$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8ddc9e70-2a26-305d-9c7c-35502c9d76c1.roa File: 8ddc9e70-2a26-305d-9c7c-35502c9d76c1.roa (raw, json) Hash identifier: 3dsGQzoZ2BgGIWrMwJGQnGLnH83Jk4TQOsqIEPwkQ6Y= Subject key identifier: 49:1A:3A:9F:4D:EE:66:43:3B:48:19:30:2B:FE:74:3F:29:2D:E6:38 Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Certificate serial: 010D0C9F43285849C20A4261D0102E63B38E9C00 Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8ddc9e70-2a26-305d-9c7c-35502c9d76c1.roa Signing time: Tue 06 May 2025 01:00:47 +0000 ROA not before: Tue 06 May 2025 01:00:47 +0000 ROA not after: Mon 04 Aug 2025 01:00:47 +0000 asID: 11351 IP address blocks: 2600:6000:fcd1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c2:0a:42:61:d0:10:2e:63:b3:8e:9c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Validity Not Before: May 6 01:00:47 2025 GMT Not After : Aug 4 01:00:47 2025 GMT Subject: CN=957b4c35-1c95-4a6c-b4bd-1a338107b8de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:78:e4:2b:4a:ae:d0:b0:4d:2d:ce:ff:ba:a5: 3b:94:93:b2:b5:88:0a:5e:21:18:ee:43:2b:5e:fe: f9:4c:15:d5:84:93:ff:17:30:de:d3:36:d3:eb:f0: f9:f9:7f:db:9b:0f:0c:32:43:2b:4a:3d:db:10:47: 88:d5:aa:b9:fe:63:18:c2:fb:d8:2f:51:6f:bb:0f: 67:25:e4:ea:c7:8d:b8:19:97:2f:8a:3a:ec:a8:46: cc:02:bc:b3:36:57:a7:93:10:22:c2:22:bc:0e:60: 11:cd:dc:d3:8a:e7:88:85:fd:41:33:c9:98:98:d7: 5f:da:28:1f:93:d0:9a:ba:ac:e8:7e:f6:b1:c0:a2: 89:37:bf:72:12:4d:f6:3e:f5:01:4c:93:b5:a7:97: 4a:5e:73:a9:e0:4b:af:a6:fe:6e:0c:df:1c:00:e6: cb:eb:6c:31:66:82:6c:9e:06:20:0e:67:e8:05:5f: d2:08:80:cd:ea:8a:e0:1e:91:13:c4:21:05:77:7a: b0:60:88:61:20:98:21:49:d9:45:6b:19:47:9b:55: c9:71:f9:0d:5a:90:5c:aa:31:33:a2:a3:df:6a:78: 95:52:83:84:1f:c8:ec:95:83:81:38:a9:8c:4c:ca: 77:38:e5:08:f3:81:8e:53:ce:05:b6:2a:85:22:1d: fe:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:1A:3A:9F:4D:EE:66:43:3B:48:19:30:2B:FE:74:3F:29:2D:E6:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8ddc9e70-2a26-305d-9c7c-35502c9d76c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl X509v3 Authority Key Identifier: keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer sbgp-ipAddrBlock: critical IPv6: 2600:6000:fcd1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:77:59:b2:bd:9a:52:a7:32:63:a6:29:44:97:37:88:05:80: a5:43:13:24:b2:00:96:08:5a:47:f8:18:61:4e:38:38:0d:a8: 11:de:d6:13:26:ee:06:e4:69:64:11:2c:d0:7c:ad:ef:ba:a5: fc:29:14:16:e1:e2:70:9e:17:0d:16:bd:0e:19:3d:36:35:67: 56:5e:9c:3e:f9:02:88:09:2e:d2:1b:a5:87:c7:35:3c:98:76: 92:20:a2:c9:08:95:b2:91:1f:78:2d:5f:40:cd:79:e7:69:2d: 69:14:2f:77:98:c4:9b:01:7a:12:5e:2d:2c:1c:3b:74:a7:36: 36:10:d5:fc:13:b0:97:27:37:b4:30:aa:da:88:c8:f9:30:f0: 46:6f:9a:68:a4:01:f9:b5:05:50:c8:36:e2:4c:11:66:30:1a: bd:3f:96:aa:47:f7:9e:71:47:a4:a7:ce:08:46:e1:9f:83:70: be:c2:32:58:61:59:5b:a4:61:ca:42:dc:ff:c4:d9:d8:12:da: 63:3c:bb:6c:6e:88:1b:e9:66:5c:0d:f7:66:d3:f2:93:b3:3c: 18:25:82:41:c3:1e:16:d6:e9:2e:8a:30:cf:78:54:c4:f8:38: 12:35:9c:f2:5e:2d:87:a4:9b:eb:b1:c6:69:80:50:4d:39:92: 55:ec:2c:59 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnCCkJh0BAuY7OOnAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4 NDdmMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk OTU3YjRjMzUtMWM5NS00YTZjLWI0YmQtMWEzMzgxMDdiOGRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnjkK0qu0LBNLc7/uqU7lJOytYgKXiEY7kMr Xv75TBXVhJP/FzDe0zbT6/D5+X/bmw8MMkMrSj3bEEeI1aq5/mMYwvvYL1Fvuw9n JeTqx424GZcvijrsqEbMAryzNlenkxAiwiK8DmARzdzTiueIhf1BM8mYmNdf2igf k9CauqzofvaxwKKJN79yEk32PvUBTJO1p5dKXnOp4Euvpv5uDN8cAObL62wxZoJs ngYgDmfoBV/SCIDN6orgHpETxCEFd3qwYIhhIJghSdlFaxlHm1XJcfkNWpBcqjEz oqPfaniVUoOEH8jslYOBOKmMTMp3OOUI84GOU84FtiqFIh3+kQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEkaOp9N7mZDO0gZMCv+dD8pLeY4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvOGRkYzllNzAtMmEyNi0z MDVkLTljN2MtMzU1MDJjOWQ3NmMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj NmNjZTg0N2YuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgBgAPzR MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAN3WbK9mlKnMmOmKUSXN4gFgKVDEySyAJYIWkf4GGFOODgNqBHe 1hMm7gbkaWQRLNB8re+6pfwpFBbh4nCeFw0WvQ4ZPTY1Z1ZenD75AogJLtIbpYfH NTyYdpIgoskIlbKRH3gtX0DNeedpLWkUL3eYxJsBehJeLSwcO3SnNjYQ1fwTsJcn N7QwqtqIyPkw8EZvmmikAfm1BVDINuJMEWYwGr0/lqpH955xR6SnzghG4Z+DcL7C MlhhWVukYcpC3P/E2dgS2mM8u2xuiBvpZlwN92bT8pOzPBglgkHDHhbW6S6KMM94 VMT4OBI1nPJeLYekm+uxxmmAUE05klXsLFk= -----END CERTIFICATE-----Generated at Sat May 10 13:50:16 2025 by rpki-client