$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/beef1c8d-1fdc-3386-9486-e5ba37fe6082.roa File: beef1c8d-1fdc-3386-9486-e5ba37fe6082.roa (raw, json) Hash identifier: nj5PbloI3PpjyG0U6zF+BegP6eZ60DV+QZDvaYFPTcE= Subject key identifier: 90:7C:F6:D2:F3:0C:C5:BF:AA:99:81:6C:D3:EC:2E:D5:12:E2:4A:E2 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285848B35B62E05DFDA8B102BAAB00 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/beef1c8d-1fdc-3386-9486-e5ba37fe6082.roa Signing time: Wed 29 Jan 2025 02:00:39 +0000 ROA not before: Wed 29 Jan 2025 02:00:39 +0000 ROA not after: Tue 29 Apr 2025 01:00:39 +0000 asID: 852 IP address blocks: 2001:56b:c007::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b3:5b:62:e0:5d:fd:a8:b1:02:ba:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jan 29 02:00:39 2025 GMT Not After : Apr 29 01:00:39 2025 GMT Subject: CN=e33a7986-0a0d-43e5-8481-182eee5b1e56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:05:d9:50:ad:57:c0:8f:15:bf:aa:4e:d5:7d: 71:31:26:ce:7a:ef:33:b6:88:fb:70:ff:07:d5:eb: 45:7b:78:f6:a5:51:51:bb:72:99:9b:18:e8:53:b8: c7:bf:4f:c0:f2:0e:7a:6d:8b:c2:15:52:92:dd:f9: 74:6e:60:00:99:3e:b7:42:4f:b1:16:45:2a:8d:49: b6:34:ce:49:20:ba:b9:05:9a:fe:46:b1:19:04:00: f0:b6:24:44:4d:b3:d9:9e:e0:ea:56:30:57:dc:79: ad:1f:54:a6:d1:ff:b0:a3:66:55:57:be:57:d9:ac: 75:80:f1:b5:3b:42:d6:8f:51:b6:d8:5b:4b:fa:d7: 3f:31:bf:80:3e:42:2f:f3:da:8b:64:06:17:cf:0e: 92:37:42:40:1e:64:d4:2f:11:7a:0d:73:1d:09:75: 6a:23:8f:96:5c:fb:85:ec:0a:e4:18:42:ca:26:6e: 6f:98:63:9b:14:b6:3f:e2:01:80:d4:2a:8b:e6:0f: c2:5a:32:d1:a1:c4:1d:2f:5d:a6:a9:2f:a7:bb:fc: c2:c9:9b:99:d8:77:93:e1:85:25:03:aa:06:a5:e2: d9:0a:88:09:c9:22:9b:51:75:60:fa:40:27:74:af: ff:4d:8a:73:67:8a:f6:86:01:90:6c:17:6b:1e:31: c0:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:7C:F6:D2:F3:0C:C5:BF:AA:99:81:6C:D3:EC:2E:D5:12:E2:4A:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/beef1c8d-1fdc-3386-9486-e5ba37fe6082.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv6: 2001:56b:c007::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:40:f1:b5:81:97:5b:06:74:c8:13:a5:d3:e5:ac:23:4a:f7: da:54:bb:88:fa:a8:61:e1:e4:3e:a3:61:df:17:cf:46:f8:62: 83:89:e7:96:da:4b:d8:1b:68:5b:19:fc:f9:04:11:bf:15:93: 9d:e4:99:fe:f4:21:5d:36:8e:51:0f:ef:e3:f8:d0:37:d1:65: a9:01:d8:2e:92:d6:e8:9a:7a:d7:7b:f2:63:59:29:ae:60:bf: d2:7e:db:69:ec:2d:3d:e1:4f:f4:44:cb:19:9a:bc:85:d0:8b: cd:ab:fd:4c:2d:9d:4b:4d:23:76:c7:0b:16:c9:ba:ac:10:ee: 96:d2:30:60:ec:e9:75:e6:3d:9e:5b:c6:8a:52:55:0c:ec:d7: 14:43:8c:60:9c:74:9b:04:49:88:2c:87:46:da:df:66:23:25: a5:c5:be:3b:fc:ba:37:86:e7:a2:09:1f:bd:94:07:fc:bf:98: 28:d7:d7:4f:15:55:45:09:18:c5:90:31:32:6e:38:9d:13:b2: c0:86:bb:1f:e2:df:1c:d0:c9:5d:92:5d:ad:af:67:03:ba:be: 3c:ce:cf:7c:11:bd:ff:79:13:2f:3d:61:0a:ec:e2:c7:c9:57: 09:2d:33:d6:c8:e5:3b:73:2d:d9:0e:18:e2:91:70:9d:b4:91: d2:e3:a8:c9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEizW2LgXf2osQK6qwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDEyOTAyMDAzOVoXDTI1MDQyOTAxMDAzOVowLzEtMCsGA1UEAxMk ZTMzYTc5ODYtMGEwZC00M2U1LTg0ODEtMTgyZWVlNWIxZTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiAXZUK1XwI8Vv6pO1X1xMSbOeu8ztoj7cP8H 1etFe3j2pVFRu3KZmxjoU7jHv0/A8g56bYvCFVKS3fl0bmAAmT63Qk+xFkUqjUm2 NM5JILq5BZr+RrEZBADwtiRETbPZnuDqVjBX3HmtH1Sm0f+wo2ZVV75X2ax1gPG1 O0LWj1G22FtL+tc/Mb+APkIv89qLZAYXzw6SN0JAHmTULxF6DXMdCXVqI4+WXPuF 7ArkGELKJm5vmGObFLY/4gGA1CqL5g/CWjLRocQdL12mqS+nu/zCyZuZ2HeT4YUl A6oGpeLZCogJySKbUXVg+kAndK//TYpzZ4r2hgGQbBdrHjHAqQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJB89tLzDMW/qpmBbNPsLtUS4kriMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYmVlZjFjOGQtMWZkYy0z Mzg2LTk0ODYtZTViYTM3ZmU2MDgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFa8AH MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFRA8bWBl1sGdMgTpdPlrCNK99pUu4j6qGHh5D6jYd8Xz0b4YoOJ 55baS9gbaFsZ/PkEEb8Vk53kmf70IV02jlEP7+P40DfRZakB2C6S1uiaetd78mNZ Ka5gv9J+22nsLT3hT/REyxmavIXQi82r/UwtnUtNI3bHCxbJuqwQ7pbSMGDs6XXm PZ5bxopSVQzs1xRDjGCcdJsESYgsh0ba32YjJaXFvjv8ujeG56IJH72UB/y/mCjX 108VVUUJGMWQMTJuOJ0TssCGux/i3xzQyV2SXa2vZwO6vjzOz3wRvf95Ey89YQrs 4sfJVwktM9bI5TtzLdkOGOKRcJ20kdLjqMk= -----END CERTIFICATE-----Generated at Sun Apr 6 06:08:05 2025 by rpki-client