$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/be11d5dc-60b6-3803-97f3-cb6c0a516f20.roa File: be11d5dc-60b6-3803-97f3-cb6c0a516f20.roa (raw, json) Hash identifier: ytpgyY3n2HvjBMN/UQ1RaBFC4OZHIOEnxFUq8stfdvc= Subject key identifier: 94:C7:B8:78:02:34:0C:74:A6:56:77:8A:4F:31:BC:0B:76:D2:0F:59 Certificate issuer: /CN=84ee337c-42c7-4207-b916-5028c8c62f82 Certificate serial: 010D0C9F43285848E2D10D07A81E3876D3A0E880 Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/be11d5dc-60b6-3803-97f3-cb6c0a516f20.roa Signing time: Sat 15 Feb 2025 02:00:39 +0000 ROA not before: Sat 15 Feb 2025 02:00:39 +0000 ROA not after: Fri 16 May 2025 01:00:39 +0000 asID: 396961 IP address blocks: 2001:468:2806::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e2:d1:0d:07:a8:1e:38:76:d3:a0:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82 Validity Not Before: Feb 15 02:00:39 2025 GMT Not After : May 16 01:00:39 2025 GMT Subject: CN=41e1e283-0641-4589-bf5c-e798e5077776 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:79:41:ba:e1:62:5a:d4:b8:30:20:45:50:49: 50:c2:f6:84:f5:50:94:39:04:18:9c:f4:63:f5:b3: 89:7b:d5:22:28:e9:33:39:d7:d7:d4:58:6a:47:58: fb:c6:19:60:be:d3:4b:db:00:50:3c:32:a1:bc:f9: fc:2e:be:d3:25:ea:7a:76:f3:86:05:cb:04:70:66: 15:74:4c:00:d6:cd:fd:50:4f:42:9c:52:cd:7f:34: f2:5f:df:1f:45:4c:0c:3b:68:41:58:df:2c:84:45: 9f:68:02:b3:09:d5:50:cb:e8:cb:81:a0:49:b2:9c: a0:ab:dc:6b:75:eb:f6:09:a7:9d:b1:da:9d:0a:3e: 0d:e7:43:df:88:18:17:1f:60:a2:fa:c5:a6:51:82: 89:09:ac:22:b8:ac:75:c2:1d:9e:f7:e5:bc:8b:7f: 41:f5:a9:f3:24:b5:6d:52:e1:78:29:7a:e2:9d:9e: ae:7d:a8:20:2b:bb:48:e1:26:58:db:ae:03:43:47: 2d:64:fc:85:80:a2:4f:09:13:34:7f:9f:d7:b1:da: 90:52:c4:dd:e6:d9:f3:7a:f5:1c:67:1e:52:33:6b: 4e:5f:6b:88:bc:ab:59:6f:4f:db:fc:cc:5e:13:fd: 8b:65:ee:16:db:44:3c:ea:48:80:9d:41:16:61:2f: 47:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:C7:B8:78:02:34:0C:74:A6:56:77:8A:4F:31:BC:0B:76:D2:0F:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/be11d5dc-60b6-3803-97f3-cb6c0a516f20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl X509v3 Authority Key Identifier: keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer sbgp-ipAddrBlock: critical IPv6: 2001:468:2806::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:2c:82:49:04:a6:40:7e:00:41:68:b9:3e:4e:4a:4d:25:6c: a2:b4:c0:59:88:b4:9b:62:45:dd:bc:86:85:e4:ae:08:fb:d8: fc:84:60:6c:5e:f6:41:c2:ee:1b:69:85:97:c9:b0:7a:a2:d5: 42:dd:b7:c2:92:04:7c:48:5b:d4:cd:51:5e:4e:05:5f:ff:63: 04:be:3d:34:d9:10:c6:1e:73:1d:3b:9e:9d:20:46:67:8e:e1: 34:4b:47:b0:42:15:07:9a:ac:b8:5b:0c:45:12:36:ad:50:64: b7:50:20:ed:cd:fa:73:50:26:28:53:ed:49:f4:8a:3a:ed:d4: 16:9d:8d:29:ea:49:fa:f5:90:d6:92:30:b2:64:f3:51:6e:f9: fa:b0:22:6c:7a:85:7d:6b:60:af:5e:54:e2:88:0d:10:52:7a: 0f:cb:e6:03:f9:3f:a7:8a:2b:f2:22:f3:df:49:83:40:66:b0: d8:00:e8:71:2c:24:bf:75:74:55:db:02:0e:8c:49:af:ed:82: cc:6b:e7:9d:ba:ca:e0:43:58:eb:31:87:53:d2:d3:ce:aa:2b: d3:28:1e:9e:6d:c3:67:99:35:b6:f5:4e:ac:d5:39:66:6a:7a: 25:da:65:9a:b7:89:65:5a:d6:c4:ac:8a:62:47:0c:bb:58:bb: 43:f8:15:59 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEji0Q0HqB44dtOg6IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODRlZTMzN2MtNDJjNy00MjA3LWI5MTYtNTAyOGM4YzYy ZjgyMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk NDFlMWUyODMtMDY0MS00NTg5LWJmNWMtZTc5OGU1MDc3Nzc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHlBuuFiWtS4MCBFUElQwvaE9VCUOQQYnPRj 9bOJe9UiKOkzOdfX1FhqR1j7xhlgvtNL2wBQPDKhvPn8Lr7TJep6dvOGBcsEcGYV dEwA1s39UE9CnFLNfzTyX98fRUwMO2hBWN8shEWfaAKzCdVQy+jLgaBJspygq9xr dev2CaedsdqdCj4N50PfiBgXH2Ci+sWmUYKJCawiuKx1wh2e9+W8i39B9anzJLVt UuF4KXrinZ6ufaggK7tI4SZY264DQ0ctZPyFgKJPCRM0f5/XsdqQUsTd5tnzevUc Zx5SM2tOX2uIvKtZb0/b/MxeE/2LZe4W20Q86kiAnUEWYS9HlQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJTHuHgCNAx0plZ3ik8xvAt20g9ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVl MzM3Yy00MmM3LTQyMDctYjkxNi01MDI4YzhjNjJmODIvYmUxMWQ1ZGMtNjBiNi0z ODAzLTk3ZjMtY2I2YzBhNTE2ZjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODRlZTMzN2MtNDJjNy00MjA3LWI5 MTYtNTAyOGM4YzYyZjgyLzg0ZWUzMzdjLTQyYzctNDIwNy1iOTE2LTUwMjhjOGM2 MmY4Mi5jcmwwHwYDVR0jBBgwFoAUocWrpVSDlo0zNHR8acBfKZbeJfgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVlMzM3Yy00MmM3LTQyMDctYjkxNi01MDI4 YzhjNjJmODIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEaCgG MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGYsgkkEpkB+AEFouT5OSk0lbKK0wFmItJtiRd28hoXkrgj72PyE YGxe9kHC7htphZfJsHqi1ULdt8KSBHxIW9TNUV5OBV//YwS+PTTZEMYecx07np0g RmeO4TRLR7BCFQearLhbDEUSNq1QZLdQIO3N+nNQJihT7Un0ijrt1BadjSnqSfr1 kNaSMLJk81Fu+fqwImx6hX1rYK9eVOKIDRBSeg/L5gP5P6eKK/Ii899Jg0BmsNgA 6HEsJL91dFXbAg6MSa/tgsxr5526yuBDWOsxh1PS086qK9MoHp5tw2eZNbb1TqzV OWZqeiXaZZq3iWVa1sSsimJHDLtYu0P4FVk= -----END CERTIFICATE-----Generated at Sun Apr 27 02:18:29 2025 by rpki-client