$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f29d9c7d-42f2-3d00-864d-ef664ebc1f70.roa File: f29d9c7d-42f2-3d00-864d-ef664ebc1f70.roa (raw, json) Hash identifier: sAOMk8p3nsTocTM5a2nRN8elxupp2UEYrVI//Z/pjIs= Subject key identifier: E8:17:7F:5B:36:6B:8F:55:CE:10:87:03:FC:3E:D0:03:5A:61:80:D5 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A4BAD6DB3CDAB68B59A59640 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f29d9c7d-42f2-3d00-864d-ef664ebc1f70.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 396982 IP address blocks: 2600:1900:4160::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:d6:db:3c:da:b6:8b:59:a5:96:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=972b0e79-e46e-480d-acc7-1bc2db8fb434 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:fa:11:35:e6:5b:63:c6:1d:c0:98:62:0a:a1: 44:8a:6c:01:ea:cc:a2:9f:e8:33:a1:d6:70:6e:5b: d5:86:81:e8:67:cd:72:4e:aa:d3:fe:23:31:95:51: 2c:1b:a2:bb:c0:0f:18:3e:43:6c:7c:f9:a1:44:6f: 6a:62:61:99:d0:ad:d3:eb:9d:67:b9:bd:ac:97:56: da:3a:9e:25:51:36:1d:9c:80:c6:50:8e:8b:00:eb: 74:8f:82:8f:4e:0f:f2:73:c4:6a:9d:56:d4:af:39: 31:60:4d:b6:55:ec:8c:a1:33:68:f5:f4:94:57:9c: e3:25:1c:76:a6:d5:12:33:2c:d2:f1:ff:53:ac:b4: 83:b2:ae:01:27:63:e3:70:a1:32:7a:25:34:75:b1: c1:ae:2d:4d:f2:1e:12:02:55:d9:76:92:1c:e3:fd: a6:9f:ce:ee:df:4f:f2:0e:3f:ad:f4:2d:4b:a8:c6: 40:f3:96:b3:71:e4:d7:88:31:7e:95:cc:e0:ca:86: df:83:fb:55:d0:57:fd:26:72:da:89:10:f8:73:ab: 80:bd:af:9c:69:e6:d2:b8:20:0f:fc:2e:43:c1:a8: 33:04:11:03:2b:da:74:a2:81:7b:a9:5f:a3:77:ce: 8e:27:67:d1:85:43:ed:28:d3:a8:c6:32:2a:b4:a3: 00:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:17:7F:5B:36:6B:8F:55:CE:10:87:03:FC:3E:D0:03:5A:61:80:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f29d9c7d-42f2-3d00-864d-ef664ebc1f70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv6: 2600:1900:4160::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:7b:3f:5a:3e:80:b3:b8:e8:be:99:22:23:53:bc:17:6a:ac: 1a:f3:cc:7f:06:1c:89:86:45:f9:a3:98:f1:7d:f0:b1:1d:32: b8:18:f5:d5:a7:ad:86:d7:1e:e9:94:97:9a:fd:fb:9b:d7:08: 78:64:49:ab:14:39:af:94:fe:ed:1a:cf:60:8b:8e:2f:37:31: 95:db:e7:08:89:11:22:c9:9b:af:ac:20:01:98:14:f9:44:23: ff:87:1b:ab:8c:26:4e:b0:8a:c3:46:d8:81:39:d0:1c:d3:4d: dc:1c:d8:7b:f3:5a:48:50:c6:b2:7b:a1:18:b7:42:1e:2f:0f: 46:d7:d8:a7:ed:28:39:1b:f5:b5:a1:54:1e:62:b1:b2:b8:bd: ce:d8:54:82:a9:c4:0b:d7:51:fe:de:9c:ed:b3:f7:ff:3b:13: 76:87:11:7e:d7:36:a1:b8:07:d0:5a:c5:e1:15:d6:c6:5e:62: 24:e8:55:f4:43:d8:6f:f1:1d:fb:00:bc:c2:4b:5e:e1:14:ef: 09:7a:e7:62:bb:3f:16:d7:47:f9:c1:3e:c4:2b:8f:8b:52:f2: c3:9c:b6:fd:d7:60:42:58:0e:65:85:c9:da:05:73:50:9b:a7: d2:51:b5:91:63:18:af:68:fd:65:07:95:74:8c:fc:3d:0b:d7: e1:fe:5c:0b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmkutbbPNq2i1mllkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk OTcyYjBlNzktZTQ2ZS00ODBkLWFjYzctMWJjMmRiOGZiNDM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3/oRNeZbY8YdwJhiCqFEimwB6syin+gzodZw blvVhoHoZ81yTqrT/iMxlVEsG6K7wA8YPkNsfPmhRG9qYmGZ0K3T651nub2sl1ba Op4lUTYdnIDGUI6LAOt0j4KPTg/yc8RqnVbUrzkxYE22VeyMoTNo9fSUV5zjJRx2 ptUSMyzS8f9TrLSDsq4BJ2PjcKEyeiU0dbHBri1N8h4SAlXZdpIc4/2mn87u30/y Dj+t9C1LqMZA85azceTXiDF+lczgyobfg/tV0Ff9JnLaiRD4c6uAva+caebSuCAP /C5DwagzBBEDK9p0ooF7qV+jd86OJ2fRhUPtKNOoxjIqtKMAFwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOgXf1s2a49VzhCHA/w+0ANaYYDVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZjI5ZDljN2QtNDJmMi0z ZDAwLTg2NGQtZWY2NjRlYmMxZjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAZAEFg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGZ7P1o+gLO46L6ZIiNTvBdqrBrzzH8GHImGRfmjmPF98LEdMrgY 9dWnrYbXHumUl5r9+5vXCHhkSasUOa+U/u0az2CLji83MZXb5wiJESLJm6+sIAGY FPlEI/+HG6uMJk6wisNG2IE50BzTTdwc2HvzWkhQxrJ7oRi3Qh4vD0bX2KftKDkb 9bWhVB5isbK4vc7YVIKpxAvXUf7enO2z9/87E3aHEX7XNqG4B9BaxeEV1sZeYiTo VfRD2G/xHfsAvMJLXuEU7wl652K7PxbXR/nBPsQrj4tS8sOctv3XYEJYDmWFydoF c1Cbp9JRtZFjGK9o/WUHlXSM/D0L1+H+XAs= -----END CERTIFICATE-----Generated at Sat Apr 26 14:53:34 2025 by rpki-client