$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d9d5ced5-8d7a-384e-a047-9db809fa8081.roa File: d9d5ced5-8d7a-384e-a047-9db809fa8081.roa (raw, json) Hash identifier: ywYTvHS6tloM/SueTAFpGmMTzNlwtwo2wEZ5ljaY+qk= Subject key identifier: 31:52:C5:11:FB:4E:5A:0D:CD:DC:BA:BC:39:FD:B2:3F:A6:ED:8E:D0 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285848BE8627B2DFF99A320F421840 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d9d5ced5-8d7a-384e-a047-9db809fa8081.roa Signing time: Sun 02 Feb 2025 02:00:39 +0000 ROA not before: Sun 02 Feb 2025 02:00:39 +0000 ROA not after: Sat 03 May 2025 01:00:39 +0000 asID: 852 IP address blocks: 2001:56a:800b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Feb 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:be:86:27:b2:df:f9:9a:32:0f:42:18:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Feb 2 02:00:39 2025 GMT Not After : May 3 01:00:39 2025 GMT Subject: CN=cd5b5dc2-6640-4919-842a-18e2ea0b9d76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:14:29:ac:0e:c9:b4:65:e9:80:be:64:07:48: 36:9f:2b:92:70:2b:74:2b:1a:cf:bc:84:cf:43:cd: 39:69:6c:27:21:ea:23:cb:e6:1d:88:69:0b:59:50: 42:55:ca:54:5e:ac:27:f8:43:d6:ec:e9:dd:44:ce: 55:0e:63:2d:b3:9f:47:90:54:c1:43:b9:d0:35:98: 80:8a:c6:c9:2f:ac:87:6e:26:b6:aa:fc:9a:1e:00: 3d:34:46:73:8f:49:47:5c:63:e0:a2:fe:1f:e2:fa: 1f:6a:49:35:83:f3:46:7f:ba:d9:45:b9:b5:95:c5: 48:c6:c9:ac:b0:49:e0:35:c7:5e:93:71:26:31:6c: 99:89:e9:6f:70:dd:ee:ad:94:ec:1b:94:e2:bf:af: 71:05:6a:d3:4a:01:3a:cf:a2:3a:39:42:fb:d7:ef: c8:ad:b8:cd:ae:9b:b7:c9:3b:09:76:c5:65:13:12: 65:d8:9c:1a:05:0e:ee:22:60:92:b6:8c:e1:52:7c: c5:61:db:60:2a:9a:3a:ec:fe:fb:7a:e0:ea:6e:b8: 87:f3:c8:c7:e3:19:d1:c3:42:01:95:b2:99:51:46: 45:a7:78:d7:14:f2:9b:1b:1f:38:59:5a:09:26:43: 99:12:84:ed:2e:2c:36:8c:1a:33:85:7c:c4:a5:95: 7f:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:52:C5:11:FB:4E:5A:0D:CD:DC:BA:BC:39:FD:B2:3F:A6:ED:8E:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d9d5ced5-8d7a-384e-a047-9db809fa8081.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv6: 2001:56a:800b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption eb:aa:8a:86:c1:46:9b:57:50:7a:c0:3a:d8:eb:d7:49:b6:94: b3:8a:59:8f:79:c4:09:0d:27:05:90:39:9d:15:f0:16:f1:f6: f8:fd:35:1d:94:19:39:df:78:30:f0:79:e0:7d:c9:b2:48:ec: 6f:d8:36:f7:97:8e:ac:07:39:0c:24:cf:53:67:37:03:0b:db: 79:06:17:81:6e:9f:a2:99:fe:03:ed:a9:e6:ad:c0:01:4c:02: 6a:68:d9:25:73:93:8c:ec:87:bf:e1:29:90:f8:b1:29:38:7c: a1:0b:2b:8b:80:7a:61:db:d6:9a:ee:57:ad:f1:41:42:89:91: 84:f0:58:87:5a:77:75:d8:e3:2b:3a:55:67:c2:91:ef:47:6e: 07:bf:76:ea:6f:31:24:66:c0:8f:24:f2:d1:ec:2f:38:f4:87: a4:0e:f3:51:70:30:25:d4:cf:99:d3:08:1d:d7:7b:8c:16:64: d3:61:05:ac:4e:11:25:35:e6:76:fa:5c:5a:91:fa:94:67:5e: a8:bf:12:5b:b2:f9:1e:2a:d2:0d:d5:cd:a0:81:33:05:e2:9c: 7c:c5:1d:58:5b:82:a8:54:da:b8:76:52:ba:30:12:64:4f:89: 05:c8:af:86:78:f5:99:d9:96:ad:f7:f2:b4:8b:0e:91:fb:89: f6:85:d4:4c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEi+hiey3/maMg9CGEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDIwMjAyMDAzOVoXDTI1MDUwMzAxMDAzOVowLzEtMCsGA1UEAxMk Y2Q1YjVkYzItNjY0MC00OTE5LTg0MmEtMThlMmVhMGI5ZDc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRQprA7JtGXpgL5kB0g2nyuScCt0KxrPvITP Q805aWwnIeojy+YdiGkLWVBCVcpUXqwn+EPW7OndRM5VDmMts59HkFTBQ7nQNZiA isbJL6yHbia2qvyaHgA9NEZzj0lHXGPgov4f4vofakk1g/NGf7rZRbm1lcVIxsms sEngNcdek3EmMWyZielvcN3urZTsG5Tiv69xBWrTSgE6z6I6OUL71+/IrbjNrpu3 yTsJdsVlExJl2JwaBQ7uImCStozhUnzFYdtgKpo67P77euDqbriH88jH4xnRw0IB lbKZUUZFp3jXFPKbGx84WVoJJkOZEoTtLiw2jBozhXzEpZV/WQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDFSxRH7TloNzdy6vDn9sj+m7Y7QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZDlkNWNlZDUtOGQ3YS0z ODRlLWEwNDctOWRiODA5ZmE4MDgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFaoAL MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAOuqiobBRptXUHrAOtjr10m2lLOKWY95xAkNJwWQOZ0V8Bbx9vj9 NR2UGTnfeDDweeB9ybJI7G/YNveXjqwHOQwkz1NnNwML23kGF4Fun6KZ/gPtqeat wAFMAmpo2SVzk4zsh7/hKZD4sSk4fKELK4uAemHb1pruV63xQUKJkYTwWIdad3XY 4ys6VWfCke9Hbge/dupvMSRmwI8k8tHsLzj0h6QO81FwMCXUz5nTCB3Xe4wWZNNh BaxOESU15nb6XFqR+pRnXqi/Eluy+R4q0g3VzaCBMwXinHzFHVhbgqhU2rh2Urow EmRPiQXIr4Z49ZnZlq338rSLDpH7ifaF1Ew= -----END CERTIFICATE-----Generated at Sun Feb 16 21:00:45 2025 by rpki-client