$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/3526d53a-51ac-37b2-9014-a3209df5c50b.roa File: 3526d53a-51ac-37b2-9014-a3209df5c50b.roa (raw, json) Hash identifier: 0s3HzTeO5eyu+9beIheWoNlWP1CkSt2UkQa+U7io29k= Subject key identifier: C5:00:7E:9C:3D:39:8D:99:3C:84:0E:4E:94:C8:4D:D7:17:F2:15:E6 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F432858498EB73B77824C804A3A93F6C0 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/3526d53a-51ac-37b2-9014-a3209df5c50b.roa Signing time: Thu 17 Apr 2025 15:47:48 +0000 ROA not before: Thu 17 Apr 2025 15:47:48 +0000 ROA not after: Wed 16 Jul 2025 15:47:48 +0000 asID: 174 IP address blocks: 2001:49f0:d0ad::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8e:b7:3b:77:82:4c:80:4a:3a:93:f6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Apr 17 15:47:48 2025 GMT Not After : Jul 16 15:47:48 2025 GMT Subject: CN=106e8afb-dc1f-4323-b629-4c2cfb493350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d0:cd:9f:ce:dd:9a:d6:5f:6a:dc:12:2f:4e: 9f:8f:9a:2d:1f:c5:13:22:01:eb:e6:d4:9c:3a:64: 49:84:fb:f6:0f:b7:8e:69:15:6f:72:7e:8a:98:ac: 30:c1:e5:a3:1b:30:4b:e2:da:75:2d:b5:0a:12:93: 28:1f:0d:0c:3e:de:02:f3:03:84:32:6c:d3:10:8e: ec:9f:39:c2:80:c1:bb:5d:3c:63:0c:02:45:17:4d: 6d:fb:82:1d:25:6d:27:3d:0f:fe:1f:d7:e3:8a:2c: 35:79:3a:7c:99:9a:08:27:7e:3f:74:be:cd:ac:18: 10:16:fc:0b:ff:d3:98:fc:55:ad:ed:83:1e:a2:d2: 21:a6:17:94:80:cd:a9:c2:06:6c:6e:27:d2:b5:4e: 2f:2d:40:0e:14:36:60:ed:b7:5e:63:68:1b:1b:a4: 4e:8f:55:7b:a5:6a:e0:b8:cf:1c:5c:53:e1:07:2f: a9:26:2e:9e:6a:f1:6f:9b:75:fc:2a:07:f2:9e:a3: 19:14:4d:08:cf:01:e6:ec:03:49:97:a1:97:6b:2c: f8:6d:a0:1b:1b:ba:64:5d:90:ea:0f:c3:21:5e:13: d0:57:82:62:bb:a0:fb:c5:3b:2e:7f:09:87:46:b7: a0:98:5f:02:4c:b5:ad:4e:59:91:58:0e:ab:33:cb: a0:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:00:7E:9C:3D:39:8D:99:3C:84:0E:4E:94:C8:4D:D7:17:F2:15:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/3526d53a-51ac-37b2-9014-a3209df5c50b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv6: 2001:49f0:d0ad::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:88:db:af:93:73:8e:27:4c:7e:17:f8:f9:0a:20:90:0a:af: d3:ec:a2:2e:8d:aa:f5:5e:89:17:f2:31:a9:7a:5b:c8:ad:e3: cc:4f:6c:7d:97:4f:94:25:c7:68:e4:b5:0c:7b:99:3d:46:4a: f8:e4:27:7c:ff:c0:69:a6:e2:d0:86:24:c8:37:0f:ad:e8:79: aa:ab:95:81:b6:7f:c2:b0:07:16:73:9a:ac:04:4b:08:5f:48: d0:34:d9:4c:e0:18:05:88:06:25:2b:dc:6a:a9:54:e7:81:ea: 3e:0c:0a:69:79:4f:57:11:1b:0f:5b:3d:3b:30:c6:37:cf:53: 0e:69:7f:8b:6d:10:18:05:53:5f:3a:47:23:c8:c7:9e:a4:fb: 6b:81:24:7f:a3:3f:67:53:83:58:a1:ca:ac:83:39:cf:a4:40: 2b:ba:5b:d5:7d:55:31:51:12:1e:5f:c2:5a:44:12:54:59:ad: 0b:1e:f1:d1:f6:db:dc:b8:7b:88:10:6c:13:a0:36:04:ea:09: a3:b1:dd:94:3e:4b:ad:e7:ba:67:4b:c8:c6:47:62:f2:25:bf: 09:cc:85:3d:93:59:c2:24:e4:90:82:5a:7b:7b:89:c9:9c:aa: 13:42:d5:2f:02:83:c8:0c:62:82:86:3e:c4:9b:ed:14:27:cf: 88:dc:c9:51 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmOtzt3gkyASjqT9sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDQxNzE1NDc0OFoXDTI1MDcxNjE1NDc0OFowLzEtMCsGA1UEAxMk MTA2ZThhZmItZGMxZi00MzIzLWI2MjktNGMyY2ZiNDkzMzUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdDNn87dmtZfatwSL06fj5otH8UTIgHr5tSc OmRJhPv2D7eOaRVvcn6KmKwwweWjGzBL4tp1LbUKEpMoHw0MPt4C8wOEMmzTEI7s nznCgMG7XTxjDAJFF01t+4IdJW0nPQ/+H9fjiiw1eTp8mZoIJ34/dL7NrBgQFvwL /9OY/FWt7YMeotIhpheUgM2pwgZsbifStU4vLUAOFDZg7bdeY2gbG6ROj1V7pWrg uM8cXFPhBy+pJi6eavFvm3X8KgfynqMZFE0IzwHm7ANJl6GXayz4baAbG7pkXZDq D8MhXhPQV4Jiu6D7xTsufwmHRregmF8CTLWtTlmRWA6rM8ugXwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMUAfpw9OY2ZPIQOTpTITdcX8hXmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvMzUyNmQ1M2EtNTFhYy0z N2IyLTkwMTQtYTMyMDlkZjVjNTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFJ8NCt MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKOI26+Tc44nTH4X+PkKIJAKr9Psoi6NqvVeiRfyMal6W8it48xP bH2XT5Qlx2jktQx7mT1GSvjkJ3z/wGmm4tCGJMg3D63oeaqrlYG2f8KwBxZzmqwE SwhfSNA02UzgGAWIBiUr3GqpVOeB6j4MCml5T1cRGw9bPTswxjfPUw5pf4ttEBgF U186RyPIx56k+2uBJH+jP2dTg1ihyqyDOc+kQCu6W9V9VTFREh5fwlpEElRZrQse 8dH229y4e4gQbBOgNgTqCaOx3ZQ+S63numdLyMZHYvIlvwnMhT2TWcIk5JCCWnt7 icmcqhNC1S8Cg8gMYoKGPsSb7RQnz4jcyVE= -----END CERTIFICATE-----Generated at Sat Apr 26 13:26:14 2025 by rpki-client