$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/efc9d516-031f-362d-af74-4f185e826d9d.roa File: efc9d516-031f-362d-af74-4f185e826d9d.roa (raw, json) Hash identifier: aTD601OEDtkUmJkibR3psiJrnEj3yk7ELwzWjq7euRU= Subject key identifier: 65:92:62:4E:2D:93:EB:2F:98:01:A1:78:1D:A6:B3:DA:BF:04:19:76 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584992949C4A3731DB422E73A3D0 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/efc9d516-031f-362d-af74-4f185e826d9d.roa Signing time: Sat 19 Apr 2025 01:00:48 +0000 ROA not before: Sat 19 Apr 2025 01:00:48 +0000 ROA not after: Fri 18 Jul 2025 01:00:48 +0000 asID: 852 IP address blocks: 2001:568:200::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:92:94:9c:4a:37:31:db:42:2e:73:a3:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 19 01:00:48 2025 GMT Not After : Jul 18 01:00:48 2025 GMT Subject: CN=b7a0c3ba-d69b-4198-a44a-b00e3a59f887 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:5e:88:20:ac:dc:16:14:19:4a:2c:95:2f:75: 0b:72:2b:42:05:a4:53:ab:9c:89:cd:fa:68:03:15: 43:53:66:73:99:5e:3f:40:31:26:78:ab:a7:50:8d: 63:81:84:31:d3:c4:be:dc:51:41:89:e1:b3:de:bf: 86:5f:1a:51:cf:82:15:59:1f:1f:82:ae:71:b4:9f: fe:fd:34:ea:2c:f2:16:42:ef:ce:a7:36:f8:51:fe: 92:44:00:3b:67:f3:a5:5c:ce:2a:3a:11:53:fe:25: 41:00:5d:84:25:37:8e:70:e4:bd:e7:dc:e4:12:ec: 54:c0:ec:98:da:e7:4b:38:1c:93:ea:52:b7:ee:0d: 7b:61:8c:70:e1:07:15:e6:bb:95:02:62:42:b1:5e: 8a:6c:3f:ad:bf:d3:e6:95:17:df:95:b3:9d:68:59: fa:04:cc:7b:35:9e:63:f0:1f:d5:6c:a6:98:3b:37: 11:40:b5:ab:c9:d6:a9:9b:01:5a:a2:b5:b3:64:33: 92:c6:6e:93:9c:df:d1:94:75:c5:89:cf:69:36:d7: ee:73:ed:16:52:92:2e:ae:59:2f:9f:c6:cf:b7:dc: 31:f0:97:11:79:b4:a1:60:a4:13:f8:0c:40:d4:04: 1d:81:86:e1:03:6c:ca:88:48:1f:66:23:4d:72:6f: e9:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:92:62:4E:2D:93:EB:2F:98:01:A1:78:1D:A6:B3:DA:BF:04:19:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/efc9d516-031f-362d-af74-4f185e826d9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv6: 2001:568:200::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption f0:8c:04:05:5d:25:96:03:82:a0:56:85:18:6a:f3:b2:f5:ff: f6:3b:e7:43:6d:8d:b3:10:f3:c6:b6:8b:de:f6:c9:a4:f9:6c: 05:5b:31:ff:8c:1b:b5:d8:00:ad:37:d8:34:ff:a6:28:a9:9c: c4:71:01:c8:fa:a5:06:cf:1d:6d:95:15:6d:db:8b:f9:ec:3b: e7:77:81:16:ce:d5:94:78:9e:f1:64:00:33:61:ca:f5:10:ef: 7f:0e:f3:29:9c:0f:c2:3f:b7:76:83:f1:3d:f8:95:d3:76:30: 9d:2b:68:96:f8:30:9c:3f:59:d4:e9:af:fc:0e:e4:a2:8b:5d: bf:41:cb:3a:2a:c4:26:a5:6e:9c:e8:22:17:80:e9:f5:cd:08: d8:d6:45:97:da:a1:a1:9a:11:a5:40:99:d2:18:82:b6:2a:7b: 09:c1:fa:ac:e8:81:00:76:3f:eb:27:e2:0f:9a:d3:84:ba:03: bd:2e:4e:e6:78:17:09:d7:fe:d4:d4:4d:62:05:a7:16:a2:b9: 1e:cd:31:2a:7c:36:62:a4:be:84:c7:a7:22:85:ce:36:77:83: a8:8b:3e:f1:0e:7e:98:29:b0:cd:37:51:d7:b0:ee:19:0a:75: 4d:09:91:42:9c:06:be:ba:28:e1:b8:8a:93:53:c4:fa:79:59: 82:45:33:60 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmSlJxKNzHbQi5zo9AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQxOTAxMDA0OFoXDTI1MDcxODAxMDA0OFowLzEtMCsGA1UEAxMk YjdhMGMzYmEtZDY5Yi00MTk4LWE0NGEtYjAwZTNhNTlmODg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgl6IIKzcFhQZSiyVL3ULcitCBaRTq5yJzfpo AxVDU2ZzmV4/QDEmeKunUI1jgYQx08S+3FFBieGz3r+GXxpRz4IVWR8fgq5xtJ/+ /TTqLPIWQu/Opzb4Uf6SRAA7Z/OlXM4qOhFT/iVBAF2EJTeOcOS959zkEuxUwOyY 2udLOByT6lK37g17YYxw4QcV5ruVAmJCsV6KbD+tv9PmlRfflbOdaFn6BMx7NZ5j 8B/VbKaYOzcRQLWrydapmwFaorWzZDOSxm6TnN/RlHXFic9pNtfuc+0WUpIurlkv n8bPt9wx8JcRebShYKQT+AxA1AQdgYbhA2zKiEgfZiNNcm/pBwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGWSYk4tk+svmAGheB2ms9q/BBl2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZWZjOWQ1MTYtMDMxZi0z NjJkLWFmNzQtNGYxODVlODI2ZDlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFaAIA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAPCMBAVdJZYDgqBWhRhq87L1//Y750NtjbMQ88a2i972yaT5bAVb Mf+MG7XYAK032DT/piipnMRxAcj6pQbPHW2VFW3bi/nsO+d3gRbO1ZR4nvFkADNh yvUQ738O8ymcD8I/t3aD8T34ldN2MJ0raJb4MJw/WdTpr/wO5KKLXb9ByzoqxCal bpzoIheA6fXNCNjWRZfaoaGaEaVAmdIYgrYqewnB+qzogQB2P+sn4g+a04S6A70u TuZ4FwnX/tTUTWIFpxaiuR7NMSp8NmKkvoTHpyKFzjZ3g6iLPvEOfpgpsM03Udew 7hkKdU0JkUKcBr66KOG4ipNTxPp5WYJFM2A= -----END CERTIFICATE-----Generated at Mon Apr 28 02:39:59 2025 by rpki-client