$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/0554e324-4168-3f92-80f5-dfd0c3069d3a.roa File: 0554e324-4168-3f92-80f5-dfd0c3069d3a.roa (raw, json) Hash identifier: 7kJiNdNBZB0/Pq1oahuJ9rr9HqFCQtm+svD2y7IrK+k= Subject key identifier: 1A:D8:43:4F:78:00:4B:D3:51:99:21:D1:F1:BB:B0:E5:76:99:04:02 Certificate issuer: /CN=fd356b15-92b2-4e72-b8d9-fa490480d177 Certificate serial: 010D0C9F43285848F65BCDFD91A65F143B9C4380 Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/0554e324-4168-3f92-80f5-dfd0c3069d3a.roa Signing time: Sat 22 Feb 2025 02:00:38 +0000 ROA not before: Sat 22 Feb 2025 02:00:38 +0000 ROA not after: Fri 23 May 2025 01:00:38 +0000 asID: 30133 IP address blocks: 2001:500:99::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f6:5b:cd:fd:91:a6:5f:14:3b:9c:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177 Validity Not Before: Feb 22 02:00:38 2025 GMT Not After : May 23 01:00:38 2025 GMT Subject: CN=8b97acbb-0f8e-4e7f-9cc9-7a04986f9d87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:65:cc:6b:35:d7:0e:3d:00:f5:f5:10:30:83: 18:47:e9:dd:39:b8:2b:f5:0b:9d:82:20:94:1c:22: 22:c3:72:09:8f:4a:d7:f4:95:70:81:a9:03:b0:d5: 01:8c:d3:c5:d1:7f:7c:0e:fa:c0:33:e0:84:27:d4: 05:f8:7e:d2:af:0d:f4:b3:e8:10:5c:1a:60:c4:46: 92:f5:01:c7:99:14:0d:87:96:24:5e:f6:77:2b:e2: 09:3d:9e:e4:e7:ed:7d:b8:37:d7:c8:45:68:44:1b: 49:40:6e:66:7a:af:1c:de:b4:1e:91:a6:ea:3f:6f: 55:99:91:1c:4b:8e:00:84:ed:34:e9:0d:7c:a9:e9: 10:b4:80:6c:43:ab:ab:ef:36:7b:72:1d:93:7a:10: 7e:6f:b2:13:d5:3b:95:f7:7c:90:29:88:dd:4a:08: f4:ad:43:86:82:9d:77:4a:dc:fa:9b:02:9d:59:04: a1:d1:ff:94:ec:5b:93:db:a5:55:fc:ce:e0:d5:92: 05:33:19:a5:d3:d5:4f:48:d2:ea:c2:79:2c:4a:af: 05:e4:cc:e2:a2:6f:06:93:9c:44:43:01:c1:a5:aa: 5d:e1:fc:4f:05:1f:4e:15:b3:75:36:6e:05:54:42: 52:52:c7:bf:1d:9e:61:d2:6f:aa:77:95:a9:4b:08: f5:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:D8:43:4F:78:00:4B:D3:51:99:21:D1:F1:BB:B0:E5:76:99:04:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/0554e324-4168-3f92-80f5-dfd0c3069d3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl X509v3 Authority Key Identifier: keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:99::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:80:97:13:e7:3a:38:54:2f:d4:e3:35:07:7b:80:42:09:1e: d2:4e:cb:d1:2f:b8:d1:9f:ce:b2:82:21:a7:89:7f:89:aa:66: 51:0e:88:80:7c:ec:e9:3c:dc:c3:bc:07:17:95:ae:6e:e7:fc: 7a:a8:fe:74:38:52:4a:21:49:83:23:d3:30:d3:59:20:ca:9b: 01:9d:59:90:1d:85:42:a1:4b:6e:82:44:0a:f9:25:6a:c4:c1: 53:1f:0d:a0:2a:22:11:a3:9e:e8:fb:2f:6d:e0:dd:81:00:01: 2f:b7:6c:92:15:f5:61:7a:2e:de:ee:39:1a:31:d8:3d:85:48: f9:4b:24:0a:37:9c:4c:d6:19:ba:df:01:0d:a0:fc:bf:ce:28: 68:86:14:ef:c6:46:cb:3a:d4:e1:47:07:2c:71:73:c9:7c:33: 58:7b:08:cb:de:b6:d1:2c:f1:72:05:80:82:18:fa:36:3e:63: cc:ed:ec:98:3b:93:1e:59:42:37:9a:a5:7b:d8:a5:ed:d7:2e: df:d8:22:9d:b9:cd:14:cc:ab:0a:f3:b2:e6:69:42:27:50:a5: 70:02:c7:fb:a2:08:08:7b:19:aa:42:7b:8e:2e:d7:a3:06:52: d1:37:df:9b:56:64:ed:34:ae:c4:51:33:be:19:7d:37:8c:b1: dd:5d:55:4c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj2W839kaZfFDucQ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmQzNTZiMTUtOTJiMi00ZTcyLWI4ZDktZmE0OTA0ODBk MTc3MB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk OGI5N2FjYmItMGY4ZS00ZTdmLTljYzktN2EwNDk4NmY5ZDg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA62XMazXXDj0A9fUQMIMYR+ndObgr9QudgiCU HCIiw3IJj0rX9JVwgakDsNUBjNPF0X98DvrAM+CEJ9QF+H7Srw30s+gQXBpgxEaS 9QHHmRQNh5YkXvZ3K+IJPZ7k5+19uDfXyEVoRBtJQG5meq8c3rQekabqP29VmZEc S44AhO006Q18qekQtIBsQ6ur7zZ7ch2TehB+b7IT1TuV93yQKYjdSgj0rUOGgp13 Stz6mwKdWQSh0f+U7FuT26VV/M7g1ZIFMxml09VPSNLqwnksSq8F5Mziom8Gk5xE QwHBpapd4fxPBR9OFbN1Nm4FVEJSUse/HZ5h0m+qd5WpSwj1DwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBrYQ094AEvTUZkh0fG7sOV2mQQCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1 NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5MDQ4MGQxNzcvMDU1NGUzMjQtNDE2OC0z ZjkyLTgwZjUtZGZkMGMzMDY5ZDNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZmQzNTZiMTUtOTJiMi00ZTcyLWI4 ZDktZmE0OTA0ODBkMTc3L2ZkMzU2YjE1LTkyYjItNGU3Mi1iOGQ5LWZhNDkwNDgw ZDE3Ny5jcmwwHwYDVR0jBBgwFoAUH2WrsjwD6KtBARGUGEBfF5fCAiUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5 MDQ4MGQxNzcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAACZ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFqAlxPnOjhUL9TjNQd7gEIJHtJOy9EvuNGfzrKCIaeJf4mqZlEO iIB87Ok83MO8BxeVrm7n/Hqo/nQ4UkohSYMj0zDTWSDKmwGdWZAdhUKhS26CRAr5 JWrEwVMfDaAqIhGjnuj7L23g3YEAAS+3bJIV9WF6Lt7uORox2D2FSPlLJAo3nEzW GbrfAQ2g/L/OKGiGFO/GRss61OFHByxxc8l8M1h7CMvettEs8XIFgIIY+jY+Y8zt 7Jg7kx5ZQjeapXvYpe3XLt/YIp25zRTMqwrzsuZpQidQpXACx/uiCAh7GapCe44u 16MGUtE335tWZO00rsRRM74ZfTeMsd1dVUw= -----END CERTIFICATE-----Generated at Sat Apr 26 20:25:02 2025 by rpki-client