$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/ffeedd1a-1333-3988-9802-71b64e4a1c66.roa File: ffeedd1a-1333-3988-9802-71b64e4a1c66.roa (raw, json) Hash identifier: CK5PHZB36sd55PeR37Ut5u5wgXZULFuxwlYZ7QwVs3Q= Subject key identifier: 82:91:EF:6A:F7:03:07:F4:5F:40:D0:E5:F9:6F:E7:0A:09:DD:2A:94 Certificate issuer: /CN=706d4f00-fa89-4b22-8684-b968d577fab7 Certificate serial: 010D0C9F43285848A565FBBCFA269E2897AB8F80 Authority key identifier: 28:CD:22:12:7C:2F:19:D8:1B:64:4F:54:1F:12:27:FB:22:C9:E4:05 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/ffeedd1a-1333-3988-9802-71b64e4a1c66.roa Signing time: Fri 24 Jan 2025 02:00:39 +0000 ROA not before: Fri 24 Jan 2025 02:00:39 +0000 ROA not after: Thu 24 Apr 2025 01:00:39 +0000 asID: 10616 IP address blocks: 2610:20:1000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a5:65:fb:bc:fa:26:9e:28:97:ab:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=706d4f00-fa89-4b22-8684-b968d577fab7 Validity Not Before: Jan 24 02:00:39 2025 GMT Not After : Apr 24 01:00:39 2025 GMT Subject: CN=69d9eed9-6c14-428b-8c13-9916c79e61fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:48:93:20:76:e1:81:bb:16:f4:76:e0:34:ac: 40:7d:b1:ae:16:60:cc:87:de:20:3a:b8:1a:29:2a: 9c:aa:d5:03:fe:08:4a:78:e9:47:97:12:a3:dd:4b: ec:c7:72:a6:5d:4a:04:14:40:d3:50:31:d1:7e:57: 2f:48:8c:68:f3:8c:be:bd:7a:68:48:53:b1:fd:98: 7d:c1:f1:45:ea:2a:a5:b4:4e:85:72:58:02:c0:9d: 74:2d:14:cf:8b:24:aa:e5:d5:e0:27:9a:bd:65:a6: 53:83:1d:64:c9:65:c3:26:c4:7c:28:c7:00:37:a5: 13:dd:b9:e2:41:77:80:42:df:ef:14:1c:2b:97:7d: ff:0a:cd:b2:18:57:db:f8:a6:92:9e:61:92:70:36: b6:fb:db:63:ef:b4:bb:65:25:ce:90:3d:5b:39:ff: 67:bc:eb:42:c1:b8:da:9b:78:ce:d3:f0:ce:84:b0: e4:03:9d:0f:ca:53:3b:19:8f:ef:1a:ee:0f:80:21: e5:44:b3:d1:1d:e4:0a:b3:49:29:86:be:e5:67:00: 4c:bf:56:c3:dc:56:f0:a0:4d:6a:42:1b:01:33:c2: 53:18:1f:20:31:4c:39:5f:a1:24:bf:27:b0:a9:68: 26:d0:e5:88:8a:c8:47:eb:af:02:a9:64:dc:19:d0: 7a:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:91:EF:6A:F7:03:07:F4:5F:40:D0:E5:F9:6F:E7:0A:09:DD:2A:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/ffeedd1a-1333-3988-9802-71b64e4a1c66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.crl X509v3 Authority Key Identifier: keyid:28:CD:22:12:7C:2F:19:D8:1B:64:4F:54:1F:12:27:FB:22:C9:E4:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer sbgp-ipAddrBlock: critical IPv6: 2610:20:1000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:22:64:12:c2:6c:b4:5f:3f:ac:62:75:ce:63:76:2f:4f:bb: 4b:e4:16:94:82:98:df:a5:31:cb:dd:10:be:22:57:06:71:1a: 97:bc:26:8b:81:fe:db:05:f7:37:35:b7:be:7c:a2:84:4f:2c: 23:f1:ee:8d:75:d6:bd:3a:2e:55:47:14:00:f4:5e:02:e4:fd: 44:39:c3:21:87:2f:c7:e4:13:5e:31:d6:ba:8e:29:24:aa:d8: 75:8a:a4:22:e5:a4:c2:7a:16:ee:38:03:f7:19:8a:e2:b3:ce: 8d:58:da:cc:b7:27:60:7b:b4:70:c3:55:33:40:05:f2:b9:b1: 45:a1:e1:e1:7a:ee:ac:51:c1:3d:a5:d8:12:07:f8:b3:12:d1: 96:7b:0f:ac:68:ab:d6:ac:83:49:c8:c7:97:ad:71:9f:63:b6: 27:15:cd:9c:5d:c6:53:44:23:e9:c0:47:ba:9c:9d:95:18:72: 2c:95:09:3e:57:b1:a7:1d:74:62:fc:b5:a5:51:0f:56:4a:73: a6:72:84:3d:c1:bf:8b:31:40:e8:5c:c4:f3:6b:32:47:bf:d1: f2:62:52:a8:da:ff:c1:e8:f1:40:2d:fc:83:0e:a1:b5:e4:8a: 64:47:cb:42:58:33:73:db:48:c7:9e:13:2b:00:0f:e3:6d:de: 20:c9:ec:99 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEilZfu8+iaeKJerj4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzA2ZDRmMDAtZmE4OS00YjIyLTg2ODQtYjk2OGQ1Nzdm YWI3MB4XDTI1MDEyNDAyMDAzOVoXDTI1MDQyNDAxMDAzOVowLzEtMCsGA1UEAxMk NjlkOWVlZDktNmMxNC00MjhiLThjMTMtOTkxNmM3OWU2MWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkiTIHbhgbsW9HbgNKxAfbGuFmDMh94gOrga KSqcqtUD/ghKeOlHlxKj3Uvsx3KmXUoEFEDTUDHRflcvSIxo84y+vXpoSFOx/Zh9 wfFF6iqltE6FclgCwJ10LRTPiySq5dXgJ5q9ZaZTgx1kyWXDJsR8KMcAN6UT3bni QXeAQt/vFBwrl33/Cs2yGFfb+KaSnmGScDa2+9tj77S7ZSXOkD1bOf9nvOtCwbja m3jO0/DOhLDkA50PylM7GY/vGu4PgCHlRLPRHeQKs0kphr7lZwBMv1bD3FbwoE1q QhsBM8JTGB8gMUw5X6EkvyewqWgm0OWIishH668CqWTcGdB6oQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFIKR72r3Awf0X0DQ5flv5woJ3SqUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83MDZk NGYwMC1mYTg5LTRiMjItODY4NC1iOTY4ZDU3N2ZhYjcvZmZlZWRkMWEtMTMzMy0z OTg4LTk4MDItNzFiNjRlNGExYzY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNzA2ZDRmMDAtZmE4OS00YjIyLTg2 ODQtYjk2OGQ1NzdmYWI3LzcwNmQ0ZjAwLWZhODktNGIyMi04Njg0LWI5NjhkNTc3 ZmFiNy5jcmwwHwYDVR0jBBgwFoAUKM0iEnwvGdgbZE9UHxIn+yLJ5AUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83MDZkNGYwMC1mYTg5LTRiMjItODY4NC1iOTY4 ZDU3N2ZhYjcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJhAAIBAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAhSJkEsJstF8/rGJ1zmN2L0+7S+QWlIKY36Uxy90QviJXBnEal7wm i4H+2wX3NzW3vnyihE8sI/HujXXWvTouVUcUAPReAuT9RDnDIYcvx+QTXjHWuo4p JKrYdYqkIuWkwnoW7jgD9xmK4rPOjVjazLcnYHu0cMNVM0AF8rmxRaHh4XrurFHB PaXYEgf4sxLRlnsPrGir1qyDScjHl61xn2O2JxXNnF3GU0Qj6cBHupydlRhyLJUJ Plexpx10Yvy1pVEPVkpzpnKEPcG/izFA6FzE82syR7/R8mJSqNr/wejxQC38gw6h teSKZEfLQlgzc9tIx54TKwAP423eIMnsmQ== -----END CERTIFICATE-----Generated at Fri Apr 4 16:25:04 2025 by rpki-client