$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2fac2b11-eae6-352f-b5f0-44e1af5f9416.roa File: 2fac2b11-eae6-352f-b5f0-44e1af5f9416.roa (raw, json) Hash identifier: JNXB3ISHt9ZkCZ0gt7E1kIjkci0JbYvILwEaLWLQXQk= Subject key identifier: 96:4B:C9:1A:20:C9:00:F0:05:7C:ED:72:85:8E:8A:15:40:A9:1B:06 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285848B626163020442C7FB8FE7D00 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2fac2b11-eae6-352f-b5f0-44e1af5f9416.roa Signing time: Thu 30 Jan 2025 02:00:40 +0000 ROA not before: Thu 30 Jan 2025 02:00:40 +0000 ROA not after: Wed 30 Apr 2025 01:00:40 +0000 asID: 852 IP address blocks: 2001:56b::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b6:26:16:30:20:44:2c:7f:b8:fe:7d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jan 30 02:00:40 2025 GMT Not After : Apr 30 01:00:40 2025 GMT Subject: CN=09a0079d-eac1-4cc1-8d99-13ec3e162ba5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:eb:4d:8f:7d:91:c1:22:68:8f:fc:a5:80:3b: fb:d8:ba:bb:05:eb:ae:86:dd:22:3d:a6:13:59:0c: ec:7a:9e:78:6c:6a:bb:07:d7:75:31:38:5b:16:f6: 49:0e:b6:92:2e:66:65:ae:b7:a1:d8:ca:09:13:9a: 8f:b1:c1:18:a4:35:ae:a3:0b:5e:76:cf:a6:ea:d5: c2:42:12:e0:9e:e7:a2:c6:bd:99:7f:ae:bb:a4:60: 6f:aa:07:3e:3f:3d:35:e4:24:28:42:ae:2c:88:e1: 24:a1:54:cd:c9:d2:2f:c2:f9:20:42:34:11:c5:65: 14:69:ad:06:dc:48:0c:a9:09:eb:79:79:c1:0d:85: 11:40:fb:d5:ea:0b:75:27:f7:a3:9b:76:64:c8:2e: ea:55:64:3a:b6:12:4e:9d:82:53:4a:5f:84:ac:1d: 9a:4b:54:d2:ae:4e:aa:89:1d:05:13:fd:53:b3:b8: 20:55:18:cd:eb:76:3f:22:8a:c9:06:c5:50:a0:bd: 3c:3a:1e:eb:8d:80:c7:93:5a:0d:67:d2:31:b6:b7: 57:fe:81:c2:fc:86:46:fa:01:6a:a4:7b:1e:20:39: 16:f9:84:a4:4c:86:97:30:0c:35:a6:24:6b:20:a4: 58:1d:81:b8:5e:8b:69:29:81:93:b8:dc:27:27:92: 2d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:4B:C9:1A:20:C9:00:F0:05:7C:ED:72:85:8E:8A:15:40:A9:1B:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2fac2b11-eae6-352f-b5f0-44e1af5f9416.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv6: 2001:56b::/34 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:aa:4e:65:44:69:3c:aa:53:31:da:1d:5d:ed:f1:39:5a:8d: 32:2f:4d:75:23:42:90:b3:06:74:39:9e:f9:14:64:1a:a3:1a: e6:67:bb:2f:51:d4:23:85:f9:65:82:38:50:48:a5:25:da:95: 21:c3:a7:e6:58:c8:8a:35:20:7e:be:32:0f:f9:2f:24:0d:5d: ae:2b:b0:a6:f8:c2:f5:03:4c:aa:8b:53:9f:87:3b:d8:1b:43: 43:b3:98:38:50:c0:08:41:4c:6a:6f:fc:2b:35:db:bc:9b:66: bb:57:c3:80:5c:77:3d:0f:0f:b4:c7:cd:2d:59:67:2d:31:2c: d9:a5:5d:b1:13:d8:f8:6e:39:cd:61:c9:03:28:f4:69:a3:c6: 40:07:8a:ef:54:d9:44:e7:3e:9a:0a:d3:07:bc:03:6b:ef:52: c1:e7:1b:f4:91:e4:93:7d:28:f0:e0:4f:66:5d:bc:09:be:2e: 38:95:8c:eb:7c:10:86:42:87:67:82:78:65:62:14:5d:c1:4c: cc:39:75:2b:80:60:06:5a:0f:cd:af:b1:6f:29:3b:74:d3:ca: 85:8c:68:9b:a8:a5:a0:ee:25:f9:5d:57:da:f4:5f:c5:38:c0: d8:cc:a1:71:45:4c:1f:6f:30:25:16:bd:05:73:59:1c:6b:b5: 1a:f8:e2:c5 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEi2JhYwIEQsf7j+fQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDEzMDAyMDA0MFoXDTI1MDQzMDAxMDA0MFowLzEtMCsGA1UEAxMk MDlhMDA3OWQtZWFjMS00Y2MxLThkOTktMTNlYzNlMTYyYmE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1+tNj32RwSJoj/ylgDv72Lq7Beuuht0iPaYT WQzsep54bGq7B9d1MThbFvZJDraSLmZlrreh2MoJE5qPscEYpDWuowteds+m6tXC QhLgnueixr2Zf667pGBvqgc+Pz015CQoQq4siOEkoVTNydIvwvkgQjQRxWUUaa0G 3EgMqQnreXnBDYURQPvV6gt1J/ejm3ZkyC7qVWQ6thJOnYJTSl+ErB2aS1TSrk6q iR0FE/1Ts7ggVRjN63Y/IorJBsVQoL08Oh7rjYDHk1oNZ9IxtrdX/oHC/IZG+gFq pHseIDkW+YSkTIaXMAw1piRrIKRYHYG4XotpKYGTuNwnJ5ItvwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFJZLyRogyQDwBXztcoWOihVAqRsGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMmZhYzJiMTEtZWFlNi0z NTJmLWI1ZjAtNDRlMWFmNWY5NDE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGIAEFawAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAnapOZURpPKpTMdodXe3xOVqNMi9NdSNCkLMGdDme+RRkGqMa5me7 L1HUI4X5ZYI4UEilJdqVIcOn5ljIijUgfr4yD/kvJA1driuwpvjC9QNMqotTn4c7 2BtDQ7OYOFDACEFMam/8KzXbvJtmu1fDgFx3PQ8PtMfNLVlnLTEs2aVdsRPY+G45 zWHJAyj0aaPGQAeK71TZROc+mgrTB7wDa+9Swecb9JHkk30o8OBPZl28Cb4uOJWM 63wQhkKHZ4J4ZWIUXcFMzDl1K4BgBloPza+xbyk7dNPKhYxom6iloO4l+V1X2vRf xTjA2MyhcUVMH28wJRa9BXNZHGu1GvjixQ== -----END CERTIFICATE-----Generated at Sun Apr 6 06:01:13 2025 by rpki-client