$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/17198ad7-bd1a-36d5-bcdc-02a75b11c688.roa File: 17198ad7-bd1a-36d5-bcdc-02a75b11c688.roa (raw, json) Hash identifier: /fJeXohFqoAPpWGfgvT/njM+eH1G1yiR5bYBYavS8c4= Subject key identifier: 87:42:C9:92:D2:7D:AF:5A:22:1F:13:C6:FD:3A:C4:09:F8:73:F8:74 Certificate issuer: /CN=fd356b15-92b2-4e72-b8d9-fa490480d177 Certificate serial: 010D0C9F43285848F65BCF82CAD1F4B07524D480 Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/17198ad7-bd1a-36d5-bcdc-02a75b11c688.roa Signing time: Sat 22 Feb 2025 02:00:38 +0000 ROA not before: Sat 22 Feb 2025 02:00:38 +0000 ROA not after: Fri 23 May 2025 01:00:38 +0000 asID: 30133 IP address blocks: 2001:500:70::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f6:5b:cf:82:ca:d1:f4:b0:75:24:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177 Validity Not Before: Feb 22 02:00:38 2025 GMT Not After : May 23 01:00:38 2025 GMT Subject: CN=4a4bcdfc-000b-4e73-9b0f-e2f819a146cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:c3:42:b5:1f:71:53:98:c2:92:05:96:c6:ca: a7:cf:2d:27:92:0a:ca:fd:1e:22:81:8b:fc:a4:05: df:00:16:91:48:dc:88:9a:e4:92:ea:9b:f7:b4:9b: 43:51:d5:77:b8:40:f7:62:0f:ad:a8:de:09:51:0c: f3:9b:b3:32:a1:b8:67:7a:0d:9d:3e:93:a6:55:9f: 9e:0a:09:88:50:2f:d4:dc:99:54:4c:39:cf:3e:fa: 81:08:f0:bd:52:57:32:9d:90:5b:86:f1:dc:e1:94: b8:da:28:29:8a:95:3f:60:f3:60:42:d4:f7:69:e6: b7:8f:82:2c:cd:67:21:99:06:30:b5:48:6b:60:dc: 02:b2:65:97:99:74:6a:9c:98:20:3d:9c:09:0a:d7: 28:05:2d:25:57:1e:27:40:8e:6f:51:bc:47:cb:8a: 4d:96:68:cc:5e:fe:4a:f0:a0:e5:07:a3:99:72:af: 10:aa:fd:ca:87:22:c7:e6:c6:0e:12:13:d6:07:86: 43:dd:29:6f:8a:3a:99:9f:4a:9f:fd:a0:b3:8c:05: 7a:04:ad:ee:9c:fe:c0:a3:2d:49:e8:25:22:9e:b7: c2:41:cf:ce:71:2b:62:6f:72:4c:f6:22:88:87:ea: 22:2f:c1:43:8d:81:08:60:6b:ee:31:d9:23:ae:eb: bd:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:42:C9:92:D2:7D:AF:5A:22:1F:13:C6:FD:3A:C4:09:F8:73:F8:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/17198ad7-bd1a-36d5-bcdc-02a75b11c688.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl X509v3 Authority Key Identifier: keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:70::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:a7:2d:a6:63:2a:b7:04:24:cb:dc:05:a5:54:30:0e:49:d0: fa:b5:a8:d3:1c:80:70:ce:36:1e:c5:26:48:b6:24:f7:fb:19: 50:a0:95:b6:85:7e:ff:e9:1c:e9:40:73:81:16:36:bd:d5:42: a7:be:9a:ee:81:7d:23:39:0d:97:05:da:98:70:67:d4:b6:b3: 6b:94:9f:e8:7c:68:f9:ee:ed:9f:f0:3b:1d:fb:e3:72:ee:f1: a4:b4:43:5c:d8:b4:b8:6e:a8:03:c5:62:ca:18:1e:83:bd:f7: e9:5d:04:ba:d0:1b:7c:ed:c6:29:73:80:49:85:19:99:68:98: 52:b5:8c:23:b0:f6:25:d0:46:da:b7:f4:f9:fe:3b:32:36:4d: 90:44:d1:22:41:4e:d2:9d:81:57:c3:65:df:f7:ae:a0:25:61: 81:51:2b:e7:41:21:0f:30:9f:85:0d:73:30:0a:c7:73:2c:d1: f9:8a:68:4b:23:67:f6:fb:7e:cd:c9:48:4d:f8:d3:1c:a1:2b: 61:f3:64:2f:17:1b:26:74:12:b2:a2:50:ea:19:dc:b7:fc:dc: 74:9b:48:f0:0d:4b:ab:c0:ba:36:4c:95:e8:72:69:9a:50:03: 19:04:3f:d5:e0:3e:a7:9c:a3:55:e4:35:75:10:3b:da:df:72: 48:ee:c7:3b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj2W8+CytH0sHUk1IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmQzNTZiMTUtOTJiMi00ZTcyLWI4ZDktZmE0OTA0ODBk MTc3MB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk NGE0YmNkZmMtMDAwYi00ZTczLTliMGYtZTJmODE5YTE0NmNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMNCtR9xU5jCkgWWxsqnzy0nkgrK/R4igYv8 pAXfABaRSNyImuSS6pv3tJtDUdV3uED3Yg+tqN4JUQzzm7Myobhneg2dPpOmVZ+e CgmIUC/U3JlUTDnPPvqBCPC9UlcynZBbhvHc4ZS42igpipU/YPNgQtT3aea3j4Is zWchmQYwtUhrYNwCsmWXmXRqnJggPZwJCtcoBS0lVx4nQI5vUbxHy4pNlmjMXv5K 8KDlB6OZcq8Qqv3KhyLH5sYOEhPWB4ZD3SlvijqZn0qf/aCzjAV6BK3unP7Aoy1J 6CUinrfCQc/OcStib3JM9iKIh+oiL8FDjYEIYGvuMdkjruu9BwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIdCyZLSfa9aIh8Txv06xAn4c/h0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1 NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5MDQ4MGQxNzcvMTcxOThhZDctYmQxYS0z NmQ1LWJjZGMtMDJhNzViMTFjNjg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZmQzNTZiMTUtOTJiMi00ZTcyLWI4 ZDktZmE0OTA0ODBkMTc3L2ZkMzU2YjE1LTkyYjItNGU3Mi1iOGQ5LWZhNDkwNDgw ZDE3Ny5jcmwwHwYDVR0jBBgwFoAUH2WrsjwD6KtBARGUGEBfF5fCAiUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5 MDQ4MGQxNzcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAABw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIOnLaZjKrcEJMvcBaVUMA5J0Pq1qNMcgHDONh7FJki2JPf7GVCg lbaFfv/pHOlAc4EWNr3VQqe+mu6BfSM5DZcF2phwZ9S2s2uUn+h8aPnu7Z/wOx37 43Lu8aS0Q1zYtLhuqAPFYsoYHoO99+ldBLrQG3ztxilzgEmFGZlomFK1jCOw9iXQ Rtq39Pn+OzI2TZBE0SJBTtKdgVfDZd/3rqAlYYFRK+dBIQ8wn4UNczAKx3Ms0fmK aEsjZ/b7fs3JSE340xyhK2HzZC8XGyZ0ErKiUOoZ3Lf83HSbSPANS6vAujZMlehy aZpQAxkEP9XgPqeco1XkNXUQO9rfckjuxzs= -----END CERTIFICATE-----Generated at Fri Mar 14 10:47:35 2025 by rpki-client