$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/1dbb43af-9206-3c1d-b292-f8d28c1d4e4e.roa File: 1dbb43af-9206-3c1d-b292-f8d28c1d4e4e.roa (raw, json) Hash identifier: uI9W3xMXbT0k7xh6lJlrAh2y1hnS5uCMnd5yIi1DgvY= Subject key identifier: DE:82:0C:E8:C5:51:BA:06:95:C7:C9:B1:2E:6A:86:17:DB:2F:6B:75 Certificate issuer: /CN=c3b90f7d-2bc6-4942-a304-98a91a506d72 Certificate serial: 010D0C9F43285848EC7449AF345090EEF1BED388 Authority key identifier: 74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/1dbb43af-9206-3c1d-b292-f8d28c1d4e4e.roa Signing time: Tue 18 Feb 2025 12:51:58 +0000 ROA not before: Tue 18 Feb 2025 12:51:58 +0000 ROA not after: Mon 19 May 2025 11:51:58 +0000 asID: 14618 IP address blocks: 2604:ba80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ec:74:49:af:34:50:90:ee:f1:be:d3:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3b90f7d-2bc6-4942-a304-98a91a506d72 Validity Not Before: Feb 18 12:51:58 2025 GMT Not After : May 19 11:51:58 2025 GMT Subject: CN=9af96449-f422-41df-8aeb-bb4571aea886 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:21:b9:f4:b2:1e:a6:88:a7:1d:68:88:98:44: 18:5e:c8:0d:54:d8:6e:89:08:64:b0:a4:5a:7a:9d: 39:fb:c1:78:80:f5:c3:cf:14:75:d2:5c:57:8b:1b: 8f:36:0b:38:c1:a1:f4:d5:c2:b9:13:32:1d:55:cd: 2f:e3:50:67:a4:59:21:0b:6d:ad:ca:81:58:84:19: f7:74:e4:ce:63:a3:85:55:93:02:8f:4a:b6:24:eb: a6:10:c2:ee:b9:a8:a8:58:ce:29:f8:fc:51:a7:ee: 83:73:d9:88:48:92:8a:1c:b1:a8:69:a8:69:8f:d7: ad:49:f7:93:a6:d1:dc:ef:e7:26:35:32:47:bd:ac: 59:99:c3:6b:b5:9d:bb:bc:88:c3:b2:d9:03:7a:dc: 8e:91:14:2e:37:92:78:9c:fa:3b:97:b7:ba:16:aa: 79:08:db:be:12:03:a5:65:b6:20:db:4d:63:a7:6e: 0e:e8:5f:b9:18:ff:0b:4d:79:b6:b1:62:d4:ac:f7: 16:b0:3b:3e:45:59:08:c3:22:57:f8:df:78:fb:45: 88:67:5a:da:34:7c:1a:1a:eb:97:88:75:ce:2b:2a: 23:31:fa:92:5e:5f:db:28:d6:27:6d:0c:fd:25:9f: f0:4f:40:64:a8:7e:f1:39:97:25:d3:90:73:92:6e: ee:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:82:0C:E8:C5:51:BA:06:95:C7:C9:B1:2E:6A:86:17:DB:2F:6B:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/1dbb43af-9206-3c1d-b292-f8d28c1d4e4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl X509v3 Authority Key Identifier: keyid:74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer sbgp-ipAddrBlock: critical IPv6: 2604:ba80::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:b6:9f:f8:4b:9e:3e:de:6d:5a:90:6e:91:90:fc:e9:5f:1c: 2a:35:0e:bc:de:fb:48:e6:40:96:f7:ad:55:1e:76:da:85:0a: ba:e0:87:22:ae:53:44:68:34:51:2a:8b:e9:5e:c9:2b:8d:16: 19:bc:78:d8:2b:fa:4d:dd:05:67:bc:32:95:2c:26:25:16:fc: 56:c0:b4:f2:fd:11:1d:8f:c2:1c:ad:82:46:e8:68:00:a3:04: f9:65:81:73:d1:d7:a6:50:7c:41:92:98:92:d2:ae:e9:14:3e: d7:44:0b:bf:31:3a:6b:80:43:1e:53:2f:a7:f7:1b:36:60:cb: ed:a9:f8:e2:2e:03:67:3d:ea:7a:9a:bc:07:83:92:b3:0b:c8: df:e0:72:20:d8:c2:13:09:d4:92:2d:98:30:1e:11:74:b2:2c: f4:64:ed:02:fe:6a:1c:1c:4b:48:a0:b5:1c:bb:08:56:a9:cf: b7:5b:ae:ff:b2:6e:ed:e3:2c:9d:51:d8:20:43:4e:29:be:94: 31:c6:b0:b7:c4:cd:fb:0a:fe:9e:6f:f4:3b:91:cd:c7:d4:48: 78:d5:e7:d5:fa:5f:d1:78:e3:6c:53:a4:9e:d5:31:9f:77:50: 13:e6:a6:c3:34:d3:46:b9:b7:6b:45:6d:47:65:5b:dd:21:96: e8:96:e7:43 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjsdEmvNFCQ7vG+04gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzNiOTBmN2QtMmJjNi00OTQyLWEzMDQtOThhOTFhNTA2 ZDcyMB4XDTI1MDIxODEyNTE1OFoXDTI1MDUxOTExNTE1OFowLzEtMCsGA1UEAxMk OWFmOTY0NDktZjQyMi00MWRmLThhZWItYmI0NTcxYWVhODg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCG59LIepoinHWiImEQYXsgNVNhuiQhksKRa ep05+8F4gPXDzxR10lxXixuPNgs4waH01cK5EzIdVc0v41BnpFkhC22tyoFYhBn3 dOTOY6OFVZMCj0q2JOumEMLuuaioWM4p+PxRp+6Dc9mISJKKHLGoaahpj9etSfeT ptHc7+cmNTJHvaxZmcNrtZ27vIjDstkDetyOkRQuN5J4nPo7l7e6Fqp5CNu+EgOl ZbYg201jp24O6F+5GP8LTXm2sWLUrPcWsDs+RVkIwyJX+N94+0WIZ1raNHwaGuuX iHXOKyojMfqSXl/bKNYnbQz9JZ/wT0BkqH7xOZcl05Bzkm7uyQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFN6CDOjFUboGlcfJsS5qhhfbL2t1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jM2I5 MGY3ZC0yYmM2LTQ5NDItYTMwNC05OGE5MWE1MDZkNzIvMWRiYjQzYWYtOTIwNi0z YzFkLWIyOTItZjhkMjhjMWQ0ZTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzNiOTBmN2QtMmJjNi00OTQyLWEz MDQtOThhOTFhNTA2ZDcyL2MzYjkwZjdkLTJiYzYtNDk0Mi1hMzA0LTk4YTkxYTUw NmQ3Mi5jcmwwHwYDVR0jBBgwFoAUdKOHlu0trJGJyCKPFOPXADc12NIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jM2I5MGY3ZC0yYmM2LTQ5NDItYTMwNC05OGE5 MWE1MDZkNzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgS6gAAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHW2n/hLnj7ebVqQbpGQ/OlfHCo1Drze+0jmQJb3rVUedtqFCrrg hyKuU0RoNFEqi+leySuNFhm8eNgr+k3dBWe8MpUsJiUW/FbAtPL9ER2Pwhytgkbo aACjBPllgXPR16ZQfEGSmJLSrukUPtdEC78xOmuAQx5TL6f3GzZgy+2p+OIuA2c9 6nqavAeDkrMLyN/gciDYwhMJ1JItmDAeEXSyLPRk7QL+ahwcS0igtRy7CFapz7db rv+ybu3jLJ1R2CBDTim+lDHGsLfEzfsK/p5v9DuRzcfUSHjV59X6X9F442xTpJ7V MZ93UBPmpsM000a5t2tFbUdlW90hluiW50M= -----END CERTIFICATE-----Generated at Tue May 6 08:38:44 2025 by rpki-client