$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/5fb6268b-1b5f-37cd-b9da-8c5d80e369d1.roa File: 5fb6268b-1b5f-37cd-b9da-8c5d80e369d1.roa (raw, json) Hash identifier: i8Y8c3WX3Sjg+tt9enVKTypAnCSDoEsOSy8zq6WCy3M= Subject key identifier: 9E:C1:0B:7F:5A:D6:4D:CB:E5:5D:40:B1:C3:45:3A:13:60:59:2F:23 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F43285848CE7588E1A1BD83CD00B09D00 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/5fb6268b-1b5f-37cd-b9da-8c5d80e369d1.roa Signing time: Fri 07 Feb 2025 19:00:14 +0000 ROA not before: Fri 07 Feb 2025 19:00:14 +0000 ROA not after: Thu 08 May 2025 18:00:14 +0000 asID: 8070 IP address blocks: 2605:4300:3611::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Feb 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ce:75:88:e1:a1:bd:83:cd:00:b0:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Feb 7 19:00:14 2025 GMT Not After : May 8 18:00:14 2025 GMT Subject: CN=cf1e9230-8482-4814-bccf-a19c0a8bbdca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:2f:09:27:43:67:7d:eb:1c:f1:90:9b:20:18: e8:99:e7:67:b6:47:dc:85:5b:11:cf:48:d3:31:47: b1:4d:cc:18:90:db:fa:4a:d9:71:18:47:1b:10:30: ce:cc:42:29:b2:ba:ce:87:82:db:ed:66:e5:aa:c3: 2c:03:e0:22:f2:ce:86:ea:03:a4:43:dc:fa:cb:0f: aa:e0:d4:63:d9:1d:ef:ec:0f:78:03:5b:40:5c:b6: 8b:99:33:6c:78:17:de:fa:5d:06:ca:6d:02:04:ed: 0a:ab:39:1f:c7:3b:dc:3a:87:23:93:b8:76:0d:17: 94:24:5e:77:e0:05:fb:26:0f:ca:6e:93:26:e2:a7: 64:86:b4:0c:4a:c1:3f:d9:82:57:27:b8:e8:4d:3b: 9c:90:9b:43:b4:98:3b:88:70:4c:80:68:ea:8e:fc: 74:75:10:99:dd:f9:b7:ab:da:84:c5:01:22:e6:d6: 2d:d4:10:e4:58:e5:ab:bf:18:a1:34:c8:fb:ba:81: 46:66:82:2a:1a:57:18:3c:37:5f:6e:33:17:88:7f: 38:8b:cb:b8:f2:54:43:f1:26:3a:26:d6:51:2f:08: 97:fa:24:45:04:1c:22:b7:95:96:c0:1d:e2:5b:2c: 88:04:70:65:5b:c7:e7:56:87:dd:5c:07:9d:ff:d7: 8e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:C1:0B:7F:5A:D6:4D:CB:E5:5D:40:B1:C3:45:3A:13:60:59:2F:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/5fb6268b-1b5f-37cd-b9da-8c5d80e369d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv6: 2605:4300:3611::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:98:80:b9:90:eb:af:74:97:ee:cf:e4:b4:36:87:c0:e7:c1: 56:93:d3:73:1c:57:ea:1a:e3:b4:69:ff:74:f1:12:dd:14:7f: e2:8e:83:f2:46:03:90:2b:3a:04:31:f8:cf:b2:5a:0d:c5:8e: 5d:4b:e0:f5:69:ec:02:17:d9:c9:55:f1:38:67:27:7d:db:f2: 66:6f:2e:ae:69:ad:e4:b4:25:18:e2:b1:d6:3e:96:a4:ec:eb: 71:ea:e2:18:1b:d7:5f:3f:0c:60:ae:58:a2:9f:c9:6c:db:06: d6:62:02:c8:de:05:e1:95:5d:6a:a7:57:f6:37:14:bd:ed:e3: ef:42:2f:e8:ef:b7:a4:9a:44:c8:19:98:c7:ef:06:26:3a:07: 26:1c:89:8a:1a:d5:ec:2d:74:6c:40:06:53:02:41:b8:69:37: 7d:eb:7f:48:e0:bb:7f:2b:b9:62:64:44:4e:03:55:3e:6a:d6: 06:98:c0:2b:c3:32:2d:f6:44:13:fa:46:e0:6b:4e:66:7b:cc: 0d:bf:6b:b4:f5:b7:45:bd:aa:e1:bb:56:06:7e:17:91:23:fc: 68:94:2a:27:fc:5f:b3:f4:0d:32:78:37:da:8a:f2:09:74:d7: ee:8b:12:8b:a9:ac:85:ed:14:3b:20:56:ec:ef:ab:dd:b6:08: ec:e7:06:0d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjOdYjhob2DzQCwnQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDIwNzE5MDAxNFoXDTI1MDUwODE4MDAxNFowLzEtMCsGA1UEAxMk Y2YxZTkyMzAtODQ4Mi00ODE0LWJjY2YtYTE5YzBhOGJiZGNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiC8JJ0Nnfesc8ZCbIBjomedntkfchVsRz0jT MUexTcwYkNv6StlxGEcbEDDOzEIpsrrOh4Lb7WblqsMsA+Ai8s6G6gOkQ9z6yw+q 4NRj2R3v7A94A1tAXLaLmTNseBfe+l0Gym0CBO0KqzkfxzvcOocjk7h2DReUJF53 4AX7Jg/KbpMm4qdkhrQMSsE/2YJXJ7joTTuckJtDtJg7iHBMgGjqjvx0dRCZ3fm3 q9qExQEi5tYt1BDkWOWrvxihNMj7uoFGZoIqGlcYPDdfbjMXiH84i8u48lRD8SY6 JtZRLwiX+iRFBBwit5WWwB3iWyyIBHBlW8fnVofdXAed/9eOGQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJ7BC39a1k3L5V1AscNFOhNgWS8jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvNWZiNjI2OGItMWI1Zi0z N2NkLWI5ZGEtOGM1ZDgwZTM2OWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgVDADYR MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALCYgLmQ6690l+7P5LQ2h8DnwVaT03McV+oa47Rp/3TxEt0Uf+KO g/JGA5ArOgQx+M+yWg3Fjl1L4PVp7AIX2clV8ThnJ33b8mZvLq5preS0JRjisdY+ lqTs63Hq4hgb118/DGCuWKKfyWzbBtZiAsjeBeGVXWqnV/Y3FL3t4+9CL+jvt6Sa RMgZmMfvBiY6ByYciYoa1ewtdGxABlMCQbhpN33rf0jgu38ruWJkRE4DVT5q1gaY wCvDMi32RBP6RuBrTmZ7zA2/a7T1t0W9quG7VgZ+F5Ej/GiUKif8X7P0DTJ4N9qK 8gl01+6LEouprIXtFDsgVuzvq922COznBg0= -----END CERTIFICATE-----Generated at Wed Feb 19 20:43:29 2025 by rpki-client