:d9:c4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmxSfW5+AQUAsYc6qAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk YTc2NDQ3ZGItYzcwYy00ZGEzLTk4NDEtZmY5M2NlNjQ1N2RjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzHkZzjqVgdhsSg/BKoJAD73+YRrbauBSPGa jWcpuglN90SazNGAtjpE36SLSWYRaLd5E4BAZvSUCTDfy5ZZQhHu/pIsK9cE5kM7 wtxWoixNOMX4rvFP1S6nDJlELegs9PBMGlI5XoCY0S3okvfMqyLvi07yDy9Y6NU9 0hTzXeOiWn7iETvfTeXGg+VzdCpgXZAJR1VaaV8x4QAYUFSnE4j0yVD+NGWK9dCY gVrxTOW9dXQNRKwOonyS3tuupfoMC/MgilbQbo8IawvNiadcn3TIJFXzTubqiw5f fKV2JYLc75N6W9ZR8IMCLedqKUaXD1JjJ0N3q1hc4w5Kv+Fy+QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFH1Ve1kuTkEViXKZ9lm5lSHgqUAbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNWJkOGE5ODktM2VlZi0z OTFmLThmOGYtNDY4OWQzMjJmNzc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZHAHAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKmbkCLc517i3tbyP0unQVvat0D/v2NF+gRqbz+mBVhruCbV+AVG Rle3ZHDsAP8X2Y3Vmr7nx5fiJqS2NtbA8b6g65be9/awNqUXxfVj7lAhiLhcWaT/ EiyecgfiFyWxGX9OjwpT3sMXhMr2xqbvHvv5nppEukri17KzAU4rSNFnCpyVJHao 7LqOUmU9XwXA8U31xOwyX3wYiO26Il8r+RuKfob16jjtgDHQEzeD3wcNrXa3r/bc vBQ4du1DNUifuoDd3P02PGn7IUuDVEfoLc6N4R9Ep+2Jr6q0E66rw6D78fo5R5wG 2E3xp4ip8edwgE6Klm8Q7yNQKqGW8Ogk2cQ= -----END CERTIFICATE-----Generated at Sun May 11 09:36:02 2025 by rpki-client