$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/3a446b26-88b5-3f37-8af4-df28e4d0dded.roa File: 3a446b26-88b5-3f37-8af4-df28e4d0dded.roa (raw, json) Hash identifier: 9dLRVjX0c0TzU4faKL7FZIqNElOdlzE6IxD4ydNbItY= Subject key identifier: F3:72:90:FA:86:23:C9:36:B6:CD:3C:D7:8B:EE:9A:54:AE:97:FF:B1 Certificate issuer: /CN=fd356b15-92b2-4e72-b8d9-fa490480d177 Certificate serial: 010D0C9F43285848F4F68EF5C46DF0D3CA171F20 Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/3a446b26-88b5-3f37-8af4-df28e4d0dded.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 53459 IP address blocks: 2001:500:85::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f6:8e:f5:c4:6d:f0:d3:ca:17:1f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=63e5d581-42da-4736-820b-dd86fec1ff99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:2a:bb:c0:94:39:a6:e2:30:79:96:e6:0c:4b: 2d:56:bf:67:54:29:6b:e3:6c:83:b5:57:ef:35:06: 69:c1:23:01:3c:93:a5:d6:8b:65:9e:5f:7c:28:bb: a6:c2:bc:28:ad:61:3f:98:d5:5b:03:30:09:d2:b3: 99:d9:96:2d:70:b5:85:50:49:42:29:32:74:22:a2: 45:27:09:3c:ef:27:f4:a3:c6:9d:bf:1c:f7:10:94: b2:82:ab:36:7e:5f:18:78:a8:9d:4c:74:0b:06:19: ce:e8:4f:d5:31:d8:b3:69:a5:f1:b8:3e:d5:0e:1d: 1b:d5:0b:75:bf:22:af:ca:1d:b3:cc:32:d9:b4:0f: 9a:be:67:b7:ee:40:89:df:b4:06:3c:f6:4a:38:fa: 03:04:81:56:2d:e1:d7:82:c0:67:b6:16:ad:95:fd: b8:19:ef:49:fa:c6:c6:05:f0:98:71:45:c4:7f:71: d3:d5:b6:10:c1:01:cd:9c:3a:a9:ba:6f:69:3f:49: 01:f7:f6:52:ea:cf:e7:d6:14:cc:f4:c7:01:f5:c5: d0:bb:52:d8:21:3e:a4:3c:10:bc:49:c9:5e:50:d6: b5:77:55:17:9a:09:7b:7b:ca:07:99:83:dd:4b:e9: df:66:aa:65:e1:9d:d1:60:23:8a:82:fd:74:8e:04: 25:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:72:90:FA:86:23:C9:36:B6:CD:3C:D7:8B:EE:9A:54:AE:97:FF:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/3a446b26-88b5-3f37-8af4-df28e4d0dded.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl X509v3 Authority Key Identifier: keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:85::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:4b:6d:eb:9d:50:50:b3:9a:c0:eb:93:b7:8f:48:9b:a6:90: 6e:40:b2:23:f7:85:a4:21:9d:b6:3e:34:24:bb:66:ec:bd:06: a1:e7:65:19:7b:f3:8d:cd:38:48:88:28:9a:f7:dc:54:8c:84: 78:37:8a:ab:51:cf:a0:ef:b9:29:48:0b:0e:c4:ee:d7:c4:e1: 95:1e:7c:d3:0b:a3:44:fb:29:95:23:9b:8d:02:5a:a6:41:b4: 45:a9:da:7e:ee:da:91:5b:e0:b9:3a:e4:5a:7c:43:90:f1:50: a2:a8:df:18:12:c3:91:12:3a:05:ed:e2:cb:c2:d1:0b:0a:a0: e4:b6:56:33:59:29:5a:0e:8e:8f:c0:a8:25:6a:dc:f4:02:9c: 4d:c9:c5:4e:f2:05:9b:f2:87:39:86:ce:f0:e6:a2:0e:9c:c8: a7:4a:ad:c3:9a:14:d8:16:26:90:91:69:26:f7:3a:81:5f:f5: 50:c3:73:ba:d9:8c:a6:04:62:cf:84:a6:5d:d2:42:7b:56:52: 58:76:6a:f6:a0:66:45:32:2d:1f:b2:1e:da:b7:e6:a0:04:3c: e4:51:31:4f:a7:81:8b:e5:c4:7d:eb:5c:ed:f1:b5:f9:56:08: 22:1f:41:04:d6:01:2b:65:01:1b:34:df:17:1f:a1:c7:d3:de: f5:b7:bd:12 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj09o71xG3w08oXHyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmQzNTZiMTUtOTJiMi00ZTcyLWI4ZDktZmE0OTA0ODBk MTc3MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk NjNlNWQ1ODEtNDJkYS00NzM2LTgyMGItZGQ4NmZlYzFmZjk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyq7wJQ5puIweZbmDEstVr9nVClr42yDtVfv NQZpwSMBPJOl1otlnl98KLumwrworWE/mNVbAzAJ0rOZ2ZYtcLWFUElCKTJ0IqJF Jwk87yf0o8advxz3EJSygqs2fl8YeKidTHQLBhnO6E/VMdizaaXxuD7VDh0b1Qt1 vyKvyh2zzDLZtA+avme37kCJ37QGPPZKOPoDBIFWLeHXgsBnthatlf24Ge9J+sbG BfCYcUXEf3HT1bYQwQHNnDqpum9pP0kB9/ZS6s/n1hTM9McB9cXQu1LYIT6kPBC8 ScleUNa1d1UXmgl7e8oHmYPdS+nfZqpl4Z3RYCOKgv10jgQlNQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPNykPqGI8k2ts0814vumlSul/+xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1 NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5MDQ4MGQxNzcvM2E0NDZiMjYtODhiNS0z ZjM3LThhZjQtZGYyOGU0ZDBkZGVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZmQzNTZiMTUtOTJiMi00ZTcyLWI4 ZDktZmE0OTA0ODBkMTc3L2ZkMzU2YjE1LTkyYjItNGU3Mi1iOGQ5LWZhNDkwNDgw ZDE3Ny5jcmwwHwYDVR0jBBgwFoAUH2WrsjwD6KtBARGUGEBfF5fCAiUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5 MDQ4MGQxNzcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAACF MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFZLbeudUFCzmsDrk7ePSJumkG5AsiP3haQhnbY+NCS7Zuy9BqHn ZRl7843NOEiIKJr33FSMhHg3iqtRz6DvuSlICw7E7tfE4ZUefNMLo0T7KZUjm40C WqZBtEWp2n7u2pFb4Lk65Fp8Q5DxUKKo3xgSw5ESOgXt4svC0QsKoOS2VjNZKVoO jo/AqCVq3PQCnE3JxU7yBZvyhzmGzvDmog6cyKdKrcOaFNgWJpCRaSb3OoFf9VDD c7rZjKYEYs+Epl3SQntWUlh2avagZkUyLR+yHtq35qAEPORRMU+ngYvlxH3rXO3x tflWCCIfQQTWAStlARs03xcfocfT3vW3vRI= -----END CERTIFICATE-----Generated at Sat Apr 5 21:19:23 2025 by rpki-client