$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/a865eac1-d558-3c88-a0ac-5e857a578efb.roa File: a865eac1-d558-3c88-a0ac-5e857a578efb.roa (raw, json) Hash identifier: aPebhtZ+3KWU8KrGZXRrJv45wWZyTTPHg9LCuVbyybU= Subject key identifier: AF:B4:45:2E:F7:E9:4F:38:04:CA:D3:C0:7A:55:8D:68:6A:69:24:D5 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F432858499294A06195D83C9D9836F880 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/a865eac1-d558-3c88-a0ac-5e857a578efb.roa Signing time: Sat 19 Apr 2025 01:00:48 +0000 ROA not before: Sat 19 Apr 2025 01:00:48 +0000 ROA not after: Fri 18 Jul 2025 01:00:48 +0000 asID: 852 IP address blocks: 2001:56b:a000::/35 maxlen: 35 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:92:94:a0:61:95:d8:3c:9d:98:36:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 19 01:00:48 2025 GMT Not After : Jul 18 01:00:48 2025 GMT Subject: CN=a13a8103-cc55-45a5-89c0-aa51e74d1e33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f8:7c:5b:b2:4b:cb:1e:a5:fa:50:2e:c7:c2: 4d:80:d5:49:bf:e8:6f:47:72:e1:78:c9:0a:b3:4b: 08:2c:3f:70:86:ca:18:54:83:12:86:bb:38:22:29: 06:fa:86:a6:9e:ec:f2:34:df:11:02:ed:10:54:e4: cf:e0:59:8a:b5:9d:39:93:e3:26:4e:98:75:d2:f4: 3e:c5:7b:f3:91:c8:83:ea:68:f7:a2:fc:5d:fb:b6: 05:8d:a1:36:f2:b8:cd:b1:81:b0:9a:99:a0:41:09: 24:51:58:95:b2:5e:ad:e9:25:e0:e3:bc:3a:76:fa: 1b:fc:b4:85:61:f3:2c:21:3e:e3:f6:92:5d:0a:8e: d0:0c:c3:dd:33:91:24:86:0c:69:02:f3:56:70:26: da:66:07:1f:47:b6:7d:f1:4b:c8:74:7f:df:a4:9f: 41:84:59:59:09:a2:34:5b:0e:b9:a7:e0:a2:8f:21: cd:c3:b6:0b:84:05:d7:58:ec:82:cb:9b:f4:51:a6: a4:82:a7:e7:2e:20:57:18:1b:1f:ec:17:09:d3:d5: e5:4f:14:11:13:ea:55:88:1a:78:7b:20:83:3a:10: dc:db:f7:3a:ce:95:c1:19:8a:36:5c:c0:7c:d6:ad: 29:f4:0c:37:6a:0a:ae:45:05:3b:a7:89:08:7a:90: 37:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:B4:45:2E:F7:E9:4F:38:04:CA:D3:C0:7A:55:8D:68:6A:69:24:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/a865eac1-d558-3c88-a0ac-5e857a578efb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv6: 2001:56b:a000::/35 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:3e:48:0f:ba:e8:75:1b:c8:68:bc:ef:bb:fd:ce:a2:d6:ed: 2c:4f:71:57:6b:31:fa:08:53:35:54:22:c2:d8:3d:ab:d8:76: 30:17:71:c6:93:75:ac:a5:02:a4:80:16:2a:99:76:dc:03:b7: 8a:2e:bc:14:e7:f7:2a:f5:b5:6c:e8:01:2d:da:20:b4:f6:a1: f7:95:79:19:6f:57:69:a3:21:0b:c1:54:66:d4:34:34:c1:2c: 7c:5d:6f:5b:46:a4:84:d1:b8:12:91:66:a0:45:7d:6a:24:63: 0f:48:4e:20:be:7f:2a:ab:fa:f1:df:b2:8f:3e:59:4e:83:96: ed:14:32:9a:2f:0a:4f:dd:73:07:b3:bf:9c:1f:99:6a:b2:69: fd:5b:41:02:15:70:da:d1:ee:83:e1:af:a1:c8:0c:51:3c:48: 9c:6c:dc:29:64:86:6d:d1:f8:7c:d9:71:93:07:eb:3d:96:a4: b8:e5:91:8b:b2:07:6e:e8:ef:e0:7f:d1:72:e9:c2:9d:ff:54: 21:47:20:94:ed:11:bc:31:4b:b3:0b:73:48:05:46:42:97:ab: 87:83:30:43:58:39:67:04:16:2e:d6:1f:12:3b:fe:76:55:a0: 28:97:4d:01:68:20:fc:4f:da:07:da:e1:ee:a5:ca:5f:58:1d: 30:51:4a:30 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmSlKBhldg8nZg2+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQxOTAxMDA0OFoXDTI1MDcxODAxMDA0OFowLzEtMCsGA1UEAxMk YTEzYTgxMDMtY2M1NS00NWE1LTg5YzAtYWE1MWU3NGQxZTMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/h8W7JLyx6l+lAux8JNgNVJv+hvR3LheMkK s0sILD9whsoYVIMShrs4IikG+oamnuzyNN8RAu0QVOTP4FmKtZ05k+MmTph10vQ+ xXvzkciD6mj3ovxd+7YFjaE28rjNsYGwmpmgQQkkUViVsl6t6SXg47w6dvob/LSF YfMsIT7j9pJdCo7QDMPdM5EkhgxpAvNWcCbaZgcfR7Z98UvIdH/fpJ9BhFlZCaI0 Ww65p+CijyHNw7YLhAXXWOyCy5v0UaakgqfnLiBXGBsf7BcJ09XlTxQRE+pViBp4 eyCDOhDc2/c6zpXBGYo2XMB81q0p9Aw3agquRQU7p4kIepA3bQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFK+0RS736U84BMrTwHpVjWhqaSTVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYTg2NWVhYzEtZDU1OC0z Yzg4LWEwYWMtNWU4NTdhNTc4ZWZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYFIAEFa6Aw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAhz5ID7rodRvIaLzvu/3OotbtLE9xV2sx+ghTNVQiwtg9q9h2MBdx xpN1rKUCpIAWKpl23AO3ii68FOf3KvW1bOgBLdogtPah95V5GW9XaaMhC8FUZtQ0 NMEsfF1vW0akhNG4EpFmoEV9aiRjD0hOIL5/Kqv68d+yjz5ZToOW7RQymi8KT91z B7O/nB+ZarJp/VtBAhVw2tHug+GvocgMUTxInGzcKWSGbdH4fNlxkwfrPZakuOWR i7IHbujv4H/RcunCnf9UIUcglO0RvDFLswtzSAVGQperh4MwQ1g5ZwQWLtYfEjv+ dlWgKJdNAWgg/E/aB9rh7qXKX1gdMFFKMA== -----END CERTIFICATE-----Generated at Sun Apr 27 20:35:46 2025 by rpki-client