$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/342be0e4-6b26-3229-8808-286812c3a7c1.roa File: 342be0e4-6b26-3229-8808-286812c3a7c1.roa (raw, json) Hash identifier: tTafrkFleuZq9ZXlDovGtx7FaVBvOc64ezchdP5FFO8= Subject key identifier: A8:98:99:49:0C:3D:70:2C:64:33:F8:28:45:14:E9:4D:87:9C:7B:3A Certificate issuer: /CN=b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1 Certificate serial: 010D0C9F43285849ABB4A81E4CD268716C346A80 Authority key identifier: DD:F6:09:95:17:8B:B7:4A:6E:9C:AA:DF:B0:69:85:38:26:70:0B:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/342be0e4-6b26-3229-8808-286812c3a7c1.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 398203 IP address blocks: 2605:8cc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:a8:1e:4c:d2:68:71:6c:34:6a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1 Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=851e6e54-bc45-4e4d-beb5-4d37ffd91c85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:41:99:cd:ba:ca:6b:e6:55:bf:f2:02:1d:82: ab:6b:02:49:93:a2:a1:fc:f7:db:86:50:ab:65:0f: 92:69:16:5f:47:08:e8:5d:59:db:d0:80:43:8c:3c: 36:42:1f:bd:48:c9:3a:1d:e1:7e:08:a9:16:5e:07: 2b:23:f5:28:ab:58:ff:57:64:be:1b:21:f1:6f:6a: 8d:1e:99:24:d1:75:65:d4:89:22:9b:40:55:d0:c0: b8:d3:24:04:4c:b8:78:79:2f:88:32:d9:3b:71:39: be:e1:0e:11:99:ef:5c:37:f1:72:01:89:8e:70:20: a9:8b:ee:24:6c:0d:25:55:4f:74:49:6d:ab:e9:38: e8:ab:13:2e:86:2f:1e:81:04:97:db:f5:2e:ec:fb: b3:48:d7:97:4e:db:cf:a1:51:7d:f1:aa:fe:f1:7f: 5a:5a:b7:ad:2a:e1:f6:a1:2c:12:80:fd:42:82:1e: 04:b0:3e:46:95:a8:7b:22:6f:5a:7a:96:a8:bb:19: 69:75:ba:40:7e:c3:e5:c0:24:18:05:39:d6:98:80: da:a3:64:b2:85:a9:c6:78:b7:61:74:68:8a:3b:2a: 61:f0:66:aa:0f:4d:cd:16:a2:8d:1b:0b:fa:4c:2d: 0f:36:70:a2:7a:b3:b1:68:71:bb:cc:b3:99:ae:2f: 75:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:98:99:49:0C:3D:70:2C:64:33:F8:28:45:14:E9:4D:87:9C:7B:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/342be0e4-6b26-3229-8808-286812c3a7c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.crl X509v3 Authority Key Identifier: keyid:DD:F6:09:95:17:8B:B7:4A:6E:9C:AA:DF:B0:69:85:38:26:70:0B:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.cer sbgp-ipAddrBlock: critical IPv6: 2605:8cc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:58:f8:a8:ea:eb:0f:fb:27:0a:b2:33:00:5e:f2:ae:a8:c6: 1d:62:ef:53:89:c9:74:23:76:6b:52:53:60:5c:16:91:e6:42: d5:d4:e3:0e:7c:ab:fb:b0:98:cf:6c:81:bd:19:50:84:ac:5b: 45:45:a1:9c:f9:4b:9b:d7:75:17:35:2d:12:9b:be:ed:04:31: c7:44:6f:40:8a:23:97:67:a8:8a:5f:12:f3:2c:b7:58:a2:4b: 87:ae:c5:41:98:72:9b:04:03:e5:bd:fd:15:a0:35:d1:48:46: e8:e8:c3:b9:c5:9a:88:0e:b4:f1:06:3d:d9:cc:82:32:60:4c: 76:62:0d:4c:98:be:3b:8e:11:3c:ef:78:fa:4b:7c:03:98:f1: c7:7d:f5:d1:8c:e4:22:f6:a1:fc:1b:5b:d0:ae:b7:33:46:cd: 46:28:10:61:eb:e9:87:1e:c8:7f:c2:9b:d7:75:02:74:fd:d7: 21:c0:12:3b:3f:ee:7d:ab:7f:9c:cd:bf:7d:85:0e:bc:1f:10: 58:9d:b9:05:c3:ce:c1:96:01:2a:31:76:13:de:54:34:85:7e: d4:ff:b9:67:7d:88:d2:7d:37:52:4e:ac:89:b3:e5:fa:93:46: 29:a6:ae:a7:7e:4a:c9:33:37:db:3c:20:24:6c:8b:b0:d8:8e: a8:dd:c7:d1 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmrtKgeTNJocWw0aoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg2YTRlYzMtYTNiNS00ZDcyLWJlZTItZjU4YzNjZGUw MWExMB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk ODUxZTZlNTQtYmM0NS00ZTRkLWJlYjUtNGQzN2ZmZDkxYzg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEGZzbrKa+ZVv/ICHYKrawJJk6Kh/PfbhlCr ZQ+SaRZfRwjoXVnb0IBDjDw2Qh+9SMk6HeF+CKkWXgcrI/Uoq1j/V2S+GyHxb2qN Hpkk0XVl1Ikim0BV0MC40yQETLh4eS+IMtk7cTm+4Q4Rme9cN/FyAYmOcCCpi+4k bA0lVU90SW2r6TjoqxMuhi8egQSX2/Uu7PuzSNeXTtvPoVF98ar+8X9aWretKuH2 oSwSgP1Cgh4EsD5Glah7Im9aepaouxlpdbpAfsPlwCQYBTnWmIDao2SyhanGeLdh dGiKOyph8GaqD03NFqKNGwv6TC0PNnCierOxaHG7zLOZri912wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKiYmUkMPXAsZDP4KEUU6U2HnHs6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iODZh NGVjMy1hM2I1LTRkNzItYmVlMi1mNThjM2NkZTAxYTEvMzQyYmUwZTQtNmIyNi0z MjI5LTg4MDgtMjg2ODEyYzNhN2MxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjg2YTRlYzMtYTNiNS00ZDcyLWJl ZTItZjU4YzNjZGUwMWExL2I4NmE0ZWMzLWEzYjUtNGQ3Mi1iZWUyLWY1OGMzY2Rl MDFhMS5jcmwwHwYDVR0jBBgwFoAU3fYJlReLt0punKrfsGmFOCZwCxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iODZhNGVjMy1hM2I1LTRkNzItYmVlMi1mNThj M2NkZTAxYTEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgWMwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBJWPio6usP+ycKsjMAXvKuqMYdYu9Ticl0I3ZrUlNgXBaR5kLV1OMO fKv7sJjPbIG9GVCErFtFRaGc+Uub13UXNS0Sm77tBDHHRG9AiiOXZ6iKXxLzLLdY okuHrsVBmHKbBAPlvf0VoDXRSEbo6MO5xZqIDrTxBj3ZzIIyYEx2Yg1MmL47jhE8 73j6S3wDmPHHffXRjOQi9qH8G1vQrrczRs1GKBBh6+mHHsh/wpvXdQJ0/dchwBI7 P+59q3+czb99hQ68HxBYnbkFw87BlgEqMXYT3lQ0hX7U/7lnfYjSfTdSTqyJs+X6 k0Yppq6nfkrJMzfbPCAkbIuw2I6o3cfR -----END CERTIFICATE-----Generated at Wed May 7 01:03:44 2025 by rpki-client