$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d8d99f8b-a85a-41e9-89b4-612c6b9c10a8/877255b8-cb33-3803-8908-41e712168981.roa File: 877255b8-cb33-3803-8908-41e712168981.roa (raw, json) Hash identifier: dAi2G27zgssHLE+W9mXWAoc95A4o44F4ouwrknQkGPI= Subject key identifier: B1:A9:7A:A1:DF:7D:A2:99:96:9D:EB:8D:8F:FA:14:91:A1:FF:B5:73 Certificate issuer: /CN=d8d99f8b-a85a-41e9-89b4-612c6b9c10a8 Certificate serial: 010D0C9F432858493ED3D78C4A7309F298373300 Authority key identifier: 0B:72:93:6A:9C:83:B5:E3:6C:B7:76:E3:59:21:8A:61:87:56:CE:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d8d99f8b-a85a-41e9-89b4-612c6b9c10a8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d8d99f8b-a85a-41e9-89b4-612c6b9c10a8/877255b8-cb33-3803-8908-41e712168981.roa Signing time: Thu 20 Mar 2025 01:00:39 +0000 ROA not before: Thu 20 Mar 2025 01:00:39 +0000 ROA not after: Wed 18 Jun 2025 01:00:39 +0000 asID: 400764 IP address blocks: 2606:f2c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d8d99f8b-a85a-41e9-89b4-612c6b9c10a8/d8d99f8b-a85a-41e9-89b4-612c6b9c10a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d8d99f8b-a85a-41e9-89b4-612c6b9c10a8/d8d99f8b-a85a-41e9-89b4-612c6b9c10a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d8d99f8b-a85a-41e9-89b4-612c6b9c10a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3e:d3:d7:8c:4a:73:09:f2:98:37:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8d99f8b-a85a-41e9-89b4-612c6b9c10a8 Validity Not Before: Mar 20 01:00:39 2025 GMT Not After : Jun 18 01:00:39 2025 GMT Subject: CN=21a0f45e-425b-4029-8562-62da2e815ed3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:df:7e:20:aa:52:f2:a0:cd:56:82:a6:8e:22: ca:76:6b:04:a2:3b:a7:02:01:dc:94:b3:ce:13:25: 2c:50:ff:e2:0f:91:e3:39:c7:7b:4b:99:b8:6e:ee: dd:94:45:82:d9:c6:2d:4c:2c:ce:bc:c5:b5:9f:30: b2:13:93:7a:68:b2:6e:47:f3:11:7e:c2:2f:11:ce: a3:52:fc:87:46:ab:2c:a7:d7:35:55:a1:da:d1:3f: 36:a1:9c:00:c9:93:10:df:17:dd:5c:a2:d5:0b:d2: 54:f5:02:50:22:33:01:9e:8c:5d:1b:8b:22:64:81: 0f:84:ff:3d:68:ad:1c:b9:fb:3c:2e:03:43:19:fc: 98:0c:29:d1:b7:8b:b9:46:d5:c7:42:43:a1:67:09: 8e:e8:30:e7:4e:bd:cd:07:ee:b2:35:5e:47:46:87: ff:3c:80:c1:50:85:2f:35:d0:4e:fe:f4:49:07:c2: 4c:6a:5a:00:a4:1f:f6:fa:ab:7f:47:00:b5:3d:c6: 39:23:23:2e:ef:29:10:af:4e:22:7c:38:74:99:78: b9:f5:a8:db:55:c9:c8:5d:a7:9c:07:00:b5:58:58: c9:35:95:6b:5e:09:43:c3:6b:20:f1:6b:f9:0a:c3: db:8e:c5:12:1f:c0:ad:2e:a9:8d:10:73:05:43:16: b7:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:A9:7A:A1:DF:7D:A2:99:96:9D:EB:8D:8F:FA:14:91:A1:FF:B5:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d8d99f8b-a85a-41e9-89b4-612c6b9c10a8/877255b8-cb33-3803-8908-41e712168981.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d8d99f8b-a85a-41e9-89b4-612c6b9c10a8/d8d99f8b-a85a-41e9-89b4-612c6b9c10a8.crl X509v3 Authority Key Identifier: keyid:0B:72:93:6A:9C:83:B5:E3:6C:B7:76:E3:59:21:8A:61:87:56:CE:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d8d99f8b-a85a-41e9-89b4-612c6b9c10a8.cer sbgp-ipAddrBlock: critical IPv6: 2606:f2c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:15:a0:51:46:8d:a5:53:00:ce:9e:f3:1d:2f:38:69:55:e5: 6b:c7:b1:18:ed:ae:cd:2e:46:3b:b0:4e:3d:01:33:99:04:19: 40:4c:d1:c0:0e:b5:a1:73:5b:38:a2:54:bd:63:97:91:49:90: 94:27:f1:5d:1b:5a:e4:bf:52:d0:f6:d1:10:d9:4c:f7:3b:e1: 0a:01:bc:a0:e6:c9:49:e3:a5:80:5d:7f:0a:35:af:70:e9:72: 0b:03:3d:a1:0e:47:e9:23:a8:53:77:28:7d:1a:f3:6f:d8:fb: e4:97:06:6e:42:da:61:8a:71:06:09:05:de:f7:63:d0:7c:60: 5b:53:87:47:19:b0:53:31:38:35:07:77:ba:e8:78:70:c9:13: 2f:01:d6:17:e1:75:79:0b:38:ae:2c:68:4a:04:91:0c:de:10: 2b:7a:26:f8:9b:f7:19:99:42:b9:16:00:6a:c1:92:04:06:2d: 0c:0c:96:3c:9c:3c:d4:cf:5a:84:0b:db:cf:ce:23:a9:52:a8: 89:c0:b9:b0:bc:b4:4b:43:26:a7:55:f8:ff:95:05:37:8e:ee: f6:04:90:7a:91:cb:bc:22:e9:07:d6:88:40:8a:f0:b8:60:98: 5e:d8:fa:dc:78:6d:1c:cb:8d:64:6c:c3:df:68:51:45:fe:8a: 45:85:b2:8e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEk+09eMSnMJ8pg3MwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDhkOTlmOGItYTg1YS00MWU5LTg5YjQtNjEyYzZiOWMx MGE4MB4XDTI1MDMyMDAxMDAzOVoXDTI1MDYxODAxMDAzOVowLzEtMCsGA1UEAxMk MjFhMGY0NWUtNDI1Yi00MDI5LTg1NjItNjJkYTJlODE1ZWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvN9+IKpS8qDNVoKmjiLKdmsEojunAgHclLPO EyUsUP/iD5HjOcd7S5m4bu7dlEWC2cYtTCzOvMW1nzCyE5N6aLJuR/MRfsIvEc6j UvyHRqssp9c1VaHa0T82oZwAyZMQ3xfdXKLVC9JU9QJQIjMBnoxdG4siZIEPhP89 aK0cufs8LgNDGfyYDCnRt4u5RtXHQkOhZwmO6DDnTr3NB+6yNV5HRof/PIDBUIUv NdBO/vRJB8JMaloApB/2+qt/RwC1PcY5IyMu7ykQr04ifDh0mXi59ajbVcnIXaec BwC1WFjJNZVrXglDw2sg8Wv5CsPbjsUSH8CtLqmNEHMFQxa3tQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLGpeqHffaKZlp3rjY/6FJGh/7VzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kOGQ5 OWY4Yi1hODVhLTQxZTktODliNC02MTJjNmI5YzEwYTgvODc3MjU1YjgtY2IzMy0z ODAzLTg5MDgtNDFlNzEyMTY4OTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDhkOTlmOGItYTg1YS00MWU5LTg5 YjQtNjEyYzZiOWMxMGE4L2Q4ZDk5ZjhiLWE4NWEtNDFlOS04OWI0LTYxMmM2Yjlj MTBhOC5jcmwwHwYDVR0jBBgwFoAUC3KTapyDteNst3bjWSGKYYdWzuYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kOGQ5OWY4Yi1hODVhLTQxZTktODliNC02MTJj NmI5YzEwYTguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgbywDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCWFaBRRo2lUwDOnvMdLzhpVeVrx7EY7a7NLkY7sE49ATOZBBlATNHA DrWhc1s4olS9Y5eRSZCUJ/FdG1rkv1LQ9tEQ2Uz3O+EKAbyg5slJ46WAXX8KNa9w 6XILAz2hDkfpI6hTdyh9GvNv2PvklwZuQtphinEGCQXe92PQfGBbU4dHGbBTMTg1 B3e66HhwyRMvAdYX4XV5CziuLGhKBJEM3hAreib4m/cZmUK5FgBqwZIEBi0MDJY8 nDzUz1qEC9vPziOpUqiJwLmwvLRLQyanVfj/lQU3ju72BJB6kcu8IukH1ohAivC4 YJhe2PrceG0cy41kbMPfaFFF/opFhbKO -----END CERTIFICATE-----Generated at Sat May 10 05:21:48 2025 by rpki-client