$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9f12aa87-6a5c-3cd2-a4e3-81e2498c1cc7.roa File: 9f12aa87-6a5c-3cd2-a4e3-81e2498c1cc7.roa (raw, json) Hash identifier: MC4Un6P2LsS9ZEYAfKcNQWbiOcVUktj0NH+bjiXS+0c= Subject key identifier: CA:46:24:D9:65:0C:AF:DB:0E:00:A1:01:C2:AC:87:04:5A:AF:F6:01 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285848B626162063204DCEEAAA3880 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9f12aa87-6a5c-3cd2-a4e3-81e2498c1cc7.roa Signing time: Thu 30 Jan 2025 02:00:40 +0000 ROA not before: Thu 30 Jan 2025 02:00:40 +0000 ROA not after: Wed 30 Apr 2025 01:00:40 +0000 asID: 852 IP address blocks: 2001:569:c000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b6:26:16:20:63:20:4d:ce:ea:aa:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jan 30 02:00:40 2025 GMT Not After : Apr 30 01:00:40 2025 GMT Subject: CN=27122401-87cc-4c6a-b13e-e0181b3d4215 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:db:de:dc:79:ff:33:96:59:b9:33:d9:f7:ea: 01:87:3c:db:88:00:58:43:c6:5f:ea:2d:81:b8:c0: 2e:2e:73:33:81:9e:59:8b:71:41:e0:ee:bf:14:24: 72:de:26:1f:aa:a9:f9:ed:c4:68:41:d7:05:21:71: e0:ae:53:d6:01:a3:d4:64:b5:cf:ac:37:a1:67:59: 28:2f:5d:50:3b:b4:71:55:e9:8b:96:83:b9:d9:11: 89:6e:12:58:1e:22:6f:14:f4:e1:79:70:44:36:fe: bf:b4:b7:a6:98:df:b0:21:e3:ab:32:20:61:4b:6e: 10:14:ae:fe:bb:5b:93:8f:64:f7:b8:c8:36:e0:f8: 8f:cc:fa:b7:3f:7a:f5:8f:2b:b8:13:33:61:ab:e8: 14:b3:0e:f8:6b:23:f6:bb:66:e5:df:ad:24:33:42: ab:0b:ec:1a:f8:6d:3d:a2:69:76:47:d7:f2:73:6d: ae:04:70:87:ea:f8:e7:23:fb:db:7c:29:63:02:e0: b1:77:11:91:ba:e4:09:f3:69:32:85:84:4a:37:f8: 34:37:fb:58:66:a5:bc:36:db:c9:9e:41:b9:9c:78: a4:b3:b2:f2:98:74:46:10:a5:9d:d7:00:60:f5:e8: 3b:9d:39:4b:d9:2e:d7:03:47:39:17:5b:da:b2:90: 0f:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:46:24:D9:65:0C:AF:DB:0E:00:A1:01:C2:AC:87:04:5A:AF:F6:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9f12aa87-6a5c-3cd2-a4e3-81e2498c1cc7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv6: 2001:569:c000::/34 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:71:27:8d:7d:90:67:ad:b5:fd:b1:a2:cf:c5:25:3c:e3:b1: ff:dd:52:1c:75:ea:15:4d:68:62:3c:5e:a0:e1:75:0a:e0:16: 9c:d8:80:be:da:32:23:cb:ef:3d:4b:de:44:ef:eb:1c:be:5f: d3:6a:a8:23:48:79:30:b7:b6:0a:9c:4d:30:2a:89:ff:28:48: 18:11:2a:aa:25:5a:6b:dc:e0:67:84:23:8e:e6:e0:57:e3:6b: 19:47:be:1a:63:8a:7c:99:6f:98:90:24:4e:88:8d:db:d4:43: bb:46:5f:5e:f9:72:f7:9e:81:ea:43:06:3e:19:ba:2a:47:5e: 8d:68:ee:e5:50:d6:15:20:36:ec:46:c3:ba:d9:b0:24:9c:5c: f5:25:24:bf:d2:87:9f:41:31:e1:ca:a6:e2:53:6a:89:35:b4: cb:ae:a3:8b:bc:c0:86:8a:b0:60:e3:73:8a:bb:ac:69:ef:16: bb:1a:20:2c:f6:16:4c:e0:e9:a3:30:bf:af:bd:21:bf:e9:f0: 4a:d6:5c:32:9c:28:ef:1c:cb:c6:cd:8a:01:2c:23:48:40:17: 19:a8:24:71:fe:9f:da:ef:73:a7:7f:ef:94:b1:1b:0a:7e:c2: e6:f8:24:64:37:3f:07:2b:17:1d:34:51:53:fe:d4:ea:aa:cd: 77:14:6b:b1 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEi2JhYgYyBNzuqqOIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDEzMDAyMDA0MFoXDTI1MDQzMDAxMDA0MFowLzEtMCsGA1UEAxMk MjcxMjI0MDEtODdjYy00YzZhLWIxM2UtZTAxODFiM2Q0MjE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9tve3Hn/M5ZZuTPZ9+oBhzzbiABYQ8Zf6i2B uMAuLnMzgZ5Zi3FB4O6/FCRy3iYfqqn57cRoQdcFIXHgrlPWAaPUZLXPrDehZ1ko L11QO7RxVemLloO52RGJbhJYHiJvFPTheXBENv6/tLemmN+wIeOrMiBhS24QFK7+ u1uTj2T3uMg24PiPzPq3P3r1jyu4EzNhq+gUsw74ayP2u2bl360kM0KrC+wa+G09 oml2R9fyc22uBHCH6vjnI/vbfCljAuCxdxGRuuQJ82kyhYRKN/g0N/tYZqW8NtvJ nkG5nHiks7LymHRGEKWd1wBg9eg7nTlL2S7XA0c5F1vaspAPQQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFMpGJNllDK/bDgChAcKshwRar/YBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvOWYxMmFhODctNmE1Yy0z Y2QyLWE0ZTMtODFlMjQ5OGMxY2M3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGIAEFacAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAIXEnjX2QZ621/bGiz8UlPOOx/91SHHXqFU1oYjxeoOF1CuAWnNiA vtoyI8vvPUveRO/rHL5f02qoI0h5MLe2CpxNMCqJ/yhIGBEqqiVaa9zgZ4Qjjubg V+NrGUe+GmOKfJlvmJAkToiN29RDu0ZfXvly956B6kMGPhm6KkdejWju5VDWFSA2 7EbDutmwJJxc9SUkv9KHn0Ex4cqm4lNqiTW0y66ji7zAhoqwYONzirusae8Wuxog LPYWTODpozC/r70hv+nwStZcMpwo7xzLxs2KASwjSEAXGagkcf6f2u9zp3/vlLEb Cn7C5vgkZDc/BysXHTRRU/7U6qrNdxRrsQ== -----END CERTIFICATE-----Generated at Sun Apr 6 06:00:53 2025 by rpki-client