$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2189e87f-7779-3596-9c34-f01904d2e2a0.roa File: 2189e87f-7779-3596-9c34-f01904d2e2a0.roa (raw, json) Hash identifier: TRl3cct7p2xlwHhglotTLMDtuey087N7VjS+y5vOsTs= Subject key identifier: 3E:28:CC:9B:F9:AB:74:29:C9:7F:0E:75:B0:C7:CE:64:75:83:3E:BE Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584992949CA2091CA3DBC8203C30 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2189e87f-7779-3596-9c34-f01904d2e2a0.roa Signing time: Sat 19 Apr 2025 01:00:48 +0000 ROA not before: Sat 19 Apr 2025 01:00:48 +0000 ROA not after: Fri 18 Jul 2025 01:00:48 +0000 asID: 852 IP address blocks: 2001:56b:3f60::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:92:94:9c:a2:09:1c:a3:db:c8:20:3c:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 19 01:00:48 2025 GMT Not After : Jul 18 01:00:48 2025 GMT Subject: CN=4d233deb-0db8-458f-90df-e518d3462d60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e4:c9:e5:f2:23:d2:10:3d:e7:e6:16:d2:84: fe:ee:40:09:90:04:50:86:51:dc:c1:c3:22:09:c7: 56:54:52:80:57:39:b6:29:28:f0:06:71:d2:83:3b: a6:1e:3a:ac:7c:2b:b4:1a:e8:21:e7:51:91:b1:7c: d0:8d:14:51:4c:3a:93:3f:a0:22:39:a1:b8:12:0a: 71:6d:aa:cc:b9:c3:e5:42:46:05:0d:8e:9d:e2:fe: 1c:11:a6:71:28:36:cd:6e:a8:67:2d:e3:d0:c7:cb: c3:b4:3e:23:79:20:3d:d5:5e:7b:af:ab:5c:12:a3: 79:5a:38:0a:fc:2a:1c:e1:4f:55:06:9c:36:a7:72: e7:25:4a:42:27:dd:1e:62:0d:89:04:60:7f:c1:28: 10:80:60:3c:b3:0e:26:fc:ea:c9:30:43:71:f7:c4: 8c:cd:62:e3:a7:21:26:28:e4:3b:56:42:d4:41:f7: 37:36:e9:50:5c:28:47:34:99:7e:7b:f8:21:d9:8e: 87:3f:4f:83:1a:70:56:cb:70:34:8f:82:b6:be:10: 2f:a6:f7:33:c5:14:f1:ab:30:6d:b8:2b:d0:fc:90: ae:97:31:dd:3e:cf:2d:54:7e:fb:6e:a7:8f:21:33: 9e:3b:64:37:50:92:e3:a5:5d:a2:c8:80:d8:20:9e: 2d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:28:CC:9B:F9:AB:74:29:C9:7F:0E:75:B0:C7:CE:64:75:83:3E:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2189e87f-7779-3596-9c34-f01904d2e2a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv6: 2001:56b:3f60::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:4b:46:ed:57:6b:7e:09:85:95:8b:67:26:b7:fd:2f:f5:62: 8f:24:1a:2f:24:3d:e9:7d:20:b3:b7:74:61:7c:a8:b4:2a:11: 79:19:76:2c:32:7d:17:b6:04:cd:19:fb:91:64:4e:e9:aa:a2: 8a:69:ba:95:65:7c:56:6c:e9:0d:2d:36:5b:76:32:19:81:d7: 3e:67:8d:a3:df:a6:20:fe:01:9b:9b:ae:38:5c:a3:1b:31:d8: af:d9:99:ec:43:34:f5:df:79:e4:74:27:53:de:a7:6b:f1:16: 6b:46:12:79:b1:26:86:56:ad:ed:f6:42:60:a7:d8:c7:b3:4a: ec:9e:ad:b0:89:6e:42:1b:20:46:b2:f1:36:90:67:96:26:26: 5e:71:d6:b4:61:55:53:21:51:af:2e:e6:70:8e:cb:66:d2:6e: 2b:77:3b:79:6b:fd:5c:6d:34:c2:22:94:cd:4a:34:db:d4:b8: a1:34:83:b0:cb:24:8b:0b:da:3e:e7:18:f2:ee:a1:d8:02:d0: 52:57:1d:5b:21:2a:17:68:c3:fb:e0:54:0c:a1:0b:68:9b:38: ad:6f:76:58:4e:d9:3a:b7:69:0d:51:ac:0e:46:e1:66:30:e8: 38:3a:0a:0d:39:9f:1b:38:b2:19:6c:c2:7c:71:a5:2c:72:42: b1:9a:2b:fb -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmSlJyiCRyj28ggPDAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQxOTAxMDA0OFoXDTI1MDcxODAxMDA0OFowLzEtMCsGA1UEAxMk NGQyMzNkZWItMGRiOC00NThmLTkwZGYtZTUxOGQzNDYyZDYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+TJ5fIj0hA95+YW0oT+7kAJkARQhlHcwcMi CcdWVFKAVzm2KSjwBnHSgzumHjqsfCu0Gugh51GRsXzQjRRRTDqTP6AiOaG4Egpx barMucPlQkYFDY6d4v4cEaZxKDbNbqhnLePQx8vDtD4jeSA91V57r6tcEqN5WjgK /Coc4U9VBpw2p3LnJUpCJ90eYg2JBGB/wSgQgGA8sw4m/OrJMENx98SMzWLjpyEm KOQ7VkLUQfc3NulQXChHNJl+e/gh2Y6HP0+DGnBWy3A0j4K2vhAvpvczxRTxqzBt uCvQ/JCulzHdPs8tVH77bqePITOeO2Q3UJLjpV2iyIDYIJ4tswIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFD4ozJv5q3QpyX8OdbDHzmR1gz6+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMjE4OWU4N2YtNzc3OS0z NTk2LTljMzQtZjAxOTA0ZDJlMmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEIAEFaz9g MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJJLRu1Xa34JhZWLZya3/S/1Yo8kGi8kPel9ILO3dGF8qLQqEXkZ diwyfRe2BM0Z+5FkTumqooppupVlfFZs6Q0tNlt2MhmB1z5njaPfpiD+AZubrjhc oxsx2K/ZmexDNPXfeeR0J1Pep2vxFmtGEnmxJoZWre32QmCn2MezSuyerbCJbkIb IEay8TaQZ5YmJl5x1rRhVVMhUa8u5nCOy2bSbit3O3lr/VxtNMIilM1KNNvUuKE0 g7DLJIsL2j7nGPLuodgC0FJXHVshKhdow/vgVAyhC2ibOK1vdlhO2Tq3aQ1RrA5G 4WYw6Dg6Cg05nxs4shlswnxxpSxyQrGaK/s= -----END CERTIFICATE-----Generated at Sat Apr 26 23:00:56 2025 by rpki-client