$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/642f8f34-bf67-3cf0-a917-dc14393df062.roa File: 642f8f34-bf67-3cf0-a917-dc14393df062.roa (raw, json) Hash identifier: WxL+lzXQM0ijJPbMEnclngyEmhGiEBBTSukv7JBNqM4= Subject key identifier: 40:F2:9C:E6:62:54:3D:3B:8F:13:57:B8:9D:48:81:30:12:D7:CA:47 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285848B35B607F8C1B9C85E29E0E98 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/642f8f34-bf67-3cf0-a917-dc14393df062.roa Signing time: Wed 29 Jan 2025 02:00:39 +0000 ROA not before: Wed 29 Jan 2025 02:00:39 +0000 ROA not after: Tue 29 Apr 2025 01:00:39 +0000 asID: 852 IP address blocks: 2001:56a:6f20::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b3:5b:60:7f:8c:1b:9c:85:e2:9e:0e:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jan 29 02:00:39 2025 GMT Not After : Apr 29 01:00:39 2025 GMT Subject: CN=ab7d0227-4184-4f14-b918-e62cc96e594e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:62:9a:f9:ab:04:92:ff:9b:21:35:66:9a:69: ec:5f:2a:0a:40:ce:85:2d:32:f3:be:81:8b:19:bf: e6:9d:51:50:b4:31:f1:ee:d6:f1:5b:44:6a:d3:55: d9:d7:a9:2e:3a:f5:91:8f:e4:56:ad:f7:93:ce:bd: c2:eb:9f:3a:ab:86:97:cb:95:41:29:ed:b4:c0:1e: 4e:73:82:96:95:24:c3:1d:05:ec:08:b3:c8:e6:4e: 73:a2:42:de:c5:d5:8f:44:d9:e3:79:58:3a:e5:10: 85:05:f1:9d:05:67:cd:14:14:e6:e4:79:e9:b6:f9: 64:a0:22:bc:f4:56:5b:30:b6:0e:db:91:4f:9c:5e: 85:f6:73:4a:15:2b:7c:53:18:f6:d5:01:59:ce:2d: 30:57:2c:ad:2b:1d:3e:35:b5:a2:d3:ad:06:e1:dc: dd:b6:51:da:3f:49:ef:91:08:ec:fa:1b:f6:b1:7d: 30:17:30:90:da:f2:e2:1b:af:77:2a:1b:e7:32:fb: 29:6b:98:2d:d2:43:8c:ad:19:13:89:b8:2b:0a:39: fb:ff:ea:66:f0:de:97:b1:08:8b:7d:f3:d2:2b:da: 49:c8:bc:c3:54:03:76:2d:7b:3c:77:29:b2:dd:70: 99:ac:2c:3f:61:9a:f4:5a:9c:ff:a9:a5:ba:9f:ba: ce:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:F2:9C:E6:62:54:3D:3B:8F:13:57:B8:9D:48:81:30:12:D7:CA:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/642f8f34-bf67-3cf0-a917-dc14393df062.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv6: 2001:56a:6f20::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ea:9b:b3:e6:39:ef:a7:14:5d:00:d1:b7:be:2f:10:4a:5c:b3: 22:fc:9e:1d:e3:e9:47:6f:e3:a6:d5:89:30:42:82:f0:bb:1d: 4f:dd:3b:be:61:18:f0:a8:88:30:b2:dd:52:34:2b:c2:13:f9: bc:b3:07:c3:38:1d:d8:14:4e:cf:7f:c8:bd:24:2f:80:9a:6f: 78:be:de:fe:43:9c:f4:84:c4:fa:93:89:10:d0:a3:5c:3b:e4: b1:bf:a6:5c:9f:e0:44:9f:c8:42:17:4c:1b:cc:29:54:06:38: 33:c0:e2:bb:2e:f9:5f:42:0a:02:8c:b3:ef:33:a1:74:d5:b5: 7f:ff:15:37:35:e4:e0:77:ec:88:67:3a:4e:9d:6d:07:d3:88: 39:11:09:80:93:2d:f0:5b:96:15:79:87:0b:21:82:ca:46:93: 11:3e:f0:61:8a:88:2b:8f:6c:34:e8:e5:07:43:ac:ac:fa:9d: 34:f4:c8:95:47:a3:cb:da:c0:1c:56:4a:a1:4d:98:7c:46:09: a8:86:9b:27:0a:2e:b0:31:16:b4:e5:2d:68:55:3d:a1:c7:35: 14:f6:10:b3:cf:08:10:a8:4f:7f:72:97:f3:e7:4f:8e:70:d4: f5:ff:64:98:b5:27:76:5c:82:75:a0:64:b1:62:13:eb:b0:1e: b6:f3:c4:97 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEizW2B/jBucheKeDpgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDEyOTAyMDAzOVoXDTI1MDQyOTAxMDAzOVowLzEtMCsGA1UEAxMk YWI3ZDAyMjctNDE4NC00ZjE0LWI5MTgtZTYyY2M5NmU1OTRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2Ka+asEkv+bITVmmmnsXyoKQM6FLTLzvoGL Gb/mnVFQtDHx7tbxW0Rq01XZ16kuOvWRj+RWrfeTzr3C6586q4aXy5VBKe20wB5O c4KWlSTDHQXsCLPI5k5zokLexdWPRNnjeVg65RCFBfGdBWfNFBTm5HnptvlkoCK8 9FZbMLYO25FPnF6F9nNKFSt8Uxj21QFZzi0wVyytKx0+NbWi060G4dzdtlHaP0nv kQjs+hv2sX0wFzCQ2vLiG693KhvnMvspa5gt0kOMrRkTibgrCjn7/+pm8N6XsQiL ffPSK9pJyLzDVAN2LXs8dymy3XCZrCw/YZr0Wpz/qaW6n7rOWwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEDynOZiVD07jxNXuJ1IgTAS18pHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNjQyZjhmMzQtYmY2Ny0z Y2YwLWE5MTctZGMxNDM5M2RmMDYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEIAEFam8g MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAOqbs+Y576cUXQDRt74vEEpcsyL8nh3j6Udv46bViTBCgvC7HU/d O75hGPCoiDCy3VI0K8IT+byzB8M4HdgUTs9/yL0kL4Cab3i+3v5DnPSExPqTiRDQ o1w75LG/plyf4ESfyEIXTBvMKVQGODPA4rsu+V9CCgKMs+8zoXTVtX//FTc15OB3 7IhnOk6dbQfTiDkRCYCTLfBblhV5hwshgspGkxE+8GGKiCuPbDTo5QdDrKz6nTT0 yJVHo8vawBxWSqFNmHxGCaiGmycKLrAxFrTlLWhVPaHHNRT2ELPPCBCoT39yl/Pn T45w1PX/ZJi1J3ZcgnWgZLFiE+uwHrbzxJc= -----END CERTIFICATE-----Generated at Sun Apr 6 06:02:54 2025 by rpki-client