$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c7921f72-1e1e-3023-a70f-6191483e885e.roa File: c7921f72-1e1e-3023-a70f-6191483e885e.roa (raw, json) Hash identifier: k25SmEU779Qi0lvA8xSLccoUAww0lvwFZyWO4T7gBsA= Subject key identifier: 95:44:AC:E6:90:8D:85:D8:E7:1C:A6:02:00:0A:6E:08:14:DF:53:97 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F432858499DBF2B3B9110BA0BA3427B00 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c7921f72-1e1e-3023-a70f-6191483e885e.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 852 IP address blocks: 2001:56b:400b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:2b:3b:91:10:ba:0b:a3:42:7b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=24753b81-8b2b-4180-9cf0-df037400796a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c3:e2:39:ae:44:52:27:cf:bb:15:11:1a:0c: 77:cd:d8:4c:b4:2b:1b:86:d1:67:1a:82:9e:ea:0d: 1c:68:bc:f0:46:a5:68:c9:a1:ba:6f:7d:5d:7a:6c: e0:06:ec:23:2a:41:9f:e2:a6:10:ae:ff:54:8e:e7: 89:a1:c9:82:40:40:fd:99:3b:d8:57:64:a4:6a:e1: 04:62:d7:a5:7c:3d:14:d9:17:cd:a4:49:9f:76:fd: 9d:6d:bd:39:69:bd:b7:5e:3c:6e:21:f1:38:7f:a6: 66:9e:9a:b8:be:33:a9:15:85:e5:ba:ef:a8:a1:cd: 34:10:18:95:0b:8a:cf:26:48:e4:2a:59:dc:72:4b: 10:1b:96:06:f9:07:51:bc:51:fc:0b:4c:9c:00:36: ec:e9:18:04:eb:91:ee:2b:ee:3f:4a:03:8b:5c:ab: 82:18:93:0b:cf:05:71:00:7c:c8:38:b8:c4:b6:72: 4b:3b:b0:7b:71:8e:4b:c6:f6:5f:c6:63:91:83:03: 10:69:a8:ce:93:02:b7:9a:b3:09:a5:4b:0e:9a:b7: 3c:37:01:73:8f:b8:74:f1:5e:8d:1d:70:ac:cc:0d: c7:4c:5d:c6:6b:d2:92:a1:68:22:d4:ea:b5:4a:17: 2b:dd:ce:7d:63:38:4f:62:63:65:fc:a8:7f:4e:88: 69:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:44:AC:E6:90:8D:85:D8:E7:1C:A6:02:00:0A:6E:08:14:DF:53:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c7921f72-1e1e-3023-a70f-6191483e885e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv6: 2001:56b:400b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:24:0a:78:b6:d7:21:be:dc:ff:07:9d:75:36:bd:e5:4d:30: ac:f6:ce:f2:b9:00:92:87:59:1c:a1:23:0c:41:b6:3a:87:6c: 14:a3:02:31:5f:e5:28:52:42:a9:63:6a:6d:8d:29:77:c5:84: b1:47:51:bb:47:53:5e:a2:ae:d0:ba:76:47:9c:be:76:d2:92: 71:07:a7:24:2b:2f:44:71:70:ee:9a:02:12:49:07:12:70:b8: af:c6:63:ae:b2:c8:75:12:11:17:e6:8e:a0:48:27:b0:d5:6e: 81:ed:18:3f:3c:cc:cc:29:f9:60:22:22:20:33:ee:b1:b6:0a: c7:e4:87:fb:d5:7d:29:28:a5:0c:b1:76:8b:7f:d8:ad:7d:28: 42:36:94:77:1a:0e:5f:60:03:97:4a:42:96:af:9a:1f:ef:65: cb:d0:b3:e9:ca:8d:c7:e5:51:d7:4b:a7:11:f7:51:ad:f4:29: 12:e0:2d:ae:0a:62:fa:72:51:5e:32:07:44:6a:bc:7d:10:ef: 91:7c:95:11:a1:19:83:38:bd:1d:c3:79:62:75:74:b9:69:18: 70:bc:8e:00:f6:9a:ca:57:a2:c7:91:e1:d5:eb:57:45:e5:63: 2a:c6:b5:2b:ce:fa:d0:53:3a:93:d5:8d:83:42:7d:70:6f:2f: e9:d3:fc:21 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmdvys7kRC6C6NCewAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk MjQ3NTNiODEtOGIyYi00MTgwLTljZjAtZGYwMzc0MDA3OTZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMPiOa5EUifPuxURGgx3zdhMtCsbhtFnGoKe 6g0caLzwRqVoyaG6b31demzgBuwjKkGf4qYQrv9UjueJocmCQED9mTvYV2SkauEE YtelfD0U2RfNpEmfdv2dbb05ab23XjxuIfE4f6Zmnpq4vjOpFYXluu+ooc00EBiV C4rPJkjkKlnccksQG5YG+QdRvFH8C0ycADbs6RgE65HuK+4/SgOLXKuCGJMLzwVx AHzIOLjEtnJLO7B7cY5LxvZfxmORgwMQaajOkwK3mrMJpUsOmrc8NwFzj7h08V6N HXCszA3HTF3Ga9KSoWgi1Oq1Shcr3c59YzhPYmNl/Kh/TohptQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJVErOaQjYXY5xymAgAKbggU31OXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYzc5MjFmNzItMWUxZS0z MDIzLWE3MGYtNjE5MTQ4M2U4ODVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFa0AL MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIAkCni21yG+3P8HnXU2veVNMKz2zvK5AJKHWRyhIwxBtjqHbBSj AjFf5ShSQqljam2NKXfFhLFHUbtHU16irtC6dkecvnbSknEHpyQrL0RxcO6aAhJJ BxJwuK/GY66yyHUSERfmjqBIJ7DVboHtGD88zMwp+WAiIiAz7rG2Csfkh/vVfSko pQyxdot/2K19KEI2lHcaDl9gA5dKQpavmh/vZcvQs+nKjcflUddLpxH3Ua30KRLg La4KYvpyUV4yB0RqvH0Q75F8lRGhGYM4vR3DeWJ1dLlpGHC8jgD2mspXoseR4dXr V0XlYyrGtSvO+tBTOpPVjYNCfXBvL+nT/CE= -----END CERTIFICATE-----Generated at Sat May 10 13:25:59 2025 by rpki-client