$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8c79eb35-e872-3979-b035-495536e08150.roa File: 8c79eb35-e872-3979-b035-495536e08150.roa (raw, json) Hash identifier: w4oAPsUu277jUDGe2/f2qaJ2KmFKZUAMZjTjr+Oos6A= Subject key identifier: D9:FB:28:F5:86:98:DD:2A:E0:5E:6B:C9:5C:41:63:A2:53:B5:BB:C2 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A4BB78FB8F98A81605C785D0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8c79eb35-e872-3979-b035-495536e08150.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 396982 IP address blocks: 2600:1901:fff0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:78:fb:8f:98:a8:16:05:c7:85:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=65d9e80c-3cce-480b-b5bb-3b4cf7b903c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b1:71:dd:66:b3:02:6f:df:74:be:7a:6d:c2: 21:91:fb:6d:85:ea:aa:cf:6f:b6:55:cd:4b:a0:5a: 31:de:13:8b:d9:4a:b9:8b:3f:8a:4d:9d:8b:09:79: b3:b9:e9:d7:70:fe:68:4b:27:65:ef:94:9f:34:9e: 81:ea:1f:a4:da:b2:41:31:99:10:68:03:fc:68:68: 6b:85:25:7c:c3:a7:db:fb:92:04:8c:b7:70:d5:60: b4:14:eb:69:0b:af:04:07:9c:ce:f4:f7:d3:14:57: e8:4f:69:45:ce:72:c4:ea:6a:4b:dc:4f:46:78:65: 95:1b:de:b7:e3:b1:1f:1c:a7:e1:bb:38:3b:7e:48: eb:4a:ff:68:86:12:77:3c:63:87:07:33:9f:37:53: 00:50:ae:93:a8:b5:42:9c:26:2f:18:61:dd:78:b4: ef:de:1e:b8:aa:00:3d:35:ea:95:c4:11:59:68:b9: 21:c7:15:40:ca:28:05:e9:4c:09:53:72:8c:02:a8: c7:54:4a:92:c7:a5:fe:0c:40:08:ba:9b:03:ab:59: 83:ba:80:1e:13:78:ec:ad:5b:fa:5e:c7:27:0a:af: 60:97:25:7e:2b:94:c2:42:7f:67:35:ff:a5:84:e4: f7:08:4b:53:e9:79:20:14:bd:db:ba:51:53:65:e6: e1:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:FB:28:F5:86:98:DD:2A:E0:5E:6B:C9:5C:41:63:A2:53:B5:BB:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8c79eb35-e872-3979-b035-495536e08150.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv6: 2600:1901:fff0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:61:af:dc:83:d0:c1:f2:80:69:7a:71:b0:a2:68:92:6d:a7: c0:80:b4:08:e5:95:67:3e:63:30:21:96:f5:b2:e6:e1:75:69: fc:ab:4a:4c:f0:47:70:e5:4d:e2:b8:7c:ee:af:72:0a:40:d6: 6e:40:a9:26:36:0c:bf:f5:54:ed:f0:9a:ed:47:a2:25:0c:6c: 18:b5:15:81:5a:44:53:dc:8e:b6:8a:62:61:c1:16:23:ac:b1: 8f:01:93:f0:65:66:1d:17:46:50:af:4e:6f:1e:f9:04:04:91: 6a:26:9c:7f:07:4b:ea:3a:49:c0:02:49:cb:92:a8:74:38:34: db:9e:cd:06:3f:a8:2b:98:12:47:be:ca:35:a3:4a:49:df:ba: 61:97:a6:d6:62:19:1f:a0:0c:12:c9:6b:69:7d:7b:b4:a1:4b: cc:45:43:99:e6:1e:59:a3:f6:f1:26:85:bc:f5:08:7d:65:1b: a3:5f:96:29:50:6c:2d:e5:69:ac:e7:ab:2e:65:5b:85:a6:ed: 04:f9:61:0d:7c:6e:a4:84:d4:10:97:23:ab:f8:58:c9:b7:cd: 1c:15:fb:6d:71:e7:9b:dd:c3:e4:63:71:ce:75:b1:1c:1c:a5: bc:07:03:29:49:0a:5d:6a:b1:da:86:14:28:68:d3:fe:d6:9f: 97:e3:98:2e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmku3j7j5ioFgXHhdAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NjVkOWU4MGMtM2NjZS00ODBiLWI1YmItM2I0Y2Y3YjkwM2M2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrFx3WazAm/fdL56bcIhkfttheqqz2+2Vc1L oFox3hOL2Uq5iz+KTZ2LCXmzuenXcP5oSydl75SfNJ6B6h+k2rJBMZkQaAP8aGhr hSV8w6fb+5IEjLdw1WC0FOtpC68EB5zO9PfTFFfoT2lFznLE6mpL3E9GeGWVG963 47EfHKfhuzg7fkjrSv9ohhJ3PGOHBzOfN1MAUK6TqLVCnCYvGGHdeLTv3h64qgA9 NeqVxBFZaLkhxxVAyigF6UwJU3KMAqjHVEqSx6X+DEAIupsDq1mDuoAeE3jsrVv6 XscnCq9glyV+K5TCQn9nNf+lhOT3CEtT6XkgFL3bulFTZebhvQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNn7KPWGmN0q4F5ryVxBY6JTtbvCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOGM3OWViMzUtZTg3Mi0z OTc5LWIwMzUtNDk1NTM2ZTA4MTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAZAf/w MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJZhr9yD0MHygGl6cbCiaJJtp8CAtAjllWc+YzAhlvWy5uF1afyr SkzwR3DlTeK4fO6vcgpA1m5AqSY2DL/1VO3wmu1HoiUMbBi1FYFaRFPcjraKYmHB FiOssY8Bk/BlZh0XRlCvTm8e+QQEkWomnH8HS+o6ScACScuSqHQ4NNuezQY/qCuY Eke+yjWjSknfumGXptZiGR+gDBLJa2l9e7ShS8xFQ5nmHlmj9vEmhbz1CH1lG6Nf lilQbC3laaznqy5lW4Wm7QT5YQ18bqSE1BCXI6v4WMm3zRwV+21x55vdw+Rjcc51 sRwcpbwHAylJCl1qsdqGFCho0/7Wn5fjmC4= -----END CERTIFICATE-----Generated at Sun May 4 19:51:03 2025 by rpki-client