$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dfb24555-dbe5-3975-a1af-78253f9849c8.roa File: dfb24555-dbe5-3975-a1af-78253f9849c8.roa (raw, json) Hash identifier: pZvvUqnFtUIIQxGTyedW0jlAsUJhXrbu98UPaWsgpCk= Subject key identifier: 2C:76:59:95:DA:F1:CC:41:3A:18:FA:4A:41:EC:90:A9:80:DE:CA:B5 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C5818C18FB1C773AB7E86F20 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dfb24555-dbe5-3975-a1af-78253f9849c8.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 396982 IP address blocks: 2600:1900:41a0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:8c:18:fb:1c:77:3a:b7:e8:6f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=4227f71f-e496-459f-83c1-adae25a0a1db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:f3:81:00:1f:ac:cd:52:2e:a1:a3:cb:d0:76: ee:01:f2:6a:14:a7:61:dd:82:29:f1:3c:2c:0c:9a: 28:1c:c5:96:7f:29:0c:e0:f7:9d:46:9e:9c:0a:16: 2d:1d:af:19:7d:cb:f3:d4:fb:9e:4a:08:a7:a5:f0: ba:e7:c2:d3:24:a3:e9:a2:dc:a5:26:1c:95:62:d8: ac:58:88:e6:65:c2:9c:30:7c:68:3a:3c:11:42:39: 22:00:27:54:80:66:72:d6:11:9c:61:6d:a6:3a:cf: 2b:6e:43:fb:03:83:c7:b4:11:7c:b9:f2:9e:7d:8d: fa:c7:33:cd:3b:82:d1:da:bf:61:1b:4e:6f:ad:4a: 59:98:48:bd:d0:63:e1:d0:97:d9:42:5b:ff:fd:77: d0:bd:24:a3:9e:ff:58:9d:60:c6:bd:87:05:a2:51: 9c:04:ed:4e:70:0b:51:4b:1e:93:13:f6:99:70:64: 1d:d4:87:1f:d5:5d:c7:d7:9d:19:60:b6:17:e4:5a: 41:24:3f:a3:5f:17:c2:36:53:cd:c9:d7:8a:0d:88: b9:6d:d1:54:f2:58:3b:8d:63:1a:40:ba:53:bd:52: 6d:8f:74:70:f0:42:f5:5e:18:8f:7e:11:80:78:51: 5a:1a:29:0d:bb:f8:2a:e4:02:9c:03:21:f8:6d:25: 71:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:76:59:95:DA:F1:CC:41:3A:18:FA:4A:41:EC:90:A9:80:DE:CA:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dfb24555-dbe5-3975-a1af-78253f9849c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv6: 2600:1900:41a0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:ec:d8:a3:ea:7c:dc:74:69:d5:35:21:78:ba:35:96:d8:4f: b5:4a:0c:8c:30:98:7d:e4:92:11:56:2f:47:00:91:3e:4d:74: 2b:ed:f0:c1:9f:c2:7c:97:db:f2:22:9d:4c:fa:0c:09:b2:65: a6:06:37:6e:e9:a9:32:4c:63:52:a1:3b:f7:e9:7d:d1:51:98: e2:99:a0:a1:e8:34:a6:1e:ba:c3:04:ff:85:00:ee:0b:15:e7: d0:aa:79:1f:0d:4f:f5:68:0b:13:63:2a:fa:15:6d:ae:58:4f: dc:6b:87:43:dc:a8:d4:81:23:da:21:ea:ba:6b:44:5e:79:11: 65:84:07:39:d3:69:47:e1:43:62:30:c7:8d:12:27:68:8d:61: c3:65:9b:7d:0c:b6:05:9c:4c:e0:57:4f:5a:cc:5a:c8:04:72: b3:31:fc:9b:c9:65:e8:5e:ad:12:d7:3d:b6:3e:64:94:3e:dd: e8:3b:bf:a7:c8:c9:0b:51:a3:cb:67:44:c3:7b:f5:7a:ce:2f: 2c:84:9c:23:16:c5:c3:01:42:17:14:d2:32:77:35:0a:e3:5c: 9a:b9:ad:ea:26:56:d8:2f:e1:c4:6a:7a:10:c9:82:53:78:cd: a2:4a:11:38:a0:01:66:72:0e:52:96:4d:99:0d:d5:fb:cd:69: 47:25:b2:c3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjFgYwY+xx3OrfobyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NDIyN2Y3MWYtZTQ5Ni00NTlmLTgzYzEtYWRhZTI1YTBhMWRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5fOBAB+szVIuoaPL0HbuAfJqFKdh3YIp8Tws DJooHMWWfykM4PedRp6cChYtHa8Zfcvz1PueSginpfC658LTJKPpotylJhyVYtis WIjmZcKcMHxoOjwRQjkiACdUgGZy1hGcYW2mOs8rbkP7A4PHtBF8ufKefY36xzPN O4LR2r9hG05vrUpZmEi90GPh0JfZQlv//XfQvSSjnv9YnWDGvYcFolGcBO1OcAtR Sx6TE/aZcGQd1Icf1V3H150ZYLYX5FpBJD+jXxfCNlPNydeKDYi5bdFU8lg7jWMa QLpTvVJtj3Rw8EL1XhiPfhGAeFFaGikNu/gq5AKcAyH4bSVxHQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCx2WZXa8cxBOhj6SkHskKmA3sq1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZGZiMjQ1NTUtZGJlNS0z OTc1LWExYWYtNzgyNTNmOTg0OWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAZAEGg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB3s2KPqfNx0adU1IXi6NZbYT7VKDIwwmH3kkhFWL0cAkT5NdCvt 8MGfwnyX2/IinUz6DAmyZaYGN27pqTJMY1KhO/fpfdFRmOKZoKHoNKYeusME/4UA 7gsV59CqeR8NT/VoCxNjKvoVba5YT9xrh0PcqNSBI9oh6rprRF55EWWEBznTaUfh Q2Iwx40SJ2iNYcNlm30MtgWcTOBXT1rMWsgEcrMx/JvJZeherRLXPbY+ZJQ+3eg7 v6fIyQtRo8tnRMN79XrOLyyEnCMWxcMBQhcU0jJ3NQrjXJq5reomVtgv4cRqehDJ glN4zaJKETigAWZyDlKWTZkN1fvNaUclssM= -----END CERTIFICATE-----Generated at Fri Apr 4 18:08:43 2025 by rpki-client