$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/d5667a08-d2e1-36ea-b77b-00e8c87c540a.roa File: d5667a08-d2e1-36ea-b77b-00e8c87c540a.roa (raw, json) Hash identifier: 4cDvHHxhzDF+0EUaTOAsFoLVx53YkJYhOdnJUa7B5Tg= Subject key identifier: F4:49:DD:74:B8:7A:1A:7A:37:BA:0F:D3:04:A9:5B:AB:17:79:9F:64 Certificate issuer: /CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3 Certificate serial: 010D0C9F43285848DEA134ACD4483ECE370C5600 Authority key identifier: B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/d5667a08-d2e1-36ea-b77b-00e8c87c540a.roa Signing time: Thu 13 Feb 2025 14:00:50 +0000 ROA not before: Thu 13 Feb 2025 14:00:50 +0000 ROA not after: Wed 14 May 2025 13:00:50 +0000 asID: 21928 IP address blocks: 2607:fb90::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:de:a1:34:ac:d4:48:3e:ce:37:0c:56:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3 Validity Not Before: Feb 13 14:00:50 2025 GMT Not After : May 14 13:00:50 2025 GMT Subject: CN=1c84f6ba-2db4-4f0b-9fe9-9336d763b627 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:82:7e:e6:4c:4f:d2:3c:cd:c0:5b:95:f6:f4: 20:dd:38:a2:2c:0d:2d:63:f6:35:4b:30:38:ca:a8: 06:b7:21:e9:bc:fb:3a:c9:c7:f2:81:90:61:0c:56: fb:03:bb:ae:f0:d5:5f:4f:f7:b8:23:8d:73:a3:f5: 74:f7:d1:da:f1:f7:a1:89:e6:a7:7d:d3:fa:f0:f9: 76:c4:f4:a1:9f:f1:93:aa:85:96:64:25:91:a1:b4: c5:16:8d:09:1b:18:a3:fb:aa:06:0e:94:35:4a:28: 33:ed:4b:e0:b7:ca:2d:43:a0:93:42:dd:6d:40:97: 65:51:17:04:7d:8d:c4:c8:0e:66:d0:ab:ee:65:a1: f4:bb:b9:5c:16:f6:77:d0:94:99:5c:97:02:b4:f0: e5:05:aa:8c:b8:f6:7d:02:5d:2c:c8:e8:31:15:55: 37:7e:4e:87:81:37:e4:95:be:94:17:86:13:98:95: 49:6e:83:b7:bf:b7:9e:c2:57:6a:46:61:d3:8f:4d: 04:f9:6a:e2:df:89:36:98:e6:21:51:2e:59:d5:95: 05:0e:22:f0:6c:65:11:e1:ec:19:29:d9:88:37:f2: d1:34:1f:e9:19:07:c4:a0:32:ee:62:c3:6d:18:c5: a4:fb:10:f5:9f:90:48:13:45:40:1e:c9:9c:f9:ca: 36:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:49:DD:74:B8:7A:1A:7A:37:BA:0F:D3:04:A9:5B:AB:17:79:9F:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/d5667a08-d2e1-36ea-b77b-00e8c87c540a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl X509v3 Authority Key Identifier: keyid:B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer sbgp-ipAddrBlock: critical IPv6: 2607:fb90::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:58:2f:4c:d0:b1:74:3f:f3:fe:e6:8b:71:9b:b5:7a:06:35: a3:23:36:e7:48:3f:13:bd:39:50:6a:27:b5:d4:1b:4c:c4:20: 24:54:bc:c5:60:ce:3e:b6:a1:15:cd:f6:0e:00:53:28:66:7e: bf:d1:ca:89:2f:bf:63:94:eb:2c:f7:7c:47:7f:fa:c9:c4:f4: 29:6e:56:c6:33:3f:c3:79:45:9a:9a:a3:86:b0:33:aa:4d:36: 37:47:88:cd:ac:be:53:89:17:4b:0e:3b:e7:88:a7:04:61:6a: a2:50:af:3c:1e:40:52:ee:b5:60:eb:2f:72:cd:cd:fa:c0:b2: 48:44:7e:b7:12:c4:a4:18:8a:dd:81:cb:35:cf:a4:22:9e:d6: 59:5f:75:b6:4e:53:d9:8d:f3:96:e6:48:49:9f:23:28:0d:d9: 54:d9:a5:41:89:5e:db:5f:19:7c:b0:f2:9a:e6:2c:54:9e:81: 94:17:58:af:cb:68:d8:7d:c1:65:c6:1a:57:5f:0d:c0:1e:f7: 16:4d:93:74:11:c8:4d:6f:a4:67:51:19:81:5a:4c:fc:d9:7a: 9c:55:29:9d:75:82:8a:5c:b5:92:bd:89:db:fb:b4:3b:3e:d0: 33:8e:63:03:b3:e2:e5:65:96:e5:e4:d3:f0:7a:80:4c:9b:06: bd:ef:c5:8c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjeoTSs1Eg+zjcMVgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGUyZjMzNTMtODJiOS00MzJiLWJkOTQtMDAwYmY1Y2Vm MGMzMB4XDTI1MDIxMzE0MDA1MFoXDTI1MDUxNDEzMDA1MFowLzEtMCsGA1UEAxMk MWM4NGY2YmEtMmRiNC00ZjBiLTlmZTktOTMzNmQ3NjNiNjI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnoJ+5kxP0jzNwFuV9vQg3TiiLA0tY/Y1SzA4 yqgGtyHpvPs6ycfygZBhDFb7A7uu8NVfT/e4I41zo/V099Ha8fehieanfdP68Pl2 xPShn/GTqoWWZCWRobTFFo0JGxij+6oGDpQ1Sigz7Uvgt8otQ6CTQt1tQJdlURcE fY3EyA5m0KvuZaH0u7lcFvZ30JSZXJcCtPDlBaqMuPZ9Al0syOgxFVU3fk6HgTfk lb6UF4YTmJVJboO3v7eewldqRmHTj00E+Wri34k2mOYhUS5Z1ZUFDiLwbGUR4ewZ KdmIN/LRNB/pGQfEoDLuYsNtGMWk+xD1n5BIE0VAHsmc+co2OwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPRJ3XS4ehp6N7oP0wSpW6sXeZ9kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTJm MzM1My04MmI5LTQzMmItYmQ5NC0wMDBiZjVjZWYwYzMvZDU2NjdhMDgtZDJlMS0z NmVhLWI3N2ItMDBlOGM4N2M1NDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGUyZjMzNTMtODJiOS00MzJiLWJk OTQtMDAwYmY1Y2VmMGMzLzhlMmYzMzUzLTgyYjktNDMyYi1iZDk0LTAwMGJmNWNl ZjBjMy5jcmwwHwYDVR0jBBgwFoAUtLVsZEY9R+vcpQ7L0HuaM0NVQEUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTJmMzM1My04MmI5LTQzMmItYmQ5NC0wMDBi ZjVjZWYwYzMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf7kDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBaWC9M0LF0P/P+5otxm7V6BjWjIzbnSD8TvTlQaie11BtMxCAkVLzF YM4+tqEVzfYOAFMoZn6/0cqJL79jlOss93xHf/rJxPQpblbGMz/DeUWamqOGsDOq TTY3R4jNrL5TiRdLDjvniKcEYWqiUK88HkBS7rVg6y9yzc36wLJIRH63EsSkGIrd gcs1z6QintZZX3W2TlPZjfOW5khJnyMoDdlU2aVBiV7bXxl8sPKa5ixUnoGUF1iv y2jYfcFlxhpXXw3AHvcWTZN0EchNb6RnURmBWkz82XqcVSmddYKKXLWSvYnb+7Q7 PtAzjmMDs+LlZZbl5NPweoBMmwa978WM -----END CERTIFICATE-----Generated at Sat Apr 5 18:27:07 2025 by rpki-client