$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/de7bd649-b19a-3283-9c2c-13c94d00554e.roa File: de7bd649-b19a-3283-9c2c-13c94d00554e.roa (raw, json) Hash identifier: bwqmL8jh/cNhfIoV8s5kNvXght8a/cW6l8WUMUCyJeo= Subject key identifier: A5:CA:57:23:14:8D:35:75:DD:E3:14:B2:92:34:3B:7F:8D:CB:FC:31 Certificate issuer: /CN=3d318897-eed6-4fd9-a18c-91026968b3e2 Certificate serial: 010D0C9F43285848A99626AF5DD140A73CA59A00 Authority key identifier: 73:C4:D0:2C:36:91:A3:EA:9F:CC:FE:D5:AA:C0:E0:22:88:C3:3C:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/de7bd649-b19a-3283-9c2c-13c94d00554e.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 800 IP address blocks: 2604:fdc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/3d318897-eed6-4fd9-a18c-91026968b3e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/3d318897-eed6-4fd9-a18c-91026968b3e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:26:af:5d:d1:40:a7:3c:a5:9a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d318897-eed6-4fd9-a18c-91026968b3e2 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=0d047465-5168-4f79-a2c8-ecad7e5e829f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:7f:c1:de:45:c3:00:b1:8d:ca:92:7e:fc:29: 42:09:e4:0f:97:15:43:b9:d4:be:fe:00:1a:78:57: 18:6d:33:62:98:85:69:44:c5:5a:1d:5c:a8:2b:cc: b9:56:e1:0e:38:54:5d:97:2c:0d:f3:81:16:0f:bb: 90:06:a8:38:60:78:db:83:91:e3:c1:ec:70:45:f8: a6:e8:0c:be:24:92:22:40:6a:87:4c:e6:58:5a:1c: 52:b0:a6:e0:68:c1:9c:20:d7:7d:54:35:86:61:76: 0e:c4:43:f4:84:cb:bb:76:31:c6:31:f9:e3:65:35: a9:c8:a4:55:ae:44:e9:25:54:f6:70:f4:72:2b:ac: b5:75:c2:cc:7b:27:a7:a5:31:57:64:2e:19:a8:4a: e5:bd:37:d9:cd:28:af:2c:ec:73:68:67:96:72:27: 7c:a8:d9:23:8c:10:78:81:b6:17:02:b1:8f:cc:81: aa:04:e7:fb:72:0c:65:b7:2d:5f:80:72:d0:a2:1d: 6a:3f:5c:14:23:c4:0c:06:b3:6c:66:51:8e:7a:e7: 5b:71:8c:46:45:ae:3f:80:8f:a6:5c:7a:52:2c:d2: e5:52:d5:1b:2b:28:ab:25:43:b9:39:47:e1:bf:a7: 84:00:2a:b0:68:a8:0c:47:4e:82:01:ae:0f:6a:ab: 2f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:CA:57:23:14:8D:35:75:DD:E3:14:B2:92:34:3B:7F:8D:CB:FC:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/de7bd649-b19a-3283-9c2c-13c94d00554e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/3d318897-eed6-4fd9-a18c-91026968b3e2.crl X509v3 Authority Key Identifier: keyid:73:C4:D0:2C:36:91:A3:EA:9F:CC:FE:D5:AA:C0:E0:22:88:C3:3C:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2.cer sbgp-ipAddrBlock: critical IPv6: 2604:fdc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:53:c0:37:40:f9:d5:bf:7f:8e:35:a4:bf:98:e1:b0:2f:15: 86:08:0a:80:f5:0d:8b:54:7f:db:cb:e6:0f:a4:dc:b0:ec:de: e4:97:22:ff:a4:18:fb:c9:1e:f8:83:94:a5:71:18:ed:57:c0: 21:19:79:95:27:68:27:1f:6b:e0:c1:a9:ed:d1:39:d9:a3:63: ed:2e:01:88:53:8d:af:af:8a:7a:c6:b4:d8:c0:26:cd:16:34: d2:ec:0c:09:81:b8:b6:c8:ae:f3:35:d1:b9:27:ce:17:db:3c: 66:60:49:ef:89:25:51:78:85:f7:86:e3:b9:75:98:cd:76:0e: c4:05:23:87:38:fb:4a:72:52:c4:e9:08:1b:39:47:6b:69:bc: d2:90:7d:77:c7:14:bb:5f:1c:91:aa:f6:df:3c:51:91:9a:25: 0a:9b:4d:ca:ac:b2:f3:04:30:5b:e6:0a:e4:fd:70:5a:c8:c7: d0:fb:ee:1c:cd:12:ab:26:b9:d6:e2:21:68:ba:27:eb:5b:e3: 97:b6:9a:a3:74:6f:df:ce:95:72:66:67:fc:a2:f1:c6:6e:6f: 2e:f8:c8:5f:2d:c1:f7:5a:ce:ac:11:62:1b:d7:36:05:c8:25: 51:7d:db:c4:76:43:8c:50:09:9e:e2:35:94:82:c2:39:18:25: 50:7d:38:7e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEipliavXdFApzylmgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2QzMTg4OTctZWVkNi00ZmQ5LWExOGMtOTEwMjY5Njhi M2UyMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk MGQwNDc0NjUtNTE2OC00Zjc5LWEyYzgtZWNhZDdlNWU4MjlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkH/B3kXDALGNypJ+/ClCCeQPlxVDudS+/gAa eFcYbTNimIVpRMVaHVyoK8y5VuEOOFRdlywN84EWD7uQBqg4YHjbg5HjwexwRfim 6Ay+JJIiQGqHTOZYWhxSsKbgaMGcINd9VDWGYXYOxEP0hMu7djHGMfnjZTWpyKRV rkTpJVT2cPRyK6y1dcLMeyenpTFXZC4ZqErlvTfZzSivLOxzaGeWcid8qNkjjBB4 gbYXArGPzIGqBOf7cgxlty1fgHLQoh1qP1wUI8QMBrNsZlGOeudbcYxGRa4/gI+m XHpSLNLlUtUbKyirJUO5OUfhv6eEACqwaKgMR06CAa4PaqsvnwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKXKVyMUjTV13eMUspI0O3+Ny/wxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zZDMx ODg5Ny1lZWQ2LTRmZDktYTE4Yy05MTAyNjk2OGIzZTIvZGU3YmQ2NDktYjE5YS0z MjgzLTljMmMtMTNjOTRkMDA1NTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvM2QzMTg4OTctZWVkNi00ZmQ5LWEx OGMtOTEwMjY5NjhiM2UyLzNkMzE4ODk3LWVlZDYtNGZkOS1hMThjLTkxMDI2OTY4 YjNlMi5jcmwwHwYDVR0jBBgwFoAUc8TQLDaRo+qfzP7VqsDgIojDPKUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zZDMxODg5Ny1lZWQ2LTRmZDktYTE4Yy05MTAy Njk2OGIzZTIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgT9wDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBIU8A3QPnVv3+ONaS/mOGwLxWGCAqA9Q2LVH/by+YPpNyw7N7klyL/ pBj7yR74g5SlcRjtV8AhGXmVJ2gnH2vgwant0TnZo2PtLgGIU42vr4p6xrTYwCbN FjTS7AwJgbi2yK7zNdG5J84X2zxmYEnviSVReIX3huO5dZjNdg7EBSOHOPtKclLE 6QgbOUdrabzSkH13xxS7XxyRqvbfPFGRmiUKm03KrLLzBDBb5grk/XBayMfQ++4c zRKrJrnW4iFouifrW+OXtpqjdG/fzpVyZmf8ovHGbm8u+MhfLcH3Ws6sEWIb1zYF yCVRfdvEdkOMUAme4jWUgsI5GCVQfTh+ -----END CERTIFICATE-----Generated at Sat Apr 5 17:59:58 2025 by rpki-client