$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/85da9da1-bccc-3cd7-98b0-14450ea7e226.roa File: 85da9da1-bccc-3cd7-98b0-14450ea7e226.roa (raw, json) Hash identifier: XseqrZZY+RVbG/vgPWOMoK+eRFrObaMtLR3mvwmo3Bo= Subject key identifier: 72:80:C9:DF:F9:3E:A8:DF:40:C6:87:BC:72:D3:CE:1F:7E:F7:F8:A5 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F43285848E006965A7452E7D8375CB580 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/85da9da1-bccc-3cd7-98b0-14450ea7e226.roa Signing time: Fri 14 Feb 2025 02:00:39 +0000 ROA not before: Fri 14 Feb 2025 02:00:39 +0000 ROA not after: Thu 15 May 2025 01:00:39 +0000 asID: 33363 IP address blocks: 2605:a401:811e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e0:06:96:5a:74:52:e7:d8:37:5c:b5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Feb 14 02:00:39 2025 GMT Not After : May 15 01:00:39 2025 GMT Subject: CN=d61c8f5a-d6cd-4473-b372-d4e28b94a702 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:27:73:31:71:97:9c:92:2b:0f:e7:54:02:52: f9:e6:32:c5:a8:a1:9e:e1:19:af:28:f3:63:c6:43: 85:da:ad:e2:d6:b7:86:3c:67:2b:ee:c3:de:72:1f: 46:a3:08:b0:fc:fc:a5:79:80:d9:9f:7a:f1:5a:0d: 87:ba:c5:c6:a7:5b:0f:21:af:b3:a3:d2:ea:df:29: a6:ca:de:41:2b:34:c6:db:5a:d6:4f:63:94:fa:cd: 46:cf:75:eb:17:e4:e1:51:07:f7:4c:75:1b:a0:98: 95:70:d8:46:ba:bd:b4:80:41:9f:f2:bd:fd:b1:3f: 7e:bf:9e:60:57:32:1d:c3:64:c5:7f:00:96:85:a8: b9:a6:8d:0f:ee:f2:17:d6:41:c6:9d:ca:8f:2a:88: 79:65:5f:80:6a:e2:31:16:8c:9b:1c:72:90:ed:e7: 4d:85:fa:9d:cc:5e:af:b2:0d:ca:51:21:3d:bd:59: 2d:07:93:11:bb:ed:69:47:40:51:5e:d0:17:59:9c: b5:b9:3c:f6:d8:f6:a3:f1:65:f6:05:cf:96:dc:bb: 50:22:91:d5:41:58:d1:2c:09:03:c7:05:2c:a4:21: e7:be:2f:2e:26:ed:03:3a:be:36:00:de:81:47:7c: 60:a3:13:be:b8:94:3f:5f:25:78:ce:81:98:e2:44: 5f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:80:C9:DF:F9:3E:A8:DF:40:C6:87:BC:72:D3:CE:1F:7E:F7:F8:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/85da9da1-bccc-3cd7-98b0-14450ea7e226.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv6: 2605:a401:811e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:dd:6a:09:95:8e:94:59:9f:a0:06:e2:2f:de:68:45:2e:db: c4:86:42:a7:a5:b6:de:72:34:9d:2a:ba:56:e2:43:2a:01:82: fa:cf:58:75:80:bb:d4:d9:9a:51:71:a1:f1:57:09:9e:83:18: 44:a8:1f:90:bf:78:e5:89:2f:28:2a:e2:57:64:56:11:aa:8c: ad:f3:d9:28:f3:70:38:72:ae:a5:68:07:44:19:81:33:be:1a: 20:8e:67:0c:fa:8e:f8:e3:c1:43:c4:4a:88:63:91:2d:6b:2a: 42:20:af:00:e3:15:ba:06:31:d8:7f:77:35:72:12:19:57:cb: d7:bd:1f:57:4f:76:42:0f:39:6a:c2:bc:e2:6f:15:68:f7:8e: 17:75:ed:55:49:cc:64:c2:44:d6:47:c0:82:28:b5:e4:72:73: 7f:fa:ec:9c:07:76:4c:93:d1:2a:ff:24:4b:48:79:48:85:b3: 9b:24:92:c8:d9:a7:1f:92:05:fe:5b:e5:bc:3d:a6:3f:23:22: 79:14:0e:8e:5e:61:5a:08:b5:a2:6d:10:1f:5b:f5:78:f5:43: b7:b6:2b:4c:53:f1:5d:ea:f2:f5:57:85:f5:6f:b3:6a:3d:72: e2:ea:78:92:3a:54:95:c4:ac:fd:b4:33:cf:48:52:bf:20:09: 45:f5:ff:2e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjgBpZadFLn2DdctYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MDIxNDAyMDAzOVoXDTI1MDUxNTAxMDAzOVowLzEtMCsGA1UEAxMk ZDYxYzhmNWEtZDZjZC00NDczLWIzNzItZDRlMjhiOTRhNzAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCdzMXGXnJIrD+dUAlL55jLFqKGe4RmvKPNj xkOF2q3i1reGPGcr7sPech9Gowiw/PyleYDZn3rxWg2HusXGp1sPIa+zo9Lq3ymm yt5BKzTG21rWT2OU+s1Gz3XrF+ThUQf3THUboJiVcNhGur20gEGf8r39sT9+v55g VzIdw2TFfwCWhai5po0P7vIX1kHGncqPKoh5ZV+AauIxFoybHHKQ7edNhfqdzF6v sg3KUSE9vVktB5MRu+1pR0BRXtAXWZy1uTz22Paj8WX2Bc+W3LtQIpHVQVjRLAkD xwUspCHnvi8uJu0DOr42AN6BR3xgoxO+uJQ/XyV4zoGY4kRfQwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHKAyd/5PqjfQMaHvHLTzh9+9/ilMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvODVkYTlkYTEtYmNjYy0z Y2Q3LTk4YjAtMTQ0NTBlYTdlMjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWkAYEe MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFLdagmVjpRZn6AG4i/eaEUu28SGQqeltt5yNJ0qulbiQyoBgvrP WHWAu9TZmlFxofFXCZ6DGESoH5C/eOWJLygq4ldkVhGqjK3z2SjzcDhyrqVoB0QZ gTO+GiCOZwz6jvjjwUPESohjkS1rKkIgrwDjFboGMdh/dzVyEhlXy9e9H1dPdkIP OWrCvOJvFWj3jhd17VVJzGTCRNZHwIIoteRyc3/67JwHdkyT0Sr/JEtIeUiFs5sk ksjZpx+SBf5b5bw9pj8jInkUDo5eYVoItaJtEB9b9Xj1Q7e2K0xT8V3q8vVXhfVv s2o9cuLqeJI6VJXErP20M89IUr8gCUX1/y4= -----END CERTIFICATE-----Generated at Sat Apr 5 03:44:30 2025 by rpki-client