$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/373e5114-6177-369e-a731-f44084ebbd41.roa File: 373e5114-6177-369e-a731-f44084ebbd41.roa (raw, json) Hash identifier: 1jVOv4dpdjnb8lClT3v2o7YYERXenxVHhO4fCVvrEd4= Subject key identifier: E7:C1:CD:5D:5A:CB:54:C9:81:7B:76:4D:BC:70:F3:B7:FA:D7:68:10 Certificate issuer: /CN=fd356b15-92b2-4e72-b8d9-fa490480d177 Certificate serial: 010D0C9F43285849350EA998F6F4AB85C4B0C800 Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/373e5114-6177-369e-a731-f44084ebbd41.roa Signing time: Sun 16 Mar 2025 13:00:52 +0000 ROA not before: Sun 16 Mar 2025 13:00:52 +0000 ROA not after: Sat 14 Jun 2025 13:00:52 +0000 asID: 30133 IP address blocks: 2001:4f8::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:0e:a9:98:f6:f4:ab:85:c4:b0:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177 Validity Not Before: Mar 16 13:00:52 2025 GMT Not After : Jun 14 13:00:52 2025 GMT Subject: CN=690efb75-2663-4165-99ba-6ceecdb6af5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:95:0a:67:6e:7a:f9:40:48:4e:0d:85:78:c2: 2d:2c:93:20:26:d4:35:b9:d5:cd:49:ca:3e:e3:dd: ca:34:4a:5d:b7:c0:6d:8c:a6:ce:90:c4:da:b8:c4: 1a:34:53:da:2f:f0:73:e5:79:97:18:19:f0:59:da: 7f:9f:c2:d3:55:19:96:1c:3a:6a:1b:43:20:52:37: 7d:3b:65:b5:75:d2:05:3c:41:3d:2c:4c:28:f5:c5: 57:ba:4a:7d:e8:0c:7c:7e:d5:7e:a3:4c:9b:70:f8: 1c:58:8e:8d:a8:b0:a4:51:b2:fe:30:16:9d:b0:a4: c1:15:60:82:af:c0:32:6f:fd:b0:fb:14:c7:fb:bd: d3:91:1a:2d:a7:e8:96:51:69:39:f5:87:08:c7:e9: 7c:1b:ae:00:5f:97:a8:c5:85:36:60:13:90:27:2c: 23:aa:46:ab:31:f9:9c:b8:6a:d6:5a:14:bd:3a:ae: f7:cc:70:b9:b9:c0:76:08:e6:4a:b0:cd:51:65:3b: fd:04:d4:c3:51:76:0e:42:6d:60:49:82:36:ba:8f: 26:6a:7a:41:bf:09:b7:eb:2c:a8:24:f2:80:52:75: 20:df:a2:03:77:c8:e6:50:4b:e9:00:69:3f:36:43: 33:15:99:5c:8f:c2:d9:05:0a:1b:c0:88:8a:2d:35: f0:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:C1:CD:5D:5A:CB:54:C9:81:7B:76:4D:BC:70:F3:B7:FA:D7:68:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/373e5114-6177-369e-a731-f44084ebbd41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl X509v3 Authority Key Identifier: keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer sbgp-ipAddrBlock: critical IPv6: 2001:4f8::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:c7:6e:70:e3:a6:eb:1d:f3:6d:ad:36:e7:08:a7:5b:6c:35: 53:4a:ae:09:75:e5:fd:28:97:d1:de:e0:f7:72:14:19:86:0b: 1c:74:13:27:ef:35:d8:87:0d:1e:3c:7d:5d:56:47:6f:a2:3d: 69:a8:7b:5d:25:13:58:b8:1c:48:a9:c0:00:30:2f:91:7b:6a: 9c:10:3e:8b:b4:96:7f:60:3e:78:d6:09:f7:4c:03:58:de:1f: 67:a5:31:90:f8:24:2a:97:9d:8d:aa:55:c4:60:31:fd:c5:74: 0e:a0:db:ab:8f:f5:be:65:00:f5:72:ba:a7:d4:4f:8e:51:19: ee:dc:90:34:30:50:ff:fd:55:2a:73:be:7c:b1:dd:4d:a9:39: ca:93:03:25:76:fb:4b:be:81:16:ad:a1:eb:52:26:07:8c:ad: 3d:1a:18:79:78:87:66:52:3a:cc:54:3f:a6:ca:ca:c9:4f:d4: 2e:0f:0d:42:a9:a8:65:8b:5f:04:cd:c7:8e:e0:d8:c2:48:bb: 63:a3:23:cf:ce:0b:e1:79:94:9c:d9:fa:c0:65:47:07:bc:a1: 28:23:a5:78:45:b7:39:3d:cc:51:e5:e3:aa:45:34:55:ee:89: 91:bb:6b:e4:ee:fe:ca:a8:aa:02:7a:47:66:bf:7c:c3:a5:28: 42:94:ca:1d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEk1DqmY9vSrhcSwyAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmQzNTZiMTUtOTJiMi00ZTcyLWI4ZDktZmE0OTA0ODBk MTc3MB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk NjkwZWZiNzUtMjY2My00MTY1LTk5YmEtNmNlZWNkYjZhZjVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAipUKZ256+UBITg2FeMItLJMgJtQ1udXNSco+ 493KNEpdt8BtjKbOkMTauMQaNFPaL/Bz5XmXGBnwWdp/n8LTVRmWHDpqG0MgUjd9 O2W1ddIFPEE9LEwo9cVXukp96Ax8ftV+o0ybcPgcWI6NqLCkUbL+MBadsKTBFWCC r8Ayb/2w+xTH+73TkRotp+iWUWk59YcIx+l8G64AX5eoxYU2YBOQJywjqkarMfmc uGrWWhS9Oq73zHC5ucB2COZKsM1RZTv9BNTDUXYOQm1gSYI2uo8manpBvwm36yyo JPKAUnUg36IDd8jmUEvpAGk/NkMzFZlcj8LZBQobwIiKLTXwZQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOfBzV1ay1TJgXt2Tbxw87f612gQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1 NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5MDQ4MGQxNzcvMzczZTUxMTQtNjE3Ny0z NjllLWE3MzEtZjQ0MDg0ZWJiZDQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZmQzNTZiMTUtOTJiMi00ZTcyLWI4 ZDktZmE0OTA0ODBkMTc3L2ZkMzU2YjE1LTkyYjItNGU3Mi1iOGQ5LWZhNDkwNDgw ZDE3Ny5jcmwwHwYDVR0jBBgwFoAUH2WrsjwD6KtBARGUGEBfF5fCAiUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5 MDQ4MGQxNzcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAEE+DBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCKx25w46brHfNtrTbnCKdbbDVTSq4JdeX9KJfR3uD3chQZhgscdBMn 7zXYhw0ePH1dVkdvoj1pqHtdJRNYuBxIqcAAMC+Re2qcED6LtJZ/YD541gn3TANY 3h9npTGQ+CQql52NqlXEYDH9xXQOoNurj/W+ZQD1crqn1E+OURnu3JA0MFD//VUq c758sd1NqTnKkwMldvtLvoEWraHrUiYHjK09Ghh5eIdmUjrMVD+mysrJT9QuDw1C qahli18EzceO4NjCSLtjoyPPzgvheZSc2frAZUcHvKEoI6V4Rbc5PcxR5eOqRTRV 7omRu2vk7v7KqKoCekdmv3zDpShClMod -----END CERTIFICATE-----Generated at Sun Apr 6 21:40:55 2025 by rpki-client