$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b07bbdfb-7998-3c03-b442-ceb21f49d205.roa File: b07bbdfb-7998-3c03-b442-ceb21f49d205.roa (raw, json) Hash identifier: pwovvctVdfyZMG8MFnkqQSYnVUexn4JX31Dm87/Hb+I= Subject key identifier: DB:75:0C:F8:76:DB:CC:56:20:B7:2E:CC:80:86:90:3F:1C:46:D5:D0 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C5818E5D9465534ABEF87100 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b07bbdfb-7998-3c03-b442-ceb21f49d205.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 32381 IP address blocks: 2001:4860:1040::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:8e:5d:94:65:53:4a:be:f8:71:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=adc3697d-c824-4982-9b5f-cd0ddb574543 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:91:f7:b0:a9:6c:b5:71:25:fa:4f:5e:03:2f: c5:26:af:ba:c9:a8:4a:d7:b0:09:4b:32:d4:28:bc: 25:e6:35:c6:13:7a:b3:d6:59:fa:e0:c3:9c:9d:cf: 6e:18:75:9d:6b:65:ae:6b:ec:ba:66:ce:01:3a:25: 65:03:4b:10:41:98:77:d9:80:1d:b2:97:18:cb:50: 04:15:e6:5e:06:fd:9b:69:ae:c0:c7:58:a1:0f:1e: 51:3d:fe:06:22:b7:39:ea:b9:d3:21:47:44:7c:80: c0:b3:2b:73:e9:92:ce:81:42:4a:e1:cd:a3:52:06: fd:2f:d5:ab:4c:10:2d:e3:c7:20:72:d1:11:2e:b9: 57:5d:62:30:94:05:aa:75:c7:89:43:37:07:d6:1f: 3b:c9:1a:eb:78:29:28:d6:e2:75:b0:32:14:83:e2: 1b:bf:9a:fa:12:7a:72:6a:be:a1:d4:cc:8b:26:1d: 28:e1:4c:d8:dc:65:17:6a:11:72:31:0a:97:18:13: 01:5a:0c:6b:a0:82:e7:01:3b:b9:28:49:35:07:c8: a2:74:64:4e:2d:48:8e:b4:92:cd:8b:58:41:3a:7a: 1c:d5:aa:17:97:d2:32:db:75:da:3a:1d:2e:be:86: 30:a7:16:be:4a:3b:34:2e:1f:9b:a9:fa:59:42:07: 1c:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:75:0C:F8:76:DB:CC:56:20:B7:2E:CC:80:86:90:3F:1C:46:D5:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b07bbdfb-7998-3c03-b442-ceb21f49d205.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv6: 2001:4860:1040::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:92:f7:30:2c:a6:4a:92:14:00:4e:06:9f:5d:3f:90:2a:91: df:67:c2:eb:10:a4:0c:5c:84:82:51:26:db:e4:16:fb:93:46: 47:b7:23:5d:bf:ae:bc:d4:41:02:41:82:fd:19:9d:4f:08:e0: 81:3c:95:8f:ac:66:b9:2c:c6:ae:be:17:e7:8c:c8:1f:1f:62: 37:59:83:60:33:75:e6:6f:7b:5a:48:36:6d:c7:be:09:33:ea: 0a:1d:3a:f6:f9:8e:ee:53:82:ff:cd:5c:da:e7:e9:8a:43:92: 9b:cc:6f:42:57:fc:b2:80:db:d3:4c:94:4f:12:bf:fb:8d:e6: 1f:2c:fd:3c:55:74:8a:39:94:0d:11:6c:31:82:9d:a3:c5:7b: 0d:22:80:5e:38:2f:c1:02:20:24:3e:ef:0a:90:36:56:c0:33: 0e:3b:33:0d:6c:43:1e:59:f8:f8:c9:33:70:65:3c:16:fb:0b: 9f:c9:94:33:3c:79:3b:a9:7a:01:7c:bb:e3:56:02:31:26:19: 0a:fe:71:5e:d9:43:cf:6b:6c:53:d4:0a:ca:ef:07:74:9e:d2: 08:40:fb:ae:56:12:b2:c4:c3:bf:7b:d3:86:11:72:c8:06:d1: a2:09:90:90:65:d3:21:54:b3:29:31:24:93:82:66:57:fa:e7: 2c:f6:28:59 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjFgY5dlGVTSr74cQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk YWRjMzY5N2QtYzgyNC00OTgyLTliNWYtY2QwZGRiNTc0NTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJH3sKlstXEl+k9eAy/FJq+6yahK17AJSzLU KLwl5jXGE3qz1ln64MOcnc9uGHWda2Wua+y6Zs4BOiVlA0sQQZh32YAdspcYy1AE FeZeBv2baa7Ax1ihDx5RPf4GIrc56rnTIUdEfIDAsytz6ZLOgUJK4c2jUgb9L9Wr TBAt48cgctERLrlXXWIwlAWqdceJQzcH1h87yRrreCko1uJ1sDIUg+Ibv5r6Enpy ar6h1MyLJh0o4UzY3GUXahFyMQqXGBMBWgxroILnATu5KEk1B8iidGROLUiOtJLN i1hBOnoc1aoXl9Iy23XaOh0uvoYwpxa+Sjs0Lh+bqfpZQgccrQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNt1DPh228xWILcuzICGkD8cRtXQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYjA3YmJkZmItNzk5OC0z YzAzLWI0NDItY2ViMjFmNDlkMjA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEIAFIYBBA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIqS9zAspkqSFABOBp9dP5Aqkd9nwusQpAxchIJRJtvkFvuTRke3 I12/rrzUQQJBgv0ZnU8I4IE8lY+sZrksxq6+F+eMyB8fYjdZg2AzdeZve1pINm3H vgkz6godOvb5ju5Tgv/NXNrn6YpDkpvMb0JX/LKA29NMlE8Sv/uN5h8s/TxVdIo5 lA0RbDGCnaPFew0igF44L8ECICQ+7wqQNlbAMw47Mw1sQx5Z+PjJM3BlPBb7C5/J lDM8eTupegF8u+NWAjEmGQr+cV7ZQ89rbFPUCsrvB3Se0ghA+65WErLEw79704YR csgG0aIJkJBl0yFUsykxJJOCZlf65yz2KFk= -----END CERTIFICATE-----Generated at Fri Apr 4 10:03:56 2025 by rpki-client