$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/962bc01b-e3a1-338a-a2f5-7d713d48a19a.roa File: 962bc01b-e3a1-338a-a2f5-7d713d48a19a.roa (raw, json) Hash identifier: bOCyUgJFuS4QXxDFSSPBAUYczK7bba+PquXDSIlyz84= Subject key identifier: 18:31:06:68:C0:DE:C1:F6:5A:4F:3C:47:C1:58:B6:05:C6:95:5A:F1 Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Certificate serial: 010D0C9F43285848E2D1D2B29CD7819DB686CB10 Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/962bc01b-e3a1-338a-a2f5-7d713d48a19a.roa Signing time: Sat 15 Feb 2025 02:00:39 +0000 ROA not before: Sat 15 Feb 2025 02:00:39 +0000 ROA not after: Fri 16 May 2025 01:00:39 +0000 asID: 20115 IP address blocks: 2600:5800:12a2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e2:d1:d2:b2:9c:d7:81:9d:b6:86:cb:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Validity Not Before: Feb 15 02:00:39 2025 GMT Not After : May 16 01:00:39 2025 GMT Subject: CN=859954bb-65a8-4b74-bb32-9295ff7f50c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:2a:5b:73:d6:46:a2:54:b9:05:5e:5d:7c:7a: 89:ba:bc:5c:98:08:57:e3:00:89:08:1b:0a:6c:e1: 2d:7b:8c:b8:90:90:0b:bd:7f:e6:38:43:df:44:35: 05:ac:e7:81:8c:b9:c8:4a:00:ba:41:9a:13:8d:9c: 17:3b:39:82:9a:f5:d3:ae:8d:a9:0a:e3:38:a0:71: 9f:7d:70:42:38:a3:4f:38:eb:b6:6f:8f:f0:28:bc: d5:ad:30:f4:a1:5f:be:70:2e:00:56:79:a0:4d:89: 03:02:73:3f:ea:8b:71:fb:0d:34:65:67:8c:5a:c4: 65:27:a8:4b:13:ad:7c:d2:e6:0e:88:0a:73:26:eb: 17:e1:7f:e0:18:45:a0:47:f4:48:89:69:92:c5:e8: 04:2c:37:65:b4:cc:c6:1e:45:48:39:f5:c5:4b:16: b3:a3:18:68:bd:1b:3f:f9:0f:d2:c9:3a:6d:7d:11: 70:f2:5d:2d:8a:a1:3b:20:1f:f6:e9:8a:33:e8:c5: f6:d9:02:d9:9b:63:a9:6a:76:41:df:18:03:52:29: ca:cd:bb:d3:04:b3:75:ac:ac:dc:7a:1d:04:56:06: ec:1c:01:68:6c:61:dd:c9:9f:d5:1d:0d:f3:93:c0: 96:5b:86:2c:f1:06:b6:1b:cb:2a:7d:14:10:0e:28: ad:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:31:06:68:C0:DE:C1:F6:5A:4F:3C:47:C1:58:B6:05:C6:95:5A:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/962bc01b-e3a1-338a-a2f5-7d713d48a19a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl X509v3 Authority Key Identifier: keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer sbgp-ipAddrBlock: critical IPv6: 2600:5800:12a2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:06:39:31:bc:31:ac:01:90:90:fb:4d:ac:ac:81:dc:d6:58: 90:65:44:f4:a4:af:3e:1a:9f:8e:3b:db:60:3d:ae:f7:1f:1c: a4:b2:1b:ab:9b:ae:06:fd:67:13:73:24:50:54:d3:34:09:92: 4a:9f:a5:c1:98:6b:63:11:5d:78:20:e1:c5:25:16:10:11:e5: c2:78:22:f2:21:d5:e3:a5:fc:1a:2e:ae:f0:c8:e1:67:fe:00: 5d:bc:5e:fe:51:f6:1b:9c:57:b8:ad:d6:ca:13:17:52:a5:a2: 3f:b4:93:06:d3:fb:98:09:25:26:cf:99:23:a8:90:98:e9:19: 56:be:70:68:27:13:d2:04:ab:86:80:d7:db:e3:44:2d:fd:2f: d2:52:d7:86:3e:b9:1e:c2:15:63:72:13:5d:18:ac:ae:92:b3: 17:6c:15:61:29:b2:28:33:65:6a:cb:73:63:98:b0:de:7f:55: ba:e2:79:20:a5:c0:6f:5a:1c:a9:e5:d6:78:a2:77:58:7f:ed: ed:e8:21:29:b5:23:7b:11:df:af:98:48:c3:e9:99:07:d6:d4: 99:ad:24:51:dd:6b:33:04:7b:37:8f:02:7f:66:b6:81:3f:9d: e7:24:8b:b9:6c:c7:0b:26:b4:4f:1c:4b:8f:06:bb:72:64:08: 54:f0:38:df -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEji0dKynNeBnbaGyxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4 NDdmMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk ODU5OTU0YmItNjVhOC00Yjc0LWJiMzItOTI5NWZmN2Y1MGMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCpbc9ZGolS5BV5dfHqJurxcmAhX4wCJCBsK bOEte4y4kJALvX/mOEPfRDUFrOeBjLnISgC6QZoTjZwXOzmCmvXTro2pCuM4oHGf fXBCOKNPOOu2b4/wKLzVrTD0oV++cC4AVnmgTYkDAnM/6otx+w00ZWeMWsRlJ6hL E6180uYOiApzJusX4X/gGEWgR/RIiWmSxegELDdltMzGHkVIOfXFSxazoxhovRs/ +Q/SyTptfRFw8l0tiqE7IB/26Yoz6MX22QLZm2OpanZB3xgDUinKzbvTBLN1rKzc eh0EVgbsHAFobGHdyZ/VHQ3zk8CWW4Ys8Qa2G8sqfRQQDiit3QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBgxBmjA3sH2Wk88R8FYtgXGlVrxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvOTYyYmMwMWItZTNhMS0z MzhhLWEyZjUtN2Q3MTNkNDhhMTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj NmNjZTg0N2YuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgBYABKi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABQGOTG8MawBkJD7TaysgdzWWJBlRPSkrz4an44722A9rvcfHKSy G6ubrgb9ZxNzJFBU0zQJkkqfpcGYa2MRXXgg4cUlFhAR5cJ4IvIh1eOl/BourvDI 4Wf+AF28Xv5R9hucV7it1soTF1Kloj+0kwbT+5gJJSbPmSOokJjpGVa+cGgnE9IE q4aA19vjRC39L9JS14Y+uR7CFWNyE10YrK6SsxdsFWEpsigzZWrLc2OYsN5/Vbri eSClwG9aHKnl1niid1h/7e3oISm1I3sR36+YSMPpmQfW1JmtJFHdazMEezePAn9m toE/necki7lsxwsmtE8cS48Gu3JkCFTwON8= -----END CERTIFICATE-----Generated at Mon Apr 28 06:46:03 2025 by rpki-client