$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/14ed9dee-5979-34ce-b91e-2db8c5253a7c.roa File: 14ed9dee-5979-34ce-b91e-2db8c5253a7c.roa (raw, json) Hash identifier: WCQ3TYPKyFP3P8Z38xxAx6ND5RUDLrQ4tdaDjmItvHo= Subject key identifier: 35:38:3E:D4:38:8B:CE:21:48:39:4B:52:57:6F:BE:F4:9D:93:C3:91 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285848B35B640FE89C41C6AC4201D0 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/14ed9dee-5979-34ce-b91e-2db8c5253a7c.roa Signing time: Wed 29 Jan 2025 02:00:39 +0000 ROA not before: Wed 29 Jan 2025 02:00:39 +0000 ROA not after: Tue 29 Apr 2025 01:00:39 +0000 asID: 852 IP address blocks: 2001:56b:3f70::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Feb 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b3:5b:64:0f:e8:9c:41:c6:ac:42:01:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jan 29 02:00:39 2025 GMT Not After : Apr 29 01:00:39 2025 GMT Subject: CN=3f6b2660-612d-4f86-9c51-56fd49f7e519 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:49:6d:68:51:7d:75:60:5b:76:4e:ed:8e:4d: 78:d9:58:cb:b4:83:f4:d9:a9:9d:ad:60:3e:53:54: 62:2d:6d:fe:d2:f3:45:cb:fa:e6:38:15:51:69:19: 24:5d:e3:b6:3a:63:6d:c1:a1:07:d8:9f:bd:a2:be: 1e:ad:bb:89:06:22:d3:fa:3d:7c:5d:ad:d4:6c:eb: c1:b3:75:bd:0e:5d:52:f5:c7:dd:2b:d2:d3:99:8e: e6:8a:a5:d2:91:15:2b:bc:7f:f3:f8:3c:f4:01:65: de:a4:93:bd:e3:ef:1e:c6:08:98:68:82:04:83:09: 41:74:c1:a2:f0:b4:d1:b0:20:54:e2:1b:c3:a5:7f: 3a:d9:04:d3:66:c2:8c:02:75:55:42:a3:19:b8:de: 3e:00:58:4e:f1:3a:38:36:d4:0a:39:1b:1d:c8:e6: 83:d5:46:ca:2f:7a:03:e7:02:d9:85:b9:ea:b8:0d: ff:cb:9c:6b:d9:88:33:ed:1c:f1:e9:00:28:3c:01: 73:4b:86:3e:59:3f:bc:b3:3a:75:e9:2b:df:b7:46: 81:43:eb:b2:de:1f:48:5e:f2:85:ab:da:b2:ee:cf: b2:da:be:ba:7a:97:e0:eb:a2:da:aa:dd:d6:6c:b6: fb:d2:41:ac:16:4a:5c:0c:ec:67:e0:5f:df:8a:b5: 51:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:38:3E:D4:38:8B:CE:21:48:39:4B:52:57:6F:BE:F4:9D:93:C3:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/14ed9dee-5979-34ce-b91e-2db8c5253a7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv6: 2001:56b:3f70::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:f1:41:9f:1e:f0:6c:f2:be:9f:96:e8:df:51:3a:14:8c:41: 60:23:c7:c8:31:06:59:85:30:0b:58:5a:50:47:b9:92:72:63: bd:f7:2c:f5:f7:18:de:60:25:db:4b:9c:38:9e:42:2e:65:e7: e1:f0:89:97:6b:a5:42:2f:78:db:99:2d:d8:d3:a6:6d:23:be: c8:2d:bb:f4:ce:7a:27:2a:5d:d8:d3:84:b0:de:ea:ad:60:e4: d5:80:19:fb:cf:fa:1e:fe:45:b2:b9:23:bb:9b:b6:7d:86:2c: 09:7e:44:14:bf:c3:80:0d:4c:1d:dc:df:54:4d:1d:ff:a2:cc: 1b:f4:b1:43:a4:33:6f:8d:20:bc:d3:70:51:16:5e:eb:ce:98: c7:7a:92:9f:65:e9:19:3b:f9:4d:03:70:0d:e1:66:15:13:5e: c1:fe:d8:32:78:1c:01:e0:b6:40:24:51:d0:da:fd:e9:51:2d: 5f:cd:40:2b:74:24:5d:4b:cb:08:3f:22:e0:45:0d:d0:1a:88: 4c:5f:49:d1:41:9d:ea:fb:7d:d0:63:f7:5d:6e:cb:b2:b4:6b: 77:53:16:36:47:ad:cd:eb:19:ca:c5:b5:c8:58:1f:04:52:20: bd:4b:fa:d0:c4:e6:b9:e2:7f:de:43:e8:2c:97:b7:82:6b:ee: 3b:16:a8:06 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEizW2QP6JxBxqxCAdAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDEyOTAyMDAzOVoXDTI1MDQyOTAxMDAzOVowLzEtMCsGA1UEAxMk M2Y2YjI2NjAtNjEyZC00Zjg2LTljNTEtNTZmZDQ5ZjdlNTE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0ltaFF9dWBbdk7tjk142VjLtIP02amdrWA+ U1RiLW3+0vNFy/rmOBVRaRkkXeO2OmNtwaEH2J+9or4erbuJBiLT+j18Xa3UbOvB s3W9Dl1S9cfdK9LTmY7miqXSkRUrvH/z+Dz0AWXepJO94+8exgiYaIIEgwlBdMGi 8LTRsCBU4hvDpX862QTTZsKMAnVVQqMZuN4+AFhO8To4NtQKORsdyOaD1UbKL3oD 5wLZhbnquA3/y5xr2Ygz7Rzx6QAoPAFzS4Y+WT+8szp16Svft0aBQ+uy3h9IXvKF q9qy7s+y2r66epfg66Laqt3WbLb70kGsFkpcDOxn4F/firVRGQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDU4PtQ4i84hSDlLUldvvvSdk8ORMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMTRlZDlkZWUtNTk3OS0z NGNlLWI5MWUtMmRiOGM1MjUzYTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEIAEFaz9w MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAArxQZ8e8Gzyvp+W6N9ROhSMQWAjx8gxBlmFMAtYWlBHuZJyY733 LPX3GN5gJdtLnDieQi5l5+HwiZdrpUIveNuZLdjTpm0jvsgtu/TOeicqXdjThLDe 6q1g5NWAGfvP+h7+RbK5I7ubtn2GLAl+RBS/w4ANTB3c31RNHf+izBv0sUOkM2+N ILzTcFEWXuvOmMd6kp9l6Rk7+U0DcA3hZhUTXsH+2DJ4HAHgtkAkUdDa/elRLV/N QCt0JF1Lywg/IuBFDdAaiExfSdFBner7fdBj911uy7K0a3dTFjZHrc3rGcrFtchY HwRSIL1L+tDE5rnif95D6CyXt4Jr7jsWqAY= -----END CERTIFICATE-----Generated at Sun Feb 16 20:52:52 2025 by rpki-client