$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f8ffd4ba-11b7-4c10-9a14-2850086d1269/ff174cd6-c78a-3a30-9e52-2b423e908691.roa File: ff174cd6-c78a-3a30-9e52-2b423e908691.roa (raw, json) Hash identifier: kF/Erxc9zY/Mg+wfY+PPS361Qx2AiL9+KzorbXcFTEg= Subject key identifier: CC:36:7F:D9:A6:27:0C:4C:CD:A1:2D:A1:91:81:1A:8A:59:45:DC:00 Certificate issuer: /CN=f8ffd4ba-11b7-4c10-9a14-2850086d1269 Certificate serial: 010D0C9F43285848D7A6475A24C1A0E3CCCDEB00 Authority key identifier: E9:4F:AA:B0:4A:25:49:EF:B7:29:CB:C7:75:2F:28:44:8D:4C:EC:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f8ffd4ba-11b7-4c10-9a14-2850086d1269.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f8ffd4ba-11b7-4c10-9a14-2850086d1269/ff174cd6-c78a-3a30-9e52-2b423e908691.roa Signing time: Tue 11 Feb 2025 02:00:39 +0000 ROA not before: Tue 11 Feb 2025 02:00:39 +0000 ROA not after: Mon 12 May 2025 01:00:39 +0000 asID: 10546 IP address blocks: 2620:0:1a30::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f8ffd4ba-11b7-4c10-9a14-2850086d1269/f8ffd4ba-11b7-4c10-9a14-2850086d1269.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f8ffd4ba-11b7-4c10-9a14-2850086d1269/f8ffd4ba-11b7-4c10-9a14-2850086d1269.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f8ffd4ba-11b7-4c10-9a14-2850086d1269.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d7:a6:47:5a:24:c1:a0:e3:cc:cd:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8ffd4ba-11b7-4c10-9a14-2850086d1269 Validity Not Before: Feb 11 02:00:39 2025 GMT Not After : May 12 01:00:39 2025 GMT Subject: CN=57bf58ae-7e11-4232-8956-013c785dba50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:40:9a:ab:d3:09:6a:30:99:10:e2:01:25:93: 7c:82:d2:99:8d:68:b5:5f:82:c9:57:3a:e6:f7:97: 47:82:ab:92:ae:7a:22:9a:6a:d6:c3:23:8b:9f:e9: a4:97:2e:3a:24:04:57:c3:38:20:c4:45:23:a4:06: af:8e:85:22:8f:9b:c6:9f:46:5d:d0:2e:c5:7d:9b: 07:8b:e2:30:e0:8e:31:dc:60:5a:37:78:13:8d:7d: 0d:de:52:19:bb:a8:17:42:4c:99:17:a1:f0:7e:e4: c5:77:56:78:96:63:88:33:11:6f:65:13:25:8a:95: c4:62:d5:92:f4:80:06:a2:27:7c:36:f6:26:31:a7: b8:7e:a4:eb:3d:87:9d:0e:fd:17:b6:e4:f4:e5:e4: 70:19:64:5b:d7:4f:17:e1:f0:f6:e5:51:ad:4b:c2: f1:c2:a4:e9:8d:e3:ea:81:82:a7:f0:fe:78:70:92: 0b:28:63:07:15:57:47:c1:db:99:55:e4:2d:79:d3: 0a:b8:fb:7f:96:f4:02:92:f3:01:11:f5:67:87:37: 7d:1f:9e:8e:97:0f:14:87:78:e2:de:1c:d9:6f:49: fa:e4:b0:e9:6f:7f:66:72:f1:17:b2:9b:55:fc:01: 7d:c7:25:9e:50:2c:ef:f4:7c:85:a4:98:5d:2c:84: 7f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:36:7F:D9:A6:27:0C:4C:CD:A1:2D:A1:91:81:1A:8A:59:45:DC:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f8ffd4ba-11b7-4c10-9a14-2850086d1269/ff174cd6-c78a-3a30-9e52-2b423e908691.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f8ffd4ba-11b7-4c10-9a14-2850086d1269/f8ffd4ba-11b7-4c10-9a14-2850086d1269.crl X509v3 Authority Key Identifier: keyid:E9:4F:AA:B0:4A:25:49:EF:B7:29:CB:C7:75:2F:28:44:8D:4C:EC:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f8ffd4ba-11b7-4c10-9a14-2850086d1269.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:1a30::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:a7:42:f5:b6:0c:58:09:e2:00:b2:12:1f:b7:fe:1f:a4:64: 25:79:cd:78:69:f3:85:ec:30:87:02:d9:9e:28:a4:e1:e1:87: f2:f3:3d:c8:7b:35:4a:a0:b7:0b:07:a2:df:97:35:32:ec:3e: 04:75:06:c6:ee:30:dc:68:4f:28:80:97:f2:39:4d:a9:e8:36: 81:3f:ba:4a:be:a9:98:e1:62:ad:ed:f4:1b:a0:00:50:40:10: 4b:72:ca:0c:c5:68:f3:d6:e6:24:a7:23:48:d4:51:d6:7a:6f: f0:9c:12:fe:c0:ec:63:52:06:11:c3:41:97:8d:fb:c8:88:24: fa:90:31:b7:f6:23:ba:18:1b:b1:08:7b:29:b7:64:b2:4a:4f: f9:c4:27:85:00:18:aa:4e:37:0c:a8:b4:1e:27:e9:ae:b3:a5: 0b:12:49:8a:04:6b:f9:7f:b2:d6:8f:47:e2:9d:92:93:d2:f6: 22:73:4b:b5:3f:9a:07:60:60:c3:8d:cf:77:11:a6:a4:41:83: 07:13:3b:4a:51:d4:79:3a:6c:f4:7f:ae:e2:0b:e2:00:ad:c2: 1a:6c:f6:62:a5:d0:9f:7b:38:c2:7f:d4:f8:41:0a:63:4b:73: d8:39:91:b4:f1:38:7a:ed:47:a3:3b:f2:33:e1:4c:9b:ff:06: 2b:0f:91:48 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjXpkdaJMGg48zN6wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjhmZmQ0YmEtMTFiNy00YzEwLTlhMTQtMjg1MDA4NmQx MjY5MB4XDTI1MDIxMTAyMDAzOVoXDTI1MDUxMjAxMDAzOVowLzEtMCsGA1UEAxMk NTdiZjU4YWUtN2UxMS00MjMyLTg5NTYtMDEzYzc4NWRiYTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlECaq9MJajCZEOIBJZN8gtKZjWi1X4LJVzrm 95dHgquSrnoimmrWwyOLn+mkly46JARXwzggxEUjpAavjoUij5vGn0Zd0C7FfZsH i+Iw4I4x3GBaN3gTjX0N3lIZu6gXQkyZF6HwfuTFd1Z4lmOIMxFvZRMlipXEYtWS 9IAGoid8NvYmMae4fqTrPYedDv0XtuT05eRwGWRb108X4fD25VGtS8LxwqTpjePq gYKn8P54cJILKGMHFVdHwduZVeQtedMKuPt/lvQCkvMBEfVnhzd9H56Olw8Uh3ji 3hzZb0n65LDpb39mcvEXsptV/AF9xyWeUCzv9HyFpJhdLIR/zQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMw2f9mmJwxMzaEtoZGBGopZRdwAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9mOGZm ZDRiYS0xMWI3LTRjMTAtOWExNC0yODUwMDg2ZDEyNjkvZmYxNzRjZDYtYzc4YS0z YTMwLTllNTItMmI0MjNlOTA4NjkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZjhmZmQ0YmEtMTFiNy00YzEwLTlh MTQtMjg1MDA4NmQxMjY5L2Y4ZmZkNGJhLTExYjctNGMxMC05YTE0LTI4NTAwODZk MTI2OS5jcmwwHwYDVR0jBBgwFoAU6U+qsEolSe+3KcvHdS8oRI1M7IEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9mOGZmZDRiYS0xMWI3LTRjMTAtOWExNC0yODUw MDg2ZDEyNjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAABow MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJGnQvW2DFgJ4gCyEh+3/h+kZCV5zXhp84XsMIcC2Z4opOHhh/Lz Pch7NUqgtwsHot+XNTLsPgR1BsbuMNxoTyiAl/I5TanoNoE/ukq+qZjhYq3t9Bug AFBAEEtyygzFaPPW5iSnI0jUUdZ6b/CcEv7A7GNSBhHDQZeN+8iIJPqQMbf2I7oY G7EIeym3ZLJKT/nEJ4UAGKpONwyotB4n6a6zpQsSSYoEa/l/staPR+KdkpPS9iJz S7U/mgdgYMONz3cRpqRBgwcTO0pR1Hk6bPR/ruIL4gCtwhps9mKl0J97OMJ/1PhB CmNLc9g5kbTxOHrtR6M78jPhTJv/BisPkUg= -----END CERTIFICATE-----Generated at Fri Apr 11 23:01:07 2025 by rpki-client