$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/28d9a954-6de6-3037-9560-f9bac3e99c3d.roa File: 28d9a954-6de6-3037-9560-f9bac3e99c3d.roa (raw, json) Hash identifier: iLnvb1HdVQrXsNPN8dMfGJ5HO4xjDnibMQ6rsp+vOCo= Subject key identifier: E9:91:F6:F3:5F:22:18:C2:B7:FB:DF:30:E1:B0:16:23:B1:0E:8F:40 Certificate issuer: /CN=fd356b15-92b2-4e72-b8d9-fa490480d177 Certificate serial: 010D0C9F43285848F65BCF27B67F7A8F82155EC0 Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/28d9a954-6de6-3037-9560-f9bac3e99c3d.roa Signing time: Sat 22 Feb 2025 02:00:38 +0000 ROA not before: Sat 22 Feb 2025 02:00:38 +0000 ROA not after: Fri 23 May 2025 01:00:38 +0000 asID: 30133 IP address blocks: 2001:500:65::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f6:5b:cf:27:b6:7f:7a:8f:82:15:5e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177 Validity Not Before: Feb 22 02:00:38 2025 GMT Not After : May 23 01:00:38 2025 GMT Subject: CN=81cc9797-6ab0-4103-bc39-b8f5c913350b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:46:06:47:f5:02:81:95:fd:49:e4:7b:e5:7d: 55:fe:a5:26:50:c3:20:7a:23:01:dd:c1:43:7f:b5: 6e:4f:a0:c2:40:c7:f3:38:6a:b9:37:1e:53:39:22: 4c:c2:08:0b:8f:5e:4d:26:7a:9d:82:24:7a:26:10: da:92:ab:6e:e8:e3:d3:cd:9e:0d:d5:6d:0c:88:6c: d8:43:7a:f6:48:73:96:39:7b:91:5b:2d:6b:69:7b: aa:d0:c0:87:f5:df:65:28:8b:cc:e9:1b:41:2a:08: 09:1d:cc:be:34:a3:51:ef:bb:df:0f:99:2b:55:c2: e3:b3:6d:e9:01:0a:9e:11:30:a2:64:ed:87:1a:66: 3c:19:5a:96:78:b0:86:d6:27:57:1c:19:e1:68:28: 2c:27:ae:7e:de:7d:1d:7c:17:85:3d:55:15:5a:ec: 95:bf:e5:91:08:f8:33:92:2f:60:cd:13:48:8a:4d: 9e:50:a8:4b:e3:2e:ce:8c:85:ec:f0:93:ab:b0:ec: 23:0b:cb:0b:82:79:55:35:f1:5c:71:a0:9e:1e:ee: 49:39:43:84:40:86:29:55:87:fa:05:a0:7d:ae:37: c1:90:16:d4:5c:e7:01:5d:34:76:23:c2:db:4a:78: 3b:da:4d:e4:fc:ab:33:78:36:82:05:1a:9e:f8:75: e8:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:91:F6:F3:5F:22:18:C2:B7:FB:DF:30:E1:B0:16:23:B1:0E:8F:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/28d9a954-6de6-3037-9560-f9bac3e99c3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl X509v3 Authority Key Identifier: keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:65::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:87:e5:02:cb:53:65:55:66:d7:58:ae:b1:54:1d:9e:d9:18: 1e:72:6a:1c:04:23:7c:82:58:c2:60:51:a7:f0:bd:3f:39:54: 3a:56:b6:89:7c:56:14:9e:e1:0d:2d:91:cc:eb:1c:cf:56:10: 03:2c:e2:1a:93:86:bd:8c:73:7a:85:85:9d:e8:5d:b7:e1:99: 58:d1:f0:d5:52:70:ef:29:b2:56:e1:0c:3a:f1:9a:df:9a:49: 57:44:d5:ae:8d:24:d8:7a:52:19:64:2f:ad:a5:39:15:cb:ee: 23:ad:07:69:ff:78:63:9a:e5:4b:0f:f7:f6:b9:ee:5a:3b:a6: 0c:18:65:33:f6:65:2f:bc:3d:e4:6d:f3:9b:6b:2d:31:76:fc: f9:e2:85:21:95:a3:4a:a0:28:1e:e9:b3:8e:af:c5:ac:c8:2a: fa:91:2c:e1:c6:6c:77:bc:23:93:e4:50:25:8f:b3:3d:66:34: f1:48:1e:a2:59:bd:72:83:df:68:56:0b:a5:f8:99:c3:5b:7f: 33:11:cc:39:79:a1:ad:46:db:96:65:c5:0b:86:fa:3c:a2:73: 19:1c:46:4e:d0:12:b0:d7:b8:e8:01:ee:45:5f:eb:4e:60:6d: a2:42:cd:92:6a:51:a2:11:28:82:e7:5e:ee:86:65:da:1d:03: cd:09:f7:2f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj2W88ntn96j4IVXsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmQzNTZiMTUtOTJiMi00ZTcyLWI4ZDktZmE0OTA0ODBk MTc3MB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk ODFjYzk3OTctNmFiMC00MTAzLWJjMzktYjhmNWM5MTMzNTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4UYGR/UCgZX9SeR75X1V/qUmUMMgeiMB3cFD f7VuT6DCQMfzOGq5Nx5TOSJMwggLj15NJnqdgiR6JhDakqtu6OPTzZ4N1W0MiGzY Q3r2SHOWOXuRWy1raXuq0MCH9d9lKIvM6RtBKggJHcy+NKNR77vfD5krVcLjs23p AQqeETCiZO2HGmY8GVqWeLCG1idXHBnhaCgsJ65+3n0dfBeFPVUVWuyVv+WRCPgz ki9gzRNIik2eUKhL4y7OjIXs8JOrsOwjC8sLgnlVNfFccaCeHu5JOUOEQIYpVYf6 BaB9rjfBkBbUXOcBXTR2I8LbSng72k3k/KszeDaCBRqe+HXoswIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOmR9vNfIhjCt/vfMOGwFiOxDo9AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1 NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5MDQ4MGQxNzcvMjhkOWE5NTQtNmRlNi0z MDM3LTk1NjAtZjliYWMzZTk5YzNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZmQzNTZiMTUtOTJiMi00ZTcyLWI4 ZDktZmE0OTA0ODBkMTc3L2ZkMzU2YjE1LTkyYjItNGU3Mi1iOGQ5LWZhNDkwNDgw ZDE3Ny5jcmwwHwYDVR0jBBgwFoAUH2WrsjwD6KtBARGUGEBfF5fCAiUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5 MDQ4MGQxNzcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAABl MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADSH5QLLU2VVZtdYrrFUHZ7ZGB5yahwEI3yCWMJgUafwvT85VDpW tol8VhSe4Q0tkczrHM9WEAMs4hqThr2Mc3qFhZ3oXbfhmVjR8NVScO8pslbhDDrx mt+aSVdE1a6NJNh6UhlkL62lORXL7iOtB2n/eGOa5UsP9/a57lo7pgwYZTP2ZS+8 PeRt85trLTF2/PnihSGVo0qgKB7ps46vxazIKvqRLOHGbHe8I5PkUCWPsz1mNPFI HqJZvXKD32hWC6X4mcNbfzMRzDl5oa1G25ZlxQuG+jyicxkcRk7QErDXuOgB7kVf 605gbaJCzZJqUaIRKILnXu6GZdodA80J9y8= -----END CERTIFICATE-----Generated at Sat Apr 26 17:49:40 2025 by rpki-client