$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/a47f90dd-ec81-3876-8d33-5fc0970e8333.roa File: a47f90dd-ec81-3876-8d33-5fc0970e8333.roa (raw, json) Hash identifier: 3gVbgpL0cYgYhJXcMYLNK1yu0sdyQ3e/lgVUlHdTUhk= Subject key identifier: EB:A8:98:88:9D:D1:05:70:93:2C:2B:68:B1:67:41:99:66:B0:87:6D Certificate issuer: /CN=fd356b15-92b2-4e72-b8d9-fa490480d177 Certificate serial: 010D0C9F43285849393E6F985893348F6DA304C0 Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/a47f90dd-ec81-3876-8d33-5fc0970e8333.roa Signing time: Tue 18 Mar 2025 01:00:38 +0000 ROA not before: Tue 18 Mar 2025 01:00:38 +0000 ROA not after: Mon 16 Jun 2025 01:00:38 +0000 asID: 3557 IP address blocks: 2001:500:2e::/47 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:39:3e:6f:98:58:93:34:8f:6d:a3:04:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177 Validity Not Before: Mar 18 01:00:38 2025 GMT Not After : Jun 16 01:00:38 2025 GMT Subject: CN=97e92bc7-45ce-4314-bedd-395d085bf726 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:10:ab:0a:fe:b0:ff:7c:7f:b4:a8:58:32:20: 61:c7:1a:f6:b9:6f:0e:45:e9:05:1b:d3:59:33:d2: 74:14:82:3b:1c:91:95:b7:66:68:8e:8d:24:33:61: da:d8:7c:1a:4a:ab:00:16:96:66:a3:f1:45:07:99: 8e:e5:de:d0:e6:ac:dd:2b:1c:bb:ab:f5:19:4f:3f: 18:ef:f0:45:34:dd:cc:6e:3a:1a:f4:31:7a:88:d1: 2a:9f:81:e9:ac:24:dd:2a:5f:e4:19:7e:4f:9c:2e: 16:69:82:bd:6e:a2:54:8d:18:18:4a:d2:32:e5:89: 21:36:c5:44:d6:33:07:61:2d:21:4a:b3:8d:32:4d: 62:41:43:49:31:09:2a:35:ab:37:1c:82:d3:67:c0: d3:c6:10:38:56:38:ae:35:93:68:ef:c7:71:75:f6: 18:98:b9:5a:c3:17:dc:e3:b3:6a:55:6a:0a:98:57: 00:5b:73:e0:72:56:2e:34:4a:84:58:7b:95:75:31: a2:02:24:48:15:4c:a7:fe:e8:6e:df:11:62:9a:8e: 9f:7c:12:a0:c8:2b:fc:f1:27:ce:d7:02:f0:7c:f0: 4e:4b:fe:19:f4:61:a4:a8:5a:3d:00:49:27:55:87: 8b:c2:01:6c:c5:a3:14:83:05:30:fd:05:15:ee:de: 0b:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:A8:98:88:9D:D1:05:70:93:2C:2B:68:B1:67:41:99:66:B0:87:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/a47f90dd-ec81-3876-8d33-5fc0970e8333.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl X509v3 Authority Key Identifier: keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:2e::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:ac:b5:83:90:91:9d:0d:f2:de:d8:29:1a:25:95:31:74:a8: 5e:a6:ed:83:3d:2b:4c:27:cc:f3:8d:fd:43:f0:37:de:ba:d0: 25:3f:b2:52:d8:3b:64:f7:17:a8:d1:3a:15:dc:05:46:15:a1: fe:75:a9:e6:02:a7:1c:6f:b0:84:9f:8c:0b:32:0a:9a:96:f0: a9:22:5d:fd:c1:82:8b:49:28:8d:07:31:e5:1f:56:c5:19:d6: 6b:b4:2e:38:bf:3c:68:cf:b9:8b:e0:b3:45:12:ad:5c:e9:7a: cd:b7:0a:2c:0a:2f:e9:58:be:a6:62:b2:1e:5a:66:6c:3c:e2: 7c:8e:de:ab:c7:1c:45:f2:3b:b7:b3:cc:49:c8:24:bb:86:6a: f0:71:a5:cc:e4:9d:0e:fa:c7:be:f4:47:24:1c:6b:82:7c:87: 59:4f:2c:31:a1:58:ed:c0:a7:e1:66:65:0b:7c:c6:84:a2:2b: 76:c1:f2:49:ba:5b:f8:0c:4f:87:a9:b2:40:59:d4:12:34:ec: 83:fb:a9:d5:a3:a7:37:c9:f7:4a:be:21:b9:7f:90:f1:83:d8: ec:56:da:7f:58:34:5e:35:59:03:e0:ce:20:e7:b1:7e:9a:40: f9:74:80:f7:f8:c9:97:42:ea:7f:5e:15:64:1b:2e:41:af:64: b8:ed:cd:36 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEk5Pm+YWJM0j22jBMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmQzNTZiMTUtOTJiMi00ZTcyLWI4ZDktZmE0OTA0ODBk MTc3MB4XDTI1MDMxODAxMDAzOFoXDTI1MDYxNjAxMDAzOFowLzEtMCsGA1UEAxMk OTdlOTJiYzctNDVjZS00MzE0LWJlZGQtMzk1ZDA4NWJmNzI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBCrCv6w/3x/tKhYMiBhxxr2uW8ORekFG9NZ M9J0FII7HJGVt2Zojo0kM2Ha2HwaSqsAFpZmo/FFB5mO5d7Q5qzdKxy7q/UZTz8Y 7/BFNN3Mbjoa9DF6iNEqn4HprCTdKl/kGX5PnC4WaYK9bqJUjRgYStIy5YkhNsVE 1jMHYS0hSrONMk1iQUNJMQkqNas3HILTZ8DTxhA4VjiuNZNo78dxdfYYmLlawxfc 47NqVWoKmFcAW3PgclYuNEqEWHuVdTGiAiRIFUyn/uhu3xFimo6ffBKgyCv88SfO 1wLwfPBOS/4Z9GGkqFo9AEknVYeLwgFsxaMUgwUw/QUV7t4LzwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOuomIid0QVwkywraLFnQZlmsIdtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1 NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5MDQ4MGQxNzcvYTQ3ZjkwZGQtZWM4MS0z ODc2LThkMzMtNWZjMDk3MGU4MzMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZmQzNTZiMTUtOTJiMi00ZTcyLWI4 ZDktZmE0OTA0ODBkMTc3L2ZkMzU2YjE1LTkyYjItNGU3Mi1iOGQ5LWZhNDkwNDgw ZDE3Ny5jcmwwHwYDVR0jBBgwFoAUH2WrsjwD6KtBARGUGEBfF5fCAiUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5 MDQ4MGQxNzcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBIAEFAAAu MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGystYOQkZ0N8t7YKRollTF0qF6m7YM9K0wnzPON/UPwN9660CU/ slLYO2T3F6jROhXcBUYVof51qeYCpxxvsISfjAsyCpqW8KkiXf3BgotJKI0HMeUf VsUZ1mu0Lji/PGjPuYvgs0USrVzpes23CiwKL+lYvqZish5aZmw84nyO3qvHHEXy O7ezzEnIJLuGavBxpczknQ76x770RyQca4J8h1lPLDGhWO3Ap+FmZQt8xoSiK3bB 8km6W/gMT4epskBZ1BI07IP7qdWjpzfJ90q+Ibl/kPGD2OxW2n9YNF41WQPgziDn sX6aQPl0gPf4yZdC6n9eFWQbLkGvZLjtzTY= -----END CERTIFICATE-----Generated at Sat Apr 5 23:19:40 2025 by rpki-client