$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/335b8d7d-05a6-3f49-a23d-28f7c0365140.roa File: 335b8d7d-05a6-3f49-a23d-28f7c0365140.roa (raw, json) Hash identifier: tUQDm0d9vxFYARGAGL8hWCb1OhXA0HMIPZiPIem5vXw= Subject key identifier: B4:2F:B6:83:85:C4:E6:EB:14:2C:7D:A3:0A:A0:2D:0B:92:2A:3E:A5 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C582358EA588F38717042700 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/335b8d7d-05a6-3f49-a23d-28f7c0365140.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 396982 IP address blocks: 2600:1901:81b0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:35:8e:a5:88:f3:87:17:04:27:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=8b43535f-b7c2-4ff7-837b-aeb87a7e396f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:6f:2f:9c:90:b9:03:3f:f2:30:dd:f0:44:e4: 5b:40:3d:ff:38:46:c7:3d:46:95:9e:ba:ca:85:28: 7e:1a:a4:77:bd:33:ef:ff:a0:ca:9b:15:0c:13:e9: bd:9f:4e:c9:de:ce:66:24:f0:51:87:a6:a9:9c:f1: 9a:4d:40:fe:cc:e4:d0:f3:0f:68:c2:47:53:d7:bb: ec:f9:22:e8:bd:2c:9d:61:7b:d3:27:80:d3:47:e5: 5d:09:84:5d:3c:c5:ef:ec:0d:1c:43:79:c7:7d:3a: 34:b3:cb:6f:df:5f:44:d8:44:fe:5f:b8:19:d2:55: 70:cd:78:88:d1:31:91:63:02:e6:56:71:e6:35:fa: e4:09:b0:7b:55:44:b8:4c:35:26:0a:6e:ad:d3:d4: 9c:46:06:1e:2e:1d:50:42:0d:76:c9:94:e8:cd:0e: 73:20:47:a7:0c:cc:e4:89:26:6b:a8:f5:15:f5:ce: 10:b7:91:e1:22:95:0d:c9:e3:18:e7:28:e9:4c:b9: 35:d0:56:83:0d:4a:2c:fe:81:db:18:fb:29:7c:39: be:23:36:2f:08:55:ad:4c:2a:ff:ed:46:f6:e8:48: bc:6e:7b:60:e9:f9:e0:cd:f2:ee:e9:ab:81:52:b4: 63:7a:1b:69:95:51:b0:2c:ba:43:b6:54:75:2a:12: 71:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:2F:B6:83:85:C4:E6:EB:14:2C:7D:A3:0A:A0:2D:0B:92:2A:3E:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/335b8d7d-05a6-3f49-a23d-28f7c0365140.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv6: 2600:1901:81b0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:65:60:23:3e:a3:7d:f5:2c:8a:09:de:23:22:cc:04:d5:5c: df:46:63:df:55:37:1d:d2:70:db:87:47:ff:08:d5:a4:ff:64: b2:d4:72:8a:cc:77:d8:3b:b4:71:28:01:53:b7:76:ca:f0:86: d2:35:71:34:b5:80:2a:e5:89:7a:83:34:dc:76:2d:f7:0d:83: 3d:ba:73:1b:61:69:b3:1e:4e:cb:03:5f:24:36:d3:7a:23:99: 31:26:15:51:0a:6f:70:fe:6a:61:7a:bf:b4:ad:ce:91:59:19: 98:28:21:fd:0c:20:5d:13:e5:51:50:ec:84:20:dd:f9:fe:0d: 49:e9:8b:07:40:d8:ca:a9:80:c9:36:8c:e6:f5:33:f0:46:ac: 29:ce:ec:97:04:ef:f6:00:ef:94:e2:a7:38:c7:27:7a:43:a3: 42:e0:ea:cf:fc:0b:f4:14:56:66:2a:ce:d7:10:48:b9:24:12: 35:9f:18:d8:5b:d6:16:cd:d2:d0:31:51:17:e8:bc:99:80:49: 99:97:48:f4:f8:c6:ab:a0:2f:2c:30:04:68:98:40:6d:b1:34: 31:97:14:f0:f3:54:f9:88:bc:2e:fd:79:59:7f:14:a7:1d:aa: 08:36:ca:8e:6e:4c:e1:e9:fb:7d:65:1f:fb:d3:1d:e8:65:b3: 1f:23:aa:66 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjFgjWOpYjzhxcEJwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk OGI0MzUzNWYtYjdjMi00ZmY3LTgzN2ItYWViODdhN2UzOTZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoG8vnJC5Az/yMN3wRORbQD3/OEbHPUaVnrrK hSh+GqR3vTPv/6DKmxUME+m9n07J3s5mJPBRh6apnPGaTUD+zOTQ8w9owkdT17vs +SLovSydYXvTJ4DTR+VdCYRdPMXv7A0cQ3nHfTo0s8tv319E2ET+X7gZ0lVwzXiI 0TGRYwLmVnHmNfrkCbB7VUS4TDUmCm6t09ScRgYeLh1QQg12yZTozQ5zIEenDMzk iSZrqPUV9c4Qt5HhIpUNyeMY5yjpTLk10FaDDUos/oHbGPspfDm+IzYvCFWtTCr/ 7Ub26Ei8bntg6fngzfLu6auBUrRjehtplVGwLLpDtlR1KhJxNQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLQvtoOFxObrFCx9owqgLQuSKj6lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzM1YjhkN2QtMDVhNi0z ZjQ5LWEyM2QtMjhmN2MwMzY1MTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAZAYGw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADRlYCM+o331LIoJ3iMizATVXN9GY99VNx3ScNuHR/8I1aT/ZLLU corMd9g7tHEoAVO3dsrwhtI1cTS1gCrliXqDNNx2LfcNgz26cxthabMeTssDXyQ2 03ojmTEmFVEKb3D+amF6v7StzpFZGZgoIf0MIF0T5VFQ7IQg3fn+DUnpiwdA2Mqp gMk2jOb1M/BGrCnO7JcE7/YA75TipzjHJ3pDo0Lg6s/8C/QUVmYqztcQSLkkEjWf GNhb1hbN0tAxURfovJmASZmXSPT4xqugLywwBGiYQG2xNDGXFPDzVPmIvC79eVl/ FKcdqgg2yo5uTOHp+31lH/vTHehlsx8jqmY= -----END CERTIFICATE-----Generated at Fri Apr 4 21:40:07 2025 by rpki-client