$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2dec7a66-03f5-375a-8ca9-c3d778b27743.roa File: 2dec7a66-03f5-375a-8ca9-c3d778b27743.roa (raw, json) Hash identifier: ucg7eQxRuxhjAjcs9829TK2a8aO5uR2yfYAfS8I3m0w= Subject key identifier: 34:21:B8:1F:D8:3A:30:09:A4:00:02:A3:B7:06:29:07:DD:48:D8:E1 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849AE7F3F7826511C7DAC932C80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2dec7a66-03f5-375a-8ca9-c3d778b27743.roa Signing time: Tue 29 Apr 2025 01:00:47 +0000 ROA not before: Tue 29 Apr 2025 01:00:47 +0000 ROA not after: Mon 28 Jul 2025 01:00:47 +0000 asID: 396982 IP address blocks: 2600:1901:81d4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ae:7f:3f:78:26:51:1c:7d:ac:93:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 29 01:00:47 2025 GMT Not After : Jul 28 01:00:47 2025 GMT Subject: CN=7fa6a0a4-8ed9-43ee-a9cc-1535bca91081 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ab:ae:ee:62:60:f0:df:64:c2:fe:6c:27:a5: b4:bb:66:76:a4:7f:65:76:81:cd:e8:f3:bc:c2:3d: 73:1a:8e:64:69:72:42:bc:34:a2:1a:67:47:c8:24: a5:ff:95:71:ab:39:2e:86:ef:13:17:05:f9:17:52: 5f:6a:40:6b:34:2e:9b:af:3f:0a:15:1b:58:42:94: bb:71:08:c2:2e:be:c6:f2:6c:ea:ca:83:6d:86:b4: 16:28:43:46:cb:7f:30:4c:e9:ee:4d:84:c4:13:4d: 2d:e2:34:84:15:4b:e2:12:00:58:65:75:eb:cb:2d: 2a:51:46:60:3b:95:1b:7e:d0:dc:e6:3d:42:d8:19: 9c:f6:c4:c2:33:a9:64:32:69:ec:df:7e:b2:ce:fc: c1:e1:f8:12:37:98:ba:9f:13:91:5e:37:45:35:33: 19:3d:52:8e:37:97:f5:53:5c:e2:1b:e9:50:47:ea: 07:cb:ab:15:55:84:f6:ca:3d:f0:e2:14:89:8c:db: 1c:7c:33:51:ff:d5:3b:cc:cd:d5:6a:38:86:08:d8: b4:00:ff:0f:52:b6:df:ed:91:41:cf:6e:b9:7a:48: 94:47:68:e6:f2:a4:79:14:f4:48:23:0a:02:89:ae: 38:e1:1d:c7:df:86:b1:7f:5b:00:59:6c:bd:c4:2f: 75:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:21:B8:1F:D8:3A:30:09:A4:00:02:A3:B7:06:29:07:DD:48:D8:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2dec7a66-03f5-375a-8ca9-c3d778b27743.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv6: 2600:1901:81d4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:7b:8b:a8:87:97:ea:15:72:d6:c5:db:d3:76:df:5c:cd:fd: 45:88:98:be:a9:3c:1c:4c:f0:98:13:17:4f:20:fc:a4:1d:43: 33:d7:ba:fb:5a:65:5a:1d:84:1e:20:f1:6c:32:2d:c7:6a:d3: 71:9d:e3:2f:76:f4:b4:9b:39:98:3c:76:70:92:55:7c:44:f0: 6d:5d:c4:a6:ab:94:c3:9b:44:3f:cf:a4:fa:d7:b1:fb:66:c4: 17:e3:f7:2f:07:ce:51:b8:a0:ed:01:4e:29:65:19:2d:d4:76: 47:21:d8:96:70:df:fe:de:fc:25:6d:02:fc:03:b8:bd:07:59: cf:76:91:3c:cb:88:78:77:55:46:ce:98:11:6e:c0:26:6b:b9: 53:f0:55:4a:24:8d:7c:27:de:ec:94:92:90:e2:56:a5:57:f7: f0:84:61:a7:42:56:4a:0d:39:47:e8:75:df:48:e6:79:92:71: 63:60:23:42:58:a0:90:4a:ea:65:e2:cf:7b:25:f8:3e:44:02: 61:ca:b4:ed:71:fd:81:15:f2:33:e0:fa:8e:d8:4c:34:c2:72: 81:44:f0:c3:48:3c:bc:2b:00:77:21:61:e8:38:d8:78:8d:09: b5:51:ad:58:ea:00:80:0c:52:e3:41:41:85:45:a1:ad:76:4a: 25:03:f2:00 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmufz94JlEcfayTLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyOTAxMDA0N1oXDTI1MDcyODAxMDA0N1owLzEtMCsGA1UEAxMk N2ZhNmEwYTQtOGVkOS00M2VlLWE5Y2MtMTUzNWJjYTkxMDgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6uu7mJg8N9kwv5sJ6W0u2Z2pH9ldoHN6PO8 wj1zGo5kaXJCvDSiGmdHyCSl/5Vxqzkuhu8TFwX5F1JfakBrNC6brz8KFRtYQpS7 cQjCLr7G8mzqyoNthrQWKENGy38wTOnuTYTEE00t4jSEFUviEgBYZXXryy0qUUZg O5UbftDc5j1C2Bmc9sTCM6lkMmns336yzvzB4fgSN5i6nxORXjdFNTMZPVKON5f1 U1ziG+lQR+oHy6sVVYT2yj3w4hSJjNscfDNR/9U7zM3VajiGCNi0AP8PUrbf7ZFB z265ekiUR2jm8qR5FPRIIwoCia444R3H34axf1sAWWy9xC911QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDQhuB/YOjAJpAACo7cGKQfdSNjhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMmRlYzdhNjYtMDNmNS0z NzVhLThjYTktYzNkNzc4YjI3NzQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAZAYHU MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFV7i6iHl+oVctbF29N231zN/UWImL6pPBxM8JgTF08g/KQdQzPX uvtaZVodhB4g8WwyLcdq03Gd4y929LSbOZg8dnCSVXxE8G1dxKarlMObRD/PpPrX sftmxBfj9y8HzlG4oO0BTillGS3Udkch2JZw3/7e/CVtAvwDuL0HWc92kTzLiHh3 VUbOmBFuwCZruVPwVUokjXwn3uyUkpDiVqVX9/CEYadCVkoNOUfodd9I5nmScWNg I0JYoJBK6mXiz3sl+D5EAmHKtO1x/YEV8jPg+o7YTDTCcoFE8MNIPLwrAHchYeg4 2HiNCbVRrVjqAIAMUuNBQYVFoa12SiUD8gA= -----END CERTIFICATE-----Generated at Sun May 4 19:40:26 2025 by rpki-client