$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/da325a2d-d4ce-325d-aa23-f0d25fcc7f5d.roa File: da325a2d-d4ce-325d-aa23-f0d25fcc7f5d.roa (raw, json) Hash identifier: 3w9ubTOFnFXcGMpDKH0Z75psE6Hke0wAjAMDqfdoqu0= Subject key identifier: 93:17:2A:B9:5E:13:E4:34:E5:BA:74:5A:22:7B:98:BA:C6:42:A6:9A Certificate issuer: /CN=3efd7529-38b1-472c-9d5b-d87382d088a0 Certificate serial: 010D0C9F432858494B6418AF0A5107DA4AFDC380 Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/da325a2d-d4ce-325d-aa23-f0d25fcc7f5d.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 394285 IP address blocks: 2606:a100:6000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:18:af:0a:51:07:da:4a:fd:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=ff6e0a22-0195-4682-b5b8-6b41b829c44f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:30:84:7e:84:71:d0:ea:c1:ad:5e:e3:a8:83: 13:99:dc:36:09:e2:46:7a:48:cf:82:d1:4b:6f:0b: c5:cf:ee:66:9c:a1:b2:22:54:9f:58:86:e6:7e:00: 28:e5:2e:54:02:bd:06:ef:3c:fe:3f:28:61:4f:cd: 0f:99:6f:d4:b7:5c:3e:f5:d8:5d:64:cb:3e:50:28: ed:33:e7:da:c2:fe:4c:8f:1b:02:02:ef:09:70:f5: 3e:ff:cd:6a:65:42:93:99:cd:aa:05:c5:d3:28:96: 67:09:1f:58:f2:00:1b:02:3a:3f:10:f7:b8:93:76: 6e:3c:e0:67:96:9d:60:a9:76:f5:c5:18:93:d4:45: 5f:ac:18:de:78:ad:b8:30:42:b0:65:33:bc:94:44: 88:c8:53:9a:fc:5e:25:1e:50:25:58:b4:83:c4:cb: ed:be:b8:36:99:2d:58:1b:fd:df:67:c5:3f:3c:04: 33:ff:4a:81:b5:12:73:70:04:9e:d0:82:29:b7:e3: 15:05:bc:1b:3d:5f:10:97:bb:c6:81:eb:dd:f0:bc: 9e:52:e2:5d:86:e2:0b:0f:6a:ec:95:51:54:09:87: cb:dd:a4:97:ce:81:81:67:b7:a9:4f:d7:27:59:4b: 72:50:85:e5:53:cf:9c:e7:17:bd:bb:ac:f3:11:be: 7c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:17:2A:B9:5E:13:E4:34:E5:BA:74:5A:22:7B:98:BA:C6:42:A6:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/da325a2d-d4ce-325d-aa23-f0d25fcc7f5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl X509v3 Authority Key Identifier: keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer sbgp-ipAddrBlock: critical IPv6: 2606:a100:6000::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:94:3a:4a:cb:5e:b9:cd:7e:7c:80:f6:56:1a:19:67:ad:86: 47:31:f6:5a:89:e4:e9:04:dd:d0:bd:69:2f:97:12:e7:0b:9e: 23:51:ee:c9:56:c2:b1:7f:07:90:c7:d3:62:00:d3:72:9a:99: b3:a0:92:5d:7d:fa:ed:b4:f3:f2:0b:17:4e:31:06:a8:99:0f: 3f:df:88:c0:87:eb:68:1e:45:fe:82:be:4e:73:e0:84:f5:06: 9a:e4:4d:d5:61:3d:ac:0b:aa:77:9b:18:74:33:46:23:79:69: 8f:5e:62:75:a2:9d:c6:25:3b:52:20:03:f9:55:b4:ea:2e:18: ec:c2:cc:53:9e:84:99:57:8c:e3:e8:ee:f9:37:40:c9:01:cb: 0e:aa:a3:22:b4:e9:0d:9f:64:e2:a1:54:07:53:22:e6:00:34: 80:79:38:73:cc:2a:62:5e:87:77:bc:4a:84:8e:04:0b:a4:5d: c7:13:95:f4:81:a5:1b:29:22:2a:39:fb:82:78:e0:7f:cb:a3: 91:84:97:5f:af:e1:12:32:c5:4b:cf:a6:6d:f3:83:19:c2:08: 71:92:77:e5:65:e8:61:66:97:e4:5d:71:78:ce:20:0f:3b:f1: fd:7e:0d:a4:84:3f:aa:fa:8b:bc:4f:36:a6:49:6c:49:fc:ac: 70:ea:80:b0 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWElLZBivClEH2kr9w4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2VmZDc1MjktMzhiMS00NzJjLTlkNWItZDg3MzgyZDA4 OGEwMB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk ZmY2ZTBhMjItMDE5NS00NjgyLWI1YjgtNmI0MWI4MjljNDRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7zCEfoRx0OrBrV7jqIMTmdw2CeJGekjPgtFL bwvFz+5mnKGyIlSfWIbmfgAo5S5UAr0G7zz+PyhhT80PmW/Ut1w+9dhdZMs+UCjt M+fawv5MjxsCAu8JcPU+/81qZUKTmc2qBcXTKJZnCR9Y8gAbAjo/EPe4k3ZuPOBn lp1gqXb1xRiT1EVfrBjeeK24MEKwZTO8lESIyFOa/F4lHlAlWLSDxMvtvrg2mS1Y G/3fZ8U/PAQz/0qBtRJzcASe0IIpt+MVBbwbPV8Ql7vGgevd8LyeUuJdhuILD2rs lVFUCYfL3aSXzoGBZ7epT9cnWUtyUIXlU8+c5xe9u6zzEb58yQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFJMXKrleE+Q05bp0WiJ7mLrGQqaaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZWZk NzUyOS0zOGIxLTQ3MmMtOWQ1Yi1kODczODJkMDg4YTAvZGEzMjVhMmQtZDRjZS0z MjVkLWFhMjMtZjBkMjVmY2M3ZjVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2VmZDc1MjktMzhiMS00NzJjLTlk NWItZDg3MzgyZDA4OGEwLzNlZmQ3NTI5LTM4YjEtNDcyYy05ZDViLWQ4NzM4MmQw ODhhMC5jcmwwHwYDVR0jBBgwFoAUW4MicpSIqXhZmzrb3eBIKYdqlAcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZWZkNzUyOS0zOGIxLTQ3MmMtOWQ1Yi1kODcz ODJkMDg4YTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgahAGAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAUZQ6Ssteuc1+fID2VhoZZ62GRzH2Wonk6QTd0L1pL5cS5wueI1Hu yVbCsX8HkMfTYgDTcpqZs6CSXX367bTz8gsXTjEGqJkPP9+IwIfraB5F/oK+TnPg hPUGmuRN1WE9rAuqd5sYdDNGI3lpj15idaKdxiU7UiAD+VW06i4Y7MLMU56EmVeM 4+ju+TdAyQHLDqqjIrTpDZ9k4qFUB1Mi5gA0gHk4c8wqYl6Hd7xKhI4EC6RdxxOV 9IGlGykiKjn7gnjgf8ujkYSXX6/hEjLFS8+mbfODGcIIcZJ35WXoYWaX5F1xeM4g Dzvx/X4NpIQ/qvqLvE82pklsSfyscOqAsA== -----END CERTIFICATE-----Generated at Tue May 6 00:53:49 2025 by rpki-client