$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/448f3ebc-aaee-3b1f-b9b7-71402cb02618.roa File: 448f3ebc-aaee-3b1f-b9b7-71402cb02618.roa (raw, json) Hash identifier: Cmg6qkqRvvHBW2p23cYiobvIlNKEU4TtFoyhb+4wl4s= Subject key identifier: 18:8F:11:DE:21:95:06:5B:D1:EB:E3:E1:5D:54:C1:43:BC:03:DF:D0 Certificate issuer: /CN=3104c204-288d-4f87-83c2-99a30908dea3 Certificate serial: 010D0C9F432858495EEEE46C31C75772BB896540 Authority key identifier: 76:5D:F9:3D:47:4A:CF:23:F0:20:E6:87:70:AC:2B:98:99:2F:03:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/448f3ebc-aaee-3b1f-b9b7-71402cb02618.roa Signing time: Mon 31 Mar 2025 13:00:59 +0000 ROA not before: Mon 31 Mar 2025 13:00:59 +0000 ROA not after: Sun 29 Jun 2025 13:00:59 +0000 asID: 394353 IP address blocks: 2001:500:200::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5e:ee:e4:6c:31:c7:57:72:bb:89:65:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3104c204-288d-4f87-83c2-99a30908dea3 Validity Not Before: Mar 31 13:00:59 2025 GMT Not After : Jun 29 13:00:59 2025 GMT Subject: CN=09748705-b140-46a5-85b8-6a2aba30cf16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:12:1f:f9:f5:55:4f:48:ba:4e:61:87:6e:34: c5:d6:18:2b:b3:57:b8:a6:86:cb:7f:e5:9a:bb:15: a4:2e:5b:e4:ab:7d:14:06:ad:ac:dc:30:aa:e6:e9: 8d:59:f7:7e:40:3b:98:5c:05:a4:b0:4a:4c:1d:e5: ad:7c:fc:d1:e6:91:65:3d:9f:d8:f2:2b:bb:0b:60: f3:4d:82:b7:b3:3f:d3:16:bf:00:cd:dd:bb:8f:74: df:e0:1f:86:a0:2a:9d:e9:9e:5f:03:00:88:8a:32: 6b:46:b7:f7:2f:42:ae:8d:ac:0a:b6:6a:9a:52:39: 4c:57:a1:31:fb:69:2a:6e:ed:45:06:ce:b8:d5:ac: 93:82:4f:f3:eb:01:0d:9f:04:72:b9:64:4f:c8:c9: 24:16:f3:2e:d4:d2:dd:d3:98:9d:f5:b5:b2:fa:52: 4f:6c:b1:13:91:5e:3a:9b:72:14:1a:19:52:fb:d1: 51:bb:73:9e:ea:aa:40:f1:b9:12:a0:b8:cd:c2:eb: 41:6b:88:20:4f:89:a5:4d:f1:c4:ef:00:ac:1a:f6: ad:4e:89:0c:d1:56:d9:22:e1:18:d8:a5:32:0e:fa: db:d3:2e:28:03:c2:c2:92:5c:09:d8:f5:e4:8b:e6: 71:92:f5:c6:38:3d:4c:70:ca:68:f2:07:3b:28:7f: 1f:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:8F:11:DE:21:95:06:5B:D1:EB:E3:E1:5D:54:C1:43:BC:03:DF:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/448f3ebc-aaee-3b1f-b9b7-71402cb02618.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.crl X509v3 Authority Key Identifier: keyid:76:5D:F9:3D:47:4A:CF:23:F0:20:E6:87:70:AC:2B:98:99:2F:03:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:200::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:16:46:46:0e:ac:3f:40:26:dc:57:70:e4:45:15:fe:5f:01: d4:48:17:af:29:95:45:4c:a3:2a:33:1f:ab:c3:d8:74:cd:d3: 49:a4:21:29:f8:5b:9d:c4:de:fb:56:7b:40:2a:86:fc:be:06: 17:bc:c5:6c:3e:33:cc:17:ea:75:53:cc:ed:e7:da:de:31:2e: 1f:1a:cf:bc:68:fe:53:da:c8:e9:02:48:a0:62:a2:6a:83:de: 9b:96:57:4e:e3:3b:0f:f3:5a:26:1e:ed:7d:f6:f8:d5:4f:3b: 37:a9:db:21:39:69:b6:7d:2e:97:45:af:2e:81:50:01:ee:ed: 54:96:6c:5f:d3:7a:4e:d2:a8:8f:90:c7:91:c2:c3:fe:e8:b0: b3:46:ca:63:6e:03:a9:c1:ec:7e:53:a9:fc:51:66:c8:33:f9: 88:f5:51:0e:8d:a1:6c:21:94:5f:25:40:5a:eb:7e:3f:08:84: 93:9d:13:c5:21:7a:9a:c0:62:f5:85:88:b3:eb:f9:a1:fa:65: 45:63:d3:38:96:9a:ac:4e:76:6d:16:e6:83:b5:a9:43:fd:cc: 93:ec:eb:b3:db:72:b6:4f:8f:44:59:b4:3c:1e:bc:80:7e:e6: a1:29:40:64:59:0a:66:34:d7:91:cf:c2:1c:d6:80:01:fb:25: e1:a2:82:b8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEle7uRsMcdXcruJZUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzEwNGMyMDQtMjg4ZC00Zjg3LTgzYzItOTlhMzA5MDhk ZWEzMB4XDTI1MDMzMTEzMDA1OVoXDTI1MDYyOTEzMDA1OVowLzEtMCsGA1UEAxMk MDk3NDg3MDUtYjE0MC00NmE1LTg1YjgtNmEyYWJhMzBjZjE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4RIf+fVVT0i6TmGHbjTF1hgrs1e4pobLf+Wa uxWkLlvkq30UBq2s3DCq5umNWfd+QDuYXAWksEpMHeWtfPzR5pFlPZ/Y8iu7C2Dz TYK3sz/TFr8Azd27j3Tf4B+GoCqd6Z5fAwCIijJrRrf3L0KujawKtmqaUjlMV6Ex +2kqbu1FBs641ayTgk/z6wENnwRyuWRPyMkkFvMu1NLd05id9bWy+lJPbLETkV46 m3IUGhlS+9FRu3Oe6qpA8bkSoLjNwutBa4ggT4mlTfHE7wCsGvatTokM0VbZIuEY 2KUyDvrb0y4oA8LCklwJ2PXki+ZxkvXGOD1McMpo8gc7KH8fVQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBiPEd4hlQZb0evj4V1UwUO8A9/QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zMTA0 YzIwNC0yODhkLTRmODctODNjMi05OWEzMDkwOGRlYTMvNDQ4ZjNlYmMtYWFlZS0z YjFmLWI5YjctNzE0MDJjYjAyNjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzEwNGMyMDQtMjg4ZC00Zjg3LTgz YzItOTlhMzA5MDhkZWEzLzMxMDRjMjA0LTI4OGQtNGY4Ny04M2MyLTk5YTMwOTA4 ZGVhMy5jcmwwHwYDVR0jBBgwFoAUdl35PUdKzyPwIOaHcKwrmJkvA+IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zMTA0YzIwNC0yODhkLTRmODctODNjMi05OWEz MDkwOGRlYTMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEIAEFAAIA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABUWRkYOrD9AJtxXcORFFf5fAdRIF68plUVMoyozH6vD2HTN00mk ISn4W53E3vtWe0Aqhvy+Bhe8xWw+M8wX6nVTzO3n2t4xLh8az7xo/lPayOkCSKBi omqD3puWV07jOw/zWiYe7X32+NVPOzep2yE5abZ9LpdFry6BUAHu7VSWbF/Tek7S qI+Qx5HCw/7osLNGymNuA6nB7H5TqfxRZsgz+Yj1UQ6NoWwhlF8lQFrrfj8IhJOd E8UheprAYvWFiLPr+aH6ZUVj0ziWmqxOdm0W5oO1qUP9zJPs67PbcrZPj0RZtDwe vIB+5qEpQGRZCmY015HPwhzWgAH7JeGigrg= -----END CERTIFICATE-----Generated at Sat Apr 5 23:16:45 2025 by rpki-client