$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/67ad4caf-49f0-33da-b621-fa3822cdc420.roa File: 67ad4caf-49f0-33da-b621-fa3822cdc420.roa (raw, json) Hash identifier: inobOzdwJybBOWC3FmCGGq9UdD2RSj0l6DHt74kMuy8= Subject key identifier: E0:82:4A:58:76:D3:E8:50:37:D6:67:AB:D5:B3:23:A3:9A:1E:5F:61 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584992949F17F50809D00117E760 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/67ad4caf-49f0-33da-b621-fa3822cdc420.roa Signing time: Sat 19 Apr 2025 01:00:48 +0000 ROA not before: Sat 19 Apr 2025 01:00:48 +0000 ROA not after: Fri 18 Jul 2025 01:00:48 +0000 asID: 852 IP address blocks: 2001:568:203::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:92:94:9f:17:f5:08:09:d0:01:17:e7:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 19 01:00:48 2025 GMT Not After : Jul 18 01:00:48 2025 GMT Subject: CN=23289145-e24a-49f6-bbbb-f8df208cff6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:bb:3d:4d:f6:2c:e0:6e:a5:8c:05:22:ef:4e: 27:12:5b:18:d9:0b:21:7b:bc:88:ab:8b:35:11:60: bb:6f:9a:3c:7e:8f:93:8c:b0:b2:66:b8:02:56:2d: f3:77:d9:d2:4f:d1:57:40:58:01:71:2a:1b:51:3f: 0f:4f:5a:29:40:aa:78:18:8e:5b:97:03:5e:ee:89: ee:9c:80:c8:3a:6c:48:1e:fb:60:f6:b1:73:db:66: 18:5c:66:33:ea:49:91:d0:bf:1d:9f:9b:78:e9:cf: 4e:5d:bd:04:21:55:83:b5:ff:e8:a6:ba:a7:b2:c6: dd:af:69:9a:48:48:48:35:3f:9e:05:46:22:3f:04: 25:d2:79:34:9e:8b:7d:48:5a:80:18:46:8d:59:d3: fa:48:28:92:c8:28:95:39:0e:b6:f4:1c:99:1e:02: fd:7a:a6:0b:e9:c5:ed:28:aa:04:2f:c5:f2:93:3a: a7:a4:5a:2f:a0:b1:52:60:44:cf:ef:55:1e:42:31: d8:31:56:b0:f4:af:0d:a0:e6:2c:c8:8b:37:05:cd: 2a:32:81:07:77:a2:39:63:72:af:8e:80:63:e8:7f: 6a:de:fe:28:a6:60:a4:a9:6d:f7:ea:c1:9c:2b:99: 19:e8:85:dc:8c:fc:35:a5:7f:8d:f1:c7:61:71:45: f6:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:82:4A:58:76:D3:E8:50:37:D6:67:AB:D5:B3:23:A3:9A:1E:5F:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/67ad4caf-49f0-33da-b621-fa3822cdc420.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv6: 2001:568:203::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:6a:35:01:3a:bb:ea:31:ea:fd:48:14:06:4e:67:3c:67:36: 9d:a8:1b:0c:3a:6f:ad:ff:9a:38:b3:aa:e8:f0:d1:3d:4b:a4: 2f:06:0f:e7:17:de:bc:2b:ed:32:13:9b:70:2e:33:fd:a2:4a: df:96:c5:4f:79:ea:36:ab:d2:61:84:25:fc:c2:d1:38:62:cf: a0:10:ca:f0:f3:ea:d7:57:3c:30:37:a9:60:0d:b0:42:b2:57: c4:d4:d5:a8:d7:a6:14:e0:71:21:6a:07:4d:dc:7b:84:69:10: 2b:58:b7:73:1b:fe:1f:2e:c7:bd:5c:66:97:a4:eb:41:80:b4: bd:9a:5d:3a:42:c7:2b:fe:c0:a0:ed:f5:a7:6f:ef:e7:f5:b7: c4:5b:71:55:9f:4e:58:e3:ff:18:59:f9:1a:42:77:56:f3:07: 3a:10:70:27:09:1c:9d:86:3c:1d:d2:7d:ad:d6:42:26:f0:ba: 3d:e5:a2:93:c8:84:a7:0c:ce:f7:22:2d:f8:7d:bc:6c:21:ea: c8:07:b2:ec:0e:51:8b:e8:68:79:dc:ab:6c:b8:de:41:0c:93: 94:25:04:4f:41:cd:c9:8c:68:a7:e5:72:53:e4:d6:e1:a6:39: 9e:95:36:8f:b2:71:6c:42:c3:48:c0:e9:72:d0:e8:32:c3:4f: 6a:25:9f:3d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmSlJ8X9QgJ0AEX52AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQxOTAxMDA0OFoXDTI1MDcxODAxMDA0OFowLzEtMCsGA1UEAxMk MjMyODkxNDUtZTI0YS00OWY2LWJiYmItZjhkZjIwOGNmZjZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAors9TfYs4G6ljAUi704nElsY2Qshe7yIq4s1 EWC7b5o8fo+TjLCyZrgCVi3zd9nST9FXQFgBcSobUT8PT1opQKp4GI5blwNe7onu nIDIOmxIHvtg9rFz22YYXGYz6kmR0L8dn5t46c9OXb0EIVWDtf/oprqnssbdr2ma SEhINT+eBUYiPwQl0nk0not9SFqAGEaNWdP6SCiSyCiVOQ629ByZHgL9eqYL6cXt KKoEL8XykzqnpFovoLFSYETP71UeQjHYMVaw9K8NoOYsyIs3Bc0qMoEHd6I5Y3Kv joBj6H9q3v4opmCkqW336sGcK5kZ6IXcjPw1pX+N8cdhcUX2SQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOCCSlh20+hQN9Znq9WzI6OaHl9hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNjdhZDRjYWYtNDlmMC0z M2RhLWI2MjEtZmEzODIyY2RjNDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFaAID MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFRqNQE6u+ox6v1IFAZOZzxnNp2oGww6b63/mjizqujw0T1LpC8G D+cX3rwr7TITm3AuM/2iSt+WxU956jar0mGEJfzC0Thiz6AQyvDz6tdXPDA3qWAN sEKyV8TU1ajXphTgcSFqB03ce4RpECtYt3Mb/h8ux71cZpek60GAtL2aXTpCxyv+ wKDt9adv7+f1t8RbcVWfTljj/xhZ+RpCd1bzBzoQcCcJHJ2GPB3Sfa3WQibwuj3l opPIhKcMzvciLfh9vGwh6sgHsuwOUYvoaHncq2y43kEMk5QlBE9BzcmMaKflclPk 1uGmOZ6VNo+ycWxCw0jA6XLQ6DLDT2olnz0= -----END CERTIFICATE-----Generated at Wed Apr 30 14:53:12 2025 by rpki-client