$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5c235030-9473-333c-b9f5-c321d0f83f48.roa File: 5c235030-9473-333c-b9f5-c321d0f83f48.roa (raw, json) Hash identifier: XhTVPipTsNN5jDkYbfpvZdiqN9hQb8NWRVWKS94hxXw= Subject key identifier: 13:05:29:64:38:FA:0D:10:1C:85:A5:7D:BD:B9:14:25:2B:5C:B3:29 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584917DC2F21EEBC6962B8352CD8 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5c235030-9473-333c-b9f5-c321d0f83f48.roa Signing time: Thu 06 Mar 2025 02:00:39 +0000 ROA not before: Thu 06 Mar 2025 02:00:39 +0000 ROA not after: Wed 04 Jun 2025 01:00:39 +0000 asID: 20940 IP address blocks: 2001:418:8404::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:17:dc:2f:21:ee:bc:69:62:b8:35:2c:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Mar 6 02:00:39 2025 GMT Not After : Jun 4 01:00:39 2025 GMT Subject: CN=f7f17277-d00f-4f35-83ac-5606d9cc99df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:6f:19:41:1d:50:5f:42:5b:7c:c5:31:db:81: e3:d6:0e:4d:c0:b6:4c:d1:2d:84:67:64:ef:ac:bb: cd:49:f8:f3:e8:6c:cc:3a:ee:09:46:5e:4c:b1:4a: cc:d1:1f:4e:b4:0b:ee:7e:ae:ce:0d:76:b4:62:ba: 81:ca:87:01:66:37:29:1d:f1:50:87:a8:a0:b5:f3: de:f5:62:b9:64:a6:87:db:78:de:dd:1a:3c:5d:76: eb:9a:2e:c6:60:2a:18:b5:03:a4:f1:79:b4:a8:eb: c9:f8:e5:8d:24:d5:2c:fa:7a:54:61:19:b4:ea:2e: d3:fa:51:8a:db:4c:57:c9:c6:03:54:bc:92:12:67: 22:a6:ec:c6:aa:13:27:61:3b:3f:31:34:45:da:13: d6:38:a5:6b:fc:05:98:c4:67:5b:1d:09:dc:df:c7: 4c:92:c1:61:63:0c:8c:05:01:fa:05:a0:ed:8a:38: 56:82:52:42:fd:d6:43:69:8a:57:77:65:4e:4e:94: 47:58:e9:03:ad:5f:c7:cf:eb:e3:10:38:6f:9e:82: a6:d4:f9:e7:77:67:d5:28:97:c1:6a:15:99:8a:9f: 7a:7a:3b:79:a5:33:af:9f:bc:31:b7:bc:04:ec:ca: c0:de:ed:0c:29:36:6a:15:89:a6:7d:dd:13:c2:f3: a7:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:05:29:64:38:FA:0D:10:1C:85:A5:7D:BD:B9:14:25:2B:5C:B3:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5c235030-9473-333c-b9f5-c321d0f83f48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv6: 2001:418:8404::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:3f:87:3c:de:10:51:d4:75:71:10:7a:ea:95:3c:ee:f4:fd: dc:1a:3b:37:d2:ad:13:30:21:ab:24:26:65:78:b8:89:66:43: f0:50:05:84:11:cf:0a:0a:63:be:fb:4d:66:33:18:0e:d7:41: a4:8e:b9:29:07:fe:3a:32:5f:84:f3:e1:ff:6c:f4:e8:f4:31: 73:bf:a5:3f:80:40:49:d4:42:c7:34:b8:7b:41:7e:06:4c:b6: ed:27:96:2d:1b:29:0b:c2:1f:9f:f3:dc:35:7c:b4:ad:bb:93: 1f:9d:72:10:ed:e0:18:73:1d:6c:78:ea:e4:92:8d:01:3a:11: 72:b9:57:6e:32:b9:a5:df:0d:26:cb:71:54:18:b5:a6:ef:b7: 21:bd:bf:5c:66:bd:c0:d8:75:30:69:17:5f:c3:02:c2:b9:44: f4:67:18:cd:e6:d0:73:ed:5a:a0:c1:e4:40:1d:e6:07:3f:37: ae:0a:16:3d:b1:ff:cc:7b:75:01:d4:4b:3e:9d:bc:4e:2c:93: 62:66:30:37:9c:78:40:d2:9f:61:c7:3b:e2:43:b7:d5:80:40: 5a:c1:c7:d5:50:83:bb:79:05:f2:70:46:52:10:82:ac:5b:15: 0f:76:b8:6b:b4:5f:da:aa:8c:4b:03:ee:77:1e:4d:56:fc:ed: 99:5d:c7:32 -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWEkX3C8h7rxpYrg1LNgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk ZjdmMTcyNzctZDAwZi00ZjM1LTgzYWMtNTYwNmQ5Y2M5OWRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxG8ZQR1QX0JbfMUx24Hj1g5NwLZM0S2EZ2Tv rLvNSfjz6GzMOu4JRl5MsUrM0R9OtAvufq7ODXa0YrqByocBZjcpHfFQh6igtfPe 9WK5ZKaH23je3Ro8XXbrmi7GYCoYtQOk8Xm0qOvJ+OWNJNUs+npUYRm06i7T+lGK 20xXycYDVLySEmcipuzGqhMnYTs/MTRF2hPWOKVr/AWYxGdbHQnc38dMksFhYwyM BQH6BaDtijhWglJC/dZDaYpXd2VOTpRHWOkDrV/Hz+vjEDhvnoKm1Pnnd2fVKJfB ahWZip96ejt5pTOvn7wxt7wE7MrA3u0MKTZqFYmmfd0TwvOnmwIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFBMFKWQ4+g0QHIWlfb25FCUrXLMpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNWMyMzUwMzAtOTQ3My0z MzNjLWI5ZjUtYzMyMWQwZjgzZjQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAIAEEGIQE AAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAAz+HPN4QUdR1cRB66pU87vT93Bo7N9KtEzAhqyQmZXi4iWZD 8FAFhBHPCgpjvvtNZjMYDtdBpI65KQf+OjJfhPPh/2z06PQxc7+lP4BASdRCxzS4 e0F+Bky27SeWLRspC8Ifn/PcNXy0rbuTH51yEO3gGHMdbHjq5JKNAToRcrlXbjK5 pd8NJstxVBi1pu+3Ib2/XGa9wNh1MGkXX8MCwrlE9GcYzebQc+1aoMHkQB3mBz83 rgoWPbH/zHt1AdRLPp28TiyTYmYwN5x4QNKfYcc74kO31YBAWsHH1VCDu3kF8nBG UhCCrFsVD3a4a7Rf2qqMSwPudx5NVvztmV3HMg== -----END CERTIFICATE-----Generated at Fri Apr 4 17:30:37 2025 by rpki-client