$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/41cb8e23-5c24-31ab-b10c-5a8f453e6889.roa File: 41cb8e23-5c24-31ab-b10c-5a8f453e6889.roa (raw, json) Hash identifier: Az6V34MGbdQ8xkJwS1g+gURzCkrzoS0q7c1vrhxjuhk= Subject key identifier: 66:6C:C7:1F:A2:09:89:EF:72:82:6C:04:87:12:A2:3B:BE:C6:9F:2F Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285848B35B62CDE74A1FB5D01FAE80 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/41cb8e23-5c24-31ab-b10c-5a8f453e6889.roa Signing time: Wed 29 Jan 2025 02:00:39 +0000 ROA not before: Wed 29 Jan 2025 02:00:39 +0000 ROA not after: Tue 29 Apr 2025 01:00:39 +0000 asID: 852 IP address blocks: 2001:56b:9f0e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b3:5b:62:cd:e7:4a:1f:b5:d0:1f:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jan 29 02:00:39 2025 GMT Not After : Apr 29 01:00:39 2025 GMT Subject: CN=4a4af62d-1221-4611-9c0b-1bf569c5de26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:7b:90:7c:1e:d4:94:f1:b2:d3:c0:d6:1f:1d: 3b:7f:79:b4:bf:b1:e3:be:93:cd:a5:bb:9e:67:2b: ef:35:27:ca:9f:2a:8f:58:50:4c:d9:91:08:12:27: 5c:48:99:58:be:04:f0:c1:67:51:30:a1:2b:19:f7: a8:fd:b9:2c:64:df:d0:7d:95:82:d7:b2:91:8a:0f: 14:81:8d:50:e2:13:e4:98:c3:0d:be:ef:66:9c:10: fc:1b:8a:5c:a9:9b:6b:0e:7f:c9:03:0d:92:ea:e6: ae:31:37:0d:18:2d:be:c3:49:7c:16:42:02:d1:ee: 77:3e:a8:3e:cc:98:ce:67:1e:a7:fe:48:c8:e0:4d: 42:4c:ff:ce:a0:c1:11:7c:37:f7:1f:9b:90:f2:6f: 67:48:93:e4:0b:a2:ab:1d:38:6c:77:88:89:21:e5: 20:63:dc:a6:0e:5c:03:7d:ce:ed:ba:c5:93:f4:33: 42:9c:5c:0b:bd:3e:03:c5:33:b1:cf:8f:67:09:6f: 83:99:8b:23:81:0b:e3:22:4b:1c:6c:6e:15:ff:22: cc:be:26:be:0f:a5:14:85:5a:e7:13:6e:dc:a2:93: f1:7c:b1:e0:c7:48:e3:2b:76:52:e5:88:0a:e3:dd: 46:f0:9f:be:c1:45:7d:bc:6a:83:4b:41:34:bc:49: 5b:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:6C:C7:1F:A2:09:89:EF:72:82:6C:04:87:12:A2:3B:BE:C6:9F:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/41cb8e23-5c24-31ab-b10c-5a8f453e6889.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv6: 2001:56b:9f0e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption f8:39:09:2a:f7:dd:a7:d3:7c:5c:35:c4:49:a4:6d:1a:5b:61: 4c:e4:e9:87:40:d9:77:a9:59:04:ec:93:f2:d3:18:d4:fb:4f: d7:2e:fb:d8:6e:b2:3f:b7:ea:87:a8:5e:26:0d:2d:b9:45:fe: 06:43:c3:1d:44:fd:14:4f:03:31:a6:ac:14:ad:85:dc:5e:f5: ef:f2:44:51:2d:ad:e3:d8:df:1c:31:11:8b:66:34:49:38:9e: 1d:45:a3:7a:1d:10:8f:24:ea:92:68:ea:35:16:e3:46:5a:b4: e6:89:28:9b:f1:6d:4c:24:f2:ce:71:1c:4f:fb:22:24:21:0a: b0:26:a2:02:03:42:15:18:03:31:4e:32:af:b6:fe:70:b6:ea: 4c:92:4b:af:b0:b6:77:02:eb:6d:fb:9d:0c:49:83:46:3a:26: ca:be:f6:35:e6:78:58:5d:89:0c:2c:2c:e1:5b:62:9c:03:3e: 2a:c9:25:e7:fb:59:b2:b8:2c:aa:1c:41:f6:6d:38:fe:a8:96: ec:6e:02:7e:b2:b1:e3:ee:e0:54:70:ae:08:8b:55:86:71:ba: 61:0e:a1:ec:1f:80:7e:4e:39:53:ac:31:3f:d9:12:04:98:da: cc:cf:71:f0:5d:be:f5:60:f3:d0:2b:cf:d4:52:aa:0e:90:4c: ca:fa:88:23 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEizW2LN50oftdAfroAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDEyOTAyMDAzOVoXDTI1MDQyOTAxMDAzOVowLzEtMCsGA1UEAxMk NGE0YWY2MmQtMTIyMS00NjExLTljMGItMWJmNTY5YzVkZTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHuQfB7UlPGy08DWHx07f3m0v7HjvpPNpbue ZyvvNSfKnyqPWFBM2ZEIEidcSJlYvgTwwWdRMKErGfeo/bksZN/QfZWC17KRig8U gY1Q4hPkmMMNvu9mnBD8G4pcqZtrDn/JAw2S6uauMTcNGC2+w0l8FkIC0e53Pqg+ zJjOZx6n/kjI4E1CTP/OoMERfDf3H5uQ8m9nSJPkC6KrHThsd4iJIeUgY9ymDlwD fc7tusWT9DNCnFwLvT4DxTOxz49nCW+DmYsjgQvjIkscbG4V/yLMvia+D6UUhVrn E27copPxfLHgx0jjK3ZS5YgK491G8J++wUV9vGqDS0E0vElb1QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGZsxx+iCYnvcoJsBIcSoju+xp8vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNDFjYjhlMjMtNWMyNC0z MWFiLWIxMGMtNWE4ZjQ1M2U2ODg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFa58O MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAPg5CSr33afTfFw1xEmkbRpbYUzk6YdA2XepWQTsk/LTGNT7T9cu +9husj+36oeoXiYNLblF/gZDwx1E/RRPAzGmrBSthdxe9e/yRFEtrePY3xwxEYtm NEk4nh1Fo3odEI8k6pJo6jUW40ZatOaJKJvxbUwk8s5xHE/7IiQhCrAmogIDQhUY AzFOMq+2/nC26kySS6+wtncC6237nQxJg0Y6Jsq+9jXmeFhdiQwsLOFbYpwDPirJ Jef7WbK4LKocQfZtOP6oluxuAn6ysePu4FRwrgiLVYZxumEOoewfgH5OOVOsMT/Z EgSY2szPcfBdvvVg89Arz9RSqg6QTMr6iCM= -----END CERTIFICATE-----Generated at Sun Apr 6 06:03:05 2025 by rpki-client