$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f476b55c-b437-3f85-8ab9-5f743bce6578.roa File: f476b55c-b437-3f85-8ab9-5f743bce6578.roa (raw, json) Hash identifier: a55EN5iQIlTqgc8Jdhi9rcBH/ldKID4oCCrzLFNx6lg= Subject key identifier: CD:A2:13:22:68:D5:85:31:90:F8:DB:9A:FC:93:1C:EC:02:1C:18:DF Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A4BB7BFE6D5363773B509290 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f476b55c-b437-3f85-8ab9-5f743bce6578.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 396982 IP address blocks: 2600:1900:4040::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:7b:fe:6d:53:63:77:3b:50:92:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=9451a7b4-dc51-4dbe-a90a-7fbf65a3422e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:ee:83:0d:61:ba:ac:6f:4c:91:6f:88:b7:d3: 6b:00:11:61:90:fa:74:e6:7e:52:39:06:e6:29:78: 5e:ae:f4:7c:b1:ff:55:5a:0b:4a:78:e4:ec:83:4e: e0:65:83:e6:ac:37:4d:a4:0f:83:a2:27:24:05:50: 5a:89:92:de:29:8c:96:0a:1a:e2:6e:95:75:9f:4c: 6d:1d:6c:60:57:3c:85:e3:ec:09:a5:95:86:e2:66: f2:f3:df:ae:bb:47:f7:60:f5:20:21:8d:28:8d:c9: 26:25:33:b2:64:9f:98:f3:3f:b9:b0:b7:19:c2:fb: 86:88:c6:c2:36:49:e3:d9:8b:13:9c:3c:62:e6:29: 1c:52:a8:b8:9e:98:1e:58:ef:e5:9f:6e:e9:96:1b: 11:aa:82:cb:77:44:fb:0c:c2:ee:29:10:5c:c7:04: 62:da:39:63:de:71:2e:5e:18:b1:c6:43:b6:1d:38: cf:91:d6:9e:3b:e2:92:42:08:3f:e9:38:43:d4:3a: cc:03:c3:16:0a:52:2c:a7:d1:d7:f8:0a:97:38:c1: d6:3c:12:1d:7e:15:e9:fa:22:17:5b:c8:e5:cf:45: 8d:28:36:a3:d1:d8:fd:17:a4:68:b5:e9:84:c0:25: 2a:09:d4:bc:5c:56:1d:23:d5:75:84:1c:63:df:c9: 2d:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:A2:13:22:68:D5:85:31:90:F8:DB:9A:FC:93:1C:EC:02:1C:18:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f476b55c-b437-3f85-8ab9-5f743bce6578.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv6: 2600:1900:4040::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:7c:36:a1:ff:99:5d:62:a2:a5:5c:43:f6:28:f1:cd:1d:2a: e2:66:6b:96:9f:0c:a7:fa:8f:dd:cd:bd:86:28:cf:4b:4d:b0: 5e:50:a0:f1:c1:1f:4d:56:c6:f7:94:7d:0b:bb:4d:d3:39:d2: 58:00:38:06:4f:10:d8:1d:5b:a7:03:d6:e2:54:4c:d8:72:b3: 8e:3b:15:42:29:55:fc:4c:f8:d3:09:56:e5:bd:e0:ed:d1:9e: 2c:7b:37:68:69:e8:8e:4f:75:f9:d1:3a:18:0e:ea:59:42:f8: 1f:c7:e6:74:a2:00:b8:e2:de:05:d4:16:a8:1f:76:bc:87:e0: 31:57:05:4b:9f:56:3a:4a:63:59:be:91:c4:61:5e:2d:e6:c4: 72:7a:24:62:1c:ae:59:65:72:09:25:26:b7:41:43:2e:c3:49: 3e:49:04:33:59:69:b8:f0:d6:73:11:50:23:48:8c:ee:90:c3: d2:34:a8:5c:66:f5:8f:b5:ce:90:86:39:13:bb:2a:61:1a:aa: c2:a2:7d:79:c2:21:4a:bc:de:d4:aa:46:72:c2:a0:b7:66:76: 1c:30:35:a8:08:5a:28:e3:c7:7f:ab:af:96:09:09:ed:45:00: 3d:84:a5:f6:e4:1a:e3:df:00:dd:4c:f5:6a:2c:3b:87:00:17: 60:0d:6b:4c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmku3v+bVNjdztQkpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk OTQ1MWE3YjQtZGM1MS00ZGJlLWE5MGEtN2ZiZjY1YTM0MjJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAie6DDWG6rG9MkW+It9NrABFhkPp05n5SOQbm KXhervR8sf9VWgtKeOTsg07gZYPmrDdNpA+DoickBVBaiZLeKYyWChribpV1n0xt HWxgVzyF4+wJpZWG4mby89+uu0f3YPUgIY0ojckmJTOyZJ+Y8z+5sLcZwvuGiMbC Nknj2YsTnDxi5ikcUqi4npgeWO/ln27plhsRqoLLd0T7DMLuKRBcxwRi2jlj3nEu XhixxkO2HTjPkdaeO+KSQgg/6ThD1DrMA8MWClIsp9HX+AqXOMHWPBIdfhXp+iIX W8jlz0WNKDaj0dj9F6RotemEwCUqCdS8XFYdI9V1hBxj38ktJwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFM2iEyJo1YUxkPjbmvyTHOwCHBjfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZjQ3NmI1NWMtYjQzNy0z Zjg1LThhYjktNWY3NDNiY2U2NTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAZAEBA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIl8NqH/mV1ioqVcQ/Yo8c0dKuJma5afDKf6j93NvYYoz0tNsF5Q oPHBH01WxveUfQu7TdM50lgAOAZPENgdW6cD1uJUTNhys447FUIpVfxM+NMJVuW9 4O3Rnix7N2hp6I5PdfnROhgO6llC+B/H5nSiALji3gXUFqgfdryH4DFXBUufVjpK Y1m+kcRhXi3mxHJ6JGIcrlllcgklJrdBQy7DST5JBDNZabjw1nMRUCNIjO6Qw9I0 qFxm9Y+1zpCGORO7KmEaqsKifXnCIUq83tSqRnLCoLdmdhwwNagIWijjx3+rr5YJ Ce1FAD2EpfbkGuPfAN1M9WosO4cAF2ANa0w= -----END CERTIFICATE-----Generated at Sat Apr 26 14:50:23 2025 by rpki-client