$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/305253d6-82e2-3de4-a457-451a62a8841a.roa File: 305253d6-82e2-3de4-a457-451a62a8841a.roa (raw, json) Hash identifier: X0JfPUqZEJobM11qTsk+zuEGdWAustv2p0iYlucAlHU= Subject key identifier: C5:0D:83:2C:0B:40:03:3B:84:85:EE:27:5F:59:18:D5:7C:71:25:04 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285848B35B60CEBBCB84ECB6E70900 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/305253d6-82e2-3de4-a457-451a62a8841a.roa Signing time: Wed 29 Jan 2025 02:00:39 +0000 ROA not before: Wed 29 Jan 2025 02:00:39 +0000 ROA not after: Tue 29 Apr 2025 01:00:39 +0000 asID: 852 IP address blocks: 2001:569:6fd0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b3:5b:60:ce:bb:cb:84:ec:b6:e7:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jan 29 02:00:39 2025 GMT Not After : Apr 29 01:00:39 2025 GMT Subject: CN=b4c01ad8-8ea4-4e99-9608-289221fbd79c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:92:2f:43:3f:1a:80:f8:e9:76:d4:97:90:c6: a8:40:bd:d1:db:86:49:fc:00:04:b5:0e:f7:da:5b: 9d:32:7e:c8:cf:9c:92:4d:86:72:63:21:cf:06:5e: 1a:0b:57:52:31:4a:b9:46:4b:43:b8:5b:b2:2c:26: e3:28:39:bd:59:39:86:49:5d:e9:41:53:b1:71:d0: ff:52:9a:db:69:8d:f0:c3:ce:40:df:9d:44:20:20: 75:d7:0a:7f:ba:47:3b:a0:35:cb:bf:4c:b0:24:ec: 5f:bc:46:bd:60:e4:71:a1:67:19:63:31:4d:dd:4d: 6f:a1:72:43:e7:89:1f:6b:63:fc:df:5e:51:ed:30: 27:38:12:a1:b4:45:7a:d8:99:9c:16:78:4c:6b:66: 02:70:68:36:45:2e:57:b3:e7:c9:c8:8a:46:c5:90: 63:76:70:ea:cf:da:29:41:b5:a0:98:72:35:05:5f: eb:ff:77:f6:ae:34:9e:72:a6:4f:0b:5e:0b:f2:6a: 3a:3b:24:99:b4:8b:c0:f1:ba:fa:ef:56:e5:96:6c: be:48:2d:de:c7:90:fd:8c:33:2c:9e:a2:71:56:d9: b3:30:40:d7:44:1e:33:52:1b:1f:ec:e6:40:54:f9: 00:65:b2:a3:8f:a2:a4:ae:55:62:4d:2d:3c:2e:1f: 10:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:0D:83:2C:0B:40:03:3B:84:85:EE:27:5F:59:18:D5:7C:71:25:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/305253d6-82e2-3de4-a457-451a62a8841a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv6: 2001:569:6fd0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:cc:e5:dd:fa:9b:a4:31:8e:0f:4f:84:0e:1e:25:72:d9:7d: 5d:46:7e:3e:04:68:28:ae:57:df:2c:82:7b:2d:2b:7d:b2:c2: e6:1d:b9:ef:7c:a6:ac:fa:8c:42:a5:87:52:4a:c6:95:c2:bb: 14:22:e5:ae:37:dd:5d:4b:5e:f0:e7:5f:12:40:6a:55:64:59: 33:1d:da:b2:b0:47:a6:13:08:7d:5b:be:fe:55:42:03:54:90: bf:63:de:00:ff:83:45:c4:9f:af:1f:f9:d8:da:c8:ba:4e:5f: 74:e5:72:0e:c0:54:5d:0b:39:38:ad:02:0d:db:bd:cf:5d:4f: b1:e6:db:e5:a8:6c:da:86:f2:3f:c4:7b:89:30:7e:03:73:1e: 97:eb:c0:7c:a0:48:42:5b:1e:eb:5b:e8:65:e2:a5:fe:23:a2: 19:10:c8:90:df:50:94:f1:fb:ec:5f:87:a8:7e:10:8d:18:f4: 3b:b7:ba:ea:54:92:33:bb:a4:d7:5e:2c:80:ca:a7:c0:aa:b7: 09:49:a4:d6:61:dd:55:78:32:87:fa:a3:33:1d:bf:7e:60:48: 7f:40:af:ba:d5:1d:f9:c9:7a:2c:cb:4a:99:8e:c0:08:3b:21: 38:f9:1c:74:88:75:fc:4d:8a:60:00:48:2d:b0:36:4a:67:21: d3:01:99:8d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEizW2DOu8uE7LbnCQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDEyOTAyMDAzOVoXDTI1MDQyOTAxMDAzOVowLzEtMCsGA1UEAxMk YjRjMDFhZDgtOGVhNC00ZTk5LTk2MDgtMjg5MjIxZmJkNzljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJIvQz8agPjpdtSXkMaoQL3R24ZJ/AAEtQ73 2ludMn7Iz5ySTYZyYyHPBl4aC1dSMUq5RktDuFuyLCbjKDm9WTmGSV3pQVOxcdD/ UprbaY3ww85A351EICB11wp/ukc7oDXLv0ywJOxfvEa9YORxoWcZYzFN3U1voXJD 54kfa2P8315R7TAnOBKhtEV62JmcFnhMa2YCcGg2RS5Xs+fJyIpGxZBjdnDqz9op QbWgmHI1BV/r/3f2rjSecqZPC14L8mo6OySZtIvA8br671bllmy+SC3ex5D9jDMs nqJxVtmzMEDXRB4zUhsf7OZAVPkAZbKjj6KkrlViTS08Lh8QEQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMUNgywLQAM7hIXuJ19ZGNV8cSUEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMzA1MjUzZDYtODJlMi0z ZGU0LWE0NTctNDUxYTYyYTg4NDFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEIAEFaW/Q MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFnM5d36m6Qxjg9PhA4eJXLZfV1Gfj4EaCiuV98sgnstK32ywuYd ue98pqz6jEKlh1JKxpXCuxQi5a433V1LXvDnXxJAalVkWTMd2rKwR6YTCH1bvv5V QgNUkL9j3gD/g0XEn68f+djayLpOX3Tlcg7AVF0LOTitAg3bvc9dT7Hm2+WobNqG 8j/Ee4kwfgNzHpfrwHygSEJbHutb6GXipf4johkQyJDfUJTx++xfh6h+EI0Y9Du3 uupUkjO7pNdeLIDKp8CqtwlJpNZh3VV4Mof6ozMdv35gSH9Ar7rVHfnJeizLSpmO wAg7ITj5HHSIdfxNimAASC2wNkpnIdMBmY0= -----END CERTIFICATE-----Generated at Sun Apr 6 06:02:45 2025 by rpki-client