$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d347d4c7-9428-30f5-bda3-fa81d7b8e7c5.roa File: d347d4c7-9428-30f5-bda3-fa81d7b8e7c5.roa (raw, json) Hash identifier: HnRgjwTm4U2yfvILc/GRsiDAFrCsQEipgj8Ev+dWaLw= Subject key identifier: 87:32:9F:9B:AA:42:5F:87:B6:17:18:A8:FC:F9:96:E0:04:73:1D:76 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285848B35B64320F15D3F1E07E5E80 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d347d4c7-9428-30f5-bda3-fa81d7b8e7c5.roa Signing time: Wed 29 Jan 2025 02:00:39 +0000 ROA not before: Wed 29 Jan 2025 02:00:39 +0000 ROA not after: Tue 29 Apr 2025 01:00:39 +0000 asID: 852 IP address blocks: 2001:568::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b3:5b:64:32:0f:15:d3:f1:e0:7e:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jan 29 02:00:39 2025 GMT Not After : Apr 29 01:00:39 2025 GMT Subject: CN=0aba0370-7463-43ee-8fd6-f0f0361b1fd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:32:ea:5b:45:3e:ad:39:65:cf:2e:da:15:99: 1e:7d:71:71:c8:df:c4:bb:7b:e1:f9:18:04:62:d3: bb:19:11:42:ea:63:f9:47:75:14:24:52:3e:a8:03: a8:8f:d2:fc:65:14:70:72:f5:52:79:ea:22:ca:c3: 1c:97:99:f7:b9:71:ec:f1:89:2c:0b:1b:f9:1e:9b: 9f:b9:1d:09:3f:fa:1b:a5:ce:35:e6:e6:95:56:41: 63:7a:9e:dd:24:1c:ed:f6:73:83:76:35:db:02:99: c8:23:47:57:74:68:62:13:3e:0c:de:2d:89:21:88: d0:f1:9e:82:70:e5:6c:c7:31:3d:26:07:4b:e4:66: cd:24:13:25:6b:fb:cc:a7:37:52:28:0f:93:07:cc: 3e:3f:df:12:5b:6f:b6:13:0e:2d:fe:47:f4:f4:82: 3a:93:2e:7b:46:36:b0:41:24:0e:75:1f:1e:7e:1b: e9:14:64:6d:23:31:85:90:9d:60:7f:4b:00:05:b1: 74:83:0f:a7:47:78:ca:8d:0e:08:af:bc:a7:bf:40: 61:9e:6c:55:fc:ce:cd:9b:03:9f:83:31:a7:b2:ff: 85:4c:63:a6:41:89:02:76:83:93:97:dd:95:09:51: 0c:b9:2f:20:85:bf:ef:9d:14:17:7a:19:c4:75:d3: 5b:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:32:9F:9B:AA:42:5F:87:B6:17:18:A8:FC:F9:96:E0:04:73:1D:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d347d4c7-9428-30f5-bda3-fa81d7b8e7c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv6: 2001:568::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption f4:e8:62:02:66:6a:5f:04:2d:ad:c1:64:27:57:ac:9c:1a:88: 7d:a0:00:32:6a:d6:5f:f8:65:7e:c8:bc:1c:07:20:99:cd:eb: ec:35:17:98:31:1a:34:78:e8:57:fa:70:1b:ff:ec:c8:8d:ba: 30:7a:d7:29:ec:0d:a0:c1:4e:9b:86:9b:61:37:23:50:6a:75: 71:c8:dc:88:b3:63:4f:19:97:dc:62:27:b4:99:57:d6:11:5d: 4b:9b:c7:80:73:b5:25:90:9d:5a:58:43:b1:93:62:e8:7f:09: 4f:e2:70:5f:38:37:d2:c6:23:26:ae:db:75:ee:80:88:99:0b: 23:f8:b2:57:d1:e0:6f:4a:e6:85:8a:ab:50:9e:7a:6d:59:39: 87:1f:02:df:0e:62:81:43:99:5e:b2:c2:c3:47:77:84:8c:86: ff:19:39:62:39:eb:ae:4e:ed:41:29:e3:87:d3:a7:62:14:82: c4:65:27:59:11:40:1c:ee:39:69:37:b1:b2:7d:93:e5:ca:4f: c2:eb:68:82:84:c8:be:08:61:cc:c3:77:60:5a:8e:41:02:fd: b2:cb:0b:11:eb:ca:80:d2:4c:e1:dd:c1:0a:4d:94:b1:fb:df: d2:d9:04:39:18:35:95:1c:43:93:ce:8b:6d:50:15:df:62:c4: ff:7d:36:fc -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEizW2QyDxXT8eB+XoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDEyOTAyMDAzOVoXDTI1MDQyOTAxMDAzOVowLzEtMCsGA1UEAxMk MGFiYTAzNzAtNzQ2My00M2VlLThmZDYtZjBmMDM2MWIxZmQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDLqW0U+rTllzy7aFZkefXFxyN/Eu3vh+RgE YtO7GRFC6mP5R3UUJFI+qAOoj9L8ZRRwcvVSeeoiysMcl5n3uXHs8YksCxv5Hpuf uR0JP/obpc415uaVVkFjep7dJBzt9nODdjXbApnII0dXdGhiEz4M3i2JIYjQ8Z6C cOVsxzE9JgdL5GbNJBMla/vMpzdSKA+TB8w+P98SW2+2Ew4t/kf09II6ky57Rjaw QSQOdR8efhvpFGRtIzGFkJ1gf0sABbF0gw+nR3jKjQ4Ir7ynv0BhnmxV/M7NmwOf gzGnsv+FTGOmQYkCdoOTl92VCVEMuS8ghb/vnRQXehnEddNbhQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFIcyn5uqQl+HthcYqPz5luAEcx12MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZDM0N2Q0YzctOTQyOC0z MGY1LWJkYTMtZmE4MWQ3YjhlN2M1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEIAEFaAAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEA9OhiAmZqXwQtrcFkJ1esnBqIfaAAMmrWX/hlfsi8HAcgmc3r7DUX mDEaNHjoV/pwG//syI26MHrXKewNoMFOm4abYTcjUGp1ccjciLNjTxmX3GIntJlX 1hFdS5vHgHO1JZCdWlhDsZNi6H8JT+JwXzg30sYjJq7bde6AiJkLI/iyV9Hgb0rm hYqrUJ56bVk5hx8C3w5igUOZXrLCw0d3hIyG/xk5Yjnrrk7tQSnjh9OnYhSCxGUn WRFAHO45aTexsn2T5cpPwutogoTIvghhzMN3YFqOQQL9sssLEevKgNJM4d3BCk2U sfvf0tkEORg1lRxDk86LbVAV32LE/302/A== -----END CERTIFICATE-----Generated at Sun Apr 6 06:00:59 2025 by rpki-client