$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/a4a4bb11-26da-330a-bb5b-de2802fe76fd.roa File: a4a4bb11-26da-330a-bb5b-de2802fe76fd.roa (raw, json) Hash identifier: ZmpiqtdUA/7nulztD+0UDCBm47AlzD9tB3wFpXSXoRs= Subject key identifier: 00:21:BC:90:80:9E:E6:EF:25:7B:53:C7:F5:61:15:EB:F7:5C:E2:8B Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285848B35B6359CEF2FFC2DD2D2380 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/a4a4bb11-26da-330a-bb5b-de2802fe76fd.roa Signing time: Wed 29 Jan 2025 02:00:39 +0000 ROA not before: Wed 29 Jan 2025 02:00:39 +0000 ROA not after: Tue 29 Apr 2025 01:00:39 +0000 asID: 852 IP address blocks: 2001:56b:4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b3:5b:63:59:ce:f2:ff:c2:dd:2d:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jan 29 02:00:39 2025 GMT Not After : Apr 29 01:00:39 2025 GMT Subject: CN=374a0d42-817d-4ae7-b114-590a333ae05a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b3:6f:1e:67:aa:ac:64:e0:b2:b7:2c:78:fe: 04:e2:8f:8b:fb:5d:1e:3c:6c:db:84:1e:2d:14:5c: 3f:d5:e0:51:b2:4e:60:4b:38:92:11:86:e2:2b:a1: 23:ee:11:c8:1d:cd:52:f0:91:80:36:43:0d:3d:ac: 64:ed:55:50:4d:f9:d2:c8:0e:71:40:2c:8e:b5:30: de:86:a0:b6:ad:e6:3b:33:26:59:22:7a:7a:e8:31: 67:53:fc:b2:93:35:6c:01:06:e5:2f:11:5d:4d:b9: 25:a5:16:27:4f:11:87:38:2a:6b:aa:c0:7d:60:af: 73:1f:8d:99:7f:5c:5d:0c:db:5e:eb:08:6a:05:79: d6:ee:2c:0a:8b:b7:59:ac:21:33:1d:ad:c6:33:1e: 0d:9f:89:c4:45:f1:fa:a9:9d:fc:d9:e3:47:b7:10: c4:2d:46:99:da:96:e2:36:7c:4f:c5:a5:05:23:d6: 3a:b0:8d:c6:5b:cf:2e:0e:d1:1f:5c:93:b5:bb:6d: 78:c8:82:b0:59:5a:f5:c1:36:86:94:9f:02:e2:dd: 71:25:76:9f:f3:62:90:27:52:65:4b:97:5c:89:0d: 1b:14:a7:0a:c9:2c:9f:40:c9:23:36:a0:9e:03:b8: 3e:a7:4c:d6:25:af:b2:e3:f9:ae:a2:33:6a:f0:e3: 4a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:21:BC:90:80:9E:E6:EF:25:7B:53:C7:F5:61:15:EB:F7:5C:E2:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/a4a4bb11-26da-330a-bb5b-de2802fe76fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv6: 2001:56b:4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:c1:cf:d7:e4:ff:2d:18:a8:c0:c7:9b:41:a6:27:bd:68:29: 02:35:c9:12:9e:75:98:83:06:b6:b7:06:af:48:43:ed:75:6b: 16:79:5d:20:a8:63:64:25:60:b3:90:18:42:19:86:3a:9c:f3: e3:2c:e5:1e:6f:30:32:e2:11:74:b6:31:e3:0e:3d:96:53:c7: 10:e5:a3:88:ac:cd:98:d5:fd:e5:dd:21:2e:13:63:76:0a:1f: db:88:51:77:f8:9c:98:94:a2:b9:4a:41:9f:aa:7f:3a:ed:e7: 52:6a:52:27:4d:3e:0a:20:58:25:03:63:e8:64:e4:c7:1f:2c: 28:f9:fe:ca:5e:de:fa:e5:01:d4:ca:60:6d:07:67:47:6b:45: 3e:35:88:60:f0:c8:ef:f2:4e:86:ab:1d:7a:75:58:2e:53:cb: f5:5d:a0:cd:ca:8b:45:42:62:62:76:d4:83:c4:73:b8:17:8c: 0a:ec:d5:89:5c:98:bc:41:f4:97:23:bb:79:d9:5c:92:21:d5: c6:61:da:c6:ae:df:70:0c:f3:a2:50:a8:99:62:f6:04:19:35: 38:20:40:a3:7f:bc:3a:33:8d:08:c1:e0:73:d5:8b:14:6d:6e: 01:a0:9e:12:bd:ac:66:5d:0c:9d:41:3d:34:04:ad:9d:25:91: 49:6b:9b:93 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEizW2NZzvL/wt0tI4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDEyOTAyMDAzOVoXDTI1MDQyOTAxMDAzOVowLzEtMCsGA1UEAxMk Mzc0YTBkNDItODE3ZC00YWU3LWIxMTQtNTkwYTMzM2FlMDVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7NvHmeqrGTgsrcseP4E4o+L+10ePGzbhB4t FFw/1eBRsk5gSziSEYbiK6Ej7hHIHc1S8JGANkMNPaxk7VVQTfnSyA5xQCyOtTDe hqC2reY7MyZZInp66DFnU/yykzVsAQblLxFdTbklpRYnTxGHOCprqsB9YK9zH42Z f1xdDNte6whqBXnW7iwKi7dZrCEzHa3GMx4Nn4nERfH6qZ382eNHtxDELUaZ2pbi NnxPxaUFI9Y6sI3GW88uDtEfXJO1u214yIKwWVr1wTaGlJ8C4t1xJXaf82KQJ1Jl S5dciQ0bFKcKySyfQMkjNqCeA7g+p0zWJa+y4/muojNq8ONKWwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAAhvJCAnubvJXtTx/VhFev3XOKLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYTRhNGJiMTEtMjZkYS0z MzBhLWJiNWItZGUyODAyZmU3NmZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFawAE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHfBz9fk/y0YqMDHm0GmJ71oKQI1yRKedZiDBra3Bq9IQ+11axZ5 XSCoY2QlYLOQGEIZhjqc8+Ms5R5vMDLiEXS2MeMOPZZTxxDlo4iszZjV/eXdIS4T Y3YKH9uIUXf4nJiUorlKQZ+qfzrt51JqUidNPgogWCUDY+hk5McfLCj5/spe3vrl AdTKYG0HZ0drRT41iGDwyO/yToarHXp1WC5Ty/VdoM3Ki0VCYmJ21IPEc7gXjArs 1YlcmLxB9Jcju3nZXJIh1cZh2sau33AM86JQqJli9gQZNTggQKN/vDozjQjB4HPV ixRtbgGgnhK9rGZdDJ1BPTQErZ0lkUlrm5M= -----END CERTIFICATE-----Generated at Sun Apr 6 12:45:16 2025 by rpki-client