$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/2219a5dd-d685-3e5f-ada3-a3e7a05f2835.roa File: 2219a5dd-d685-3e5f-ada3-a3e7a05f2835.roa (raw, json) Hash identifier: 2ixPjkZcuvTkb5K1zA70m8XikDF3+Ph2hVS3zVxMj44= Subject key identifier: 2D:60:A3:66:D0:2D:96:FB:46:0E:3F:34:2C:3B:2F:2F:20:F7:6A:87 Certificate issuer: /CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Certificate serial: 010D0C9F43285849C20A23C52ACE59EDD94E0F60 Authority key identifier: 58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/2219a5dd-d685-3e5f-ada3-a3e7a05f2835.roa Signing time: Tue 06 May 2025 01:00:47 +0000 ROA not before: Tue 06 May 2025 01:00:47 +0000 ROA not after: Mon 04 Aug 2025 01:00:47 +0000 asID: 46687 IP address blocks: 2606:e280::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c2:0a:23:c5:2a:ce:59:ed:d9:4e:0f:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Validity Not Before: May 6 01:00:47 2025 GMT Not After : Aug 4 01:00:47 2025 GMT Subject: CN=8fbd6f0b-9853-4f97-81ba-c07bd13a38d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:34:af:16:00:e5:16:1b:e7:e1:17:d4:b4:0a: 41:8f:45:91:4e:59:0c:6f:d9:fa:33:54:ee:a2:10: 45:b4:fd:2c:39:b0:14:e4:dc:5b:74:da:01:b6:7d: c2:d5:6a:ce:a2:59:16:5d:5b:f4:b7:7b:c9:dc:6f: d1:f8:59:4e:83:ff:06:dc:a8:bd:60:4d:5a:e2:de: 2f:7d:0f:d4:44:29:b9:0c:3e:5b:ba:a2:7d:4d:1b: f3:14:5c:f1:2b:a4:1a:45:25:9a:07:4e:4a:66:7d: ff:40:99:51:9f:a8:b2:14:ac:f8:da:99:75:f0:d7: be:6f:c4:4f:79:09:2a:02:2c:99:c7:32:4d:c7:ac: 4f:52:c9:cc:83:6c:c3:39:12:f1:2c:df:24:ab:15: 71:83:b0:e4:ac:4a:15:53:b9:32:97:3a:64:55:e1: f8:38:b3:7f:c6:e3:37:32:4a:cf:43:c1:bb:0c:a5: a8:8b:9b:1b:f8:5c:e2:d7:c4:39:1a:29:18:b8:e7: 11:33:4c:2c:c5:e8:a8:ba:65:7d:f0:61:86:a8:9c: b5:3d:5d:6e:82:09:ac:34:24:ec:69:e0:28:2c:a0: 59:4b:2d:5b:f3:ae:25:c1:6a:bd:04:1d:f1:e0:ed: 8d:00:bd:2f:21:34:13:dd:86:72:d2:9f:70:8c:05: 41:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:60:A3:66:D0:2D:96:FB:46:0E:3F:34:2C:3B:2F:2F:20:F7:6A:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/2219a5dd-d685-3e5f-ada3-a3e7a05f2835.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl X509v3 Authority Key Identifier: keyid:58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer sbgp-ipAddrBlock: critical IPv6: 2606:e280::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:99:13:f4:06:63:6d:60:7c:33:01:fd:80:6a:73:7b:fd:ea: 36:1e:ae:ca:2e:81:e0:9b:10:66:2e:31:2e:d1:b1:32:b1:ad: bd:70:4e:18:93:86:0f:9c:7a:10:30:fe:0b:3b:7b:d6:43:2e: b3:60:50:f2:4d:2d:63:dc:28:9c:40:f4:e9:0d:d7:61:2c:ee: ac:a6:c6:3f:a2:dc:58:e7:c3:de:be:57:de:5e:8b:c2:79:6f: 95:b4:79:41:af:79:79:dc:72:3b:be:c1:1e:75:5f:95:a2:3d: d6:cc:6d:a8:3a:f1:68:bd:97:cb:e5:26:f8:ab:e0:ab:26:4e: 3c:a4:ab:84:c7:c2:a0:4e:aa:a1:f5:b2:a5:45:b3:71:1c:48: d9:f4:ed:4c:ce:23:ac:52:03:d6:c6:18:77:dc:c5:f8:57:47: b7:e4:80:26:19:5d:5f:6b:7d:a9:cb:91:0e:f2:e9:d1:38:e2: e4:65:e4:43:e9:c5:7b:dd:79:24:31:30:b0:4c:3a:fa:1a:1d: 50:0b:94:62:4b:0a:35:06:d0:8a:2e:28:2c:e6:50:8c:db:5c: 62:51:53:b2:38:f1:be:52:d7:b4:18:db:48:a1:7e:46:de:9c: 69:b9:ef:16:7d:e3:52:f2:71:98:22:e7:63:59:18:6b:79:91: 85:e1:8d:1a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEnCCiPFKs5Z7dlOD2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEzMWE0YTAtN2I3Ny00ZjU2LThmODktMDE1MjViNTA2 MTI5MB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk OGZiZDZmMGItOTg1My00Zjk3LTgxYmEtYzA3YmQxM2EzOGQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDSvFgDlFhvn4RfUtApBj0WRTlkMb9n6M1Tu ohBFtP0sObAU5NxbdNoBtn3C1WrOolkWXVv0t3vJ3G/R+FlOg/8G3Ki9YE1a4t4v fQ/URCm5DD5buqJ9TRvzFFzxK6QaRSWaB05KZn3/QJlRn6iyFKz42pl18Ne+b8RP eQkqAiyZxzJNx6xPUsnMg2zDORLxLN8kqxVxg7DkrEoVU7kylzpkVeH4OLN/xuM3 MkrPQ8G7DKWoi5sb+Fzi18Q5GikYuOcRM0wsxeioumV98GGGqJy1PV1uggmsNCTs aeAoLKBZSy1b864lwWq9BB3x4O2NAL0vITQT3YZy0p9wjAVBAQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFC1go2bQLZb7Rg4/NCw7Ly8g92qHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYTMx YTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUyNWI1MDYxMjkvMjIxOWE1ZGQtZDY4NS0z ZTVmLWFkYTMtYTNlN2EwNWYyODM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWEzMWE0YTAtN2I3Ny00ZjU2LThm ODktMDE1MjViNTA2MTI5L2FhMzFhNGEwLTdiNzctNGY1Ni04Zjg5LTAxNTI1YjUw NjEyOS5jcmwwHwYDVR0jBBgwFoAUWIlNWT2gnXPWliBuheubsbqbZj0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYTMxYTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUy NWI1MDYxMjkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgbigDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCymRP0BmNtYHwzAf2AanN7/eo2Hq7KLoHgmxBmLjEu0bEysa29cE4Y k4YPnHoQMP4LO3vWQy6zYFDyTS1j3CicQPTpDddhLO6spsY/otxY58PevlfeXovC eW+VtHlBr3l53HI7vsEedV+Voj3WzG2oOvFovZfL5Sb4q+CrJk48pKuEx8KgTqqh 9bKlRbNxHEjZ9O1MziOsUgPWxhh33MX4V0e35IAmGV1fa32py5EO8unROOLkZeRD 6cV73XkkMTCwTDr6Gh1QC5RiSwo1BtCKLigs5lCM21xiUVOyOPG+Ute0GNtIoX5G 3pxpue8WfeNS8nGYIudjWRhreZGF4Y0a -----END CERTIFICATE-----Generated at Mon May 12 02:18:45 2025 by rpki-client