$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/ffdf5012-2d06-3fc2-8e1a-21edbc4b1f1e.roa File: ffdf5012-2d06-3fc2-8e1a-21edbc4b1f1e.roa (raw, json) Hash identifier: EDFKuNjfxkmK44LiDKcR+enBC2j2aTq4CipvgRs0Qhg= Subject key identifier: FC:D8:FD:E9:C9:0D:CB:FA:06:DC:3C:AF:6B:2A:E7:E0:63:26:54:25 Certificate issuer: /CN=84ee337c-42c7-4207-b916-5028c8c62f82 Certificate serial: 010D0C9F43285849C20A0E6BBE9E1B38C057D780 Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/ffdf5012-2d06-3fc2-8e1a-21edbc4b1f1e.roa Signing time: Tue 06 May 2025 01:00:47 +0000 ROA not before: Tue 06 May 2025 01:00:47 +0000 ROA not after: Mon 04 Aug 2025 01:00:47 +0000 asID: 11537 IP address blocks: 2001:468:1f11::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c2:0a:0e:6b:be:9e:1b:38:c0:57:d7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82 Validity Not Before: May 6 01:00:47 2025 GMT Not After : Aug 4 01:00:47 2025 GMT Subject: CN=fd74ea68-b8ae-4d46-b281-890e86786fb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:09:39:13:70:34:b5:d4:f5:8c:0e:c6:39:2d: 38:ca:7b:8d:ca:1e:e0:93:ce:2a:e2:09:0b:b3:7a: 72:52:90:8a:af:11:2e:d0:13:3f:fb:1d:4b:12:c7: c8:db:bc:aa:9c:5b:98:ef:a8:a8:85:c7:f4:64:f7: 4c:c8:3d:85:01:0d:65:ad:4f:26:b3:8f:8f:bb:a6: 36:39:0b:92:2e:ff:2d:af:c4:41:4c:e3:99:b6:55: 24:06:91:7d:56:66:30:26:91:2d:a3:0e:af:7b:5c: c5:88:9a:38:a8:b4:22:70:b5:c6:b9:2a:da:94:eb: b9:af:a3:be:54:5c:55:21:aa:0b:01:c5:eb:af:27: 1f:26:36:9c:97:b3:b8:91:ec:ef:f6:e2:0b:a5:35: 79:10:5e:2e:90:ef:2a:55:ff:4c:27:e2:af:46:72: ef:53:a6:92:bf:26:91:fb:c1:e2:61:bd:e8:d0:79: f3:9d:e2:60:04:35:43:08:8f:58:36:bb:7f:40:bd: 88:58:fa:10:1f:63:75:9a:af:c8:3f:cf:a7:05:db: 61:5f:f4:9f:c2:46:b5:8f:e1:92:2b:52:2c:16:89: d2:f0:8b:3d:6d:5c:76:47:32:4a:0c:5c:31:7f:52: 52:d5:22:de:65:c0:5a:b6:39:fd:23:2c:3f:7b:9b: 80:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:D8:FD:E9:C9:0D:CB:FA:06:DC:3C:AF:6B:2A:E7:E0:63:26:54:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/ffdf5012-2d06-3fc2-8e1a-21edbc4b1f1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl X509v3 Authority Key Identifier: keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer sbgp-ipAddrBlock: critical IPv6: 2001:468:1f11::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:16:1d:e8:3b:b7:6f:d6:b3:ff:6a:9c:50:5d:57:fe:0e:0a: 74:24:08:98:cb:6d:88:e1:2b:20:f8:51:b9:c1:92:a6:bc:1e: 51:43:1f:9f:a0:92:74:05:c7:cf:c5:f0:7e:27:ba:e3:be:16: 0e:d1:ef:23:cd:7f:39:80:fe:7d:06:69:10:64:33:c8:e1:79: f8:a4:42:0a:0b:04:9e:70:98:a6:e8:10:b5:57:75:4d:f4:23: 73:a5:7a:4f:16:26:e5:84:3e:2a:d1:42:14:6f:4b:7c:8a:bd: 31:6c:66:51:71:89:d0:8a:31:75:61:6b:f4:e6:7a:e6:52:6d: 8a:9c:84:8e:92:cc:52:f6:8d:ed:e4:ea:7f:88:eb:9b:19:17: 6e:db:cd:e7:0b:45:25:24:fa:a9:ed:4c:fc:ab:ea:94:17:27: c5:4e:b3:ab:7f:dc:a9:9d:98:ca:44:86:65:e8:8b:9b:03:02: ac:ec:13:0e:5d:e4:78:87:aa:7d:3f:af:2e:18:cf:f1:1d:65: 56:b9:23:e8:3c:25:8a:08:d6:b3:ec:03:a5:45:4b:54:97:45: 35:59:43:02:23:ea:52:a4:1e:c1:ce:74:54:d4:96:3f:00:47: 7d:ab:3f:d6:82:c5:c0:3e:6b:a0:94:62:9d:29:e0:78:e9:8a: d7:a4:a4:16 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnCCg5rvp4bOMBX14AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODRlZTMzN2MtNDJjNy00MjA3LWI5MTYtNTAyOGM4YzYy ZjgyMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk ZmQ3NGVhNjgtYjhhZS00ZDQ2LWIyODEtODkwZTg2Nzg2ZmI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAk5E3A0tdT1jA7GOS04ynuNyh7gk84q4gkL s3pyUpCKrxEu0BM/+x1LEsfI27yqnFuY76iohcf0ZPdMyD2FAQ1lrU8ms4+Pu6Y2 OQuSLv8tr8RBTOOZtlUkBpF9VmYwJpEtow6ve1zFiJo4qLQicLXGuSralOu5r6O+ VFxVIaoLAcXrrycfJjacl7O4kezv9uILpTV5EF4ukO8qVf9MJ+KvRnLvU6aSvyaR +8HiYb3o0HnzneJgBDVDCI9YNrt/QL2IWPoQH2N1mq/IP8+nBdthX/Sfwka1j+GS K1IsFonS8Is9bVx2RzJKDFwxf1JS1SLeZcBatjn9Iyw/e5uAVQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPzY/enJDcv6Btw8r2sq5+BjJlQlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVl MzM3Yy00MmM3LTQyMDctYjkxNi01MDI4YzhjNjJmODIvZmZkZjUwMTItMmQwNi0z ZmMyLThlMWEtMjFlZGJjNGIxZjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODRlZTMzN2MtNDJjNy00MjA3LWI5 MTYtNTAyOGM4YzYyZjgyLzg0ZWUzMzdjLTQyYzctNDIwNy1iOTE2LTUwMjhjOGM2 MmY4Mi5jcmwwHwYDVR0jBBgwFoAUocWrpVSDlo0zNHR8acBfKZbeJfgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVlMzM3Yy00MmM3LTQyMDctYjkxNi01MDI4 YzhjNjJmODIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEaB8R MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH8WHeg7t2/Ws/9qnFBdV/4OCnQkCJjLbYjhKyD4UbnBkqa8HlFD H5+gknQFx8/F8H4nuuO+Fg7R7yPNfzmA/n0GaRBkM8jhefikQgoLBJ5wmKboELVX dU30I3Olek8WJuWEPirRQhRvS3yKvTFsZlFxidCKMXVha/TmeuZSbYqchI6SzFL2 je3k6n+I65sZF27bzecLRSUk+qntTPyr6pQXJ8VOs6t/3KmdmMpEhmXoi5sDAqzs Ew5d5HiHqn0/ry4Yz/EdZVa5I+g8JYoI1rPsA6VFS1SXRTVZQwIj6lKkHsHOdFTU lj8AR32rP9aCxcA+a6CUYp0p4HjpitekpBY= -----END CERTIFICATE-----Generated at Sun May 11 21:09:14 2025 by rpki-client