$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1ab8efee-de03-3f35-a1ac-70a17bd23c84.roa File: 1ab8efee-de03-3f35-a1ac-70a17bd23c84.roa (raw, json) Hash identifier: +bxy7XkLEmLTwSCK2VzFzwlPlhVF0WZ9N7sBdWF242g= Subject key identifier: F5:C5:2F:6A:A4:A9:1B:73:3F:5E:5B:34:BA:4F:71:A6:C5:D1:27:51 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584992949F09E13820EB4C918200 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1ab8efee-de03-3f35-a1ac-70a17bd23c84.roa Signing time: Sat 19 Apr 2025 01:00:48 +0000 ROA not before: Sat 19 Apr 2025 01:00:48 +0000 ROA not after: Fri 18 Jul 2025 01:00:48 +0000 asID: 852 IP address blocks: 2001:568:fff4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:92:94:9f:09:e1:38:20:eb:4c:91:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 19 01:00:48 2025 GMT Not After : Jul 18 01:00:48 2025 GMT Subject: CN=09a91fda-d631-43c4-aef0-4765e38aefb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:19:30:23:a7:0a:79:a5:b7:cd:04:b6:9a:82: 80:a4:4a:c0:90:9d:9e:67:a0:47:36:a1:ba:cb:8f: ef:eb:8b:9b:f4:c5:21:3c:68:20:8c:6c:bc:7c:e5: ea:a8:16:9f:f1:8e:0f:c7:d0:2a:16:90:4d:4b:57: 08:e4:b0:d6:ba:be:6a:02:29:42:16:c1:e5:3e:12: 5e:0c:18:f9:59:fd:f2:09:17:03:ee:d0:83:8e:22: e2:00:46:ab:97:49:a3:69:b1:f7:7d:57:ba:36:b2: 71:5c:9e:fb:2a:e7:43:c9:2d:b4:10:8c:a8:74:e0: f8:54:41:2b:a0:37:a6:90:ab:65:b9:18:42:1b:c1: b9:e4:9d:61:bd:60:af:f9:57:7c:16:81:3b:45:70: 1b:75:fa:8a:f4:be:7d:ca:a1:1c:e9:d3:01:5b:2a: f0:60:96:80:9a:da:3e:74:0e:e5:43:33:76:3c:97: c6:e8:56:1a:fe:58:a8:45:67:b9:80:f9:ef:9b:b3: 5b:bd:73:ca:5c:a5:23:c0:f7:8e:c7:df:1d:b3:44: 93:b3:35:bf:41:63:c6:03:f6:9d:51:ae:a1:22:b0: 0a:bb:eb:c2:ff:d0:de:fc:b0:5a:8c:6d:89:41:01: 27:11:d1:c1:0d:da:7d:62:99:d4:9f:e9:36:9a:c8: 2e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:C5:2F:6A:A4:A9:1B:73:3F:5E:5B:34:BA:4F:71:A6:C5:D1:27:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1ab8efee-de03-3f35-a1ac-70a17bd23c84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv6: 2001:568:fff4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:f3:4d:da:70:54:a1:ec:d7:ba:ae:75:33:56:39:25:be:da: 5c:59:6e:d5:6c:69:4c:27:89:df:a6:60:df:8e:b1:05:a6:4b: 5e:da:29:49:ea:74:2e:bc:d4:79:e3:36:dc:54:85:5f:fb:54: 41:d4:7e:a9:2d:1a:c3:2e:8d:db:48:cc:31:f4:84:7c:d9:b1: 35:8e:b6:57:1e:29:68:53:e2:5a:5b:a2:37:b3:5d:63:ec:64: eb:cf:39:9e:10:15:27:b7:4c:6d:fb:65:18:bc:18:92:9d:9f: 0b:67:93:f7:36:78:87:6a:d4:93:2b:06:63:ea:05:25:7d:49: 10:83:40:78:05:05:9e:11:d7:2b:68:9c:c0:2e:9e:6e:cb:a8: f7:ec:3f:99:df:c5:bb:a5:61:59:58:3f:f3:ef:a6:3d:0a:79: fb:4e:2e:98:cf:e1:9a:21:10:64:3f:40:08:24:49:13:4a:9b: f2:17:3e:8e:71:9d:23:22:fa:02:31:9d:93:84:86:30:e4:36: 17:19:1b:1c:d5:a1:60:5c:f6:45:80:1b:bb:3b:c1:52:71:02: ca:f3:a9:c8:22:1a:12:2d:04:0a:7f:7a:28:bb:da:cb:64:fb: 77:30:67:cb:af:92:08:2f:dd:24:81:af:6f:8f:25:31:cf:24: da:fe:94:56 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmSlJ8J4Tgg60yRggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQxOTAxMDA0OFoXDTI1MDcxODAxMDA0OFowLzEtMCsGA1UEAxMk MDlhOTFmZGEtZDYzMS00M2M0LWFlZjAtNDc2NWUzOGFlZmI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBkwI6cKeaW3zQS2moKApErAkJ2eZ6BHNqG6 y4/v64ub9MUhPGggjGy8fOXqqBaf8Y4Px9AqFpBNS1cI5LDWur5qAilCFsHlPhJe DBj5Wf3yCRcD7tCDjiLiAEarl0mjabH3fVe6NrJxXJ77KudDyS20EIyodOD4VEEr oDemkKtluRhCG8G55J1hvWCv+Vd8FoE7RXAbdfqK9L59yqEc6dMBWyrwYJaAmto+ dA7lQzN2PJfG6FYa/lioRWe5gPnvm7NbvXPKXKUjwPeOx98ds0STszW/QWPGA/ad Ua6hIrAKu+vC/9De/LBajG2JQQEnEdHBDdp9YpnUn+k2msguJwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPXFL2qkqRtzP15bNLpPcabF0SdRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMWFiOGVmZWUtZGUwMy0z ZjM1LWExYWMtNzBhMTdiZDIzYzg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFaP/0 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADXzTdpwVKHs17qudTNWOSW+2lxZbtVsaUwnid+mYN+OsQWmS17a KUnqdC681HnjNtxUhV/7VEHUfqktGsMujdtIzDH0hHzZsTWOtlceKWhT4lpbojez XWPsZOvPOZ4QFSe3TG37ZRi8GJKdnwtnk/c2eIdq1JMrBmPqBSV9SRCDQHgFBZ4R 1ytonMAunm7LqPfsP5nfxbulYVlYP/Pvpj0KeftOLpjP4ZohEGQ/QAgkSRNKm/IX Po5xnSMi+gIxnZOEhjDkNhcZGxzVoWBc9kWAG7s7wVJxAsrzqcgiGhItBAp/eii7 2stk+3cwZ8uvkggv3SSBr2+PJTHPJNr+lFY= -----END CERTIFICATE-----Generated at Sun Apr 27 01:07:34 2025 by rpki-client