$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/c299288c-7614-30cd-a6e7-c56fc746d67e.roa File: c299288c-7614-30cd-a6e7-c56fc746d67e.roa (raw, json) Hash identifier: nfrH9qtCu3JuTCxBxDXZxVvQ559ndclNLc4kuK5PxXM= Subject key identifier: 0F:81:F2:7B:0F:8B:CE:AB:F7:BD:A8:09:20:63:23:72:1E:BF:2D:1E Certificate issuer: /CN=fadcb874-6a9f-43d3-9f1c-eac4987918bb Certificate serial: 010D0C9F43285848CB1659E0B76423C24E14FB40 Authority key identifier: 8D:17:5A:B9:8B:0A:E6:36:0F:02:B0:60:97:54:4B:12:55:3E:39:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/c299288c-7614-30cd-a6e7-c56fc746d67e.roa Signing time: Thu 06 Feb 2025 14:00:52 +0000 ROA not before: Thu 06 Feb 2025 14:00:52 +0000 ROA not after: Wed 07 May 2025 13:00:52 +0000 asID: 33322 IP address blocks: 2607:fbb0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cb:16:59:e0:b7:64:23:c2:4e:14:fb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fadcb874-6a9f-43d3-9f1c-eac4987918bb Validity Not Before: Feb 6 14:00:52 2025 GMT Not After : May 7 13:00:52 2025 GMT Subject: CN=d72b3891-7895-46bd-b651-fb22eca8ee00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:20:04:e5:2c:b2:d7:9d:cb:f4:5c:ce:25:35: 1d:cb:9f:4b:67:24:12:d0:42:45:a8:d0:85:74:a9: 09:97:74:5e:04:ea:69:52:2b:1e:46:b2:d0:a4:38: 1e:48:fd:47:fa:f4:14:6b:2d:fc:9a:1d:9c:ab:24: 13:8c:48:37:1a:c7:3a:ea:a8:db:8b:3c:62:a9:3d: 80:88:0d:45:c1:02:db:17:44:b1:37:f5:61:c0:5d: 54:78:be:db:96:11:11:c9:00:08:dd:19:56:1b:fd: 2e:d6:2a:64:df:a5:b2:9b:28:a0:87:04:8a:7f:fd: 8d:1f:75:38:7f:90:75:13:f2:d4:41:2e:77:74:cc: b5:3c:df:ec:11:a7:18:94:c0:a5:94:fb:36:e1:eb: 55:65:42:e9:8f:ea:02:48:c4:50:33:a4:84:68:85: 71:97:d3:be:0d:7c:0d:a3:51:20:1e:35:6b:5b:dc: 47:a5:4f:c7:f5:a2:df:f9:64:88:37:b6:04:50:b2: bf:65:94:e9:f9:e7:e9:da:00:67:c2:74:10:85:cc: 9e:a6:f9:eb:04:14:84:d8:c5:8f:db:22:ec:3f:39: 0b:10:01:05:b4:83:fa:7d:cc:ad:28:f0:47:33:f4: 06:2f:ab:97:61:82:15:ba:6a:73:13:22:d7:43:7d: 2f:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:81:F2:7B:0F:8B:CE:AB:F7:BD:A8:09:20:63:23:72:1E:BF:2D:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/c299288c-7614-30cd-a6e7-c56fc746d67e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.crl X509v3 Authority Key Identifier: keyid:8D:17:5A:B9:8B:0A:E6:36:0F:02:B0:60:97:54:4B:12:55:3E:39:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer sbgp-ipAddrBlock: critical IPv6: 2607:fbb0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:26:35:f4:63:f6:b8:8c:f6:38:6a:0d:38:df:a1:30:3b:d7: 8a:de:cf:f2:24:22:c3:f0:a0:7a:d4:15:e5:60:1f:bd:1d:ab: ce:de:d0:c1:f3:ae:5e:11:ed:91:f7:60:07:40:ed:24:28:fd: d1:96:16:c5:e2:41:ff:d8:5f:25:68:df:7e:b6:86:2c:6c:0c: 68:3d:bd:7b:61:27:47:ae:58:aa:f1:53:ce:58:ea:5b:fd:64: 53:72:0e:2c:73:0f:2c:5e:ba:b8:6d:69:c8:91:dd:7a:09:d5: 5d:3c:59:6f:79:c6:ac:9a:8a:77:c2:19:9d:b4:df:85:66:15: 96:4e:18:21:ad:2f:f3:29:2c:38:36:5d:a3:57:a3:9b:8f:86: a4:b3:48:76:2a:fc:8c:b2:a9:44:1a:9c:91:35:d9:ad:8a:f8: 5e:81:70:fa:2b:fa:33:53:29:bf:59:7a:b1:b5:25:e6:63:a9: 05:3a:1a:00:66:0f:de:33:e8:07:4f:f1:90:91:1f:3d:57:05: 6c:85:f2:54:e0:c0:62:60:db:f1:d0:24:60:82:03:e0:e5:94: 0c:35:4a:e7:31:b8:2c:dc:c9:fa:29:90:13:da:41:a2:ac:ea: a2:b9:b1:2f:03:49:b0:4a:6d:37:e3:4a:ff:16:4d:5e:bc:37: 94:25:cd:22 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjLFlngt2Qjwk4U+0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmFkY2I4NzQtNmE5Zi00M2QzLTlmMWMtZWFjNDk4Nzkx OGJiMB4XDTI1MDIwNjE0MDA1MloXDTI1MDUwNzEzMDA1MlowLzEtMCsGA1UEAxMk ZDcyYjM4OTEtNzg5NS00NmJkLWI2NTEtZmIyMmVjYThlZTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkyAE5Syy153L9FzOJTUdy59LZyQS0EJFqNCF dKkJl3ReBOppUiseRrLQpDgeSP1H+vQUay38mh2cqyQTjEg3Gsc66qjbizxiqT2A iA1FwQLbF0SxN/VhwF1UeL7blhERyQAI3RlWG/0u1ipk36WymyighwSKf/2NH3U4 f5B1E/LUQS53dMy1PN/sEacYlMCllPs24etVZULpj+oCSMRQM6SEaIVxl9O+DXwN o1EgHjVrW9xHpU/H9aLf+WSIN7YEULK/ZZTp+efp2gBnwnQQhcyepvnrBBSE2MWP 2yLsPzkLEAEFtIP6fcytKPBHM/QGL6uXYYIVumpzEyLXQ30vwwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFA+B8nsPi86r972oCSBjI3Ievy0eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mYWRj Yjg3NC02YTlmLTQzZDMtOWYxYy1lYWM0OTg3OTE4YmIvYzI5OTI4OGMtNzYxNC0z MGNkLWE2ZTctYzU2ZmM3NDZkNjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmFkY2I4NzQtNmE5Zi00M2QzLTlm MWMtZWFjNDk4NzkxOGJiL2ZhZGNiODc0LTZhOWYtNDNkMy05ZjFjLWVhYzQ5ODc5 MThiYi5jcmwwHwYDVR0jBBgwFoAUjRdauYsK5jYPArBgl1RLElU+OdMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mYWRjYjg3NC02YTlmLTQzZDMtOWYxYy1lYWM0 OTg3OTE4YmIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf7sDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCEJjX0Y/a4jPY4ag0436EwO9eK3s/yJCLD8KB61BXlYB+9HavO3tDB 865eEe2R92AHQO0kKP3RlhbF4kH/2F8laN9+toYsbAxoPb17YSdHrliq8VPOWOpb /WRTcg4scw8sXrq4bWnIkd16CdVdPFlvecasmop3whmdtN+FZhWWThghrS/zKSw4 Nl2jV6Obj4aks0h2KvyMsqlEGpyRNdmtivhegXD6K/ozUym/WXqxtSXmY6kFOhoA Zg/eM+gHT/GQkR89VwVshfJU4MBiYNvx0CRgggPg5ZQMNUrnMbgs3Mn6KZAT2kGi rOqiubEvA0mwSm0340r/Fk1evDeUJc0i -----END CERTIFICATE-----Generated at Wed Apr 16 03:10:31 2025 by rpki-client