$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/7e9ef1db-d8a9-3e74-9999-752b5f58583a.roa File: 7e9ef1db-d8a9-3e74-9999-752b5f58583a.roa (raw, json) Hash identifier: FeyDywYeHaRSNEFDzWJ1TNa1awAXnilQGdVVeOfkQJ8= Subject key identifier: D7:35:DC:D0:3A:FE:C8:C4:82:A1:8A:DC:E5:E8:91:91:4E:9F:3A:56 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285848B626165E2B703DA61F383860 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/7e9ef1db-d8a9-3e74-9999-752b5f58583a.roa Signing time: Thu 30 Jan 2025 02:00:40 +0000 ROA not before: Thu 30 Jan 2025 02:00:40 +0000 ROA not after: Wed 30 Apr 2025 01:00:40 +0000 asID: 852 IP address blocks: 2001:56a:8000::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Feb 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b6:26:16:5e:2b:70:3d:a6:1f:38:38:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jan 30 02:00:40 2025 GMT Not After : Apr 30 01:00:40 2025 GMT Subject: CN=e3ba345a-1692-4482-baba-b26ce65dc7fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:12:52:79:1a:3a:a7:cd:af:c8:97:12:7f:0d: c0:ea:3d:fd:a6:73:63:e1:00:35:71:77:98:bd:d5: 3b:b0:f4:e4:7c:8b:cc:4e:8d:38:c9:fa:ef:28:33: 9a:73:76:8a:cf:31:44:d5:fe:ab:96:44:94:6e:92: 1a:b5:97:df:5e:0a:c8:ec:14:d5:3f:6d:73:30:5c: 87:8e:c4:2e:47:b4:85:70:41:e4:a5:26:44:ff:d9: e1:a6:09:07:93:84:fd:63:07:9d:49:4c:be:ce:ff: 6a:73:e7:6c:fa:93:4f:95:bd:cc:fa:2b:29:11:2e: 52:7b:bc:61:45:d7:bf:09:6d:14:8f:f5:ce:29:40: 7c:19:95:7e:90:ec:15:6f:e1:e5:b8:d3:10:29:dd: 34:e0:f3:b7:94:ff:90:5c:0f:9c:0e:88:a2:9d:b6: c6:4a:60:a1:e2:84:71:00:f0:d1:0d:3e:84:6a:2f: 5a:3a:df:ee:67:ea:09:6d:86:cd:99:9d:af:c0:5f: 81:f5:9d:03:5d:61:88:d6:37:b5:95:9e:93:e9:85: cd:fa:0d:74:c0:e3:34:a2:44:ac:cd:d5:ff:31:30: cc:0d:80:36:73:97:80:41:bd:c1:20:04:4c:e5:62: 61:bf:c9:a7:f8:62:f1:3a:9e:4f:e0:61:84:8e:2e: c8:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:35:DC:D0:3A:FE:C8:C4:82:A1:8A:DC:E5:E8:91:91:4E:9F:3A:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/7e9ef1db-d8a9-3e74-9999-752b5f58583a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv6: 2001:56a:8000::/33 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c7:b0:c8:1c:19:4b:b4:0a:0f:85:fe:33:cb:a6:7c:a8:62:5d: b2:98:4f:6d:d2:17:3f:89:71:1f:cb:48:b8:e0:19:a1:4b:44: d7:8b:1a:71:9b:23:d1:62:47:00:a8:c2:6a:92:0d:03:2c:45: 84:22:78:ed:bf:b7:4c:30:db:0a:11:14:27:29:ce:b4:a2:c2: 5d:8f:a3:eb:b0:01:b5:39:e9:4f:97:b8:ff:65:d7:8f:5c:e5: 8c:78:3c:0e:36:77:78:9e:ee:5a:d2:68:5a:47:3a:b7:7b:14: 51:dd:29:b1:9c:27:2e:a7:27:57:2a:9d:a3:0c:5c:eb:c6:c5: 53:e8:4d:3e:99:b0:3a:23:2e:f7:5f:c4:f3:3d:46:39:c2:e2: 9e:19:c0:59:ad:de:7b:64:70:6c:62:51:00:8f:58:70:1f:4a: b4:dd:17:7e:85:fc:a8:e2:d6:5f:0f:37:89:20:12:b2:55:87: 28:e1:02:f7:6b:30:da:b9:b1:0b:72:e3:3a:1d:87:fc:f7:3d: 68:29:92:57:64:ee:05:93:13:1c:6b:79:77:20:8e:af:11:83: 77:9b:24:66:89:5e:11:30:70:9e:d0:06:99:2b:cc:41:fa:6e: 64:af:d0:a8:0d:22:76:87:90:e1:60:ac:18:41:58:3b:f7:06: d4:15:c4:f4 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEi2JhZeK3A9ph84OGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDEzMDAyMDA0MFoXDTI1MDQzMDAxMDA0MFowLzEtMCsGA1UEAxMk ZTNiYTM0NWEtMTY5Mi00NDgyLWJhYmEtYjI2Y2U2NWRjN2ZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBJSeRo6p82vyJcSfw3A6j39pnNj4QA1cXeY vdU7sPTkfIvMTo04yfrvKDOac3aKzzFE1f6rlkSUbpIatZffXgrI7BTVP21zMFyH jsQuR7SFcEHkpSZE/9nhpgkHk4T9YwedSUy+zv9qc+ds+pNPlb3M+ispES5Se7xh Rde/CW0Uj/XOKUB8GZV+kOwVb+HluNMQKd004PO3lP+QXA+cDoiinbbGSmCh4oRx APDRDT6Eai9aOt/uZ+oJbYbNmZ2vwF+B9Z0DXWGI1je1lZ6T6YXN+g10wOM0okSs zdX/MTDMDYA2c5eAQb3BIARM5WJhv8mn+GLxOp5P4GGEji7IQQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFNc13NA6/sjEgqGK3OXokZFOnzpWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvN2U5ZWYxZGItZDhhOS0z ZTc0LTk5OTktNzUyYjVmNTg1ODNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYHIAEFaoAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAx7DIHBlLtAoPhf4zy6Z8qGJdsphPbdIXP4lxH8tIuOAZoUtE14sa cZsj0WJHAKjCapINAyxFhCJ47b+3TDDbChEUJynOtKLCXY+j67ABtTnpT5e4/2XX j1zljHg8DjZ3eJ7uWtJoWkc6t3sUUd0psZwnLqcnVyqdowxc68bFU+hNPpmwOiMu 91/E8z1GOcLinhnAWa3ee2RwbGJRAI9YcB9KtN0XfoX8qOLWXw83iSASslWHKOEC 92sw2rmxC3LjOh2H/Pc9aCmSV2TuBZMTHGt5dyCOrxGDd5skZoleETBwntAGmSvM QfpuZK/QqA0idoeQ4WCsGEFYO/cG1BXE9A== -----END CERTIFICATE-----Generated at Sun Feb 16 20:52:21 2025 by rpki-client