$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d651f6e5-66de-4793-8c12-2261d5e62118/26de12e6-55fd-3e2b-b6e2-aa6b10d4e73b.roa File: 26de12e6-55fd-3e2b-b6e2-aa6b10d4e73b.roa (raw, json) Hash identifier: ChkF3NKB3BJVdQoPlbNgLdIw1jkrurlHM06O3JTs/9g= Subject key identifier: 3D:88:AA:0E:09:81:18:9D:7C:3D:CA:67:7D:85:0E:01:82:90:F4:6A Certificate issuer: /CN=d651f6e5-66de-4793-8c12-2261d5e62118 Certificate serial: 010D0C9F43285849AA4F6887F9624DA1A2BD62C0 Authority key identifier: 02:93:6E:0E:A1:47:CA:5E:AD:54:25:C2:72:EA:78:EE:DA:C0:3A:67 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d651f6e5-66de-4793-8c12-2261d5e62118.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d651f6e5-66de-4793-8c12-2261d5e62118/26de12e6-55fd-3e2b-b6e2-aa6b10d4e73b.roa Signing time: Sun 27 Apr 2025 13:01:01 +0000 ROA not before: Sun 27 Apr 2025 13:01:01 +0000 ROA not after: Sat 26 Jul 2025 13:01:01 +0000 asID: 26721 IP address blocks: 2606:6380::/32 maxlen: 126 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d651f6e5-66de-4793-8c12-2261d5e62118/d651f6e5-66de-4793-8c12-2261d5e62118.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d651f6e5-66de-4793-8c12-2261d5e62118/d651f6e5-66de-4793-8c12-2261d5e62118.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d651f6e5-66de-4793-8c12-2261d5e62118.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:aa:4f:68:87:f9:62:4d:a1:a2:bd:62:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d651f6e5-66de-4793-8c12-2261d5e62118 Validity Not Before: Apr 27 13:01:01 2025 GMT Not After : Jul 26 13:01:01 2025 GMT Subject: CN=f7f40193-e292-4713-9b09-292fb82866fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:b0:a1:e2:e5:22:86:f4:77:f7:fc:32:59:72: d7:bb:58:7e:da:a2:b2:36:0a:18:77:96:b5:0d:90: 5a:1b:ea:60:84:52:c1:fa:e6:84:95:f9:0e:51:e6: 3c:ce:25:b8:af:a9:3e:9a:e9:d4:f5:a9:1d:6f:cc: 46:31:6e:7f:ac:85:b9:e6:8e:43:6d:b7:a8:fb:b2: 5d:d4:33:e1:76:91:e4:f5:f8:50:3d:c2:3b:43:cc: 27:e6:73:26:ed:6e:46:34:f8:94:6b:c7:6f:f0:4b: 47:b1:16:40:cb:c8:47:2f:5c:e4:00:79:8a:6d:9e: 95:77:c4:3c:46:c2:a1:4d:6b:9f:2a:28:c4:7f:b3: 06:c7:fc:61:55:37:49:ef:e5:6c:24:e6:83:57:23: cb:67:a8:b0:80:88:dc:3f:71:bf:86:82:6c:33:f6: 37:28:36:5a:42:59:0f:c5:70:81:e3:f9:89:f6:7d: ac:d2:de:cd:0c:a8:47:fe:bc:92:6f:1f:5f:d7:97: 3c:cb:5f:95:84:6e:ad:41:cb:c0:b0:cf:1e:09:a8: 77:06:70:e1:0f:ac:c6:87:b8:ea:bc:90:de:03:d8: cd:99:ec:a7:6f:b3:7b:63:83:fa:f1:04:60:e1:02: ac:22:5d:ca:30:06:a1:58:b6:ab:7e:b1:64:d3:55: 7d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:88:AA:0E:09:81:18:9D:7C:3D:CA:67:7D:85:0E:01:82:90:F4:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d651f6e5-66de-4793-8c12-2261d5e62118/26de12e6-55fd-3e2b-b6e2-aa6b10d4e73b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d651f6e5-66de-4793-8c12-2261d5e62118/d651f6e5-66de-4793-8c12-2261d5e62118.crl X509v3 Authority Key Identifier: keyid:02:93:6E:0E:A1:47:CA:5E:AD:54:25:C2:72:EA:78:EE:DA:C0:3A:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d651f6e5-66de-4793-8c12-2261d5e62118.cer sbgp-ipAddrBlock: critical IPv6: 2606:6380::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cc:22:c8:e8:26:39:a0:7f:e3:dc:79:bf:bf:7d:38:71:1c:b1: 46:5e:3a:41:40:18:de:5d:01:60:94:17:38:e2:42:d2:f1:a1: 63:27:bc:95:3a:5e:e6:fa:12:11:9a:2f:59:70:e3:04:7e:2f: 9f:a0:c3:67:41:1c:1f:28:4f:f0:3b:fa:97:68:28:9b:96:ba: ae:d8:f6:41:ed:f9:64:d7:90:07:2d:fd:a3:d6:1d:ad:e3:80: a8:c1:9c:f4:76:03:ff:39:92:a0:66:56:fa:ec:27:7e:e2:06: 04:1d:e0:a2:e1:4b:0f:b0:b1:2e:ba:be:85:9c:ad:3e:36:38: d5:24:a9:80:0e:2b:46:43:54:36:e7:77:b8:10:c7:f9:d6:26: d3:c4:2d:00:bc:75:b3:2a:c6:33:d6:60:4d:d0:20:dc:b4:7f: 25:89:05:ab:0c:74:9d:34:57:dd:a0:ca:1e:00:3a:b1:ca:80: a3:e2:d5:be:52:4e:ef:47:f4:62:00:f4:db:b8:76:41:a8:a7: eb:1a:cd:65:62:96:f4:18:74:a9:c0:ef:78:c7:5e:90:a2:2a: 87:89:1f:e6:34:8b:be:c1:ec:4e:9d:78:24:66:ff:ac:11:1f: 0a:fa:40:21:d0:96:0c:e0:90:ca:2b:ff:e7:c2:5b:4f:45:2f: d6:a6:2e:74 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmqT2iH+WJNoaK9YsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDY1MWY2ZTUtNjZkZS00NzkzLThjMTItMjI2MWQ1ZTYy MTE4MB4XDTI1MDQyNzEzMDEwMVoXDTI1MDcyNjEzMDEwMVowLzEtMCsGA1UEAxMk ZjdmNDAxOTMtZTI5Mi00NzEzLTliMDktMjkyZmI4Mjg2NmZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7Ch4uUihvR39/wyWXLXu1h+2qKyNgoYd5a1 DZBaG+pghFLB+uaElfkOUeY8ziW4r6k+munU9akdb8xGMW5/rIW55o5Dbbeo+7Jd 1DPhdpHk9fhQPcI7Q8wn5nMm7W5GNPiUa8dv8EtHsRZAy8hHL1zkAHmKbZ6Vd8Q8 RsKhTWufKijEf7MGx/xhVTdJ7+VsJOaDVyPLZ6iwgIjcP3G/hoJsM/Y3KDZaQlkP xXCB4/mJ9n2s0t7NDKhH/rySbx9f15c8y1+VhG6tQcvAsM8eCah3BnDhD6zGh7jq vJDeA9jNmeynb7N7Y4P68QRg4QKsIl3KMAahWLarfrFk01V9KQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFD2Iqg4JgRidfD3KZ32FDgGCkPRqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kNjUx ZjZlNS02NmRlLTQ3OTMtOGMxMi0yMjYxZDVlNjIxMTgvMjZkZTEyZTYtNTVmZC0z ZTJiLWI2ZTItYWE2YjEwZDRlNzNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZDY1MWY2ZTUtNjZkZS00NzkzLThj MTItMjI2MWQ1ZTYyMTE4L2Q2NTFmNmU1LTY2ZGUtNDc5My04YzEyLTIyNjFkNWU2 MjExOC5jcmwwHwYDVR0jBBgwFoAUApNuDqFHyl6tVCXCcup47trAOmcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kNjUxZjZlNS02NmRlLTQ3OTMtOGMxMi0yMjYx ZDVlNjIxMTguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgZjgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQDMIsjoJjmgf+Pceb+/fThxHLFGXjpBQBjeXQFglBc44kLS8aFjJ7yV Ol7m+hIRmi9ZcOMEfi+foMNnQRwfKE/wO/qXaCiblrqu2PZB7flk15AHLf2j1h2t 44CowZz0dgP/OZKgZlb67Cd+4gYEHeCi4UsPsLEuur6FnK0+NjjVJKmADitGQ1Q2 53e4EMf51ibTxC0AvHWzKsYz1mBN0CDctH8liQWrDHSdNFfdoMoeADqxyoCj4tW+ Uk7vR/RiAPTbuHZBqKfrGs1lYpb0GHSpwO94x16QoiqHiR/mNIu+wexOnXgkZv+s ER8K+kAh0JYM4JDKK//nwltPRS/Wpi50 -----END CERTIFICATE-----Generated at Sat May 10 14:56:28 2025 by rpki-client