$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3119b73a-feb4-3fb3-b40d-48bda2abfce2.roa File: 3119b73a-feb4-3fb3-b40d-48bda2abfce2.roa (raw, json) Hash identifier: XCuxqwmHqWrtcMZhFJ73VyNG1Y47ppeYprAAUulr5DE= Subject key identifier: 56:3D:F3:38:CA:EF:FE:A7:CA:44:2C:30:2F:4F:2B:67:33:BB:F5:63 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C582363B0537D49F892D5C00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3119b73a-feb4-3fb3-b40d-48bda2abfce2.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 396982 IP address blocks: 2600:1901:ffa0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:36:3b:05:37:d4:9f:89:2d:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=1e14c61e-100a-4f1d-9790-9bb2fb98a52d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:df:76:80:91:8d:78:9f:39:d2:67:68:e1:0e: 7a:3e:4e:49:a3:c5:36:c8:8f:f1:d0:b0:f4:1b:4a: 2f:8a:00:23:1c:df:b0:51:54:df:22:93:44:e7:c7: d9:49:99:f5:7e:42:1c:7e:0e:8d:d0:ae:2b:3a:b5: e9:ba:82:43:c1:ac:1f:e4:70:60:29:f4:6d:95:16: 82:03:cf:c5:cd:62:d6:09:75:77:05:61:f7:e8:3a: d0:41:7d:6e:e8:70:78:4c:b6:94:93:12:bb:64:8e: 22:4b:c0:6a:12:be:bc:d3:c4:21:4f:fe:17:5c:fc: 83:ab:56:63:06:20:9d:b0:9b:ec:db:28:38:b4:ce: 11:27:e8:6c:18:9b:5e:06:e8:34:d5:ac:2e:50:ca: 87:24:46:48:ab:40:e0:ff:8e:a1:eb:ef:e1:8b:1b: 3d:8a:07:d4:cd:a7:7f:1a:4b:81:f7:06:12:f9:3b: e5:62:5b:49:ce:c3:28:bb:ae:d3:08:6b:17:12:72: 68:bd:2d:17:67:c0:3a:b5:8c:3c:29:d8:d6:3e:c4: 91:b1:81:9a:a4:2d:56:76:11:f4:6d:0e:d7:fc:f7: 73:01:e9:67:31:b9:9c:d7:13:29:67:df:2b:30:51: a1:fa:8b:2f:3c:9a:5f:66:94:ed:87:d7:b3:08:66: af:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:3D:F3:38:CA:EF:FE:A7:CA:44:2C:30:2F:4F:2B:67:33:BB:F5:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3119b73a-feb4-3fb3-b40d-48bda2abfce2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv6: 2600:1901:ffa0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:5b:ba:b9:dd:51:17:e5:09:9f:97:47:0f:a9:f0:b7:2e:8b: e8:17:69:24:e2:0b:cc:4f:e3:08:0f:4a:fc:08:ac:15:c2:19: b4:c7:75:e7:29:e6:7d:af:94:97:8d:fb:e4:3d:69:36:40:d3: 2d:58:4b:b7:bb:ec:3a:90:5f:1d:cd:ce:80:9b:f9:52:a6:91: 1d:c0:73:1a:0c:9e:9f:92:b9:9b:a8:21:fe:ba:dd:84:ec:a8: b0:ae:83:a6:de:68:44:d5:1b:66:ae:6a:eb:cb:d7:a0:61:d4: 83:5b:88:35:35:58:92:71:43:1f:db:60:78:54:8f:7a:4a:32: 24:a5:08:a1:d3:ec:3e:61:c7:93:ca:7b:db:15:9c:2f:cc:0e: 2a:5f:35:ee:90:9e:c3:34:d8:a0:73:a7:1b:d1:08:f9:4c:2f: 11:13:17:3f:83:dd:4e:7f:eb:c7:09:f4:de:7f:e4:33:d6:99: bb:66:c4:e8:46:e0:e5:76:6f:9f:4e:4f:f5:e2:c5:38:75:8c: e2:d8:58:0c:e9:65:9b:76:78:4c:ee:5b:2f:25:bf:c6:b7:18: a3:d4:c8:de:fe:32:08:71:ea:67:29:65:aa:1a:e2:0f:e9:fa: cd:7f:4c:21:68:2b:e8:25:38:d8:17:90:5d:78:9c:1f:50:bf: 86:58:02:09 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjFgjY7BTfUn4ktXAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MWUxNGM2MWUtMTAwYS00ZjFkLTk3OTAtOWJiMmZiOThhNTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgt92gJGNeJ850mdo4Q56Pk5Jo8U2yI/x0LD0 G0ovigAjHN+wUVTfIpNE58fZSZn1fkIcfg6N0K4rOrXpuoJDwawf5HBgKfRtlRaC A8/FzWLWCXV3BWH36DrQQX1u6HB4TLaUkxK7ZI4iS8BqEr6808QhT/4XXPyDq1Zj BiCdsJvs2yg4tM4RJ+hsGJteBug01awuUMqHJEZIq0Dg/46h6+/hixs9igfUzad/ GkuB9wYS+TvlYltJzsMou67TCGsXEnJovS0XZ8A6tYw8KdjWPsSRsYGapC1WdhH0 bQ7X/PdzAelnMbmc1xMpZ98rMFGh+osvPJpfZpTth9ezCGavLwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFY98zjK7/6nykQsMC9PK2czu/VjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzExOWI3M2EtZmViNC0z ZmIzLWI0MGQtNDhiZGEyYWJmY2UyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAZAf+g MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJBburndURflCZ+XRw+p8Lcui+gXaSTiC8xP4wgPSvwIrBXCGbTH decp5n2vlJeN++Q9aTZA0y1YS7e77DqQXx3NzoCb+VKmkR3AcxoMnp+SuZuoIf66 3YTsqLCug6beaETVG2auauvL16Bh1INbiDU1WJJxQx/bYHhUj3pKMiSlCKHT7D5h x5PKe9sVnC/MDipfNe6QnsM02KBzpxvRCPlMLxETFz+D3U5/68cJ9N5/5DPWmbtm xOhG4OV2b59OT/XixTh1jOLYWAzpZZt2eEzuWy8lv8a3GKPUyN7+Mghx6mcpZaoa 4g/p+s1/TCFoK+glONgXkF14nB9Qv4ZYAgk= -----END CERTIFICATE-----Generated at Sun Feb 16 15:25:09 2025 by rpki-client