$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c1c9275e-3166-38df-9204-a7da58d008ca.roa File: c1c9275e-3166-38df-9204-a7da58d008ca.roa (raw, json) Hash identifier: LWAe/05mnY+Sr1dsx41oGpphry4xMRqV8L6HdjoJDCo= Subject key identifier: D0:50:80:3E:5A:D2:27:D0:C0:3A:E5:63:22:42:FE:5E:3D:B2:5F:43 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F43285848FBF12B5A72EC713EDFFBA240 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c1c9275e-3166-38df-9204-a7da58d008ca.roa Signing time: Mon 24 Feb 2025 02:00:38 +0000 ROA not before: Mon 24 Feb 2025 02:00:38 +0000 ROA not after: Sun 25 May 2025 01:00:38 +0000 asID: 3939 IP address blocks: 2001:418:1407::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fb:f1:2b:5a:72:ec:71:3e:df:fb:a2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Feb 24 02:00:38 2025 GMT Not After : May 25 01:00:38 2025 GMT Subject: CN=0acd2688-cc37-43c4-92a6-0fcc9d457cac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:ed:a5:13:a2:62:7c:2d:75:86:43:c8:91:d3: aa:59:b7:0e:94:3d:c9:ea:b8:01:66:20:2f:90:62: 1b:34:2b:45:60:53:30:8c:b0:cb:79:21:0b:f7:44: 60:96:24:f0:c6:83:d2:e5:3a:df:50:52:34:3c:1c: 12:f7:9e:01:f0:9a:8e:92:07:d1:85:35:27:0b:9b: b0:9e:39:f1:62:e8:c2:07:b5:6e:4e:c4:3c:a0:c2: bc:42:d5:09:5a:fe:f3:4e:62:50:21:c4:0b:8d:a0: ca:a4:7a:39:f0:4c:6b:24:cf:43:8f:0d:67:12:66: c6:08:b0:84:12:34:3e:eb:19:70:49:8a:6d:b3:d0: 8d:19:a9:34:a7:2b:d4:f1:d1:8c:d8:17:97:cb:f2: 63:13:35:c2:d2:92:87:e4:bb:bc:15:0f:64:5d:84: ea:a7:a2:be:10:43:3b:74:bc:ec:28:bc:51:c7:c1: 6e:3a:ea:4b:94:78:df:3c:18:92:26:bf:9f:71:8b: 08:52:6b:1e:20:45:dc:58:cb:0c:2a:90:79:ca:b2: 4b:4b:37:bd:09:a8:e4:4b:21:51:cb:d7:f1:44:a0: 66:12:16:3f:83:5e:bf:ad:3e:be:98:03:9c:db:ec: 54:b2:03:47:0a:31:26:6f:98:fc:cf:ea:a9:ad:74: 22:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:50:80:3E:5A:D2:27:D0:C0:3A:E5:63:22:42:FE:5E:3D:B2:5F:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c1c9275e-3166-38df-9204-a7da58d008ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv6: 2001:418:1407::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:0f:c3:f2:d0:01:fc:74:25:24:19:ef:b4:c4:18:91:d3:a8: 6e:42:67:ec:00:22:13:5c:5c:2c:aa:cc:ab:3e:bf:37:55:21: 8e:da:2d:68:10:09:a8:da:45:c1:9c:f4:83:2c:fe:b4:8b:d7: d6:e0:1d:d1:c5:9a:e0:e6:92:ed:54:5b:1d:a5:a9:13:ed:b2: 49:06:3e:f9:85:a3:ba:39:3f:ad:02:a6:37:eb:37:69:25:f3: 47:7b:2e:e4:53:dd:a7:d6:d0:a4:a1:a0:9e:83:de:a9:cc:62: 4e:6c:53:3a:53:cc:19:74:78:40:6b:0c:36:ec:09:a7:c7:75: 21:00:78:e3:22:eb:64:8d:87:92:6b:c7:7f:64:4b:c3:f2:90: a2:3c:52:5e:28:29:d7:0d:8f:3c:49:0a:c5:32:70:32:2b:cd: a7:ed:2b:40:71:13:a0:99:47:6c:ca:08:2f:d3:1d:50:6e:62: 6d:33:ed:33:09:7a:de:a5:c8:42:8a:89:21:3f:90:98:e5:4e: d6:a0:ea:20:7b:db:44:d4:72:92:ad:4e:12:d2:1e:36:a9:6b: 64:f0:47:89:ca:bb:34:f7:5a:d6:15:a1:df:6f:ae:3a:cb:42: b9:1d:11:0f:71:40:7c:96:d4:7c:c6:78:60:4e:a9:56:44:b2: ba:7b:36:95 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj78StacuxxPt/7okAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDIyNDAyMDAzOFoXDTI1MDUyNTAxMDAzOFowLzEtMCsGA1UEAxMk MGFjZDI2ODgtY2MzNy00M2M0LTkyYTYtMGZjYzlkNDU3Y2FjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhu2lE6JifC11hkPIkdOqWbcOlD3J6rgBZiAv kGIbNCtFYFMwjLDLeSEL90RgliTwxoPS5TrfUFI0PBwS954B8JqOkgfRhTUnC5uw njnxYujCB7VuTsQ8oMK8QtUJWv7zTmJQIcQLjaDKpHo58ExrJM9Djw1nEmbGCLCE EjQ+6xlwSYpts9CNGak0pyvU8dGM2BeXy/JjEzXC0pKH5Lu8FQ9kXYTqp6K+EEM7 dLzsKLxRx8FuOupLlHjfPBiSJr+fcYsIUmseIEXcWMsMKpB5yrJLSze9CajkSyFR y9fxRKBmEhY/g16/rT6+mAOc2+xUsgNHCjEmb5j8z+qprXQiGQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNBQgD5a0ifQwDrlYyJC/l49sl9DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYzFjOTI3NWUtMzE2Ni0z OGRmLTkyMDQtYTdkYTU4ZDAwOGNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEGBQH MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALkPw/LQAfx0JSQZ77TEGJHTqG5CZ+wAIhNcXCyqzKs+vzdVIY7a LWgQCajaRcGc9IMs/rSL19bgHdHFmuDmku1UWx2lqRPtskkGPvmFo7o5P60Cpjfr N2kl80d7LuRT3afW0KShoJ6D3qnMYk5sUzpTzBl0eEBrDDbsCafHdSEAeOMi62SN h5Jrx39kS8PykKI8Ul4oKdcNjzxJCsUycDIrzaftK0BxE6CZR2zKCC/THVBuYm0z 7TMJet6lyEKKiSE/kJjlTtag6iB720TUcpKtThLSHjapa2TwR4nKuzT3WtYVod9v rjrLQrkdEQ9xQHyW1HzGeGBOqVZEsrp7NpU= -----END CERTIFICATE-----Generated at Fri Apr 4 17:25:14 2025 by rpki-client