$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/20dbd30b-2870-3a61-8ac4-eefb7135fc1e.roa File: 20dbd30b-2870-3a61-8ac4-eefb7135fc1e.roa (raw, json) Hash identifier: VV1bTvYopDRmMva+rlTZSOWbpJJPKwLpmiHthyFgPi8= Subject key identifier: FD:39:BE:5C:04:24:44:BC:14:9C:67:3F:BE:57:64:0E:24:12:21:3D Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Certificate serial: 010D0C9F43285848E2D1CAF4B70D7488123DF640 Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/20dbd30b-2870-3a61-8ac4-eefb7135fc1e.roa Signing time: Sat 15 Feb 2025 02:00:39 +0000 ROA not before: Sat 15 Feb 2025 02:00:39 +0000 ROA not after: Fri 16 May 2025 01:00:39 +0000 asID: 12271 IP address blocks: 2603:7000::/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e2:d1:ca:f4:b7:0d:74:88:12:3d:f6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Validity Not Before: Feb 15 02:00:39 2025 GMT Not After : May 16 01:00:39 2025 GMT Subject: CN=7e416ca8-0a6c-441b-87dc-0c6a52974c54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ee:5b:ba:f1:e5:e2:fa:42:07:f8:4e:cc:b0: e0:12:33:6b:2c:81:ee:f9:21:05:75:a2:91:df:64: 00:8c:8d:63:98:2b:b4:a5:4d:61:02:09:bf:75:a7: 79:ca:d1:13:bf:cf:d0:a3:0d:08:f5:90:d1:ed:8f: a3:3a:5c:da:c9:c3:75:45:01:d3:e5:3a:0f:41:21: c9:dc:96:62:06:49:33:5d:00:2a:c7:e4:dd:47:57: 71:97:c0:3e:9c:f5:1e:63:11:69:88:2f:10:96:5f: 27:2d:a4:f5:e0:de:80:02:cc:7a:5c:10:8d:d7:c1: 11:be:88:3e:99:f1:1e:e5:90:bd:a4:af:4b:4f:f7: e8:49:45:bd:f2:04:a7:48:c9:85:55:24:59:1d:b3: 77:ab:d4:ce:de:95:95:68:a5:bd:4b:7e:14:5a:42: 43:5c:c6:d3:97:4c:68:66:ee:23:e3:6a:cb:5f:73: e3:c6:c7:d4:ae:68:85:8b:e5:8e:4b:17:7d:ea:d7: 96:86:56:19:b4:f5:63:26:62:6b:70:97:99:fb:00: 4d:46:ba:0d:61:94:9c:c2:a6:ab:11:c4:45:e9:f0: fe:a6:22:d7:23:82:9f:5e:53:fb:fa:5a:43:e1:d3: 6f:f7:0e:bc:85:aa:f9:de:1f:9f:55:cf:c5:21:ba: d8:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:39:BE:5C:04:24:44:BC:14:9C:67:3F:BE:57:64:0E:24:12:21:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/20dbd30b-2870-3a61-8ac4-eefb7135fc1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl X509v3 Authority Key Identifier: keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer sbgp-ipAddrBlock: critical IPv6: 2603:7000::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:ca:5f:a6:9d:b0:7e:d6:39:09:67:bf:c6:32:10:6f:52:3e: f1:fa:4d:b9:06:fa:dd:95:72:2d:72:78:45:51:47:23:3c:12: e8:5a:49:1c:77:a1:15:cd:f3:7c:e8:49:41:bc:e4:c3:7e:f6: fb:d8:a7:85:f2:34:26:4f:05:44:ed:4a:95:b5:32:7d:17:49: 27:90:78:af:52:59:f3:57:c8:59:73:f5:09:d7:31:d3:56:f4: 17:36:a1:34:84:bd:8e:3e:c1:e6:32:ff:3d:54:f8:64:fa:51: d9:df:6a:0b:4e:9d:58:58:04:d5:3c:83:36:41:5c:a2:cd:29: 98:14:25:29:f1:1c:6b:7f:3e:b0:8b:6b:1f:87:0c:de:a5:74: b7:08:c7:6c:24:fd:49:04:c6:39:fd:4b:2f:1a:d2:5c:e5:35: 0a:3d:1e:80:91:93:cd:a6:81:9a:cd:c4:80:67:63:d2:bb:61: 1b:d1:62:6c:b3:d2:d2:11:da:d1:bd:58:d2:d1:c4:84:aa:b2: 35:fb:f4:f0:01:8a:9d:0b:73:69:e4:f1:c7:d5:bb:00:11:6e: 51:c3:18:da:e7:5f:45:dd:30:8c:73:79:78:5c:07:3e:63:91: 75:21:7d:a9:e8:6b:be:e6:b5:13:32:1d:cb:22:67:e5:4b:31: cf:a1:e1:4b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEji0cr0tw10iBI99kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4 NDdmMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk N2U0MTZjYTgtMGE2Yy00NDFiLTg3ZGMtMGM2YTUyOTc0YzU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+5buvHl4vpCB/hOzLDgEjNrLIHu+SEFdaKR 32QAjI1jmCu0pU1hAgm/dad5ytETv8/Qow0I9ZDR7Y+jOlzaycN1RQHT5ToPQSHJ 3JZiBkkzXQAqx+TdR1dxl8A+nPUeYxFpiC8Qll8nLaT14N6AAsx6XBCN18ERvog+ mfEe5ZC9pK9LT/foSUW98gSnSMmFVSRZHbN3q9TO3pWVaKW9S34UWkJDXMbTl0xo Zu4j42rLX3PjxsfUrmiFi+WOSxd96teWhlYZtPVjJmJrcJeZ+wBNRroNYZScwqar EcRF6fD+piLXI4KfXlP7+lpD4dNv9w68har53h+fVc/FIbrYIQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFP05vlwEJES8FJxnP75XZA4kEiE9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvMjBkYmQzMGItMjg3MC0z YTYxLThhYzQtZWVmYjcxMzVmYzFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj NmNjZTg0N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgNwADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAHyl+mnbB+1jkJZ7/GMhBvUj7x+k25BvrdlXItcnhFUUcjPBLoWkkc d6EVzfN86ElBvOTDfvb72KeF8jQmTwVE7UqVtTJ9F0knkHivUlnzV8hZc/UJ1zHT VvQXNqE0hL2OPsHmMv89VPhk+lHZ32oLTp1YWATVPIM2QVyizSmYFCUp8Rxrfz6w i2sfhwzepXS3CMdsJP1JBMY5/UsvGtJc5TUKPR6AkZPNpoGazcSAZ2PSu2Eb0WJs s9LSEdrRvVjS0cSEqrI1+/TwAYqdC3Np5PHH1bsAEW5Rwxja519F3TCMc3l4XAc+ Y5F1IX2p6Gu+5rUTMh3LImflSzHPoeFL -----END CERTIFICATE-----Generated at Sat Apr 5 23:24:31 2025 by rpki-client