$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/935393a9-cab8-334f-afd3-0eaf3ffcb44c.roa File: 935393a9-cab8-334f-afd3-0eaf3ffcb44c.roa (raw, json) Hash identifier: dW6i/TVI7oEWJFLVmnKh3zcoWoxf1RJDgAu8U5S1dkg= Subject key identifier: FD:4D:39:B4:11:7B:69:AF:2D:97:4F:31:8A:05:C4:1E:57:EC:59:82 Certificate issuer: /CN=256d2a2e-9ac7-4d29-bd15-75874d49df66 Certificate serial: 010D0C9F432858498CFF0D13B6EB198CDFE6FF10 Authority key identifier: E7:4C:09:96:E8:84:50:C0:CF:D5:86:D5:46:2F:70:EE:D2:57:95:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/935393a9-cab8-334f-afd3-0eaf3ffcb44c.roa Signing time: Thu 17 Apr 2025 01:00:45 +0000 ROA not before: Thu 17 Apr 2025 01:00:45 +0000 ROA not after: Wed 16 Jul 2025 01:00:45 +0000 asID: 33000 IP address blocks: 2605:fdc0::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/256d2a2e-9ac7-4d29-bd15-75874d49df66.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/256d2a2e-9ac7-4d29-bd15-75874d49df66.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8c:ff:0d:13:b6:eb:19:8c:df:e6:ff:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=256d2a2e-9ac7-4d29-bd15-75874d49df66 Validity Not Before: Apr 17 01:00:45 2025 GMT Not After : Jul 16 01:00:45 2025 GMT Subject: CN=a92271c2-868c-4be8-8afc-2cefef859f8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:29:b2:1c:28:ad:e0:a2:31:0f:cb:53:2c:38: 62:8d:19:1d:d8:c7:d9:3a:3b:5f:d0:76:dd:57:86: c8:3d:ce:31:7d:ef:b5:67:6a:66:75:61:88:be:35: f4:9d:35:f9:a0:0c:29:0d:77:b8:b6:92:ab:37:c9: 31:c9:cd:81:cf:f5:d6:90:27:c6:cc:20:f1:e0:30: de:28:37:91:44:8b:1c:0b:7c:95:bb:06:e0:c4:99: e2:e7:b3:69:cf:63:00:87:9d:3b:6b:f6:26:28:cd: 50:a9:4a:70:3a:92:dd:49:bd:35:98:45:01:ec:5e: 65:e4:3a:6f:2b:8b:e3:5a:01:ff:0e:e4:bb:ed:26: 25:22:40:0a:68:85:4a:01:e0:b0:bf:cf:d0:76:92: 68:44:1e:4e:d8:94:30:17:ee:f3:de:ad:ba:80:c1: e8:38:0a:8f:f2:56:03:4b:13:b9:b4:34:0c:92:de: e4:b5:5c:e5:2b:26:1b:25:0a:18:f0:14:d9:1d:4e: 23:f1:63:27:8c:f4:22:db:ac:d1:f7:14:5e:97:39: 1f:f1:cf:3e:3a:79:4c:1f:4b:82:c8:33:e7:a3:4a: 6a:c6:0b:e1:e1:9d:5f:a1:4a:6c:eb:e0:df:7d:53: ab:fc:34:c7:2a:11:d1:d1:88:e1:70:07:07:14:b4: 63:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:4D:39:B4:11:7B:69:AF:2D:97:4F:31:8A:05:C4:1E:57:EC:59:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/935393a9-cab8-334f-afd3-0eaf3ffcb44c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/256d2a2e-9ac7-4d29-bd15-75874d49df66.crl X509v3 Authority Key Identifier: keyid:E7:4C:09:96:E8:84:50:C0:CF:D5:86:D5:46:2F:70:EE:D2:57:95:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66.cer sbgp-ipAddrBlock: critical IPv6: 2605:fdc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:86:d2:e4:50:b1:40:cc:3e:18:02:f3:90:48:45:ec:5d:a2: 68:77:db:07:40:4b:82:9f:64:07:8b:f6:81:6e:ce:3f:35:cf: 99:c0:fb:d3:6a:2f:c5:67:24:ec:ea:b6:b5:75:78:23:94:ac: b6:a5:41:79:8c:70:bb:28:86:5b:71:7b:5d:f1:f3:b5:1a:b7: 33:f3:5b:6b:e3:45:ad:16:fc:05:83:b8:86:1f:23:70:54:e2: 13:1c:f0:32:1c:c3:c5:fe:07:06:4c:f2:53:2f:4a:92:64:68: c2:6a:64:6f:1e:28:3d:07:85:31:18:99:21:9a:86:2e:a6:ab: 59:ef:d9:88:54:f2:21:38:f8:74:2e:c2:53:3f:bc:f8:f1:ca: 9d:31:71:ac:ab:52:8f:e0:0a:81:dc:61:d1:12:75:d5:e4:f7: 0a:35:7a:f7:42:6e:2d:bf:9a:72:53:41:e9:6e:79:e7:fc:12: fc:06:37:6c:6a:28:dc:99:69:68:6b:dc:df:a0:b4:c1:82:cd: c5:6b:0d:c0:7c:65:15:b9:10:08:ec:74:c7:b7:10:ce:88:69: bf:9a:6a:b1:2f:73:11:f1:a0:1a:52:c4:91:4e:7f:fe:75:47: 7f:96:d6:20:5d:46:a3:6d:cd:6e:0d:fa:07:e5:70:68:a6:a8: b3:00:9c:34 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmM/w0TtusZjN/m/xAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjU2ZDJhMmUtOWFjNy00ZDI5LWJkMTUtNzU4NzRkNDlk ZjY2MB4XDTI1MDQxNzAxMDA0NVoXDTI1MDcxNjAxMDA0NVowLzEtMCsGA1UEAxMk YTkyMjcxYzItODY4Yy00YmU4LThhZmMtMmNlZmVmODU5ZjhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSmyHCit4KIxD8tTLDhijRkd2MfZOjtf0Hbd V4bIPc4xfe+1Z2pmdWGIvjX0nTX5oAwpDXe4tpKrN8kxyc2Bz/XWkCfGzCDx4DDe KDeRRIscC3yVuwbgxJni57Npz2MAh507a/YmKM1QqUpwOpLdSb01mEUB7F5l5Dpv K4vjWgH/DuS77SYlIkAKaIVKAeCwv8/QdpJoRB5O2JQwF+7z3q26gMHoOAqP8lYD SxO5tDQMkt7ktVzlKyYbJQoY8BTZHU4j8WMnjPQi26zR9xRelzkf8c8+OnlMH0uC yDPno0pqxgvh4Z1foUps6+DffVOr/DTHKhHR0YjhcAcHFLRjbQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFP1NObQRe2mvLZdPMYoFxB5X7FmCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yNTZk MmEyZS05YWM3LTRkMjktYmQxNS03NTg3NGQ0OWRmNjYvOTM1MzkzYTktY2FiOC0z MzRmLWFmZDMtMGVhZjNmZmNiNDRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjU2ZDJhMmUtOWFjNy00ZDI5LWJk MTUtNzU4NzRkNDlkZjY2LzI1NmQyYTJlLTlhYzctNGQyOS1iZDE1LTc1ODc0ZDQ5 ZGY2Ni5jcmwwHwYDVR0jBBgwFoAU50wJluiEUMDP1YbVRi9w7tJXlQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yNTZkMmEyZS05YWM3LTRkMjktYmQxNS03NTg3 NGQ0OWRmNjYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgX9wDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAuhtLkULFAzD4YAvOQSEXsXaJod9sHQEuCn2QHi/aBbs4/Nc+ZwPvT ai/FZyTs6ra1dXgjlKy2pUF5jHC7KIZbcXtd8fO1Grcz81tr40WtFvwFg7iGHyNw VOITHPAyHMPF/gcGTPJTL0qSZGjCamRvHig9B4UxGJkhmoYupqtZ79mIVPIhOPh0 LsJTP7z48cqdMXGsq1KP4AqB3GHREnXV5PcKNXr3Qm4tv5pyU0Hpbnnn/BL8Bjds aijcmWloa9zfoLTBgs3Faw3AfGUVuRAI7HTHtxDOiGm/mmqxL3MR8aAaUsSRTn/+ dUd/ltYgXUajbc1uDfoH5XBopqizAJw0 -----END CERTIFICATE-----Generated at Thu Apr 17 19:46:48 2025 by rpki-client