$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec/56510e5b-a1c3-3cf0-b907-0500c8eaefc4.roa File: 56510e5b-a1c3-3cf0-b907-0500c8eaefc4.roa (raw, json) Hash identifier: S1fZmakKY0mmFiv0N0vbCz3OeMnbcuJn3IeKYqBqSg0= Subject key identifier: F7:9C:34:CE:71:C3:07:CF:02:0E:43:28:BC:07:47:E6:73:1F:CA:39 Certificate issuer: /CN=13fecd24-0da7-4140-9636-71a72de851ec Certificate serial: 010D0C9F43285848A99634269FCDBED788323900 Authority key identifier: 71:FB:07:EC:96:DD:BA:1E:51:4A:24:E7:48:C8:35:54:36:D1:14:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec/56510e5b-a1c3-3cf0-b907-0500c8eaefc4.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 16509 IP address blocks: 2604:d0c0:ae00::/40 maxlen: 56 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec/13fecd24-0da7-4140-9636-71a72de851ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec/13fecd24-0da7-4140-9636-71a72de851ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:34:26:9f:cd:be:d7:88:32:39:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13fecd24-0da7-4140-9636-71a72de851ec Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=efd65e0e-9fcc-4421-83f2-c5c3d768f7cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:87:6d:5a:f6:1c:53:5e:a6:79:a9:ce:e6:91: a8:90:d9:47:8e:b0:84:db:0b:f7:a1:0d:cf:cb:1b: c0:38:65:7c:f7:7b:85:c7:a0:6d:8b:aa:ee:ea:18: 44:45:81:34:81:c0:f0:19:fa:ef:cc:f2:5b:4d:e5: 43:b1:37:58:f6:62:46:75:ca:fb:ac:a5:04:0b:62: 68:3c:e0:38:50:4c:64:a6:84:50:ea:96:6f:89:e8: a5:37:f3:47:4c:b9:ac:b3:07:09:48:93:c4:9f:29: a2:ab:e5:9d:2d:dc:d4:17:ae:ef:cf:d5:f2:b7:1c: 9c:5a:fe:3d:c9:81:82:a4:fb:91:f0:14:18:df:28: 7f:d9:d6:bd:6f:b3:df:a0:de:79:8e:31:23:7b:cd: c3:8d:9a:5d:d4:6e:6e:ba:89:b7:8c:c1:14:3b:b7: 60:98:1d:48:64:c1:b7:c7:7a:0f:55:e0:89:57:fc: 99:9c:8b:5a:45:e1:53:7c:7d:92:cd:7c:ba:f8:ee: d8:e8:8a:22:ca:06:68:92:6e:18:df:01:f1:1a:b4: 51:97:b0:dc:2e:c6:85:a7:4a:82:b5:e0:15:f0:46: ea:79:0c:f4:6f:19:4a:f4:4f:70:be:c8:46:3c:7b: d9:69:d2:af:72:5c:7d:6f:7a:b2:f8:4f:06:ec:45: d9:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:9C:34:CE:71:C3:07:CF:02:0E:43:28:BC:07:47:E6:73:1F:CA:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec/56510e5b-a1c3-3cf0-b907-0500c8eaefc4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec/13fecd24-0da7-4140-9636-71a72de851ec.crl X509v3 Authority Key Identifier: keyid:71:FB:07:EC:96:DD:BA:1E:51:4A:24:E7:48:C8:35:54:36:D1:14:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec.cer sbgp-ipAddrBlock: critical IPv6: 2604:d0c0:ae00::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:d6:82:aa:29:53:13:f4:15:81:13:29:99:2a:84:e6:70:da: 41:7e:12:bf:5c:60:be:7f:69:38:af:f2:f5:bc:47:ec:5a:e3: 6a:85:f9:e5:24:68:01:25:28:60:e3:d9:24:a4:37:5d:e4:e4: eb:8a:72:2f:64:15:85:d8:7a:5e:ca:b9:bb:7f:73:39:f6:15: 52:2d:1c:34:be:ad:95:31:82:71:c4:e1:52:12:de:2c:ec:01: 7e:1d:3d:bf:b6:0c:57:ba:14:b8:69:7c:5b:55:6d:ab:3a:60: 4d:fc:0d:c0:3f:47:4c:f2:13:43:a9:9e:21:87:2b:90:d3:fe: 01:fd:72:77:98:3f:68:a8:63:63:82:41:dc:d3:da:2b:aa:3e: 86:b2:09:bb:9e:a7:6c:59:fe:aa:c1:4b:b9:b4:12:fc:e8:5d: 08:31:f8:78:fb:74:b9:17:02:7f:05:47:51:8e:86:bc:3d:38: 50:4a:dc:a5:35:99:ef:18:f6:26:41:4e:45:68:e5:2d:f8:56: fb:12:f3:46:a2:2d:a8:58:7e:6e:20:60:db:6b:35:32:03:dc: 29:d1:78:d5:1d:b3:c5:9a:16:86:b4:fc:d5:2a:0c:43:c0:9e: cc:5c:6c:59:b4:63:2d:e1:02:83:76:f9:54:3c:33:d2:d2:73: 5b:d7:3d:17 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEipljQmn82+14gyOQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTNmZWNkMjQtMGRhNy00MTQwLTk2MzYtNzFhNzJkZTg1 MWVjMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk ZWZkNjVlMGUtOWZjYy00NDIxLTgzZjItYzVjM2Q3NjhmN2NmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyodtWvYcU16meanO5pGokNlHjrCE2wv3oQ3P yxvAOGV893uFx6Bti6ru6hhERYE0gcDwGfrvzPJbTeVDsTdY9mJGdcr7rKUEC2Jo POA4UExkpoRQ6pZvieilN/NHTLmsswcJSJPEnymiq+WdLdzUF67vz9XytxycWv49 yYGCpPuR8BQY3yh/2da9b7PfoN55jjEje83DjZpd1G5uuom3jMEUO7dgmB1IZMG3 x3oPVeCJV/yZnItaReFTfH2SzXy6+O7Y6IoiygZokm4Y3wHxGrRRl7DcLsaFp0qC teAV8EbqeQz0bxlK9E9wvshGPHvZadKvclx9b3qy+E8G7EXZcQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFPecNM5xwwfPAg5DKLwHR+ZzH8o5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xM2Zl Y2QyNC0wZGE3LTQxNDAtOTYzNi03MWE3MmRlODUxZWMvNTY1MTBlNWItYTFjMy0z Y2YwLWI5MDctMDUwMGM4ZWFlZmM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMTNmZWNkMjQtMGRhNy00MTQwLTk2 MzYtNzFhNzJkZTg1MWVjLzEzZmVjZDI0LTBkYTctNDE0MC05NjM2LTcxYTcyZGU4 NTFlYy5jcmwwHwYDVR0jBBgwFoAUcfsH7Jbduh5RSiTnSMg1VDbRFH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xM2ZlY2QyNC0wZGE3LTQxNDAtOTYzNi03MWE3 MmRlODUxZWMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTQwK4w VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAdNaCqilTE/QVgRMpmSqE5nDaQX4Sv1xgvn9pOK/y9bxH7FrjaoX5 5SRoASUoYOPZJKQ3XeTk64pyL2QVhdh6Xsq5u39zOfYVUi0cNL6tlTGCccThUhLe LOwBfh09v7YMV7oUuGl8W1VtqzpgTfwNwD9HTPITQ6meIYcrkNP+Af1yd5g/aKhj Y4JB3NPaK6o+hrIJu56nbFn+qsFLubQS/OhdCDH4ePt0uRcCfwVHUY6GvD04UErc pTWZ7xj2JkFORWjlLfhW+xLzRqItqFh+biBg22s1MgPcKdF41R2zxZoWhrT81SoM Q8CezFxsWbRjLeECg3b5VDwz0tJzW9c9Fw== -----END CERTIFICATE-----Generated at Fri Mar 14 11:17:49 2025 by rpki-client