$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/a47f90dd-ec81-3876-8d33-5fc0970e8333.roa File: a47f90dd-ec81-3876-8d33-5fc0970e8333.roa (raw, json) Hash identifier: fHiJBUiz0ZlA2pfNUF2A6D8ng8BD4hGb5keHFa81Wmk= Subject key identifier: B4:9A:CB:84:E0:3D:C7:58:50:06:E1:06:92:19:96:14:80:49:85:C0 Certificate issuer: /CN=fd356b15-92b2-4e72-b8d9-fa490480d177 Certificate serial: 010D0C9F4328584858A0513BA923AA619F7AAE00 Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/a47f90dd-ec81-3876-8d33-5fc0970e8333.roa Signing time: Fri 27 Dec 2024 14:00:52 +0000 ROA not before: Fri 27 Dec 2024 14:00:52 +0000 ROA not after: Thu 27 Mar 2025 13:00:52 +0000 asID: 3557 IP address blocks: 2001:500:2e::/47 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:58:a0:51:3b:a9:23:aa:61:9f:7a:ae:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177 Validity Not Before: Dec 27 14:00:52 2024 GMT Not After : Mar 27 13:00:52 2025 GMT Subject: CN=8595462e-df49-4d2f-a33a-a697ab673aeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:08:e7:92:ed:81:06:e1:75:fd:c1:f5:08:8c: ac:5b:68:1c:f2:b9:8b:df:99:79:51:a5:28:e6:f7: 28:5b:33:3f:48:63:51:52:ca:30:54:e6:82:8b:28: c2:0f:22:0a:1a:2a:ec:0c:d3:2b:ba:3f:4c:be:8c: 3d:d7:e6:d7:b1:43:cc:f5:bc:de:a3:6e:48:05:9c: ee:56:9a:29:21:d5:aa:f8:08:85:0c:9a:4a:a3:ac: fe:de:7a:16:8f:fb:ea:3f:d2:6e:a2:97:42:b8:28: 66:fe:91:c6:ec:76:b7:88:0b:25:34:09:9c:6c:65: ca:41:8b:27:32:18:c2:31:3e:4b:47:d8:7c:8e:2e: 0c:b2:1d:74:b7:08:2c:58:40:87:07:5c:8c:21:77: 84:c3:44:a9:47:2e:61:7a:c0:3d:ca:8c:2e:dd:65: db:e5:ce:60:90:a2:3f:9a:d0:78:45:d6:ab:ba:6b: 30:18:2c:2b:3b:92:c1:14:f2:c3:99:4f:9f:7e:62: d7:bf:32:e4:6c:b3:2e:d4:fb:74:25:3e:f7:10:13: bc:39:3e:3f:94:ef:5c:c9:1f:3b:e6:ef:9e:45:1e: 6a:c4:de:3c:b5:ad:c8:d2:1b:5c:6a:ca:94:67:ca: 27:e9:21:5d:15:b4:19:1b:23:11:c6:fc:f3:53:55: 3e:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:9A:CB:84:E0:3D:C7:58:50:06:E1:06:92:19:96:14:80:49:85:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/a47f90dd-ec81-3876-8d33-5fc0970e8333.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl X509v3 Authority Key Identifier: keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:2e::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:80:2a:e1:15:43:70:ec:28:02:e5:48:7b:21:8a:51:f8:59: e7:4e:a7:cc:d5:0e:0a:68:a8:a0:64:99:b0:c2:09:4d:fb:4a: f3:61:33:71:6d:a3:da:47:e5:17:e5:1d:c8:fd:fa:c8:a2:f0: a7:48:64:a9:7e:42:e8:f8:43:3a:e4:0d:15:bb:7a:2b:9e:22: 97:e2:d2:32:3a:95:c7:3b:9f:4c:9f:b7:35:46:71:a2:7a:56: df:da:ec:bb:c6:22:d7:5a:5f:6f:25:4c:87:d2:14:a3:b6:12: cf:61:7a:7c:8e:3d:08:e1:46:f7:86:67:f2:2f:fe:28:2f:2a: 99:2a:fc:08:eb:e4:ec:b4:61:6e:70:a9:7a:4f:41:d0:a6:15: 85:7c:e2:e3:8e:7c:60:be:45:b0:86:78:71:b9:f5:0b:ae:56: 7d:1e:db:19:2f:f3:a8:6c:27:e5:8b:ae:43:53:57:e3:12:13: f2:f4:ef:ad:b5:a3:e0:69:06:8f:40:12:ee:f2:e5:76:3f:b2: 61:33:93:44:57:b7:cb:3d:c7:17:e3:31:76:ad:69:e5:3b:8b: 0f:37:b1:58:e1:82:8a:d8:25:1c:22:23:c9:d4:49:a0:64:37: 41:97:0e:7d:cf:5e:b0:b8:86:84:ad:2b:5a:77:ca:de:63:64: 11:fc:32:1a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEhYoFE7qSOqYZ96rgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmQzNTZiMTUtOTJiMi00ZTcyLWI4ZDktZmE0OTA0ODBk MTc3MB4XDTI0MTIyNzE0MDA1MloXDTI1MDMyNzEzMDA1MlowLzEtMCsGA1UEAxMk ODU5NTQ2MmUtZGY0OS00ZDJmLWEzM2EtYTY5N2FiNjczYWViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7wjnku2BBuF1/cH1CIysW2gc8rmL35l5UaUo 5vcoWzM/SGNRUsowVOaCiyjCDyIKGirsDNMruj9Mvow91+bXsUPM9bzeo25IBZzu VpopIdWq+AiFDJpKo6z+3noWj/vqP9JuopdCuChm/pHG7Ha3iAslNAmcbGXKQYsn MhjCMT5LR9h8ji4Msh10twgsWECHB1yMIXeEw0SpRy5hesA9yowu3WXb5c5gkKI/ mtB4RdarumswGCwrO5LBFPLDmU+ffmLXvzLkbLMu1Pt0JT73EBO8OT4/lO9cyR87 5u+eRR5qxN48ta3I0htcasqUZ8on6SFdFbQZGyMRxvzzU1U+iwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLSay4TgPcdYUAbhBpIZlhSASYXAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1 NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5MDQ4MGQxNzcvYTQ3ZjkwZGQtZWM4MS0z ODc2LThkMzMtNWZjMDk3MGU4MzMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZmQzNTZiMTUtOTJiMi00ZTcyLWI4 ZDktZmE0OTA0ODBkMTc3L2ZkMzU2YjE1LTkyYjItNGU3Mi1iOGQ5LWZhNDkwNDgw ZDE3Ny5jcmwwHwYDVR0jBBgwFoAUH2WrsjwD6KtBARGUGEBfF5fCAiUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5 MDQ4MGQxNzcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBIAEFAAAu MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEuAKuEVQ3DsKALlSHshilH4WedOp8zVDgpoqKBkmbDCCU37SvNh M3Fto9pH5RflHcj9+sii8KdIZKl+Quj4QzrkDRW7eiueIpfi0jI6lcc7n0yftzVG caJ6Vt/a7LvGItdaX28lTIfSFKO2Es9henyOPQjhRveGZ/Iv/igvKpkq/Ajr5Oy0 YW5wqXpPQdCmFYV84uOOfGC+RbCGeHG59QuuVn0e2xkv86hsJ+WLrkNTV+MSE/L0 7621o+BpBo9AEu7y5XY/smEzk0RXt8s9xxfjMXataeU7iw83sVjhgorYJRwiI8nU SaBkN0GXDn3PXrC4hoStK1p3yt5jZBH8Mho= -----END CERTIFICATE-----Generated at Fri Mar 14 13:39:20 2025 by rpki-client