$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/ed0a0ed2-4a87-3201-99f8-4175b62ba154.roa File: ed0a0ed2-4a87-3201-99f8-4175b62ba154.roa (raw, json) Hash identifier: X/49vOfURK270JbTF826urSfK5AKF/0KmuyrGMZv4fc= Subject key identifier: EB:77:B7:04:E7:09:2D:F5:52:54:56:5B:FF:D8:1D:43:70:4F:33:63 Certificate issuer: /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460 Certificate serial: 010D0C9F43285848CB164C78ACBEBA26E048B310 Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/ed0a0ed2-4a87-3201-99f8-4175b62ba154.roa Signing time: Thu 06 Feb 2025 14:00:52 +0000 ROA not before: Thu 06 Feb 2025 14:00:52 +0000 ROA not after: Wed 07 May 2025 13:00:52 +0000 asID: 6621 IP address blocks: 2001:5b0:2600::/40 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cb:16:4c:78:ac:be:ba:26:e0:48:b3:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460 Validity Not Before: Feb 6 14:00:52 2025 GMT Not After : May 7 13:00:52 2025 GMT Subject: CN=04b5790e-00de-4c83-8a38-2d3ebd8d12d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:d4:09:02:95:b2:82:c3:7f:55:a0:fb:fb:5f: e9:0b:9b:35:5b:2b:f6:8a:19:c5:90:cc:5b:80:d9: c5:81:11:83:28:53:8a:6a:e3:f6:76:71:84:87:b8: 2a:d7:4b:c9:3c:4e:ed:51:55:ad:4d:4d:3a:f7:4a: bd:4c:97:46:60:aa:b1:e3:2d:75:4f:66:15:49:27: 16:9e:68:a7:9c:36:11:88:44:df:4f:66:b4:8d:09: 98:be:e2:43:6f:07:26:c6:93:be:da:58:67:85:44: f6:7f:49:38:e8:41:ad:40:c2:95:d8:6a:82:98:f5: e7:6e:81:d9:4e:36:fe:81:93:31:dd:0a:a9:f7:c5: 9b:e0:63:63:e2:cf:e6:f8:b0:7d:f5:9b:8f:a9:b5: b5:b8:48:02:3b:f9:88:2b:ef:0b:5b:e8:c6:ae:32: 1d:65:a0:ab:f2:85:53:f4:43:f9:99:fb:9b:6e:e4: f1:a3:72:4c:17:ff:3a:fa:f0:b9:c2:a4:e2:0f:66: 0e:43:4e:9b:69:b2:79:60:62:15:5e:f3:37:bb:65: 97:88:86:4f:f9:a2:a3:a4:86:97:d9:2d:9e:23:95: 38:74:3c:4d:1d:0d:6c:0a:8a:f7:e7:fc:76:23:95: 88:0a:fe:b1:db:10:3e:ca:cb:01:f7:de:76:23:7d: b2:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:77:B7:04:E7:09:2D:F5:52:54:56:5B:FF:D8:1D:43:70:4F:33:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/ed0a0ed2-4a87-3201-99f8-4175b62ba154.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl X509v3 Authority Key Identifier: keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer sbgp-ipAddrBlock: critical IPv6: 2001:5b0:2600::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:a1:74:ca:e1:8a:6b:25:0d:67:0b:a9:bd:84:59:a5:6f:ed: 6b:ea:4b:90:7c:6b:ea:f7:9d:9b:08:75:28:6f:f4:ef:75:47: a5:72:3a:f7:db:5a:98:48:40:45:a2:c4:24:20:ec:8d:91:9d: 53:cb:df:50:4e:8b:1e:9c:1f:7c:38:0c:40:e3:a9:14:71:e6: 3b:c3:b0:64:1e:e4:69:32:12:b8:f9:e9:b6:37:46:bf:c6:38: 5e:81:bf:00:c4:74:ff:f9:98:45:16:7b:a6:44:e5:4a:9f:99: f4:33:bc:12:c5:ad:b7:db:6a:60:7b:4b:01:ca:2a:fd:ea:c2: ec:96:77:99:5e:a4:11:62:9d:48:3f:3c:71:98:ed:e1:c1:cb: 56:35:96:fb:a5:73:d8:0c:7d:ca:bc:91:f1:e7:04:38:43:d2: 3a:31:2f:a6:8f:a5:48:0e:c9:93:09:78:bf:75:55:72:6d:b3: 94:95:81:91:8c:af:e9:8e:1a:3b:f2:27:63:17:0f:40:16:85: 24:a7:0f:f1:5d:a6:c3:e0:f6:33:03:89:e1:b6:a1:81:23:ec: 65:0c:3f:dc:83:b2:37:e0:31:56:f6:c4:a7:e7:b5:71:09:e0: 46:5e:9e:58:51:51:dc:df:85:62:22:24:03:e4:ca:0a:c8:84: 01:9d:2f:23 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEjLFkx4rL66JuBIsxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDFmODg2ZGYtNmM1OC00ZWE3LTlkMWYtMDY1OWUyMzI0 NDYwMB4XDTI1MDIwNjE0MDA1MloXDTI1MDUwNzEzMDA1MlowLzEtMCsGA1UEAxMk MDRiNTc5MGUtMDBkZS00YzgzLThhMzgtMmQzZWJkOGQxMmQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9QJApWygsN/VaD7+1/pC5s1Wyv2ihnFkMxb gNnFgRGDKFOKauP2dnGEh7gq10vJPE7tUVWtTU0690q9TJdGYKqx4y11T2YVSScW nminnDYRiETfT2a0jQmYvuJDbwcmxpO+2lhnhUT2f0k46EGtQMKV2GqCmPXnboHZ Tjb+gZMx3Qqp98Wb4GNj4s/m+LB99ZuPqbW1uEgCO/mIK+8LW+jGrjIdZaCr8oVT 9EP5mfubbuTxo3JMF/86+vC5wqTiD2YOQ06babJ5YGIVXvM3u2WXiIZP+aKjpIaX 2S2eI5U4dDxNHQ1sCor35/x2I5WICv6x2xA+yssB9952I32yGQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFOt3twTnCS31UlRWW//YHUNwTzNjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4 ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5ZTIzMjQ0NjAvZWQwYTBlZDItNGE4Ny0z MjAxLTk5ZjgtNDE3NWI2MmJhMTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDFmODg2ZGYtNmM1OC00ZWE3LTlk MWYtMDY1OWUyMzI0NDYwL2QxZjg4NmRmLTZjNTgtNGVhNy05ZDFmLTA2NTllMjMy NDQ2MC5jcmwwHwYDVR0jBBgwFoAU3hZRIFaD1ggT5kJFjv0WcO6Hb7swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5 ZTIzMjQ0NjAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAIAEFsCYw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEABqF0yuGKayUNZwupvYRZpW/ta+pLkHxr6vedmwh1KG/073VHpXI6 99tamEhARaLEJCDsjZGdU8vfUE6LHpwffDgMQOOpFHHmO8OwZB7kaTISuPnptjdG v8Y4XoG/AMR0//mYRRZ7pkTlSp+Z9DO8EsWtt9tqYHtLAcoq/erC7JZ3mV6kEWKd SD88cZjt4cHLVjWW+6Vz2Ax9yryR8ecEOEPSOjEvpo+lSA7Jkwl4v3VVcm2zlJWB kYyv6Y4aO/InYxcPQBaFJKcP8V2mw+D2MwOJ4bahgSPsZQw/3IOyN+AxVvbEp+e1 cQngRl6eWFFR3N+FYiIkA+TKCsiEAZ0vIw== -----END CERTIFICATE-----Generated at Mon Apr 7 16:19:32 2025 by rpki-client