$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d9d5ced5-8d7a-384e-a047-9db809fa8081.roa File: d9d5ced5-8d7a-384e-a047-9db809fa8081.roa (raw, json) Hash identifier: xrIKvQx21hFby8pquN5qfzmsC7N1f5PCA5QaJWk+FpY= Subject key identifier: 83:6A:1B:9E:79:85:E1:12:08:9C:98:36:1B:1B:99:76:3F:3E:38:54 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F432858499DBF26CE8C52EB8363D89D80 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d9d5ced5-8d7a-384e-a047-9db809fa8081.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 852 IP address blocks: 2001:56a:800b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:26:ce:8c:52:eb:83:63:d8:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=261b1bc5-1d05-4618-b4a8-1caef80cebc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:05:33:3b:13:9d:91:bd:5d:d0:38:c9:ea:49: 70:6f:2e:8e:d5:a5:d0:e4:17:cb:c3:70:c0:2e:35: 42:00:f8:b7:50:aa:06:05:19:c3:2a:ee:89:5c:89: 88:87:07:c3:5f:e8:69:c9:ed:ba:eb:7b:77:a7:a0: 15:20:6c:21:62:cf:9f:c8:f5:bd:c7:d7:9e:ec:20: 74:78:b8:f6:b1:59:06:56:59:3c:84:71:a7:a8:a6: 17:6d:c3:1f:4d:ab:29:61:f9:c6:cd:84:86:44:26: 1c:46:d7:13:26:3f:06:79:79:8b:62:9b:f6:2f:ac: a1:d9:14:47:64:8e:50:76:6f:43:c4:4e:12:1b:22: 8c:96:38:60:36:5c:93:7e:c3:0c:2a:f7:f9:9b:6c: 9e:32:bc:5c:77:77:2e:47:6f:d3:dd:5c:1b:7a:24: 3f:99:2b:71:90:6a:72:1f:b3:84:dd:e5:11:81:91: 74:a1:93:de:48:0a:df:5a:96:34:67:2e:84:a2:52: f3:cc:68:04:ef:ec:b9:02:55:c4:4e:1e:ff:55:cb: bd:a8:ff:4e:46:a1:00:71:d4:35:88:20:58:9a:e1: c2:b0:b4:e4:d1:a4:cc:e5:d8:7a:a3:34:e8:1e:a1: f5:12:08:55:80:7d:ca:b2:2e:96:ed:c9:0b:7f:33: 7d:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:6A:1B:9E:79:85:E1:12:08:9C:98:36:1B:1B:99:76:3F:3E:38:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d9d5ced5-8d7a-384e-a047-9db809fa8081.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv6: 2001:56a:800b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption f5:4f:2e:69:2e:b2:1d:28:55:51:30:03:44:75:bd:aa:72:41: d7:88:31:d6:45:c4:b7:7f:d7:7e:2d:4b:c6:d3:e0:1b:f7:a9: cb:43:df:b2:2d:dc:e1:2b:65:cb:3b:fd:9e:80:90:e9:ce:25: c3:83:37:0a:ac:f2:d8:6f:b7:96:d4:2d:52:4f:8f:03:08:f4: 64:0e:d6:9e:72:fa:8d:9e:af:5f:58:e9:de:f3:fa:bf:84:fe: 08:dd:8c:2e:3a:89:c6:21:ca:59:a6:19:38:38:06:e7:b0:55: 31:2e:f0:bd:c8:14:f2:a1:9e:81:58:90:ce:f0:c1:76:2c:e4: de:25:40:4f:8a:cc:4f:aa:24:48:bd:e8:40:31:ac:38:02:04: 8b:f8:45:c0:b8:3a:e5:ed:ba:b1:05:fc:6f:f6:ff:2b:0d:82: df:68:0e:8c:f8:0c:a5:b0:1b:b4:64:00:9a:bc:f1:3d:65:d4: 40:10:33:a9:cf:e0:39:74:6d:db:5d:01:a3:16:56:86:11:3c: 77:32:cc:7c:ed:0f:01:39:39:93:a9:0d:66:12:0d:c4:29:a4: bd:7a:74:3b:16:27:4e:9a:9f:e2:61:a3:e4:12:31:1b:d9:88: cc:cf:96:ec:d9:14:eb:29:21:d3:f4:9c:29:41:a0:31:5f:6e: 34:48:64:87 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmdvybOjFLrg2PYnYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk MjYxYjFiYzUtMWQwNS00NjE4LWI0YTgtMWNhZWY4MGNlYmM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwUzOxOdkb1d0DjJ6klwby6O1aXQ5BfLw3DA LjVCAPi3UKoGBRnDKu6JXImIhwfDX+hpye2663t3p6AVIGwhYs+fyPW9x9ee7CB0 eLj2sVkGVlk8hHGnqKYXbcMfTaspYfnGzYSGRCYcRtcTJj8GeXmLYpv2L6yh2RRH ZI5Qdm9DxE4SGyKMljhgNlyTfsMMKvf5m2yeMrxcd3cuR2/T3VwbeiQ/mStxkGpy H7OE3eURgZF0oZPeSArfWpY0Zy6EolLzzGgE7+y5AlXETh7/Vcu9qP9ORqEAcdQ1 iCBYmuHCsLTk0aTM5dh6ozToHqH1EghVgH3Ksi6W7ckLfzN9tQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFINqG555heESCJyYNhsbmXY/PjhUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZDlkNWNlZDUtOGQ3YS0z ODRlLWEwNDctOWRiODA5ZmE4MDgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFaoAL MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAPVPLmkush0oVVEwA0R1vapyQdeIMdZFxLd/134tS8bT4Bv3qctD 37It3OErZcs7/Z6AkOnOJcODNwqs8thvt5bULVJPjwMI9GQO1p5y+o2er19Y6d7z +r+E/gjdjC46icYhylmmGTg4BuewVTEu8L3IFPKhnoFYkM7wwXYs5N4lQE+KzE+q JEi96EAxrDgCBIv4RcC4OuXturEF/G/2/ysNgt9oDoz4DKWwG7RkAJq88T1l1EAQ M6nP4Dl0bdtdAaMWVoYRPHcyzHztDwE5OZOpDWYSDcQppL16dDsWJ06an+Jho+QS MRvZiMzPluzZFOspIdP0nClBoDFfbjRIZIc= -----END CERTIFICATE-----Generated at Sat Apr 26 22:09:53 2025 by rpki-client