$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2fe47bcf-2a21-34a5-9b4b-ca5c3096cc43.roa File: 2fe47bcf-2a21-34a5-9b4b-ca5c3096cc43.roa (raw, json) Hash identifier: WCouqOcn3ACWf4dIW2RP+A3RaTmeiHPeSjiBr3lR6wE= Subject key identifier: 5E:87:48:1B:DD:DB:3C:D5:1B:CD:56:74:1D:11:2D:8D:D5:56:B4:A4 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F432858499DBF2B1B04917F5C394610C0 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2fe47bcf-2a21-34a5-9b4b-ca5c3096cc43.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 852 IP address blocks: 2001:56b:500c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:2b:1b:04:91:7f:5c:39:46:10:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=b9bbf406-3438-47fc-b195-c6607e749f41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:3a:b8:6c:00:82:24:4d:80:ad:e9:27:c9:1f: 3b:cd:3b:7a:9d:12:3f:e4:6b:cb:de:d2:cb:7a:f2: a1:35:01:98:14:92:c2:50:fc:c1:1e:0a:e6:aa:63: 19:f9:b6:47:b1:d7:d0:da:b0:3a:4d:19:17:b5:8d: b8:df:c5:fb:17:ae:7f:eb:3c:8a:29:99:4b:06:b2: 50:13:ce:42:d8:4c:6a:fa:dd:24:2a:8f:ac:06:bc: fc:d5:a5:71:cf:1e:2e:73:3f:f5:c0:c7:f5:89:48: cf:72:2b:c0:90:08:c0:6f:18:84:9d:81:b2:b9:93: 81:01:43:2a:ab:10:e0:6a:9a:d1:1c:7e:a4:04:0c: 3f:6e:13:bf:91:4b:8b:33:f9:a0:d3:e5:00:e9:3a: cc:29:a4:81:ba:a0:7c:e8:94:e1:cd:2b:fa:de:5b: bb:6c:31:33:6a:45:68:db:06:e7:9b:34:97:2e:2c: b2:86:2b:37:30:d9:02:d2:1a:3b:b8:d9:e6:f7:b3: ab:96:b0:21:98:07:79:c2:fd:42:de:0f:ef:d0:dd: d6:a9:57:6e:6e:64:ab:51:97:d2:bf:8a:19:2e:b3: 9e:91:b8:5c:bb:dc:3d:ef:db:56:09:57:c5:31:37: ef:73:31:31:d5:d2:27:f6:0c:1c:56:e5:46:36:31: 8e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:87:48:1B:DD:DB:3C:D5:1B:CD:56:74:1D:11:2D:8D:D5:56:B4:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2fe47bcf-2a21-34a5-9b4b-ca5c3096cc43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv6: 2001:56b:500c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:a4:7c:a3:ed:12:cf:85:43:97:75:7c:83:d1:88:29:88:9d: ec:d5:ec:28:ed:6e:2c:34:2d:cb:02:7d:87:d6:82:9e:64:23: ed:4a:a4:1f:88:24:44:e6:f0:71:0e:0f:f5:01:cd:f3:27:06: 37:65:e6:ba:28:b4:3c:11:ea:8c:55:61:bc:42:44:1f:bf:bb: d2:73:35:48:92:04:87:f2:e5:60:1f:63:b2:80:15:8d:d4:c4: 36:b0:e7:1d:bc:59:25:97:24:5b:88:c7:fc:8d:53:f3:3e:1b: 45:47:c9:9f:23:57:1f:5f:4c:cd:09:dd:e6:02:10:b1:c2:35: 82:94:6a:26:d2:9c:c5:76:69:44:a9:3a:2b:93:17:bd:18:80: c6:e0:29:ab:a0:99:f1:2a:77:d3:c6:69:07:44:33:e2:f1:a0: e1:66:b3:d9:a8:ec:0f:8e:e7:56:d9:fa:eb:8c:5b:cc:4d:6e: 28:40:b0:66:40:d8:b0:8e:b9:2d:ff:5c:fd:2e:72:b6:33:01: 95:4f:50:fc:f1:20:84:f5:a4:26:a9:cd:c7:70:e0:5e:f7:87: e0:5e:b6:e7:60:22:3e:a5:10:b0:02:54:20:f7:35:40:18:f0: dc:9e:8f:f5:19:d3:07:9a:95:36:91:40:8e:b9:53:19:c8:f2: a2:f5:48:61 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmdvysbBJF/XDlGEMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk YjliYmY0MDYtMzQzOC00N2ZjLWIxOTUtYzY2MDdlNzQ5ZjQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Tq4bACCJE2AreknyR87zTt6nRI/5GvL3tLL evKhNQGYFJLCUPzBHgrmqmMZ+bZHsdfQ2rA6TRkXtY2438X7F65/6zyKKZlLBrJQ E85C2Exq+t0kKo+sBrz81aVxzx4ucz/1wMf1iUjPcivAkAjAbxiEnYGyuZOBAUMq qxDgaprRHH6kBAw/bhO/kUuLM/mg0+UA6TrMKaSBuqB86JThzSv63lu7bDEzakVo 2wbnmzSXLiyyhis3MNkC0ho7uNnm97OrlrAhmAd5wv1C3g/v0N3WqVdubmSrUZfS v4oZLrOekbhcu9w979tWCVfFMTfvczEx1dIn9gwcVuVGNjGOJwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFF6HSBvd2zzVG81WdB0RLY3VVrSkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMmZlNDdiY2YtMmEyMS0z NGE1LTliNGItY2E1YzMwOTZjYzQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFa1AM MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAGkfKPtEs+FQ5d1fIPRiCmInezV7Cjtbiw0LcsCfYfWgp5kI+1K pB+IJETm8HEOD/UBzfMnBjdl5rootDwR6oxVYbxCRB+/u9JzNUiSBIfy5WAfY7KA FY3UxDaw5x28WSWXJFuIx/yNU/M+G0VHyZ8jVx9fTM0J3eYCELHCNYKUaibSnMV2 aUSpOiuTF70YgMbgKaugmfEqd9PGaQdEM+LxoOFms9mo7A+O51bZ+uuMW8xNbihA sGZA2LCOuS3/XP0ucrYzAZVPUPzxIIT1pCapzcdw4F73h+BetudgIj6lELACVCD3 NUAY8Nyej/UZ0wealTaRQI65UxnI8qL1SGE= -----END CERTIFICATE-----Generated at Mon Apr 28 13:13:29 2025 by rpki-client