$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/d0ee2888-029d-3033-aaf8-55220aa70a0a.roa File: d0ee2888-029d-3033-aaf8-55220aa70a0a.roa (raw, json) Hash identifier: Qp5uvbdJ9UY+UE8OlYPL+6ximHw8mHwkRQaTLVaX4dw= Subject key identifier: 00:6E:F8:F4:C6:81:E5:EE:A0:F0:63:E8:A5:F3:A5:03:AC:07:EE:CD Certificate issuer: /CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Certificate serial: 010D0C9F43285849B149EB110E413765EBC09000 Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/d0ee2888-029d-3033-aaf8-55220aa70a0a.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 16433 IP address blocks: 2605:f00::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:49:eb:11:0e:41:37:65:eb:c0:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=a09509b8-5f90-44a1-b7f9-2f9d69d39ba8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a0:6b:36:c7:de:8f:5c:da:b7:09:ce:06:08: a4:c3:a7:eb:95:5e:f0:8a:e0:a4:33:bd:21:05:24: cc:4b:f9:cb:58:1f:2f:02:fc:68:40:41:d8:2f:83: 54:23:c9:64:de:65:34:b6:f1:b6:eb:22:c9:08:d4: 68:b4:58:59:43:75:d3:7c:97:16:f2:50:1d:41:ae: 69:b1:11:13:91:6a:d3:c6:6d:f7:f7:b6:a1:ac:d2: 06:5a:78:aa:08:5b:c2:66:80:51:cb:2f:3c:30:0b: 89:89:2d:45:5f:9d:de:3b:c8:3e:5f:7f:74:95:d7: cc:a2:85:e6:64:b3:86:a6:9f:a4:eb:cd:a3:96:0b: 06:f9:52:36:2a:54:d5:c7:70:2e:10:4d:d4:52:17: 46:60:69:30:4c:0a:f2:4a:4e:b3:23:dc:08:74:ed: df:b7:b6:9e:29:0e:21:7f:24:0f:2d:c8:9e:2a:e1: 32:af:12:9c:9a:d3:09:3c:28:04:2f:08:72:f4:f1: 95:ef:9d:d4:fb:65:e2:41:eb:97:c0:fd:ee:a1:31: 9c:13:6b:5f:55:6d:3b:e4:55:80:f6:8d:a6:ab:74: 43:55:07:6c:0e:34:fc:83:6f:ab:92:82:0b:c9:91: 49:56:f3:31:9e:cc:d0:1a:84:de:c9:16:6c:7e:2c: 13:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:6E:F8:F4:C6:81:E5:EE:A0:F0:63:E8:A5:F3:A5:03:AC:07:EE:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/d0ee2888-029d-3033-aaf8-55220aa70a0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl X509v3 Authority Key Identifier: keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer sbgp-ipAddrBlock: critical IPv6: 2605:f00::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:3d:0a:c6:24:fa:83:b2:07:aa:d7:87:28:db:3b:c3:d1:6a: 6b:aa:a0:b5:68:6a:f2:3f:a2:1a:2e:e5:e2:2a:3b:8b:9a:69: b9:ee:31:43:c6:e6:6c:b5:43:33:75:e7:fd:5a:90:fe:f3:b6: e9:be:3e:dd:df:de:80:6d:a6:ce:f8:15:b6:7a:18:19:24:54: 21:b5:5a:7b:6a:93:56:12:b5:bc:ea:8c:3a:40:ba:95:2e:6d: 3b:8f:16:9c:4d:ed:fd:d8:18:29:ec:d4:d7:b1:3d:6d:06:9a: 69:1f:bb:fe:c1:45:92:fe:27:d9:9e:1c:43:a9:0c:97:34:69: a6:23:8f:79:5d:81:4b:8d:76:59:cd:b5:b9:6c:09:a9:66:2d: 34:d0:e4:d2:dd:0f:c3:0d:a2:a1:69:b8:17:24:12:df:e3:a2: e8:57:31:df:60:96:36:bf:0f:07:38:c5:e1:8a:27:ec:cb:44: 36:a9:1c:f3:83:2b:3d:0e:6e:45:f9:53:89:cd:d3:5a:c3:47: f8:ce:c3:c2:02:74:a1:c9:af:a5:6d:76:5b:a0:73:7e:41:96: c6:4d:3c:59:8b:e4:b2:b2:fd:bc:7f:78:25:8d:36:59:9e:0d: 18:d1:72:3d:26:49:b7:a3:e0:45:c5:46:ca:99:95:7b:10:6b: 0e:42:81:c1 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmxSesRDkE3ZevAkAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRiZjYwNGYtMjRiMC00MjZlLTgwOWQtZTY1YjA4YmU1 ZDUwMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk YTA5NTA5YjgtNWY5MC00NGExLWI3ZjktMmY5ZDY5ZDM5YmE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqBrNsfej1zatwnOBgikw6frlV7wiuCkM70h BSTMS/nLWB8vAvxoQEHYL4NUI8lk3mU0tvG26yLJCNRotFhZQ3XTfJcW8lAdQa5p sRETkWrTxm3397ahrNIGWniqCFvCZoBRyy88MAuJiS1FX53eO8g+X390ldfMooXm ZLOGpp+k682jlgsG+VI2KlTVx3AuEE3UUhdGYGkwTArySk6zI9wIdO3ft7aeKQ4h fyQPLcieKuEyrxKcmtMJPCgELwhy9PGV753U+2XiQeuXwP3uoTGcE2tfVW075FWA 9o2mq3RDVQdsDjT8g2+rkoILyZFJVvMxnszQGoTeyRZsfiwTUwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFABu+PTGgeXuoPBj6KXzpQOsB+7NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yZGJm NjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjViMDhiZTVkNTAvZDBlZTI4ODgtMDI5ZC0z MDMzLWFhZjgtNTUyMjBhYTcwYTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmRiZjYwNGYtMjRiMC00MjZlLTgw OWQtZTY1YjA4YmU1ZDUwLzJkYmY2MDRmLTI0YjAtNDI2ZS04MDlkLWU2NWIwOGJl NWQ1MC5jcmwwHwYDVR0jBBgwFoAUnwuW5LWIWZ7uukF5kcCTydHD9UIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yZGJmNjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjVi MDhiZTVkNTAuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgUPADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBPPQrGJPqDsgeq14co2zvD0WprqqC1aGryP6IaLuXiKjuLmmm57jFD xuZstUMzdef9WpD+87bpvj7d396AbabO+BW2ehgZJFQhtVp7apNWErW86ow6QLqV Lm07jxacTe392Bgp7NTXsT1tBpppH7v+wUWS/ifZnhxDqQyXNGmmI495XYFLjXZZ zbW5bAmpZi000OTS3Q/DDaKhabgXJBLf46LoVzHfYJY2vw8HOMXhiifsy0Q2qRzz gys9Dm5F+VOJzdNaw0f4zsPCAnShya+lbXZboHN+QZbGTTxZi+Sysv28f3gljTZZ ng0Y0XI9Jkm3o+BFxUbKmZV7EGsOQoHB -----END CERTIFICATE-----Generated at Sat May 10 01:40:41 2025 by rpki-client