$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/890a156a-1cd0-3d65-8f2f-b53830af891f.roa File: 890a156a-1cd0-3d65-8f2f-b53830af891f.roa (raw, json) Hash identifier: sBhX7ZEsCVWKiqireY6apw7hzNYUtXNKbXu3Wa70eVs= Subject key identifier: BF:22:82:B1:86:03:48:19:BB:2F:17:30:7E:6F:43:0B:1C:89:92:DE Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285849912F26EF666DD5E41A16B6C0 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/890a156a-1cd0-3d65-8f2f-b53830af891f.roa Signing time: Fri 18 Apr 2025 13:00:59 +0000 ROA not before: Fri 18 Apr 2025 13:00:59 +0000 ROA not after: Thu 17 Jul 2025 13:00:59 +0000 asID: 7861 IP address blocks: 2001:56b:e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:91:2f:26:ef:66:6d:d5:e4:1a:16:b6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 18 13:00:59 2025 GMT Not After : Jul 17 13:00:59 2025 GMT Subject: CN=0205973f-a162-48f6-b31a-d9d982eccae7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:16:ba:49:73:57:5f:ce:87:56:91:e8:64:38: 1d:7e:bc:1e:40:61:c9:9e:9a:69:07:90:a0:71:64: 29:66:32:f0:99:a9:18:f1:dc:83:6a:e7:8b:8b:49: 06:02:24:5c:c2:1a:a7:a5:c2:9f:e5:a4:47:f3:86: d1:a7:8f:23:9e:86:9b:e9:f6:9e:b8:55:94:4d:ef: d8:21:03:af:bd:f8:0b:5a:09:59:24:82:bc:cc:21: 6b:d4:22:96:04:ad:30:10:44:d6:f7:f6:d4:32:2f: 6e:85:d7:6e:45:ec:b4:64:49:09:33:08:6e:64:89: 81:b1:fb:89:ec:7d:bd:47:3f:bb:e0:94:6a:87:54: 13:f6:8e:cd:d4:79:3c:8e:a3:b1:9a:55:22:6b:a8: d0:9b:53:fb:ab:c0:9f:64:61:f5:61:ff:01:0f:2a: 43:0d:c8:da:a1:6d:1c:cd:f2:34:ca:53:a1:07:06: 9f:50:ae:25:77:81:d9:f5:41:26:7b:91:88:2a:41: 01:63:cd:f9:47:eb:ad:b9:f0:d7:9f:f3:49:8e:3b: 71:c8:8e:a6:a9:44:be:f4:0a:fd:52:76:1b:a5:73: 91:6a:a4:6e:ab:8d:5b:9d:80:43:dd:61:3b:d0:ed: 4d:88:f5:0e:ef:c2:68:4f:f8:fd:8f:cb:2d:02:44: 6d:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:22:82:B1:86:03:48:19:BB:2F:17:30:7E:6F:43:0B:1C:89:92:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/890a156a-1cd0-3d65-8f2f-b53830af891f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv6: 2001:56b:e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:f5:fc:88:a0:cb:7c:ed:fb:cb:77:86:8b:c1:d7:ca:c3:d7: 02:e7:a0:43:db:03:73:d6:04:1a:42:ec:ba:de:2d:b9:e1:c2: 2c:c5:9b:87:69:68:4a:18:25:73:60:ea:90:1d:70:54:fa:a9: fb:82:f5:33:ef:58:48:d9:4d:c6:0d:92:bd:ca:b0:98:f3:fa: fe:6b:f5:75:56:92:94:4a:2e:b6:bf:3d:9f:0c:bf:e6:0d:1f: 7f:f2:c0:2e:17:9d:c4:1b:6f:2b:ab:40:7c:e2:72:94:0c:9c: 57:c0:ae:12:15:e0:2d:39:73:3f:d4:5a:ea:41:eb:93:48:89: 94:e5:d8:66:92:f0:d9:92:7d:af:1b:45:72:25:5a:43:a2:2c: 89:9f:84:24:9c:58:f9:f1:6c:e9:b4:b0:8d:59:a6:30:76:36: 86:bc:ab:4c:7d:e4:1c:0e:c9:d7:9e:18:ee:dc:74:33:08:e6: 40:77:25:07:b4:d6:52:3e:a4:a4:f5:ba:88:05:e3:72:ac:55: 19:22:25:cd:5b:12:55:c6:02:19:02:08:c7:6a:97:5e:40:d3: 5a:2f:2b:a5:9b:72:97:4a:2f:7c:e7:98:2f:07:c8:d6:42:46: 6b:d9:89:bf:1e:f6:85:91:61:45:e8:9d:cb:b9:c5:af:60:46: aa:c0:e3:e1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmRLybvZm3V5BoWtsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQxODEzMDA1OVoXDTI1MDcxNzEzMDA1OVowLzEtMCsGA1UEAxMk MDIwNTk3M2YtYTE2Mi00OGY2LWIzMWEtZDlkOTgyZWNjYWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixa6SXNXX86HVpHoZDgdfrweQGHJnpppB5Cg cWQpZjLwmakY8dyDaueLi0kGAiRcwhqnpcKf5aRH84bRp48jnoab6faeuFWUTe/Y IQOvvfgLWglZJIK8zCFr1CKWBK0wEETW9/bUMi9uhdduRey0ZEkJMwhuZImBsfuJ 7H29Rz+74JRqh1QT9o7N1Hk8jqOxmlUia6jQm1P7q8CfZGH1Yf8BDypDDcjaoW0c zfI0ylOhBwafUK4ld4HZ9UEme5GIKkEBY835R+utufDXn/NJjjtxyI6mqUS+9Ar9 UnYbpXORaqRuq41bnYBD3WE70O1NiPUO78JoT/j9j8stAkRt1wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFL8igrGGA0gZuy8XMH5vQwsciZLeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvODkwYTE1NmEtMWNkMC0z ZDY1LThmMmYtYjUzODMwYWY4OTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFawAO MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJH1/Iigy3zt+8t3hovB18rD1wLnoEPbA3PWBBpC7LreLbnhwizF m4dpaEoYJXNg6pAdcFT6qfuC9TPvWEjZTcYNkr3KsJjz+v5r9XVWkpRKLra/PZ8M v+YNH3/ywC4XncQbbyurQHzicpQMnFfArhIV4C05cz/UWupB65NIiZTl2GaS8NmS fa8bRXIlWkOiLImfhCScWPnxbOm0sI1ZpjB2Noa8q0x95BwOydeeGO7cdDMI5kB3 JQe01lI+pKT1uogF43KsVRkiJc1bElXGAhkCCMdql15A01ovK6WbcpdKL3znmC8H yNZCRmvZib8e9oWRYUXoncu5xa9gRqrA4+E= -----END CERTIFICATE-----Generated at Sun Apr 27 00:20:39 2025 by rpki-client