$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/f258fef8-0d1c-37f1-a943-db2e6b236d6d.roa File: f258fef8-0d1c-37f1-a943-db2e6b236d6d.roa (raw, json) Hash identifier: KNVMZJVM9WBszXjWBt/JkJjfC2HhGZ0DP73BfAsjN/k= Subject key identifier: 33:A8:6C:E1:50:DA:A5:82:3A:F1:1F:D5:51:8E:92:9F:54:06:B5:B6 Certificate issuer: /CN=1a8794d9-eb16-4b3c-b869-96971b72a93b Certificate serial: 010D0C9F432858492CB20DDBD254207EF664AC00 Authority key identifier: 58:64:AB:A8:B6:C6:F4:68:6F:87:CE:88:5F:F1:87:CC:7B:DF:DB:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/f258fef8-0d1c-37f1-a943-db2e6b236d6d.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 32140 IP address blocks: 2602:806:f000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/1a8794d9-eb16-4b3c-b869-96971b72a93b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/1a8794d9-eb16-4b3c-b869-96971b72a93b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b2:0d:db:d2:54:20:7e:f6:64:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a8794d9-eb16-4b3c-b869-96971b72a93b Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=830a16a7-6dd7-42dd-9c3e-b624707f5cb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c4:1e:24:4b:e9:34:21:6e:cd:5b:6c:46:01: 5a:8d:9c:b7:35:3c:83:78:ce:14:7b:91:74:d1:52: 8b:67:17:fa:99:cc:f5:09:d2:6f:ac:06:aa:f2:d1: e1:9e:98:d1:0d:3e:c4:ab:01:86:18:55:c5:29:04: 76:01:10:89:f5:8d:b5:6b:0e:51:35:70:02:f2:c4: aa:9c:ee:7c:5e:8e:97:3f:cf:16:21:e4:58:5b:b4: d0:63:7a:ae:0a:de:ab:ae:bc:f3:4d:50:a9:11:c6: cb:a0:4f:d0:b9:21:c1:01:cf:47:86:84:b1:ba:c3: 09:71:49:9f:50:27:a7:0a:50:be:52:25:9f:57:a8: ba:84:c6:14:d0:c0:d7:92:d4:b3:c4:ea:21:de:43: 14:02:86:9c:54:00:15:e3:c4:a7:9b:51:45:53:55: c8:2b:ae:3a:98:63:b3:fc:4e:6c:12:6b:10:24:48: ab:50:3c:f6:74:85:95:df:99:c2:0d:3b:ba:8c:aa: 3e:1e:f7:fc:1b:c9:b3:81:65:a2:66:46:ef:ca:36: b4:0d:e5:1b:93:2a:29:8b:c2:ef:ea:e6:ca:fc:97: b7:4c:f4:ec:fb:1f:26:61:4b:c1:25:d0:46:c3:13: 01:e2:ea:1e:8a:de:07:a0:39:e6:49:57:03:c8:a3: 9e:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:A8:6C:E1:50:DA:A5:82:3A:F1:1F:D5:51:8E:92:9F:54:06:B5:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/f258fef8-0d1c-37f1-a943-db2e6b236d6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/1a8794d9-eb16-4b3c-b869-96971b72a93b.crl X509v3 Authority Key Identifier: keyid:58:64:AB:A8:B6:C6:F4:68:6F:87:CE:88:5F:F1:87:CC:7B:DF:DB:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b.cer sbgp-ipAddrBlock: critical IPv6: 2602:806:f000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:ed:f3:02:51:d6:83:21:94:38:9d:69:84:3c:55:32:98:69: cb:4a:2d:db:e3:ed:3a:8c:43:1b:80:f7:6a:d9:54:5c:40:26: 71:67:f5:ee:bf:a2:0a:8b:06:2d:20:0c:0d:c3:48:0e:5d:29: 95:4a:bd:02:f3:99:08:b8:5b:05:45:4f:25:7b:16:9d:26:51: 1b:10:13:a6:58:83:ba:03:16:0a:27:7c:55:80:1a:eb:d2:ac: 75:eb:43:c2:cf:28:87:93:bf:6f:0e:1f:93:47:39:63:5d:1f: 8a:ab:8d:5f:35:8b:f7:89:ac:0b:17:09:5e:58:27:b8:62:1b: 81:c9:d2:1d:ca:cc:a5:58:0b:33:36:fa:d7:7c:63:59:bb:92: dd:13:75:c0:25:48:8c:96:b7:ba:4e:eb:20:f2:34:40:7f:c1: 0a:96:42:bb:bf:72:f4:87:6f:4f:c0:42:6b:98:bf:f1:4e:d5: 9d:e5:98:45:36:85:8d:e1:cc:f1:8d:5f:cb:bf:22:29:dc:27: f7:df:cb:cf:10:ca:2b:9a:48:db:7e:3c:9a:0e:e0:0e:89:b2: 6a:16:ae:db:ea:ff:74:47:66:a4:f2:57:dc:80:6a:97:5b:cf: 61:06:f5:70:c7:54:47:86:2d:20:e8:6d:f6:8a:d2:49:ce:66: d9:ff:81:88 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkssg3b0lQgfvZkrAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWE4Nzk0ZDktZWIxNi00YjNjLWI4NjktOTY5NzFiNzJh OTNiMB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk ODMwYTE2YTctNmRkNy00MmRkLTljM2UtYjYyNDcwN2Y1Y2IxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMQeJEvpNCFuzVtsRgFajZy3NTyDeM4Ue5F0 0VKLZxf6mcz1CdJvrAaq8tHhnpjRDT7EqwGGGFXFKQR2ARCJ9Y21aw5RNXAC8sSq nO58Xo6XP88WIeRYW7TQY3quCt6rrrzzTVCpEcbLoE/QuSHBAc9HhoSxusMJcUmf UCenClC+UiWfV6i6hMYU0MDXktSzxOoh3kMUAoacVAAV48Snm1FFU1XIK646mGOz /E5sEmsQJEirUDz2dIWV35nCDTu6jKo+Hvf8G8mzgWWiZkbvyja0DeUbkyopi8Lv 6ubK/Je3TPTs+x8mYUvBJdBGwxMB4uoeit4HoDnmSVcDyKOesQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDOobOFQ2qWCOvEf1VGOkp9UBrW2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xYTg3 OTRkOS1lYjE2LTRiM2MtYjg2OS05Njk3MWI3MmE5M2IvZjI1OGZlZjgtMGQxYy0z N2YxLWE5NDMtZGIyZTZiMjM2ZDZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWE4Nzk0ZDktZWIxNi00YjNjLWI4 NjktOTY5NzFiNzJhOTNiLzFhODc5NGQ5LWViMTYtNGIzYy1iODY5LTk2OTcxYjcy YTkzYi5jcmwwHwYDVR0jBBgwFoAUWGSrqLbG9Ghvh86IX/GHzHvf2y0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xYTg3OTRkOS1lYjE2LTRiM2MtYjg2OS05Njk3 MWI3MmE5M2IuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgIIBvAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABbt8wJR1oMhlDidaYQ8VTKYactKLdvj7TqMQxuA92rZVFxAJnFn 9e6/ogqLBi0gDA3DSA5dKZVKvQLzmQi4WwVFTyV7Fp0mURsQE6ZYg7oDFgonfFWA GuvSrHXrQ8LPKIeTv28OH5NHOWNdH4qrjV81i/eJrAsXCV5YJ7hiG4HJ0h3KzKVY CzM2+td8Y1m7kt0TdcAlSIyWt7pO6yDyNEB/wQqWQru/cvSHb0/AQmuYv/FO1Z3l mEU2hY3hzPGNX8u/IincJ/ffy88QyiuaSNt+PJoO4A6JsmoWrtvq/3RHZqTyV9yA apdbz2EG9XDHVEeGLSDobfaK0knOZtn/gYg= -----END CERTIFICATE-----Generated at Sun May 11 05:17:25 2025 by rpki-client