$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/53f3af06-68ea-4591-9526-0c1fce331651/fc7ff8ef-be57-3b2d-825e-8408a593d171.roa File: fc7ff8ef-be57-3b2d-825e-8408a593d171.roa (raw, json) Hash identifier: XbMSIQMl3bbVoyC1YqaZXSXHL+PlaF2JN7D0hZATLHg= Subject key identifier: 44:BB:18:D3:0F:DF:B1:99:FB:B4:17:CA:23:CA:24:B8:28:CB:53:57 Certificate issuer: /CN=53f3af06-68ea-4591-9526-0c1fce331651 Certificate serial: 010D0C9F43285848EF615D616110192FB3458C80 Authority key identifier: 8A:FE:A7:10:44:F5:A9:14:8D:C7:0F:AC:74:09:68:60:5F:0D:7F:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/53f3af06-68ea-4591-9526-0c1fce331651.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/53f3af06-68ea-4591-9526-0c1fce331651/fc7ff8ef-be57-3b2d-825e-8408a593d171.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 0 IP address blocks: 2001:504:26::/48 maxlen: 64 2001:504:26::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/53f3af06-68ea-4591-9526-0c1fce331651/53f3af06-68ea-4591-9526-0c1fce331651.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/53f3af06-68ea-4591-9526-0c1fce331651/53f3af06-68ea-4591-9526-0c1fce331651.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/53f3af06-68ea-4591-9526-0c1fce331651.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:5d:61:61:10:19:2f:b3:45:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53f3af06-68ea-4591-9526-0c1fce331651 Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=30359a4f-2f23-4ca5-ab13-04ebc42d38c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:9c:a1:66:94:5a:d0:32:c2:e9:58:90:66:b4: ba:25:c5:f7:63:ba:77:d1:72:a7:86:5e:da:46:cb: 1c:9a:5a:6e:cc:3c:18:53:c8:03:6e:8e:d5:11:75: fc:eb:f5:d3:f1:d2:ce:ed:1f:ae:b3:5d:e5:03:25: 1a:d8:49:50:6e:ae:07:b7:ab:6b:07:5a:f4:27:6b: 15:e3:ad:c0:4c:2e:ad:e3:69:d1:b8:b1:af:f0:52: 35:bb:ff:2b:fd:a9:34:df:da:76:57:da:d0:65:fb: 7d:93:82:dd:bf:89:e1:49:61:ac:89:ff:9e:80:19: 4e:a6:36:45:c5:36:76:e0:48:69:f2:66:df:30:e8: f2:3a:81:a7:61:b8:b5:78:c5:38:3d:6f:0d:51:e8: c2:8e:f2:ef:fc:32:5c:6d:6c:f6:9d:96:0e:47:b1: f6:7e:ef:2d:36:c9:d7:f2:9a:1f:c9:03:2b:46:33: 4c:4e:65:7c:e9:58:cc:58:dc:4f:c4:eb:21:6b:c1: 19:2f:24:ec:37:19:40:dd:db:94:93:9a:20:2f:ea: 5d:31:90:55:e0:03:bb:d1:ce:da:71:2a:34:86:6c: da:60:e1:42:12:6d:91:4f:0c:04:4e:e6:5a:45:16: 1f:43:88:70:6e:e2:41:a0:35:62:a0:88:b2:ab:42: 5c:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:BB:18:D3:0F:DF:B1:99:FB:B4:17:CA:23:CA:24:B8:28:CB:53:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/53f3af06-68ea-4591-9526-0c1fce331651/fc7ff8ef-be57-3b2d-825e-8408a593d171.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/53f3af06-68ea-4591-9526-0c1fce331651/53f3af06-68ea-4591-9526-0c1fce331651.crl X509v3 Authority Key Identifier: keyid:8A:FE:A7:10:44:F5:A9:14:8D:C7:0F:AC:74:09:68:60:5F:0D:7F:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/53f3af06-68ea-4591-9526-0c1fce331651.cer sbgp-ipAddrBlock: critical IPv6: 2001:504:26::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:f4:f7:0b:b2:bf:26:70:b0:05:aa:14:3d:e9:d8:dd:d6:68: c9:87:eb:39:1e:23:aa:c1:a5:2f:d0:58:20:82:38:cf:56:8e: e5:ba:b6:cb:31:62:f2:4c:ad:00:f0:c3:bd:05:e5:59:16:fe: b1:8f:f9:82:cc:c5:b9:a4:34:52:60:9d:e7:4a:bf:d0:2a:71: 28:73:2e:7f:aa:14:38:b8:09:e0:c2:a2:84:fc:3e:69:3b:93: 8f:51:76:02:e2:42:d7:76:08:32:66:99:0b:8f:81:a6:fd:e8: bf:18:e7:49:d4:f0:0f:81:61:58:aa:6e:be:87:b1:95:71:db: 71:30:17:f2:c9:05:9a:b1:bb:82:6e:93:b5:89:0b:c1:1c:dd: 10:e2:3a:99:e8:82:10:27:3e:81:17:b7:82:50:c7:e9:5f:7f: 1f:08:25:e3:7c:66:dc:a0:e5:7e:9c:25:4d:e3:16:d9:21:11: e2:8a:63:99:2d:1c:a0:2f:02:1f:fd:52:db:7f:86:50:ce:cc: 6f:c1:d5:61:7e:9d:c4:22:d3:0c:b9:05:5b:8c:c5:7c:f8:3a: 35:51:e6:a2:fc:f9:e7:37:55:cf:36:0b:fc:1c:5c:59:23:d1: ba:4a:8a:f7:8e:ba:d1:0a:fd:c8:b6:c2:65:44:92:66:6d:a0: e3:85:27:9a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjvYV1hYRAZL7NFjIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTNmM2FmMDYtNjhlYS00NTkxLTk1MjYtMGMxZmNlMzMx NjUxMB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk MzAzNTlhNGYtMmYyMy00Y2E1LWFiMTMtMDRlYmM0MmQzOGMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpyhZpRa0DLC6ViQZrS6JcX3Y7p30XKnhl7a RsscmlpuzDwYU8gDbo7VEXX86/XT8dLO7R+us13lAyUa2ElQbq4Ht6trB1r0J2sV 463ATC6t42nRuLGv8FI1u/8r/ak039p2V9rQZft9k4Ldv4nhSWGsif+egBlOpjZF xTZ24Ehp8mbfMOjyOoGnYbi1eMU4PW8NUejCjvLv/DJcbWz2nZYOR7H2fu8tNsnX 8pofyQMrRjNMTmV86VjMWNxPxOsha8EZLyTsNxlA3duUk5ogL+pdMZBV4AO70c7a cSo0hmzaYOFCEm2RTwwETuZaRRYfQ4hwbuJBoDVioIiyq0JcNwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFES7GNMP37GZ+7QXyiPKJLgoy1NXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81M2Yz YWYwNi02OGVhLTQ1OTEtOTUyNi0wYzFmY2UzMzE2NTEvZmM3ZmY4ZWYtYmU1Ny0z YjJkLTgyNWUtODQwOGE1OTNkMTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNTNmM2FmMDYtNjhlYS00NTkxLTk1 MjYtMGMxZmNlMzMxNjUxLzUzZjNhZjA2LTY4ZWEtNDU5MS05NTI2LTBjMWZjZTMz MTY1MS5jcmwwHwYDVR0jBBgwFoAUiv6nEET1qRSNxw+sdAloYF8Nf9IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81M2YzYWYwNi02OGVhLTQ1OTEtOTUyNi0wYzFm Y2UzMzE2NTEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFBAAm MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFf09wuyvyZwsAWqFD3p2N3WaMmH6zkeI6rBpS/QWCCCOM9WjuW6 tssxYvJMrQDww70F5VkW/rGP+YLMxbmkNFJgnedKv9AqcShzLn+qFDi4CeDCooT8 Pmk7k49RdgLiQtd2CDJmmQuPgab96L8Y50nU8A+BYViqbr6HsZVx23EwF/LJBZqx u4Juk7WJC8Ec3RDiOpnoghAnPoEXt4JQx+lffx8IJeN8Ztyg5X6cJU3jFtkhEeKK Y5ktHKAvAh/9Utt/hlDOzG/B1WF+ncQi0wy5BVuMxXz4OjVR5qL8+ec3Vc82C/wc XFkj0bpKiveOutEK/ci2wmVEkmZtoOOFJ5o= -----END CERTIFICATE-----Generated at Fri Apr 11 23:25:01 2025 by rpki-client