$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/a5938fae-5b33-3c98-9a96-6b8adafefa63.roa File: a5938fae-5b33-3c98-9a96-6b8adafefa63.roa (raw, json) Hash identifier: g8zz2vLhrbzipwD5erzGmG+3oJ5ugEcVznD4Z4BKEGo= Subject key identifier: C5:D0:0D:FA:57:E1:03:01:E6:FF:93:8C:56:D6:66:94:F0:56:6A:17 Certificate issuer: /CN=84ee337c-42c7-4207-b916-5028c8c62f82 Certificate serial: 010D0C9F432858498769AD50A14606E8407A9780 Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/a5938fae-5b33-3c98-9a96-6b8adafefa63.roa Signing time: Tue 15 Apr 2025 01:00:47 +0000 ROA not before: Tue 15 Apr 2025 01:00:47 +0000 ROA not after: Mon 14 Jul 2025 01:00:47 +0000 asID: 11537 IP address blocks: 2001:468::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:69:ad:50:a1:46:06:e8:40:7a:97:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82 Validity Not Before: Apr 15 01:00:47 2025 GMT Not After : Jul 14 01:00:47 2025 GMT Subject: CN=5fbd0eeb-f7e4-4b2c-8489-1efe66e5052c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:aa:d5:13:78:7b:cd:16:c0:15:79:ff:67:79: 58:dd:c9:e0:cc:19:95:ab:15:94:aa:c5:cf:51:9f: 9b:84:74:c4:a6:7a:80:57:55:5b:e8:fe:b5:ca:a7: bb:1d:50:e7:0d:30:b0:7c:99:89:ce:7d:24:17:01: 57:75:67:f7:7a:1f:24:3a:cd:c0:98:26:e9:4e:aa: cb:83:37:14:c7:62:45:0b:92:2e:8a:0e:9c:fb:e8: 98:39:b9:2a:f8:ff:55:6c:d9:5e:6a:51:7a:b0:e6: 77:f1:e0:4c:7c:93:5d:eb:b4:fe:17:0d:7f:8e:2e: 64:47:92:4d:20:5d:4b:93:5e:0a:c6:de:e1:0a:80: 87:35:6c:3c:d5:df:af:e7:0c:9f:51:53:da:2f:81: 41:5f:11:62:63:67:2f:ae:31:74:54:f8:86:b7:34: 58:c2:ea:ed:45:64:68:d7:1a:80:ad:d5:15:b2:8e: 23:06:4c:fe:4e:41:f7:be:08:fd:44:82:aa:7a:a3: e0:7c:4a:d8:4b:34:12:1d:c7:c2:44:f2:78:e3:7c: ac:c7:6b:ff:72:c7:a5:fa:eb:49:07:9a:be:1d:f5: 92:f2:1f:1e:f7:b9:4f:38:7e:94:18:4c:67:33:ce: cb:cc:fb:65:e8:e4:ee:34:81:26:65:d1:b8:44:a2: f6:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:D0:0D:FA:57:E1:03:01:E6:FF:93:8C:56:D6:66:94:F0:56:6A:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/a5938fae-5b33-3c98-9a96-6b8adafefa63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl X509v3 Authority Key Identifier: keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer sbgp-ipAddrBlock: critical IPv6: 2001:468::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:e0:27:2e:d6:57:dc:ac:14:28:7c:fa:a3:74:c7:21:ba:f2: 8f:b5:e0:1a:d0:70:56:8e:ea:52:50:be:1a:ec:b0:0a:16:23: 09:d1:e1:09:a5:da:b1:1a:d5:72:27:0b:a6:d3:06:d1:8a:0e: 7c:31:24:75:08:a5:42:66:ab:89:43:59:08:5d:98:f2:42:96: 4e:0d:41:da:aa:83:57:84:68:ea:9e:4b:e2:f0:82:0f:6c:37: 5f:d1:65:82:a5:10:f3:83:a2:83:04:4d:ac:3c:0f:7f:cf:10: 40:6c:34:0e:fc:1d:4e:9c:fe:37:89:8e:7e:d7:a2:50:d0:1f: b8:0d:e7:30:49:7d:46:d8:18:1c:0b:5a:b2:e6:41:ab:15:74: f6:f5:35:27:64:78:b9:77:65:f3:85:19:58:cf:3f:56:23:a3: 7a:13:de:da:58:13:33:df:84:c3:95:40:46:1f:5b:ec:5e:62: 76:42:c0:e2:51:81:a1:b3:9c:44:c5:d5:13:c2:b3:66:8e:72: 21:bf:3b:dd:aa:8f:76:55:4e:39:52:c5:cc:7e:18:65:6e:20: 58:eb:4b:13:2b:c3:f4:ea:be:57:57:91:30:27:2c:c2:bf:2b: f9:32:c8:df:18:5e:c6:31:7d:47:a9:b1:eb:dd:6a:a2:d1:a7: e6:2f:1f:b9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmHaa1QoUYG6EB6l4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODRlZTMzN2MtNDJjNy00MjA3LWI5MTYtNTAyOGM4YzYy ZjgyMB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk NWZiZDBlZWItZjdlNC00YjJjLTg0ODktMWVmZTY2ZTUwNTJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqrVE3h7zRbAFXn/Z3lY3cngzBmVqxWUqsXP UZ+bhHTEpnqAV1Vb6P61yqe7HVDnDTCwfJmJzn0kFwFXdWf3eh8kOs3AmCbpTqrL gzcUx2JFC5Iuig6c++iYObkq+P9VbNlealF6sOZ38eBMfJNd67T+Fw1/ji5kR5JN IF1Lk14Kxt7hCoCHNWw81d+v5wyfUVPaL4FBXxFiY2cvrjF0VPiGtzRYwurtRWRo 1xqArdUVso4jBkz+TkH3vgj9RIKqeqPgfErYSzQSHcfCRPJ443ysx2v/csel+utJ B5q+HfWS8h8e97lPOH6UGExnM87LzPtl6OTuNIEmZdG4RKL2qwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMXQDfpX4QMB5v+TjFbWZpTwVmoXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVl MzM3Yy00MmM3LTQyMDctYjkxNi01MDI4YzhjNjJmODIvYTU5MzhmYWUtNWIzMy0z Yzk4LTlhOTYtNmI4YWRhZmVmYTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODRlZTMzN2MtNDJjNy00MjA3LWI5 MTYtNTAyOGM4YzYyZjgyLzg0ZWUzMzdjLTQyYzctNDIwNy1iOTE2LTUwMjhjOGM2 MmY4Mi5jcmwwHwYDVR0jBBgwFoAUocWrpVSDlo0zNHR8acBfKZbeJfgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVlMzM3Yy00MmM3LTQyMDctYjkxNi01MDI4 YzhjNjJmODIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEaAAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKzgJy7WV9ysFCh8+qN0xyG68o+14BrQcFaO6lJQvhrssAoWIwnR 4Qml2rEa1XInC6bTBtGKDnwxJHUIpUJmq4lDWQhdmPJClk4NQdqqg1eEaOqeS+Lw gg9sN1/RZYKlEPODooMETaw8D3/PEEBsNA78HU6c/jeJjn7XolDQH7gN5zBJfUbY GBwLWrLmQasVdPb1NSdkeLl3ZfOFGVjPP1Yjo3oT3tpYEzPfhMOVQEYfW+xeYnZC wOJRgaGznETF1RPCs2aOciG/O92qj3ZVTjlSxcx+GGVuIFjrSxMrw/TqvldXkTAn LMK/K/kyyN8YXsYxfUepsevdaqLRp+YvH7k= -----END CERTIFICATE-----Generated at Fri Apr 18 01:22:13 2025 by rpki-client