$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/5fbf8239-a43f-3b20-8bc0-392f9b200280.roa File: 5fbf8239-a43f-3b20-8bc0-392f9b200280.roa (raw, json) Hash identifier: xvkI7e2ZPbHgcpYQWk9aaIUbEV6bNGn6tFb++CM9p6g= Subject key identifier: 8A:2B:7A:75:04:07:7E:02:FF:B6:65:C9:F2:78:71:C6:E9:6F:A4:43 Certificate issuer: /CN=d106a247-9308-46e9-9d88-ae987a6bdace Certificate serial: 010D0C9F43285848CC7B90E41AABF3638B2EEFC0 Authority key identifier: E7:DC:3B:E5:56:FF:1D:5F:DF:CA:F4:65:1C:3D:2E:6C:FD:FE:82:3A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/5fbf8239-a43f-3b20-8bc0-392f9b200280.roa Signing time: Fri 07 Feb 2025 02:00:39 +0000 ROA not before: Fri 07 Feb 2025 02:00:39 +0000 ROA not after: Thu 08 May 2025 01:00:39 +0000 asID: 50131 IP address blocks: 2604:9cc0:1400::/38 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/d106a247-9308-46e9-9d88-ae987a6bdace.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/d106a247-9308-46e9-9d88-ae987a6bdace.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cc:7b:90:e4:1a:ab:f3:63:8b:2e:ef:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d106a247-9308-46e9-9d88-ae987a6bdace Validity Not Before: Feb 7 02:00:39 2025 GMT Not After : May 8 01:00:39 2025 GMT Subject: CN=2efbb850-7740-4acb-8df7-51fcc93b8c8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:67:79:52:3d:0e:3e:0e:d1:54:db:f3:6b:0a: 1c:a3:e2:98:90:96:df:ab:c9:fa:40:ab:19:ed:35: e6:d0:5b:a4:be:04:cc:c9:e8:45:b2:58:e1:10:2f: b3:c7:ae:32:5e:a6:6e:18:92:dd:02:f5:e1:5c:66: 96:de:90:86:a2:12:14:f6:74:82:0a:a5:79:80:f6: a5:7a:ee:1e:c0:11:64:4e:b0:0b:7d:8a:3d:6b:ec: 3f:c3:e1:4c:1d:71:83:02:9d:9a:48:db:6a:1a:ea: 17:7a:6f:8c:f9:a4:5e:5b:ae:10:4b:93:4c:c3:79: cf:82:91:42:7d:25:27:91:52:19:2b:12:6a:e4:dd: 67:5a:0a:fe:d3:5f:0b:57:89:ee:a1:d9:36:cf:f8: b1:ea:e4:ba:82:49:a7:fc:9f:c5:35:02:08:c1:f8: 6c:43:e9:4a:47:dd:5f:2c:6b:16:11:43:5c:a1:f5: b0:1e:46:75:b4:8b:c4:2e:e0:c7:ab:33:f7:f4:dd: 30:68:e7:54:c9:4e:f3:e2:b6:9e:4a:8d:8e:1f:27: 13:d1:3c:d0:4e:d4:64:0e:17:72:dc:31:97:11:b8: a2:cb:89:30:31:09:d4:fe:6e:94:9f:57:a4:8d:36: 5d:ff:56:27:cb:bf:69:9b:4c:fe:cc:fa:c6:db:a6: aa:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:2B:7A:75:04:07:7E:02:FF:B6:65:C9:F2:78:71:C6:E9:6F:A4:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/5fbf8239-a43f-3b20-8bc0-392f9b200280.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/d106a247-9308-46e9-9d88-ae987a6bdace.crl X509v3 Authority Key Identifier: keyid:E7:DC:3B:E5:56:FF:1D:5F:DF:CA:F4:65:1C:3D:2E:6C:FD:FE:82:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace.cer sbgp-ipAddrBlock: critical IPv6: 2604:9cc0:1400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:82:2d:26:d4:1a:65:4a:bc:90:d1:00:6b:19:43:74:f7:31: c5:d3:42:ae:52:46:46:9c:7c:3a:b6:8f:28:ab:bb:62:01:56: 5f:50:66:6e:17:f4:0d:6c:a9:86:7e:cd:d9:84:80:10:04:1b: 99:09:70:17:26:72:1e:bf:96:2a:94:39:60:25:9b:06:4c:4a: 3a:74:b1:3a:fc:89:e3:76:b8:ae:c5:e7:9e:f5:79:03:0d:80: 2b:5c:ce:4c:b1:d2:ec:31:ea:1b:c3:1c:5e:03:23:f7:50:ac: 02:4c:0d:70:6a:49:75:96:fd:4c:a0:cc:38:02:a9:28:c7:0b: f1:48:44:47:1a:13:12:38:c6:58:a9:91:23:19:81:ef:d2:26: d4:ac:b0:07:a5:e4:65:9b:6a:bb:95:e2:cb:71:4e:1e:d2:f0: 14:8d:9e:1d:0c:1e:1c:dd:ec:1e:8f:fb:24:f9:d4:3d:d6:59: 07:5e:25:fd:19:55:df:6e:79:1f:1a:1a:e6:26:46:c5:ce:68: a7:3e:7f:9b:df:9d:b7:4e:9f:18:c6:1a:e8:da:d0:27:b6:29: 35:53:b0:ba:f9:d1:a6:eb:f8:3e:2a:7e:37:bb:fc:cb:d8:82: 25:22:ae:54:0c:c9:50:b5:68:32:34:cf:9e:fb:d6:a2:1e:8b: ee:26:b5:92 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEjMe5DkGqvzY4su78AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDEwNmEyNDctOTMwOC00NmU5LTlkODgtYWU5ODdhNmJk YWNlMB4XDTI1MDIwNzAyMDAzOVoXDTI1MDUwODAxMDAzOVowLzEtMCsGA1UEAxMk MmVmYmI4NTAtNzc0MC00YWNiLThkZjctNTFmY2M5M2I4YzhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmd5Uj0OPg7RVNvzawoco+KYkJbfq8n6QKsZ 7TXm0FukvgTMyehFsljhEC+zx64yXqZuGJLdAvXhXGaW3pCGohIU9nSCCqV5gPal eu4ewBFkTrALfYo9a+w/w+FMHXGDAp2aSNtqGuoXem+M+aReW64QS5NMw3nPgpFC fSUnkVIZKxJq5N1nWgr+018LV4nuodk2z/ix6uS6gkmn/J/FNQIIwfhsQ+lKR91f LGsWEUNcofWwHkZ1tIvELuDHqzP39N0waOdUyU7z4raeSo2OHycT0TzQTtRkDhdy 3DGXEbiiy4kwMQnU/m6Un1ekjTZd/1Yny79pm0z+zPrG26aqbwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFIorenUEB34C/7ZlyfJ4ccbpb6RDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kMTA2 YTI0Ny05MzA4LTQ2ZTktOWQ4OC1hZTk4N2E2YmRhY2UvNWZiZjgyMzktYTQzZi0z YjIwLThiYzAtMzkyZjliMjAwMjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDEwNmEyNDctOTMwOC00NmU5LTlk ODgtYWU5ODdhNmJkYWNlL2QxMDZhMjQ3LTkzMDgtNDZlOS05ZDg4LWFlOTg3YTZi ZGFjZS5jcmwwHwYDVR0jBBgwFoAU59w75Vb/HV/fyvRlHD0ubP3+gjowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kMTA2YTI0Ny05MzA4LTQ2ZTktOWQ4OC1hZTk4 N2E2YmRhY2UuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgScwBQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAPoItJtQaZUq8kNEAaxlDdPcxxdNCrlJGRpx8OraPKKu7YgFWX1Bm bhf0DWyphn7N2YSAEAQbmQlwFyZyHr+WKpQ5YCWbBkxKOnSxOvyJ43a4rsXnnvV5 Aw2AK1zOTLHS7DHqG8McXgMj91CsAkwNcGpJdZb9TKDMOAKpKMcL8UhERxoTEjjG WKmRIxmB79Im1KywB6XkZZtqu5Xiy3FOHtLwFI2eHQweHN3sHo/7JPnUPdZZB14l /RlV3255Hxoa5iZGxc5opz5/m9+dt06fGMYa6NrQJ7YpNVOwuvnRpuv4Pip+N7v8 y9iCJSKuVAzJULVoMjTPnvvWoh6L7ia1kg== -----END CERTIFICATE-----Generated at Sat Apr 5 07:00:11 2025 by rpki-client