$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e8a49a3d-191e-32d4-9ba6-dea410cc8d0c.roa File: e8a49a3d-191e-32d4-9ba6-dea410cc8d0c.roa (raw, json) Hash identifier: upIlbEsNXtsrY4+uJv8RGt56qqtMhLUhSIywpXdQp14= Subject key identifier: 28:A9:05:E6:73:90:BF:77:35:0F:44:61:32:9D:2B:76:80:AF:5A:D1 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285848B35B6043EEF6ADC6304B5200 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e8a49a3d-191e-32d4-9ba6-dea410cc8d0c.roa Signing time: Wed 29 Jan 2025 02:00:39 +0000 ROA not before: Wed 29 Jan 2025 02:00:39 +0000 ROA not after: Tue 29 Apr 2025 01:00:39 +0000 asID: 852 IP address blocks: 2001:56a:6fe0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b3:5b:60:43:ee:f6:ad:c6:30:4b:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jan 29 02:00:39 2025 GMT Not After : Apr 29 01:00:39 2025 GMT Subject: CN=7f1a790b-15fe-46e7-b077-1679052403cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:b7:1d:1d:60:cd:0c:31:47:25:d0:df:e3:5c: 0c:43:0e:6d:34:5b:62:bd:5d:44:85:87:1a:87:bc: 2b:bc:38:d0:d7:cb:2a:06:19:24:75:a4:1f:c4:74: 7b:12:11:40:3e:be:d7:d4:5f:46:80:85:fa:86:25: f3:b8:6b:2e:d5:95:03:e2:96:30:cb:e4:f1:75:86: 43:49:cc:a2:29:7f:2d:2f:37:47:2a:b6:ee:63:b4: 98:3c:67:05:ee:56:b2:49:59:c6:c4:94:ec:32:78: 9d:34:73:c3:c3:2c:52:56:10:ce:54:fb:8d:b0:7c: d3:db:0e:34:6b:f7:37:4b:2b:31:78:66:76:97:89: b4:59:df:f6:0e:07:39:31:5b:9d:09:fd:74:27:f9: 2f:ab:7c:43:cc:7c:54:0b:ca:f0:0c:39:fc:5c:6f: 94:7b:7d:86:97:ba:89:86:57:f2:f6:cc:df:55:c2: 37:4d:fa:ea:50:3c:c4:68:6d:d7:d1:d9:4a:2e:5f: b5:3f:9f:b7:f5:f7:7d:9a:b6:9a:2f:e5:b1:b2:8d: 24:9d:ce:79:8d:04:25:52:fe:9c:c9:8c:1d:7e:bf: 8e:1c:ee:e2:a6:2f:64:5b:2f:b4:1a:30:f4:ee:56: b9:9f:ee:70:c9:28:76:83:0e:fe:d3:66:32:01:20: 25:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:A9:05:E6:73:90:BF:77:35:0F:44:61:32:9D:2B:76:80:AF:5A:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e8a49a3d-191e-32d4-9ba6-dea410cc8d0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv6: 2001:56a:6fe0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption dc:04:68:b9:05:30:fb:19:f5:ad:6e:ee:3f:9c:42:fc:29:9a: d6:a2:a1:a9:e8:ee:b5:f5:91:bf:11:8a:15:1e:72:45:bd:d8: e4:1c:3b:1b:2e:45:4f:b3:ed:39:9f:e7:6b:6c:7e:0d:14:3b: 1a:83:29:77:df:71:ac:df:fd:66:45:af:54:22:99:16:63:a6: c1:60:3b:fa:bf:a0:0a:90:c5:64:7e:2c:3e:34:73:df:74:89: c1:60:e0:02:cd:53:1f:c8:bf:ea:fc:2c:a6:87:45:73:67:84: 0c:43:79:bf:45:bf:d3:13:1d:e6:db:37:e4:88:70:a2:f8:9c: cc:06:b3:09:c3:ca:7b:ae:5d:de:a4:33:8b:e0:05:46:b5:fb: 27:fe:56:0e:34:36:ed:c0:d4:3c:a0:71:b1:ba:95:ea:a6:ac: 2e:14:c4:46:88:3a:f0:1f:a2:e8:45:db:cf:ea:a0:0b:4a:5e: 39:8a:23:95:18:0e:72:91:19:75:69:a9:84:4d:c2:2e:73:a7: 34:32:a3:b8:02:f8:a0:20:60:20:6c:3e:fa:2a:bd:6d:3d:d9: 1f:9a:f7:4d:23:9f:71:02:f9:c9:02:c9:17:06:4f:90:9b:90: 43:80:8e:16:ee:26:ce:69:fe:bd:92:a1:2b:36:35:0b:b7:c6: eb:e7:f3:3f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEizW2BD7vatxjBLUgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDEyOTAyMDAzOVoXDTI1MDQyOTAxMDAzOVowLzEtMCsGA1UEAxMk N2YxYTc5MGItMTVmZS00NmU3LWIwNzctMTY3OTA1MjQwM2NiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1rcdHWDNDDFHJdDf41wMQw5tNFtivV1EhYca h7wrvDjQ18sqBhkkdaQfxHR7EhFAPr7X1F9GgIX6hiXzuGsu1ZUD4pYwy+TxdYZD ScyiKX8tLzdHKrbuY7SYPGcF7laySVnGxJTsMnidNHPDwyxSVhDOVPuNsHzT2w40 a/c3SysxeGZ2l4m0Wd/2Dgc5MVudCf10J/kvq3xDzHxUC8rwDDn8XG+Ue32Gl7qJ hlfy9szfVcI3TfrqUDzEaG3X0dlKLl+1P5+39fd9mraaL+Wxso0knc55jQQlUv6c yYwdfr+OHO7ipi9kWy+0GjD07la5n+5wySh2gw7+02YyASAlQwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCipBeZzkL93NQ9EYTKdK3aAr1rRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZThhNDlhM2QtMTkxZS0z MmQ0LTliYTYtZGVhNDEwY2M4ZDBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEIAEFam/g MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBANwEaLkFMPsZ9a1u7j+cQvwpmtaioano7rX1kb8RihUeckW92OQc OxsuRU+z7Tmf52tsfg0UOxqDKXffcazf/WZFr1QimRZjpsFgO/q/oAqQxWR+LD40 c990icFg4ALNUx/Iv+r8LKaHRXNnhAxDeb9Fv9MTHebbN+SIcKL4nMwGswnDynuu Xd6kM4vgBUa1+yf+Vg40Nu3A1DygcbG6leqmrC4UxEaIOvAfouhF28/qoAtKXjmK I5UYDnKRGXVpqYRNwi5zpzQyo7gC+KAgYCBsPvoqvW092R+a900jn3EC+ckCyRcG T5CbkEOAjhbuJs5p/r2SoSs2NQu3xuvn8z8= -----END CERTIFICATE-----Generated at Sun Apr 6 06:01:12 2025 by rpki-client