$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/d3e538fe-a4fd-3aa1-b448-5be623b75db5.roa File: d3e538fe-a4fd-3aa1-b448-5be623b75db5.roa (raw, json) Hash identifier: wwRpFoHvcU3BXIX9CYCmIN3qQxNgilXJSEoc8PhugzE= Subject key identifier: C6:B7:4E:EA:C6:05:78:7E:3A:B8:49:11:D9:45:F8:B0:B8:E7:7B:4B Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F4328584898D60EA869A9D568E73F9240 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/d3e538fe-a4fd-3aa1-b448-5be623b75db5.roa Signing time: Sun 19 Jan 2025 14:00:52 +0000 ROA not before: Sun 19 Jan 2025 14:00:52 +0000 ROA not after: Sat 19 Apr 2025 13:00:52 +0000 asID: 1239 IP address blocks: 2001:49f0:d009::/48 maxlen: 48 2001:49f0:d014::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:98:d6:0e:a8:69:a9:d5:68:e7:3f:92:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Jan 19 14:00:52 2025 GMT Not After : Apr 19 13:00:52 2025 GMT Subject: CN=b6a7b2c9-8fb9-48d9-8d55-00a94d77eb9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:e0:cc:de:b9:23:22:3b:62:2f:91:b2:94:0a: 8c:33:45:47:20:00:87:70:00:19:b9:55:73:a0:20: 68:9f:6e:1e:09:7f:7d:ff:31:f2:80:1b:0d:5c:0e: fe:0f:8b:29:32:a5:59:9d:ba:f2:23:f9:55:63:ae: a5:42:35:98:78:2b:da:cf:1a:23:f4:36:ab:ce:0a: 94:7c:9e:2b:e2:06:df:23:3f:fc:9f:b4:ac:40:c8: 03:59:d3:c8:d7:3c:dc:b8:00:06:9d:eb:69:56:1c: b2:a0:0d:ff:b1:b4:3a:c7:9c:27:4c:38:29:12:48: 8b:c7:c9:97:a8:97:d2:99:30:1b:5c:bf:f9:17:fd: 81:ba:57:2c:32:68:66:fe:14:d9:ab:3e:71:61:47: df:8e:2e:9b:c6:97:91:50:2f:9c:a5:60:2e:86:cb: 19:eb:ea:ca:59:41:f2:d3:0d:8e:2c:37:47:65:7c: 74:0f:43:29:8f:ac:03:7b:95:42:5d:0f:e0:3b:0d: 7c:e1:46:a0:68:9b:64:f4:cf:62:7a:b5:3c:bb:31: 2f:e5:fd:53:dc:9b:a7:e5:1c:eb:63:eb:e9:c6:f6: b3:80:0b:54:f1:b0:a7:4b:dc:9e:02:47:cb:fc:48: 01:f4:5f:f7:26:4b:6b:d4:4d:c8:c4:ed:fe:88:20: 24:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:B7:4E:EA:C6:05:78:7E:3A:B8:49:11:D9:45:F8:B0:B8:E7:7B:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/d3e538fe-a4fd-3aa1-b448-5be623b75db5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv6: 2001:49f0:d009::/48 2001:49f0:d014::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:81:e7:ec:2c:78:ad:9c:08:80:01:0c:9c:80:1a:c0:ea:4f: e9:51:99:7f:ea:1c:cc:84:96:2d:5a:6e:0f:90:79:ec:cd:c9: dd:19:fb:9e:fb:7a:e2:b4:43:6e:c9:36:0b:b2:e1:bd:1c:81: e3:5f:a1:26:d8:bf:6e:05:4d:92:18:f7:8b:58:d1:69:a6:be: b4:2c:81:84:c4:c9:1c:bc:9a:d5:f0:6c:94:bc:6f:96:fe:56: f4:25:02:97:36:8c:5b:8b:45:ac:8a:01:ec:3b:dc:a7:d6:ab: 51:96:11:4d:2d:b6:f2:95:99:f3:77:f9:bb:fa:0f:19:2c:0f: 99:85:ed:e9:ad:d4:5f:2e:ec:55:f1:b8:63:96:47:17:b2:d4: 70:b1:f7:87:61:98:57:8d:0b:aa:a5:db:8e:3c:8d:f5:c8:7a: 09:1f:ab:2d:f9:b1:ea:09:06:f3:5e:0e:aa:a4:8f:20:a0:75: eb:92:a2:95:62:99:88:7f:b6:12:ab:ed:60:e4:b2:72:ee:8b: a7:d3:67:1a:26:7a:fc:3b:52:0c:ec:3b:89:49:b2:a7:06:06: 1f:37:b9:5b:16:bb:28:41:eb:ab:19:db:b6:ad:3a:72:38:67: 9e:96:b6:e9:3a:95:a0:86:2c:d9:59:97:d2:aa:7c:00:fd:df: 71:8f:8f:fd -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEiY1g6oaanVaOc/kkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDExOTE0MDA1MloXDTI1MDQxOTEzMDA1MlowLzEtMCsGA1UEAxMk YjZhN2IyYzktOGZiOS00OGQ5LThkNTUtMDBhOTRkNzdlYjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgODM3rkjIjtiL5GylAqMM0VHIACHcAAZuVVz oCBon24eCX99/zHygBsNXA7+D4spMqVZnbryI/lVY66lQjWYeCvazxoj9DarzgqU fJ4r4gbfIz/8n7SsQMgDWdPI1zzcuAAGnetpVhyyoA3/sbQ6x5wnTDgpEkiLx8mX qJfSmTAbXL/5F/2BulcsMmhm/hTZqz5xYUffji6bxpeRUC+cpWAuhssZ6+rKWUHy 0w2OLDdHZXx0D0Mpj6wDe5VCXQ/gOw184UagaJtk9M9ierU8uzEv5f1T3Jun5Rzr Y+vpxvazgAtU8bCnS9yeAkfL/EgB9F/3Jktr1E3IxO3+iCAklQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFMa3TurGBXh+OrhJEdlF+LC453tLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvZDNlNTM4ZmUtYTRmZC0z YWExLWI0NDgtNWJlNjIzYjc1ZGI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAIAFJ8NAJ AwcAIAFJ8NAUMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAG+B5+wseK2cCIABDJyAGsDqT+lRmX/qHMyEli1a bg+QeezNyd0Z+577euK0Q27JNguy4b0cgeNfoSbYv24FTZIY94tY0WmmvrQsgYTE yRy8mtXwbJS8b5b+VvQlApc2jFuLRayKAew73KfWq1GWEU0ttvKVmfN3+bv6Dxks D5mF7emt1F8u7FXxuGOWRxey1HCx94dhmFeNC6ql2448jfXIegkfqy35seoJBvNe DqqkjyCgdeuSopVimYh/thKr7WDksnLui6fTZxomevw7UgzsO4lJsqcGBh83uVsW uyhB66sZ27atOnI4Z56Wtuk6laCGLNlZl9KqfAD933GPj/0= -----END CERTIFICATE-----Generated at Sat Apr 5 06:28:58 2025 by rpki-client