$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d357ae0b-bed2-3254-8430-8899cde32953.roa File: d357ae0b-bed2-3254-8430-8899cde32953.roa (raw, json) Hash identifier: rp91xtQ5NlSmrjv3jpQMnj83qnzn2apeVM52bBL0vHc= Subject key identifier: 8B:3A:AB:9A:12:B6:FC:EC:F8:38:49:0B:32:8B:97:C7:40:3D:68:A1 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584992949D101C989CD1A5D1CD00 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d357ae0b-bed2-3254-8430-8899cde32953.roa Signing time: Sat 19 Apr 2025 01:00:48 +0000 ROA not before: Sat 19 Apr 2025 01:00:48 +0000 ROA not after: Fri 18 Jul 2025 01:00:48 +0000 asID: 852 IP address blocks: 2001:56a:6ff0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:92:94:9d:10:1c:98:9c:d1:a5:d1:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 19 01:00:48 2025 GMT Not After : Jul 18 01:00:48 2025 GMT Subject: CN=91b2f596-dd92-44df-b25d-0dc2abcf7335 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:18:46:d8:d6:f2:89:46:a9:a4:71:6e:8e:35: 85:f5:fe:67:a7:56:ef:e1:81:8c:65:dc:af:34:0a: e3:09:6b:97:9b:d7:e3:a4:0a:38:c4:76:7e:2f:ce: 38:2a:03:c5:cd:fd:0c:47:18:8c:31:f2:bb:57:db: c6:46:33:3d:45:5a:e9:32:70:15:8b:2a:c5:f8:81: 13:87:71:ed:7e:a5:83:9d:8d:dc:1b:b7:af:de:ea: f4:a5:e3:e3:7c:56:d4:ec:f9:b8:fd:c0:cc:d8:d5: 49:fe:cb:b2:56:30:1e:d2:9c:e7:e6:eb:09:d8:b1: 77:b9:6f:2b:61:b0:8f:e3:ae:5f:35:c4:a7:17:f2: 68:bf:9d:fd:44:88:f0:a9:b5:2b:81:21:70:39:52: 06:3a:c6:c3:2b:01:56:63:ac:0c:d9:bc:de:58:27: 15:01:97:58:83:1c:ed:af:97:a7:7f:a5:26:12:dc: 44:75:c0:a0:40:ab:54:66:71:fa:c4:0f:72:b4:81: 60:ca:13:d2:b2:56:a9:fc:1f:c7:7d:06:f1:57:36: 3f:1c:c1:51:30:61:f3:6a:9a:6a:1e:e4:7d:2f:00: 30:05:27:02:86:0e:68:a3:80:56:59:7d:d1:31:a4: 64:e8:78:35:d2:e9:dc:8c:b3:76:c3:4d:27:33:e4: e7:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:3A:AB:9A:12:B6:FC:EC:F8:38:49:0B:32:8B:97:C7:40:3D:68:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d357ae0b-bed2-3254-8430-8899cde32953.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv6: 2001:56a:6ff0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:e1:b8:e2:c4:bc:d5:c8:94:e8:9f:54:2a:3c:6b:63:1c:0f: 86:61:97:69:d8:91:31:31:35:31:d8:06:1f:d7:2a:17:d6:5d: d1:5b:de:ec:21:74:94:b1:b6:ce:f7:c8:30:f7:d4:03:f3:b2: e0:65:8b:23:aa:7c:9e:74:c9:ec:17:46:b3:f0:c5:90:a0:fe: 5a:de:5f:59:22:f2:9c:e3:8f:11:ab:f9:c7:e7:f5:d8:0d:e2: 23:7b:72:28:d3:b7:3b:64:4f:30:17:e4:17:86:15:09:55:51: 34:09:c5:6b:bd:6f:e0:aa:ff:83:f8:1a:29:21:3c:ff:f4:30: f7:20:4e:50:b6:e6:8b:c7:40:0d:d9:39:e7:a7:f0:7c:59:6c: 1c:c0:42:88:9e:c1:bb:c1:fb:58:1c:13:5a:bc:76:ba:21:4f: 15:91:93:3d:9c:4c:e2:9e:ea:8f:14:f2:11:af:29:9b:3a:5f: af:0e:89:ff:da:22:4f:18:72:5b:ad:72:5c:fc:7b:ac:e7:29: 42:6b:f1:a5:1c:fb:99:d4:74:34:6f:51:a5:c8:56:ec:d8:a4: 89:4d:fa:34:11:76:d2:06:bc:df:88:5f:90:29:9f:43:c5:b2: 93:e5:e6:41:75:50:b4:cc:8d:0d:77:cf:e2:a6:16:30:5b:9a: 33:73:0a:17 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmSlJ0QHJic0aXRzQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQxOTAxMDA0OFoXDTI1MDcxODAxMDA0OFowLzEtMCsGA1UEAxMk OTFiMmY1OTYtZGQ5Mi00NGRmLWIyNWQtMGRjMmFiY2Y3MzM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhhG2NbyiUappHFujjWF9f5np1bv4YGMZdyv NArjCWuXm9fjpAo4xHZ+L844KgPFzf0MRxiMMfK7V9vGRjM9RVrpMnAViyrF+IET h3HtfqWDnY3cG7ev3ur0pePjfFbU7Pm4/cDM2NVJ/suyVjAe0pzn5usJ2LF3uW8r YbCP465fNcSnF/Jov539RIjwqbUrgSFwOVIGOsbDKwFWY6wM2bzeWCcVAZdYgxzt r5enf6UmEtxEdcCgQKtUZnH6xA9ytIFgyhPSslap/B/HfQbxVzY/HMFRMGHzappq HuR9LwAwBScChg5oo4BWWX3RMaRk6Hg10uncjLN2w00nM+TnwQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIs6q5oStvzs+DhJCzKLl8dAPWihMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZDM1N2FlMGItYmVkMi0z MjU0LTg0MzAtODg5OWNkZTMyOTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEIAEFam/w MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG/huOLEvNXIlOifVCo8a2McD4Zhl2nYkTExNTHYBh/XKhfWXdFb 3uwhdJSxts73yDD31APzsuBliyOqfJ50yewXRrPwxZCg/lreX1ki8pzjjxGr+cfn 9dgN4iN7cijTtztkTzAX5BeGFQlVUTQJxWu9b+Cq/4P4GikhPP/0MPcgTlC25ovH QA3ZOeen8HxZbBzAQoiewbvB+1gcE1q8drohTxWRkz2cTOKe6o8U8hGvKZs6X68O if/aIk8Yclutclz8e6znKUJr8aUc+5nUdDRvUaXIVuzYpIlN+jQRdtIGvN+IX5Ap n0PFspPl5kF1ULTMjQ13z+KmFjBbmjNzChc= -----END CERTIFICATE-----Generated at Wed Apr 30 23:36:08 2025 by rpki-client