$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/f26ea5c0-06e1-34d6-9e87-ebc51a33126f.roa File: f26ea5c0-06e1-34d6-9e87-ebc51a33126f.roa (raw, json) Hash identifier: H3izRDwDZmGl6hoyTAw8disMilmge37A2AW/QghpC24= Subject key identifier: 57:C7:7E:58:A3:4C:24:6C:E4:93:05:9A:C7:6F:33:0E:C5:79:13:7E Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285848B35B62F350F3AD13DF24A400 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/f26ea5c0-06e1-34d6-9e87-ebc51a33126f.roa Signing time: Wed 29 Jan 2025 02:00:39 +0000 ROA not before: Wed 29 Jan 2025 02:00:39 +0000 ROA not after: Tue 29 Apr 2025 01:00:39 +0000 asID: 852 IP address blocks: 2001:569:c007::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Feb 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b3:5b:62:f3:50:f3:ad:13:df:24:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jan 29 02:00:39 2025 GMT Not After : Apr 29 01:00:39 2025 GMT Subject: CN=7e4db9e1-ad3c-427d-bd53-83bf178f4621 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:08:58:10:32:3f:3b:24:6f:f8:89:8f:8a:b3: 4d:ef:91:a9:97:27:f3:7b:e4:81:dd:92:cd:4e:56: 76:b4:85:9c:35:14:e6:e2:b6:dd:8a:56:12:31:80: 2a:e0:06:d4:aa:ad:f2:58:a2:34:11:5b:e7:80:8c: 80:b3:f7:11:55:b6:04:72:50:c9:0e:54:64:9b:e9: 9d:a8:2f:84:b9:24:0e:f0:07:f5:6b:50:e3:f3:7a: 8a:88:ad:ac:0f:78:40:c1:c7:06:2e:80:69:49:bf: 02:b0:79:6e:b0:b5:f3:36:2d:04:af:d7:c5:d6:e1: 11:7b:3d:17:db:54:09:f2:73:4c:1a:98:de:25:e8: 9b:5c:65:2c:3a:05:2a:95:8f:bc:27:96:8f:5e:57: ce:d1:e8:6f:b9:c7:9b:47:1c:06:f4:0e:a6:1f:09: c2:3a:cb:8f:08:b5:85:0f:54:3a:d2:13:85:b6:e4: 27:ba:3a:fa:b6:f3:e5:5b:1c:78:fb:46:63:17:03: ea:8b:4d:27:4d:b2:c7:d1:38:a9:21:15:cb:d4:3c: 10:fb:3f:54:0d:e9:e8:1b:ec:b9:94:c7:2a:a1:37: 27:61:18:47:ba:fd:fc:00:72:1e:06:e6:53:66:67: 1b:e1:34:ef:3f:4e:04:d5:64:35:bf:4f:f4:7a:13: 15:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:C7:7E:58:A3:4C:24:6C:E4:93:05:9A:C7:6F:33:0E:C5:79:13:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/f26ea5c0-06e1-34d6-9e87-ebc51a33126f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv6: 2001:569:c007::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:c1:59:07:a6:c0:e7:34:90:b2:a6:83:7f:cb:fe:9e:b4:5c: 28:83:b0:5b:d2:de:11:3b:50:41:59:5d:fe:2b:49:d1:8b:67: 9a:a9:86:e2:23:7b:a3:a4:f6:8b:d2:2c:3c:39:68:c6:d2:f1: 15:70:63:b7:f7:cc:2c:1e:29:9b:81:23:47:05:02:e1:ff:bd: b7:3a:90:62:04:f4:08:56:c0:a3:d6:eb:40:68:15:fb:29:e8: 27:c2:ef:44:23:2f:ce:1b:c0:85:da:5b:11:4b:e7:25:c3:ec: 0d:d4:76:c3:dd:10:3a:88:05:7a:63:d5:15:4b:ff:dc:78:ec: ed:5d:e2:5a:0f:51:c2:1e:2c:4f:2b:2f:1e:6a:de:c7:39:e0: 25:42:20:8c:0a:fd:19:27:bc:87:80:9d:d4:fb:77:5f:49:ee: a3:96:4e:ed:80:c4:0a:ad:56:42:6a:f1:17:a1:54:61:8f:a4: 55:af:69:59:c1:38:85:0c:75:5b:3a:b4:0a:33:51:3e:81:4f: 4d:08:f4:54:cd:88:4e:a9:50:9d:52:49:f5:9f:3a:ea:79:b4: a2:19:43:bd:66:6b:b5:61:50:f6:93:a4:9c:32:7b:6f:59:ad: 8b:85:08:92:24:5d:64:d7:ce:f3:e5:b1:d6:18:81:12:f9:54: 47:8f:40:70 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEizW2LzUPOtE98kpAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDEyOTAyMDAzOVoXDTI1MDQyOTAxMDAzOVowLzEtMCsGA1UEAxMk N2U0ZGI5ZTEtYWQzYy00MjdkLWJkNTMtODNiZjE3OGY0NjIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlghYEDI/OyRv+ImPirNN75Gplyfze+SB3ZLN TlZ2tIWcNRTm4rbdilYSMYAq4AbUqq3yWKI0EVvngIyAs/cRVbYEclDJDlRkm+md qC+EuSQO8Af1a1Dj83qKiK2sD3hAwccGLoBpSb8CsHlusLXzNi0Er9fF1uERez0X 21QJ8nNMGpjeJeibXGUsOgUqlY+8J5aPXlfO0ehvucebRxwG9A6mHwnCOsuPCLWF D1Q60hOFtuQnujr6tvPlWxx4+0ZjFwPqi00nTbLH0TipIRXL1DwQ+z9UDenoG+y5 lMcqoTcnYRhHuv38AHIeBuZTZmcb4TTvP04E1WQ1v0/0ehMVrwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFfHflijTCRs5JMFmsdvMw7FeRN+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZjI2ZWE1YzAtMDZlMS0z NGQ2LTllODctZWJjNTFhMzMxMjZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFacAH MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE7BWQemwOc0kLKmg3/L/p60XCiDsFvS3hE7UEFZXf4rSdGLZ5qp huIje6Ok9ovSLDw5aMbS8RVwY7f3zCweKZuBI0cFAuH/vbc6kGIE9AhWwKPW60Bo Ffsp6CfC70QjL84bwIXaWxFL5yXD7A3UdsPdEDqIBXpj1RVL/9x47O1d4loPUcIe LE8rLx5q3sc54CVCIIwK/RknvIeAndT7d19J7qOWTu2AxAqtVkJq8RehVGGPpFWv aVnBOIUMdVs6tAozUT6BT00I9FTNiE6pUJ1SSfWfOup5tKIZQ71ma7VhUPaTpJwy e29ZrYuFCJIkXWTXzvPlsdYYgRL5VEePQHA= -----END CERTIFICATE-----Generated at Sun Feb 16 20:44:08 2025 by rpki-client