$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8b49ade0-7e7a-3fe9-a8f6-6ee7f304e743.roa File: 8b49ade0-7e7a-3fe9-a8f6-6ee7f304e743.roa (raw, json) Hash identifier: QNYmIYXcexNALtzl17G/X8QX6FTbBSfT95nE96gn2cs= Subject key identifier: 88:E9:CD:9C:19:73:22:B7:B2:D8:31:D7:29:17:7A:20:79:92:12:83 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F432858499DBF2B5E44BE4A0B36268180 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8b49ade0-7e7a-3fe9-a8f6-6ee7f304e743.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 852 IP address blocks: 2001:56b:800b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:2b:5e:44:be:4a:0b:36:26:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=f550b77d-b99e-4954-aeae-db98655f43ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:b9:a8:0c:62:d4:15:04:b1:57:60:ed:37:62: 5d:bb:0e:1e:d2:11:20:7b:a9:ee:20:8f:49:e0:d4: ac:c6:93:8b:20:46:a0:64:4d:e4:c1:b3:24:76:f8: 31:5a:96:40:31:52:b3:e5:72:43:1f:f3:7b:8d:e9: c6:27:c4:a7:f3:22:bb:16:1a:51:d4:62:c8:0f:bf: fc:64:b4:c8:af:ad:1b:51:2b:3b:9f:05:e7:53:31: 8f:40:08:e1:bd:4d:d1:4b:f9:e9:fb:c1:04:6c:23: eb:60:f4:45:fd:0c:1d:44:b8:f6:18:1e:8f:80:99: 76:a4:ba:5c:e4:6a:b7:7f:28:fc:42:34:2d:e3:5f: 57:ce:4b:ab:26:e1:73:0e:5e:18:ff:40:e9:9b:12: 8e:51:d9:74:fa:7e:a8:99:f5:2b:20:87:db:72:46: 22:de:f6:2b:df:91:96:b0:3e:aa:83:5b:6d:b3:86: 90:0a:95:33:33:4b:5c:d6:19:f2:75:7b:2a:53:13: 55:c4:fe:db:33:f2:f3:64:ef:61:38:1c:35:33:60: 79:55:af:72:de:f6:86:ce:6c:26:cd:70:fd:12:c9: 75:17:07:70:6a:7b:ee:f5:36:2f:90:d8:8b:b3:29: 55:be:b1:69:4d:38:06:63:d7:52:93:0a:db:8c:71: e5:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:E9:CD:9C:19:73:22:B7:B2:D8:31:D7:29:17:7A:20:79:92:12:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8b49ade0-7e7a-3fe9-a8f6-6ee7f304e743.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv6: 2001:56b:800b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:a3:b3:fd:e2:23:ef:71:75:b5:ae:03:7c:72:0e:31:c2:b9: fd:77:85:8c:7a:60:e1:d2:d6:34:1d:38:a9:69:d2:ba:60:71: 8b:18:10:cf:70:84:75:98:94:fe:f7:cb:67:c8:db:af:4f:17: 4a:c0:dd:4c:4f:d0:fb:4c:8f:38:4f:91:46:15:d8:85:24:8d: 85:dc:1e:c3:83:86:ec:18:53:d9:95:1a:ca:54:46:b8:cd:9e: f8:ad:a3:4f:c7:d8:25:c5:c5:93:9f:69:47:48:6c:9e:39:62: aa:71:f3:54:17:d1:99:e9:e1:5a:4b:59:83:06:8f:61:d9:33: e1:09:0e:0d:29:5d:3b:a1:32:11:c5:b1:02:d1:3a:9f:95:2b: 05:b4:44:fe:a5:de:94:ab:78:7f:a8:27:6a:13:c9:52:ef:31: da:d9:31:9f:4a:88:0b:be:74:ee:a2:14:de:b6:d2:76:e2:99: db:8a:0e:55:eb:de:c9:45:bd:33:7c:1e:3e:df:2b:24:bb:1a: 2a:a5:de:b0:3b:0a:3e:d5:84:1e:25:c7:7d:a3:23:2c:b9:a2: bf:57:c9:ee:b5:50:cb:c2:8a:cf:77:b5:6f:1e:c3:98:1d:25: b9:1e:44:da:4c:57:d4:fe:f3:27:87:59:9e:f8:e0:ba:4d:77: ff:f1:a7:c1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmdvyteRL5KCzYmgYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk ZjU1MGI3N2QtYjk5ZS00OTU0LWFlYWUtZGI5ODY1NWY0M2VhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLmoDGLUFQSxV2DtN2Jduw4e0hEge6nuII9J 4NSsxpOLIEagZE3kwbMkdvgxWpZAMVKz5XJDH/N7jenGJ8Sn8yK7FhpR1GLID7/8 ZLTIr60bUSs7nwXnUzGPQAjhvU3RS/np+8EEbCPrYPRF/QwdRLj2GB6PgJl2pLpc 5Gq3fyj8QjQt419XzkurJuFzDl4Y/0DpmxKOUdl0+n6omfUrIIfbckYi3vYr35GW sD6qg1tts4aQCpUzM0tc1hnydXsqUxNVxP7bM/LzZO9hOBw1M2B5Va9y3vaGzmwm zXD9Esl1Fwdwanvu9TYvkNiLsylVvrFpTTgGY9dSkwrbjHHl6wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIjpzZwZcyK3stgx1ykXeiB5khKDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvOGI0OWFkZTAtN2U3YS0z ZmU5LWE4ZjYtNmVlN2YzMDRlNzQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFa4AL MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALajs/3iI+9xdbWuA3xyDjHCuf13hYx6YOHS1jQdOKlp0rpgcYsY EM9whHWYlP73y2fI269PF0rA3UxP0PtMjzhPkUYV2IUkjYXcHsODhuwYU9mVGspU RrjNnvito0/H2CXFxZOfaUdIbJ45Yqpx81QX0Znp4VpLWYMGj2HZM+EJDg0pXTuh MhHFsQLROp+VKwW0RP6l3pSreH+oJ2oTyVLvMdrZMZ9KiAu+dO6iFN620nbimduK DlXr3slFvTN8Hj7fKyS7Giql3rA7Cj7VhB4lx32jIyy5or9Xye61UMvCis93tW8e w5gdJbkeRNpMV9T+8yeHWZ744LpNd//xp8E= -----END CERTIFICATE-----Generated at Sun Apr 27 00:13:05 2025 by rpki-client