$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/30adc210-0124-3859-98d4-f0e66af7da0a.roa File: 30adc210-0124-3859-98d4-f0e66af7da0a.roa (raw, json) Hash identifier: cVbZvi/jrgf7/49uKXt+fS0RclElzbVzTUwIoKJC3/A= Subject key identifier: 93:E6:1E:58:36:05:D8:C9:EE:14:39:E9:21:C9:5A:02:74:91:85:83 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584917DC2E5AFDFB2B989B4D3280 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/30adc210-0124-3859-98d4-f0e66af7da0a.roa Signing time: Thu 06 Mar 2025 02:00:39 +0000 ROA not before: Thu 06 Mar 2025 02:00:39 +0000 ROA not after: Wed 04 Jun 2025 01:00:39 +0000 asID: 1225 IP address blocks: 2001:418:0:7000::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:17:dc:2e:5a:fd:fb:2b:98:9b:4d:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Mar 6 02:00:39 2025 GMT Not After : Jun 4 01:00:39 2025 GMT Subject: CN=ac70df11-3d8a-405b-8cb4-e98fd77f2036 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:89:06:36:5d:41:e5:e4:9f:8f:05:38:0e:a5: 59:10:72:cb:fe:ac:b4:7d:c4:20:b1:cd:20:65:f6: 13:a0:34:f4:a9:55:8b:76:2a:18:96:f2:e4:11:3a: cb:be:2b:b7:20:46:60:d2:f2:a7:ae:53:bb:ec:6e: 57:f0:7a:6d:fb:10:58:1a:7c:40:e7:05:93:05:62: 6e:35:58:ba:0c:e3:20:99:61:d1:79:d4:66:f1:53: 3b:de:9e:c9:0f:45:cc:9a:6e:ec:3e:21:e5:3f:e8: fe:5a:15:ea:7e:bd:37:90:ad:a1:79:3b:86:95:b2: 1a:35:df:04:e5:37:94:23:78:5d:56:0e:9d:5d:05: 6c:16:25:95:ac:f0:d7:19:49:bb:49:66:f4:d0:ab: cf:70:1a:a7:77:a6:9c:5c:70:91:44:10:5c:12:f3: 1d:7b:64:eb:57:f7:a3:f7:8b:c3:2b:28:4c:88:0c: 3e:8d:df:40:7d:56:f6:e8:2d:20:ca:21:77:4b:ed: 54:83:b0:59:00:0a:19:32:ff:d6:97:91:f8:68:06: 21:ff:e0:80:89:e2:54:98:fb:3c:ca:d9:5b:c2:87: e1:a9:11:a7:28:b9:45:cf:e5:8a:3c:99:5b:44:ba: 92:50:f1:60:ad:89:7b:b7:35:59:22:5c:99:7b:5c: b4:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:E6:1E:58:36:05:D8:C9:EE:14:39:E9:21:C9:5A:02:74:91:85:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/30adc210-0124-3859-98d4-f0e66af7da0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv6: 2001:418:0:7000::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:d4:92:75:02:a9:6d:13:ab:71:ab:35:c2:46:eb:4b:5b:43: 8e:5c:80:3c:8f:bf:18:48:2d:81:65:cf:72:5e:a3:16:67:c2: 22:e7:9b:e7:4b:a7:66:85:43:21:c1:4c:49:05:ae:61:ec:2b: b5:d2:cb:c0:c9:ad:eb:94:5c:d8:cc:31:6d:0f:70:6b:ca:74: 4c:f7:43:40:8e:90:d5:6b:89:c6:43:2c:3d:5b:2b:60:3e:20: bf:c9:ff:72:18:00:1a:65:e5:0e:7f:65:0a:b7:a1:27:ad:75: 3b:d2:5e:77:a4:76:33:b1:3d:b3:12:06:0e:15:96:31:4f:c1: b1:a4:2d:a1:55:33:d4:9f:e1:e5:28:89:ed:0b:cd:87:31:64: d7:9c:cc:a5:6b:bd:76:9d:44:65:4f:c4:4a:1d:4a:7a:fa:82: 29:d2:50:9e:ad:b2:21:39:b8:a7:ab:a8:03:42:b5:8c:de:bb: 1d:84:dc:e7:e2:eb:46:6e:3a:87:c4:1b:87:79:a1:b4:95:65: 5f:0c:4b:13:cc:50:d8:cf:32:96:7e:2d:1c:15:38:3e:1e:d1: 4f:f3:8b:5b:87:6b:3b:c4:5d:73:bb:0e:64:5e:9f:ca:a9:f2: 5e:c9:a3:54:4a:d2:a9:55:8d:c1:22:f2:89:db:ea:7d:67:86: e2:00:10:2a -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWEkX3C5a/fsrmJtNMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk YWM3MGRmMTEtM2Q4YS00MDViLThjYjQtZTk4ZmQ3N2YyMDM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApokGNl1B5eSfjwU4DqVZEHLL/qy0fcQgsc0g ZfYToDT0qVWLdioYlvLkETrLviu3IEZg0vKnrlO77G5X8Hpt+xBYGnxA5wWTBWJu NVi6DOMgmWHRedRm8VM73p7JD0XMmm7sPiHlP+j+WhXqfr03kK2heTuGlbIaNd8E 5TeUI3hdVg6dXQVsFiWVrPDXGUm7SWb00KvPcBqnd6acXHCRRBBcEvMde2TrV/ej 94vDKyhMiAw+jd9AfVb26C0gyiF3S+1Ug7BZAAoZMv/Wl5H4aAYh/+CAieJUmPs8 ytlbwofhqRGnKLlFz+WKPJlbRLqSUPFgrYl7tzVZIlyZe1y0HQIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFJPmHlg2BdjJ7hQ56SHJWgJ0kYWDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMzBhZGMyMTAtMDEyNC0z ODU5LTk4ZDQtZjBlNjZhZjdkYTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAIAEEGAAA cAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAktSSdQKpbROrcas1wkbrS1tDjlyAPI+/GEgtgWXPcl6jFmfC Iueb50unZoVDIcFMSQWuYewrtdLLwMmt65Rc2MwxbQ9wa8p0TPdDQI6Q1WuJxkMs PVsrYD4gv8n/chgAGmXlDn9lCrehJ611O9Jed6R2M7E9sxIGDhWWMU/BsaQtoVUz 1J/h5SiJ7QvNhzFk15zMpWu9dp1EZU/ESh1KevqCKdJQnq2yITm4p6uoA0K1jN67 HYTc5+LrRm46h8Qbh3mhtJVlXwxLE8xQ2M8yln4tHBU4Ph7RT/OLW4drO8Rdc7sO ZF6fyqnyXsmjVErSqVWNwSLyidvqfWeG4gAQKg== -----END CERTIFICATE-----Generated at Fri Apr 4 17:23:52 2025 by rpki-client