$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/305253d6-82e2-3de4-a457-451a62a8841a.roa File: 305253d6-82e2-3de4-a457-451a62a8841a.roa (raw, json) Hash identifier: l3j6DhjYmVMRUXxqkV7HgauP1+zRLA/qxn8oXE1dI38= Subject key identifier: 5F:0D:45:28:86:75:D1:D7:57:3C:F7:1B:17:FB:19:AB:48:D3:B7:3A Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584992949D80D6411725E7995AE0 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/305253d6-82e2-3de4-a457-451a62a8841a.roa Signing time: Sat 19 Apr 2025 01:00:48 +0000 ROA not before: Sat 19 Apr 2025 01:00:48 +0000 ROA not after: Fri 18 Jul 2025 01:00:48 +0000 asID: 852 IP address blocks: 2001:569:6fd0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:92:94:9d:80:d6:41:17:25:e7:99:5a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 19 01:00:48 2025 GMT Not After : Jul 18 01:00:48 2025 GMT Subject: CN=bda31dc0-9aa5-40cb-8974-e5bc177fc92b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b9:14:4d:2c:9a:83:c0:ad:a7:94:4f:24:ff: b4:63:b3:8a:47:76:b6:dc:8b:5e:7d:49:42:12:1d: 9d:e7:f8:58:cc:41:2a:e4:3e:a2:1a:55:1e:a4:df: 74:a0:c8:e4:30:40:78:18:ac:b7:37:e8:35:8b:23: d4:96:e6:08:16:d9:ca:28:f1:93:a3:c4:fe:d3:10: 80:c0:a3:ab:f1:22:bd:30:fd:1f:f9:60:75:60:54: 8c:97:37:63:36:a4:9f:75:1c:8e:54:b4:af:ef:f2: 22:18:6a:03:fe:9e:09:28:67:b7:cc:f8:0b:48:3c: f4:fb:7f:33:1d:61:e0:34:c4:c6:1a:9c:51:cb:4c: 8a:22:e1:a7:0b:f8:84:bc:75:14:9b:18:9b:67:45: f3:b8:7f:2f:03:e2:6a:db:6d:93:18:f5:21:3b:0a: 49:d5:df:c6:5f:7c:8a:1d:cc:75:1c:88:e7:6d:9f: a9:14:bb:da:06:87:99:ed:4d:09:3b:84:d6:43:4e: d9:ce:e1:79:c5:07:01:5d:b5:e6:29:15:45:c3:1f: b1:7e:56:3a:91:f7:16:9a:23:2d:fa:19:39:3c:bc: 10:e8:cb:5a:ee:f8:b5:29:ac:1b:20:46:53:f1:15: d8:40:49:72:a5:b5:7b:23:7e:9b:f2:86:e9:39:bb: 5c:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:0D:45:28:86:75:D1:D7:57:3C:F7:1B:17:FB:19:AB:48:D3:B7:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/305253d6-82e2-3de4-a457-451a62a8841a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv6: 2001:569:6fd0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:c8:b0:6a:60:b7:49:02:5d:e5:0a:84:23:d4:7f:96:15:5f: 11:6c:f5:3a:f2:f1:1f:fc:20:1d:11:9d:28:b4:6e:9c:ba:b0: bd:25:cb:24:25:b7:a6:86:38:a8:61:04:3b:8e:45:0c:6f:52: 73:7d:19:ca:34:05:6d:9b:ab:2f:07:9b:a6:e5:32:87:ed:b5: e7:16:02:af:22:c8:cf:e5:dd:21:d1:9e:05:78:3f:fc:29:93: 43:77:1a:f0:9e:54:31:95:0b:93:c5:c6:55:8a:4a:0e:c3:c1: 11:9c:23:17:d9:d6:bb:4e:a8:61:d5:ed:af:10:49:69:72:ac: 77:34:45:cd:b7:f5:1d:f2:05:42:98:a2:63:ce:e0:22:a6:fb: f4:a5:6e:80:80:f8:c3:fa:8f:ef:9e:c5:c4:08:a7:14:d4:24: 50:91:67:7c:48:c4:a5:e1:04:7a:5a:ac:ac:30:c4:a2:6b:b7: 35:41:63:f6:02:5f:94:55:1d:83:86:06:ab:83:8a:fd:ca:c9: 38:9f:87:9a:f0:ed:53:2e:ff:45:a1:44:8a:2b:ff:50:8c:db: 07:7d:d3:ff:d0:40:0b:66:da:64:24:b2:b9:51:93:26:63:0b: 23:fc:09:00:b0:ad:48:0b:57:aa:df:3c:85:5b:2c:22:39:70: 7d:94:75:66 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmSlJ2A1kEXJeeZWuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQxOTAxMDA0OFoXDTI1MDcxODAxMDA0OFowLzEtMCsGA1UEAxMk YmRhMzFkYzAtOWFhNS00MGNiLTg5NzQtZTViYzE3N2ZjOTJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrkUTSyag8Ctp5RPJP+0Y7OKR3a23ItefUlC Eh2d5/hYzEEq5D6iGlUepN90oMjkMEB4GKy3N+g1iyPUluYIFtnKKPGTo8T+0xCA wKOr8SK9MP0f+WB1YFSMlzdjNqSfdRyOVLSv7/IiGGoD/p4JKGe3zPgLSDz0+38z HWHgNMTGGpxRy0yKIuGnC/iEvHUUmxibZ0XzuH8vA+Jq222TGPUhOwpJ1d/GX3yK Hcx1HIjnbZ+pFLvaBoeZ7U0JO4TWQ07ZzuF5xQcBXbXmKRVFwx+xflY6kfcWmiMt +hk5PLwQ6Mta7vi1KawbIEZT8RXYQElypbV7I36b8obpObtcSwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFF8NRSiGddHXVzz3Gxf7GatI07c6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMzA1MjUzZDYtODJlMi0z ZGU0LWE0NTctNDUxYTYyYTg4NDFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEIAEFaW/Q MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKjIsGpgt0kCXeUKhCPUf5YVXxFs9Try8R/8IB0RnSi0bpy6sL0l yyQlt6aGOKhhBDuORQxvUnN9Gco0BW2bqy8Hm6blMofttecWAq8iyM/l3SHRngV4 P/wpk0N3GvCeVDGVC5PFxlWKSg7DwRGcIxfZ1rtOqGHV7a8QSWlyrHc0Rc239R3y BUKYomPO4CKm+/SlboCA+MP6j++excQIpxTUJFCRZ3xIxKXhBHparKwwxKJrtzVB Y/YCX5RVHYOGBquDiv3KyTifh5rw7VMu/0WhRIor/1CM2wd90//QQAtm2mQksrlR kyZjCyP8CQCwrUgLV6rfPIVbLCI5cH2UdWY= -----END CERTIFICATE-----Generated at Mon Apr 28 20:35:50 2025 by rpki-client