$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a0f2be31-7e12-34df-8668-aa258e1d91ef.roa File: a0f2be31-7e12-34df-8668-aa258e1d91ef.roa (raw, json) Hash identifier: 2+pvEQJOQYNWLh2sSju+GKNeDhiwXxPd8UJGznfmWss= Subject key identifier: B0:E6:4D:9F:43:A8:2B:DA:71:17:71:4D:46:6B:70:68:AD:35:71:08 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848CEA548248C7BE095B2A23C00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a0f2be31-7e12-34df-8668-aa258e1d91ef.roa Signing time: Fri 07 Feb 2025 20:36:26 +0000 ROA not before: Fri 07 Feb 2025 20:36:26 +0000 ROA not after: Thu 08 May 2025 19:36:26 +0000 asID: 396982 IP address blocks: 2600:1901:81d5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ce:a5:48:24:8c:7b:e0:95:b2:a2:3c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 7 20:36:26 2025 GMT Not After : May 8 19:36:26 2025 GMT Subject: CN=d1cd5400-0011-4411-b850-2314372956be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:b6:ef:f3:70:bc:cf:7f:41:9e:26:f2:53:53: b9:30:9c:93:16:49:fb:fe:3f:27:a4:ea:ef:b0:41: 5b:7b:7e:50:39:78:37:95:3f:85:fb:0b:15:d0:d1: 0e:b4:8d:05:7c:52:28:77:71:ec:8a:73:a2:1f:59: 9e:ac:8d:1e:cd:a9:d4:0e:ce:62:18:f9:bf:eb:03: 9b:09:38:d5:b7:18:44:6d:30:50:0a:54:c8:e6:58: 59:9e:7b:46:f8:fa:88:02:b5:a7:8b:45:a2:0a:74: 83:25:54:7b:1f:c1:7f:a3:33:80:ea:90:8b:13:24: a8:19:83:97:32:44:5e:4a:4f:71:75:7a:1c:41:55: 66:f1:a7:ca:af:9d:75:34:2f:73:64:45:83:66:aa: ca:85:76:35:29:b3:b0:f6:72:15:74:dc:67:b7:ad: 09:0e:fc:0b:65:f8:3f:8b:e6:76:c2:16:95:b7:82: 96:6b:1c:32:0e:43:ca:e4:a6:f4:9d:25:03:0f:ca: b1:9f:19:f5:ea:27:71:d7:dc:c5:d5:09:da:60:e0: af:9e:5b:6c:e0:c9:32:04:e9:a3:b0:b0:62:7e:96: d2:a1:57:8f:60:cd:cc:cd:56:55:70:8d:61:e7:01: f1:26:4f:60:57:5f:db:03:4f:c2:51:bc:04:ef:65: 64:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:E6:4D:9F:43:A8:2B:DA:71:17:71:4D:46:6B:70:68:AD:35:71:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a0f2be31-7e12-34df-8668-aa258e1d91ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv6: 2600:1901:81d5::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:98:e3:e9:75:38:76:66:19:05:84:18:6b:95:a5:7b:3e:5b: 35:de:14:75:aa:56:e3:63:ee:8e:8e:d2:3c:77:a1:86:f6:28: 23:81:9b:30:db:6e:43:2f:04:4a:c6:9d:76:de:a3:9b:1a:72: 88:a2:3e:6c:56:ca:4c:ee:b9:f1:02:57:56:8d:d8:77:2a:51: 71:4c:99:ba:a9:4a:b8:28:2a:3f:0c:62:32:54:34:70:2b:27: ec:5d:fd:4c:16:0b:01:44:f1:f4:bc:2f:38:11:e7:23:37:b8: d3:ea:2f:51:4e:4b:d5:89:23:06:6a:5e:5b:d0:e0:64:47:78: 69:f4:65:7d:93:f7:06:51:81:a5:ef:d3:a5:3e:93:40:3f:bf: af:e8:eb:57:fc:f7:7b:f3:dd:89:57:03:bb:1b:1a:90:0f:f0: 9c:d9:f2:75:4b:3b:a5:56:d8:b4:0f:bb:e2:7e:7e:2c:87:3e: ba:d1:10:0e:ec:99:1b:d9:01:d7:c4:c8:89:2f:81:19:0c:0b: ae:ca:59:ec:6c:4b:34:00:e7:45:31:06:20:06:c9:33:9d:f4: dc:63:32:ff:f7:5e:13:a7:a7:01:4a:02:ff:dd:a9:8a:68:7a: a7:e2:cc:34:52:38:14:9d:dd:f9:57:d4:0f:2d:03:1d:05:b0: 6e:fb:76:fe -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjOpUgkjHvglbKiPAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNzIwMzYyNloXDTI1MDUwODE5MzYyNlowLzEtMCsGA1UEAxMk ZDFjZDU0MDAtMDAxMS00NDExLWI4NTAtMjMxNDM3Mjk1NmJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7bv83C8z39BnibyU1O5MJyTFkn7/j8npOrv sEFbe35QOXg3lT+F+wsV0NEOtI0FfFIod3HsinOiH1merI0ezanUDs5iGPm/6wOb CTjVtxhEbTBQClTI5lhZnntG+PqIArWni0WiCnSDJVR7H8F/ozOA6pCLEySoGYOX MkReSk9xdXocQVVm8afKr511NC9zZEWDZqrKhXY1KbOw9nIVdNxnt60JDvwLZfg/ i+Z2whaVt4KWaxwyDkPK5Kb0nSUDD8qxnxn16idx19zF1QnaYOCvnlts4MkyBOmj sLBifpbSoVePYM3MzVZVcI1h5wHxJk9gV1/bA0/CUbwE72VkewIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLDmTZ9DqCvacRdxTUZrcGitNXEIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYTBmMmJlMzEtN2UxMi0z NGRmLTg2NjgtYWEyNThlMWQ5MWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAZAYHV MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGqY4+l1OHZmGQWEGGuVpXs+WzXeFHWqVuNj7o6O0jx3oYb2KCOB mzDbbkMvBErGnXbeo5sacoiiPmxWykzuufECV1aN2HcqUXFMmbqpSrgoKj8MYjJU NHArJ+xd/UwWCwFE8fS8LzgR5yM3uNPqL1FOS9WJIwZqXlvQ4GRHeGn0ZX2T9wZR gaXv06U+k0A/v6/o61f893vz3YlXA7sbGpAP8JzZ8nVLO6VW2LQPu+J+fiyHPrrR EA7smRvZAdfEyIkvgRkMC67KWexsSzQA50UxBiAGyTOd9NxjMv/3XhOnpwFKAv/d qYpoeqfizDRSOBSd3flX1A8tAx0FsG77dv4= -----END CERTIFICATE-----Generated at Fri Apr 4 18:08:54 2025 by rpki-client