$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/b7081f16-c1fc-385d-ad47-dfc8d308ba28.roa File: b7081f16-c1fc-385d-ad47-dfc8d308ba28.roa (raw, json) Hash identifier: VOVAreiMxyiEzt9LMEDa+ou7dQvDJX3/FA4VWE2+ytk= Subject key identifier: 7D:01:3D:2C:11:F6:1B:66:17:0E:0D:B9:7A:B8:5E:31:E9:BB:56:F8 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285848BE8627C32C94B395CC934380 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/b7081f16-c1fc-385d-ad47-dfc8d308ba28.roa Signing time: Sun 02 Feb 2025 02:00:39 +0000 ROA not before: Sun 02 Feb 2025 02:00:39 +0000 ROA not after: Sat 03 May 2025 01:00:39 +0000 asID: 852 IP address blocks: 2001:56a:800c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:be:86:27:c3:2c:94:b3:95:cc:93:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Feb 2 02:00:39 2025 GMT Not After : May 3 01:00:39 2025 GMT Subject: CN=cb237bbf-4f09-41f3-9d7c-2160f09b64da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:89:f5:50:4d:66:33:43:7e:b4:cd:f2:93:3f: 6e:d4:bf:56:a1:a0:a0:eb:ea:dc:5a:e5:e5:0f:71: 99:e8:2f:d0:7a:69:89:ef:f7:04:b6:11:9c:1e:0b: c6:1e:8c:10:ba:2b:ee:f6:53:1e:59:0f:44:82:5b: 81:cf:bf:3f:8f:ac:c8:5f:55:37:44:f0:49:63:8e: f3:22:a4:c2:06:a2:7d:63:ec:56:16:1d:f5:19:d6: 6f:06:33:5d:2c:4a:ed:78:d3:6c:39:eb:7d:14:6e: 4d:9f:5f:2d:30:11:f4:04:1e:fc:61:60:69:bc:bc: 52:96:fa:4e:bd:a6:85:d2:6d:31:4d:57:7b:75:3c: f0:de:1b:7d:5b:a5:ec:67:5c:b5:7f:bd:7a:eb:58: d4:a8:7c:af:0d:82:ad:3c:c4:f4:99:44:45:9c:46: a8:36:12:ef:0c:21:eb:a8:f1:fe:ad:87:3c:b9:60: 6c:cd:cf:ff:df:be:5d:9a:61:27:13:35:e0:4f:54: 08:6c:22:57:79:e3:4f:62:5c:26:9a:63:fb:96:93: a8:2e:6e:e6:98:d8:4a:ff:cf:98:c6:38:39:d5:1a: 85:74:d2:8e:fc:bd:8f:57:ab:9c:ab:c6:2b:e8:36: 6f:4c:52:6a:5e:4e:86:5e:24:ec:30:eb:e0:53:73: 39:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:01:3D:2C:11:F6:1B:66:17:0E:0D:B9:7A:B8:5E:31:E9:BB:56:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/b7081f16-c1fc-385d-ad47-dfc8d308ba28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv6: 2001:56a:800c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:5e:99:9d:5b:78:b8:4d:4e:79:83:de:da:d5:aa:4a:17:49: d6:fa:40:38:9f:37:ee:fb:c8:4b:fa:1b:0f:fb:6b:2e:59:f4: 1e:55:19:7e:b4:0c:76:e5:1b:d6:1e:d6:17:2a:58:a3:f0:d0: d5:40:0d:8b:c0:d3:c9:42:35:8c:cf:38:e6:6d:29:db:ff:d7: 98:cc:12:0b:a1:02:ec:02:c1:bf:15:bd:0a:d5:0c:4a:f5:8f: 7b:1f:55:3f:a1:48:93:93:d1:29:16:3c:92:e7:4f:9b:ed:0b: 30:43:55:80:b8:d2:03:f0:83:35:58:b2:9d:03:5f:0a:24:0f: fc:d6:a6:56:1c:91:07:84:cb:5d:7b:70:d1:6e:4b:d1:d4:e0: bf:86:9d:b0:93:ff:fb:d6:96:fa:ad:2b:8f:5c:da:95:68:c7: fe:dd:fe:4c:d1:38:c8:22:27:75:fe:36:c9:32:d4:6e:1a:19: 1f:5d:85:52:ad:59:52:25:61:1c:36:12:f8:3f:a8:11:e0:e1: 48:71:36:5b:4a:04:0e:6d:ea:f9:ea:51:b5:6d:de:e3:60:bd: e0:62:c7:28:44:dc:78:53:c3:2c:d8:a5:89:29:0c:ec:0e:d4: 5d:19:9a:8b:35:c2:e5:f2:7d:3a:08:53:f4:75:bf:9f:f2:f4: 4b:bd:b5:71 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEi+hifDLJSzlcyTQ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDIwMjAyMDAzOVoXDTI1MDUwMzAxMDAzOVowLzEtMCsGA1UEAxMk Y2IyMzdiYmYtNGYwOS00MWYzLTlkN2MtMjE2MGYwOWI2NGRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4n1UE1mM0N+tM3ykz9u1L9WoaCg6+rcWuXl D3GZ6C/QemmJ7/cEthGcHgvGHowQuivu9lMeWQ9EgluBz78/j6zIX1U3RPBJY47z IqTCBqJ9Y+xWFh31GdZvBjNdLErteNNsOet9FG5Nn18tMBH0BB78YWBpvLxSlvpO vaaF0m0xTVd7dTzw3ht9W6XsZ1y1f71661jUqHyvDYKtPMT0mURFnEaoNhLvDCHr qPH+rYc8uWBszc//375dmmEnEzXgT1QIbCJXeeNPYlwmmmP7lpOoLm7mmNhK/8+Y xjg51RqFdNKO/L2PV6ucq8Yr6DZvTFJqXk6GXiTsMOvgU3M59wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFH0BPSwR9htmFw4NuXq4XjHpu1b4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYjcwODFmMTYtYzFmYy0z ODVkLWFkNDctZGZjOGQzMDhiYTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFaoAM MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFpemZ1beLhNTnmD3trVqkoXSdb6QDifN+77yEv6Gw/7ay5Z9B5V GX60DHblG9Ye1hcqWKPw0NVADYvA08lCNYzPOOZtKdv/15jMEguhAuwCwb8VvQrV DEr1j3sfVT+hSJOT0SkWPJLnT5vtCzBDVYC40gPwgzVYsp0DXwokD/zWplYckQeE y117cNFuS9HU4L+GnbCT//vWlvqtK49c2pVox/7d/kzROMgiJ3X+Nsky1G4aGR9d hVKtWVIlYRw2Evg/qBHg4UhxNltKBA5t6vnqUbVt3uNgveBixyhE3HhTwyzYpYkp DOwO1F0Zmos1wuXyfToIU/R1v5/y9Eu9tXE= -----END CERTIFICATE-----Generated at Sun Apr 6 06:01:20 2025 by rpki-client