$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/f74a9f89-9c89-3ae4-8406-a461573d59fa.roa File: f74a9f89-9c89-3ae4-8406-a461573d59fa.roa (raw, json) Hash identifier: h2uDi9h615bav3tMhoKto0+rGx4mOevJ4kjwCZrr/oQ= Subject key identifier: D4:CA:83:1D:86:0A:57:EA:FF:82:67:82:0F:67:FC:17:EE:5B:29:B1 Certificate issuer: /CN=c554a280-22a1-477c-97bf-f23a7f33a0c0 Certificate serial: 010D0C9F432858499AF48208596FB47D751BB280 Authority key identifier: BC:0E:50:C6:09:1A:EE:F3:D5:CA:17:87:86:B6:A9:50:1D:DC:59:C1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/f74a9f89-9c89-3ae4-8406-a461573d59fa.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 398292 IP address blocks: 2602:fd23:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/c554a280-22a1-477c-97bf-f23a7f33a0c0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/c554a280-22a1-477c-97bf-f23a7f33a0c0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:82:08:59:6f:b4:7d:75:1b:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c554a280-22a1-477c-97bf-f23a7f33a0c0 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=fff942b0-08c4-4480-944d-5fc13c92b1ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:0b:92:9f:b7:8f:23:6d:1a:a4:cc:2d:c8:b7: 30:21:96:70:a2:e1:91:a6:e8:79:1c:d8:37:d2:13: 81:3a:92:27:a6:c6:5a:19:6f:d9:4e:5f:c3:d8:2f: f2:0a:0f:dd:81:09:31:92:42:f4:eb:b7:e7:05:4b: 8f:49:06:21:7d:ae:ce:7d:8e:84:88:3d:27:65:1e: cc:69:c3:c7:bb:62:76:f7:27:b0:18:35:33:be:13: 09:dc:fb:de:07:d7:c0:f5:b3:94:2a:d9:eb:2b:c8: e3:91:35:c8:f8:4f:47:a3:20:b3:b3:b3:fd:e9:95: 4f:39:2d:1d:3d:93:15:a4:b9:e3:5c:29:50:44:54: 24:ac:01:66:34:9d:9c:63:06:6d:b8:89:9e:a8:e2: c8:b1:b1:ed:19:bb:21:c4:11:97:73:66:4a:93:74: ee:c9:5d:e6:82:c1:e3:f3:a2:92:e5:07:00:f2:62: 0f:d1:9f:69:fa:51:e3:dd:05:66:b1:df:8b:35:ae: af:e3:8c:c8:25:51:b5:93:fc:1d:11:71:a3:e0:0f: 68:02:74:cb:c8:8c:9a:5e:9d:da:69:7a:25:c4:8a: bf:5c:d8:bc:89:90:1e:56:f2:cb:71:0c:23:ea:be: 75:1e:47:79:46:c0:c3:f5:29:60:f9:ac:b7:a9:f1: 7d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:CA:83:1D:86:0A:57:EA:FF:82:67:82:0F:67:FC:17:EE:5B:29:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/f74a9f89-9c89-3ae4-8406-a461573d59fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/c554a280-22a1-477c-97bf-f23a7f33a0c0.crl X509v3 Authority Key Identifier: keyid:BC:0E:50:C6:09:1A:EE:F3:D5:CA:17:87:86:B6:A9:50:1D:DC:59:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0.cer sbgp-ipAddrBlock: critical IPv6: 2602:fd23:2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:39:fd:18:c1:49:3a:7d:22:c1:0b:57:22:a1:f4:4c:31:27: c2:ea:6d:0e:22:b2:c1:96:be:d6:ef:89:55:86:83:c8:59:a9: a4:68:99:55:1c:31:33:34:de:5d:a2:c6:92:95:11:f8:2d:9b: 58:47:ad:2f:e3:eb:8e:85:3c:19:59:2f:2a:5c:b7:f7:05:dc: fe:1f:57:a2:0e:ac:93:5c:f6:15:c5:23:27:4f:94:f9:66:58: fd:65:ac:12:58:36:a5:d2:7b:e0:f4:f5:ee:7e:69:c7:b5:b6: a2:35:b7:07:06:cb:c6:ef:d0:88:ad:13:da:09:c4:4a:2d:d8: 8c:ac:80:17:90:94:e7:dc:87:0e:e7:6b:84:f3:3d:6a:95:2e: 08:15:9a:1d:e1:0c:bf:58:de:6b:48:c8:97:03:58:98:3c:18: 30:dd:b4:87:83:1d:22:5a:5e:a4:08:e2:0b:e1:43:73:94:b0: d7:51:94:19:13:e7:8f:ee:de:1c:6b:25:7a:9a:bb:cb:e2:f1: 84:43:e4:ee:29:c9:b8:78:2a:2e:65:9b:7c:da:41:47:76:24: 1f:59:25:97:96:cd:ca:26:75:7d:b1:46:da:6c:7e:ee:6d:64: 7e:c7:5b:f3:93:b4:ac:4b:e9:21:da:fd:a2:c8:c6:21:e5:39: 21:75:98:70 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEma9IIIWW+0fXUbsoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzU1NGEyODAtMjJhMS00NzdjLTk3YmYtZjIzYTdmMzNh MGMwMB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk ZmZmOTQyYjAtMDhjNC00NDgwLTk0NGQtNWZjMTNjOTJiMWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQuSn7ePI20apMwtyLcwIZZwouGRpuh5HNg3 0hOBOpInpsZaGW/ZTl/D2C/yCg/dgQkxkkL067fnBUuPSQYhfa7OfY6EiD0nZR7M acPHu2J29yewGDUzvhMJ3PveB9fA9bOUKtnrK8jjkTXI+E9HoyCzs7P96ZVPOS0d PZMVpLnjXClQRFQkrAFmNJ2cYwZtuImeqOLIsbHtGbshxBGXc2ZKk3TuyV3mgsHj 86KS5QcA8mIP0Z9p+lHj3QVmsd+LNa6v44zIJVG1k/wdEXGj4A9oAnTLyIyaXp3a aXolxIq/XNi8iZAeVvLLcQwj6r51Hkd5RsDD9Slg+ay3qfF9OQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNTKgx2GClfq/4Jngg9n/BfuWymxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9jNTU0 YTI4MC0yMmExLTQ3N2MtOTdiZi1mMjNhN2YzM2EwYzAvZjc0YTlmODktOWM4OS0z YWU0LTg0MDYtYTQ2MTU3M2Q1OWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYzU1NGEyODAtMjJhMS00NzdjLTk3 YmYtZjIzYTdmMzNhMGMwL2M1NTRhMjgwLTIyYTEtNDc3Yy05N2JmLWYyM2E3ZjMz YTBjMC5jcmwwHwYDVR0jBBgwFoAUvA5Qxgka7vPVyheHhrapUB3cWcEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9jNTU0YTI4MC0yMmExLTQ3N2MtOTdiZi1mMjNh N2YzM2EwYzAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL9IwAC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFQ5/RjBSTp9IsELVyKh9EwxJ8LqbQ4issGWvtbviVWGg8hZqaRo mVUcMTM03l2ixpKVEfgtm1hHrS/j646FPBlZLypct/cF3P4fV6IOrJNc9hXFIydP lPlmWP1lrBJYNqXSe+D09e5+ace1tqI1twcGy8bv0IitE9oJxEot2IysgBeQlOfc hw7na4TzPWqVLggVmh3hDL9Y3mtIyJcDWJg8GDDdtIeDHSJaXqQI4gvhQ3OUsNdR lBkT54/u3hxrJXqau8vi8YRD5O4pybh4Ki5lm3zaQUd2JB9ZJZeWzcomdX2xRtps fu5tZH7HW/OTtKxL6SHa/aLIxiHlOSF1mHA= -----END CERTIFICATE-----Generated at Mon Apr 28 10:40:36 2025 by rpki-client