$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/0386289b-1e11-3e7e-ad9b-ae64318e48d9.roa File: 0386289b-1e11-3e7e-ad9b-ae64318e48d9.roa (raw, json) Hash identifier: GDibNfhcgRO/+CwKpD8XT86LQ2+g+pclxy3OLA+tx1w= Subject key identifier: 99:C3:CB:D6:A7:85:76:A9:FC:7A:A6:AF:41:2F:D0:C8:58:6D:9B:2C Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285848B35B5F8CAF49015B82AA2844 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/0386289b-1e11-3e7e-ad9b-ae64318e48d9.roa Signing time: Wed 29 Jan 2025 02:00:39 +0000 ROA not before: Wed 29 Jan 2025 02:00:39 +0000 ROA not after: Tue 29 Apr 2025 01:00:39 +0000 asID: 852 IP address blocks: 2001:56b:9ff0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b3:5b:5f:8c:af:49:01:5b:82:aa:28:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jan 29 02:00:39 2025 GMT Not After : Apr 29 01:00:39 2025 GMT Subject: CN=62fd0fdd-4096-425b-afee-8b2d60243021 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:61:e4:dd:9d:8f:e4:a0:31:0e:a6:5f:71:46: 46:da:12:e3:e0:7e:e5:8c:38:13:fe:46:4d:f5:09: 84:7e:25:80:b9:ce:de:5f:52:66:5f:f8:b9:b1:96: ec:bd:4d:b4:7b:53:76:3b:86:1b:ce:a5:15:2e:63: e0:6b:8a:e3:f8:35:4b:c3:13:32:cf:c1:fe:ad:43: 3d:94:e4:9a:10:14:1b:c8:53:00:db:87:e8:75:a6: cd:28:0d:7c:01:77:81:6d:10:40:51:86:74:ca:d8: c5:cf:24:fc:7d:dc:1f:a0:45:de:74:17:cf:08:55: 7e:68:b9:37:2b:f6:68:b4:41:10:ba:a2:81:db:3e: 63:e1:3b:52:11:89:40:c5:cc:49:f2:f1:e3:2d:c9: ac:67:ba:8f:14:f0:11:85:18:f3:5b:10:b7:06:31: fc:ae:63:2b:be:91:2f:60:37:88:0b:8c:be:e4:39: b0:ad:4c:e5:75:24:7c:2b:14:26:11:ca:79:d9:f9: a7:e2:83:ce:88:24:7d:d6:7a:0f:df:35:dd:98:5f: ac:cf:e4:ed:1c:58:48:0a:8a:b4:26:ac:6d:64:43: ce:05:b9:ba:ba:0f:d2:5b:8a:db:c6:35:d5:0a:23: 96:15:1a:1e:e1:c2:11:a0:5d:6d:e8:97:66:04:4d: 0b:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:C3:CB:D6:A7:85:76:A9:FC:7A:A6:AF:41:2F:D0:C8:58:6D:9B:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/0386289b-1e11-3e7e-ad9b-ae64318e48d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv6: 2001:56b:9ff0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:ab:9e:f2:d8:2d:e6:ef:94:8b:7e:74:06:d6:72:e7:d9:9a: 5d:a4:b3:ed:f5:84:21:cd:a6:1d:a3:71:43:c5:49:62:77:44: e8:92:b3:06:0f:18:8c:ea:a3:f7:31:95:a7:c2:71:8d:9d:8f: d8:75:a2:6a:f4:31:da:58:b8:e1:17:19:bb:64:5e:b1:7c:45: fa:c7:5a:9d:98:3d:3d:28:dd:fa:52:2a:fe:d9:7f:3a:f8:b9: a1:f1:66:b2:8c:6b:f2:5a:08:26:66:89:3b:e5:11:89:6c:c7: 9d:97:9d:e0:b5:25:38:e8:1d:3c:1a:f5:1d:37:8f:34:33:1f: 72:3d:71:e9:d2:4e:86:32:f0:fd:06:c1:34:fd:c8:fe:39:8b: ca:05:07:45:ff:a7:0a:68:da:ab:b0:7f:f4:07:42:ac:cf:01: 20:b2:45:a3:90:2d:40:c3:81:48:12:5e:29:f2:21:b8:d1:7d: 07:4f:c0:5c:51:ab:13:68:ae:cc:1f:96:17:6d:c4:02:e2:35: c2:d1:a9:4b:21:35:8a:d6:d7:69:c9:51:bf:46:0a:35:bd:8b: 81:32:76:76:6b:b9:49:e1:40:01:a6:e4:3b:e8:cf:4b:e8:15: b1:e9:0d:a6:d6:18:60:b6:db:d6:27:bd:ce:73:a9:ad:02:20: d3:e9:f7:9d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEizW1+Mr0kBW4KqKEQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDEyOTAyMDAzOVoXDTI1MDQyOTAxMDAzOVowLzEtMCsGA1UEAxMk NjJmZDBmZGQtNDA5Ni00MjViLWFmZWUtOGIyZDYwMjQzMDIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3GHk3Z2P5KAxDqZfcUZG2hLj4H7ljDgT/kZN 9QmEfiWAuc7eX1JmX/i5sZbsvU20e1N2O4YbzqUVLmPga4rj+DVLwxMyz8H+rUM9 lOSaEBQbyFMA24fodabNKA18AXeBbRBAUYZ0ytjFzyT8fdwfoEXedBfPCFV+aLk3 K/ZotEEQuqKB2z5j4TtSEYlAxcxJ8vHjLcmsZ7qPFPARhRjzWxC3BjH8rmMrvpEv YDeIC4y+5DmwrUzldSR8KxQmEcp52fmn4oPOiCR91noP3zXdmF+sz+TtHFhICoq0 JqxtZEPOBbm6ug/SW4rbxjXVCiOWFRoe4cIRoF1t6JdmBE0LHwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJnDy9anhXap/Hqmr0Ev0MhYbZssMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMDM4NjI4OWItMWUxMS0z ZTdlLWFkOWItYWU2NDMxOGU0OGQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEIAEFa5/w MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHGrnvLYLebvlIt+dAbWcufZml2ks+31hCHNph2jcUPFSWJ3ROiS swYPGIzqo/cxlafCcY2dj9h1omr0MdpYuOEXGbtkXrF8RfrHWp2YPT0o3fpSKv7Z fzr4uaHxZrKMa/JaCCZmiTvlEYlsx52XneC1JTjoHTwa9R03jzQzH3I9cenSToYy 8P0GwTT9yP45i8oFB0X/pwpo2quwf/QHQqzPASCyRaOQLUDDgUgSXinyIbjRfQdP wFxRqxNorswflhdtxALiNcLRqUshNYrW12nJUb9GCjW9i4EydnZruUnhQAGm5Dvo z0voFbHpDabWGGC229Ynvc5zqa0CINPp950= -----END CERTIFICATE-----Generated at Sun Apr 6 06:02:51 2025 by rpki-client