$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3b035878-f1ae-3036-94e4-2a11a6346da4.roa File: 3b035878-f1ae-3036-94e4-2a11a6346da4.roa (raw, json) Hash identifier: 16e3K4c9eesWHYCT+J6HgeiCAtsOtcM8/pHGMha2gi8= Subject key identifier: 56:2D:A0:8F:9F:AD:9C:BC:DD:89:76:B8:A6:27:EE:96:F1:74:6D:F0 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F432858491D7184BC941BCE3AFAE9AD40 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3b035878-f1ae-3036-94e4-2a11a6346da4.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 20940 IP address blocks: 2001:418:1401:7d::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:84:bc:94:1b:ce:3a:fa:e9:ad:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=3cbc0811-eace-4fe3-8522-5fdc15613d7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:30:1b:11:63:b6:18:b4:7b:e0:50:73:94:db: 26:f6:91:8e:db:16:fc:50:d8:55:25:48:ee:5a:ec: b3:79:4e:3f:c6:f5:67:85:ce:67:c7:cb:2c:6b:51: c6:ee:7c:c7:bc:51:84:59:8f:80:a8:0e:91:9e:10: c7:fa:da:d9:0e:40:63:29:83:fa:08:fe:7f:d3:53: b6:1d:f4:c9:41:d7:d9:ba:f8:ce:1b:78:f8:97:8a: 4e:35:f1:08:98:15:a8:8b:28:3b:a1:0f:e1:7f:dd: 65:a8:b1:bc:d4:50:98:7e:e9:fc:44:c6:f7:12:da: 5f:a5:fc:de:c2:83:8c:90:e0:df:2a:3a:56:72:f1: 40:74:c8:e0:4b:44:20:01:24:fc:25:55:31:9e:95: 40:ab:b6:4c:4f:8c:0f:06:12:d5:74:f2:53:d3:2f: 68:ae:8e:a1:8b:cd:1c:6b:db:2d:20:47:1a:07:76: d3:00:9f:60:85:78:a9:b0:d5:00:fa:e5:f2:bf:89: 35:76:0a:ac:d2:b2:96:f2:55:c2:24:a1:ac:86:ef: 61:9a:d6:9c:f7:56:11:eb:ed:75:b5:b7:67:23:cb: 2a:b2:b5:9c:78:27:28:ab:e7:ff:cd:0b:9c:37:df: 16:5a:1f:9b:07:6e:7a:fc:ad:44:7d:36:8e:6e:c8: d0:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:2D:A0:8F:9F:AD:9C:BC:DD:89:76:B8:A6:27:EE:96:F1:74:6D:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3b035878-f1ae-3036-94e4-2a11a6346da4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv6: 2001:418:1401:7d::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:d3:10:0c:4a:14:e7:fb:f3:93:b6:26:e2:dd:a1:84:1d:27: c2:01:07:1b:37:a7:a9:1f:3a:e5:f6:a3:40:eb:db:8a:67:8b: 39:16:96:06:06:19:9c:6a:f4:3c:0f:73:75:fa:34:29:0f:92: 43:39:b9:c4:c9:49:0d:65:0d:78:67:0f:fe:5d:09:75:a3:7b: 4b:4b:94:70:38:c1:92:de:19:49:0f:af:70:09:98:c5:1d:34: e4:8e:9e:b7:d1:4d:7b:c9:c5:ea:cf:a8:8d:a3:6f:ae:75:74: 13:68:f4:6d:f1:3e:3e:fe:68:ce:4d:f8:4d:1c:1f:66:91:5b: 91:41:a1:5e:45:03:ee:e1:f1:f8:3d:66:4d:57:ce:3f:06:22: e4:86:67:8f:b3:51:90:6c:f2:3a:28:1f:52:4b:05:aa:46:a7: 6f:da:92:f8:ec:fe:51:61:f2:12:af:34:57:d4:fd:fc:25:b0: 32:20:17:d2:dc:a3:72:09:92:6e:18:07:f3:27:93:37:c9:49: 31:a0:49:97:cd:11:0f:1f:ef:f6:52:71:c2:52:ff:2b:32:1f: 1c:ef:71:30:f9:73:8b:b2:1a:27:73:12:a8:c2:ac:f5:c9:9c: a3:2a:22:01:e8:33:9a:e7:87:0c:bd:dc:e9:5c:72:58:13:54: d0:eb:d0:fe -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWEkdcYS8lBvOOvrprUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk M2NiYzA4MTEtZWFjZS00ZmUzLTg1MjItNWZkYzE1NjEzZDdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDAbEWO2GLR74FBzlNsm9pGO2xb8UNhVJUju WuyzeU4/xvVnhc5nx8ssa1HG7nzHvFGEWY+AqA6RnhDH+trZDkBjKYP6CP5/01O2 HfTJQdfZuvjOG3j4l4pONfEImBWoiyg7oQ/hf91lqLG81FCYfun8RMb3Etpfpfze woOMkODfKjpWcvFAdMjgS0QgAST8JVUxnpVAq7ZMT4wPBhLVdPJT0y9oro6hi80c a9stIEcaB3bTAJ9ghXipsNUA+uXyv4k1dgqs0rKW8lXCJKGshu9hmtac91YR6+11 tbdnI8sqsrWceCcoq+f/zQucN98WWh+bB256/K1EfTaObsjQ4QIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFFYtoI+frZy83Yl2uKYn7pbxdG3wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvM2IwMzU4NzgtZjFhZS0z MDM2LTk0ZTQtMmExMWE2MzQ2ZGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAIAEEGBQB AH0wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEActMQDEoU5/vzk7Ym4t2hhB0nwgEHGzenqR865fajQOvbimeL ORaWBgYZnGr0PA9zdfo0KQ+SQzm5xMlJDWUNeGcP/l0JdaN7S0uUcDjBkt4ZSQ+v cAmYxR005I6et9FNe8nF6s+ojaNvrnV0E2j0bfE+Pv5ozk34TRwfZpFbkUGhXkUD 7uHx+D1mTVfOPwYi5IZnj7NRkGzyOigfUksFqkanb9qS+Oz+UWHyEq80V9T9/CWw MiAX0tyjcgmSbhgH8yeTN8lJMaBJl80RDx/v9lJxwlL/KzIfHO9xMPlzi7IaJ3MS qMKs9cmcoyoiAegzmueHDL3c6VxyWBNU0OvQ/g== -----END CERTIFICATE-----Generated at Fri Apr 4 17:13:45 2025 by rpki-client