$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/d770de6c-e795-3458-b3fa-76797a8fc14c.roa File: d770de6c-e795-3458-b3fa-76797a8fc14c.roa (raw, json) Hash identifier: mlmenF8F5Uzxm3J0iByNfhSBzfiSueW367Yklrxnt5Q= Subject key identifier: 28:B4:AB:2F:35:B3:C0:29:EE:E5:75:F8:09:B5:E4:AE:D5:92:E3:BC Certificate issuer: /CN=cb48baa8-6c83-45eb-b09b-5fbd1e42c57d Certificate serial: 010D0C9F4328584975444F55C05C1041BA42FCC0 Authority key identifier: E9:36:DC:58:66:FC:68:02:BF:A6:99:DE:B4:DD:13:5E:4C:D1:27:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/d770de6c-e795-3458-b3fa-76797a8fc14c.roa Signing time: Tue 08 Apr 2025 13:00:59 +0000 ROA not before: Tue 08 Apr 2025 13:00:59 +0000 ROA not after: Mon 07 Jul 2025 13:00:59 +0000 asID: 229 IP address blocks: 2001:48a8:68f7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:75:44:4f:55:c0:5c:10:41:ba:42:fc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb48baa8-6c83-45eb-b09b-5fbd1e42c57d Validity Not Before: Apr 8 13:00:59 2025 GMT Not After : Jul 7 13:00:59 2025 GMT Subject: CN=d7f13bba-28b1-4397-b3a4-8d87fcebbb07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:89:f9:18:dc:be:7f:11:47:30:41:f2:16:84: d9:b4:58:34:71:f0:0a:3c:06:23:e2:07:bf:8f:70: 01:4d:44:82:2a:5c:2c:53:f4:6c:29:ac:3e:7e:4f: 24:d1:63:0d:63:ce:89:02:eb:99:4f:7c:06:7e:38: fb:88:9c:74:0e:00:37:fd:96:24:be:e7:f8:1e:20: df:d0:29:2c:e6:86:97:e0:d3:29:a3:a1:d6:e6:b4: e2:e6:85:6f:16:4a:a4:e0:10:e9:8d:d1:4e:02:e3: 42:c0:44:9a:ee:fa:10:fe:12:ce:5b:a5:f9:b5:98: e2:8d:36:8f:f6:b3:c4:5e:30:cf:e9:92:e1:e3:85: 35:40:1d:59:6a:76:55:a9:07:49:af:b7:49:b3:5c: b1:f4:2d:ae:d7:29:b6:2d:46:c6:b4:69:1d:bb:bd: 20:94:ba:69:87:b9:15:79:ae:c7:69:8d:56:b9:fc: 05:eb:ba:5b:08:29:d4:a1:8c:b1:da:20:7a:ca:3b: 93:78:c7:85:75:d2:31:60:3f:c2:82:40:02:f5:6d: 76:ff:83:9c:5d:02:9d:6e:fd:88:b6:1d:7d:d7:b7: 94:8d:eb:e6:17:b8:04:76:d4:33:bd:f1:08:0b:ef: 6e:f2:87:a5:fb:5f:aa:c1:dc:d9:b3:1d:b2:25:4d: d4:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:B4:AB:2F:35:B3:C0:29:EE:E5:75:F8:09:B5:E4:AE:D5:92:E3:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/d770de6c-e795-3458-b3fa-76797a8fc14c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.crl X509v3 Authority Key Identifier: keyid:E9:36:DC:58:66:FC:68:02:BF:A6:99:DE:B4:DD:13:5E:4C:D1:27:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.cer sbgp-ipAddrBlock: critical IPv6: 2001:48a8:68f7::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:09:0e:31:7a:8f:ff:ae:43:1b:32:05:b9:05:b6:1a:33:08: d8:bb:29:0d:61:d9:63:34:2a:c7:4b:5d:2f:1e:19:cd:ff:a2: 05:8d:aa:af:60:20:55:88:47:a3:b1:d3:b5:46:d2:fa:57:16: aa:55:4c:c3:76:f1:5a:f2:54:22:17:c4:92:ba:e7:67:bc:b5: d6:7d:bb:5e:f6:cf:f8:55:71:ad:1b:de:b0:a0:f9:f8:ab:8b: ff:cc:12:2b:4c:1a:a8:73:0b:14:99:1e:6e:d5:d1:4c:d2:ee: de:35:9f:b8:4f:ef:7c:0d:5d:f3:cf:58:39:b6:2e:c8:95:76: df:b8:56:aa:4b:af:77:50:0b:1c:f4:b5:ad:54:98:39:ba:0c: 8d:97:0a:32:de:dc:77:94:6d:77:02:3b:00:3f:e5:23:ce:a0: 15:db:d1:2f:64:5f:2c:6f:c1:db:2c:d1:84:6d:9b:ae:83:5c: 46:ad:7b:76:58:fd:85:7c:67:e0:d4:b7:e8:3a:2d:22:b2:9a: 70:8d:a6:7c:39:57:77:4b:1b:63:69:83:d9:29:8d:73:7e:37: ea:98:93:4b:28:51:3e:e3:00:a0:f2:ed:9a:0b:87:b7:37:74: 48:8f:3e:ae:87:77:53:53:bf:9f:dd:42:10:14:4a:3c:80:7e: 8e:d1:00:94 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEl1RE9VwFwQQbpC/MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0OGJhYTgtNmM4My00NWViLWIwOWItNWZiZDFlNDJj NTdkMB4XDTI1MDQwODEzMDA1OVoXDTI1MDcwNzEzMDA1OVowLzEtMCsGA1UEAxMk ZDdmMTNiYmEtMjhiMS00Mzk3LWIzYTQtOGQ4N2ZjZWJiYjA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYn5GNy+fxFHMEHyFoTZtFg0cfAKPAYj4ge/ j3ABTUSCKlwsU/RsKaw+fk8k0WMNY86JAuuZT3wGfjj7iJx0DgA3/ZYkvuf4HiDf 0Cks5oaX4NMpo6HW5rTi5oVvFkqk4BDpjdFOAuNCwESa7voQ/hLOW6X5tZjijTaP 9rPEXjDP6ZLh44U1QB1ZanZVqQdJr7dJs1yx9C2u1ym2LUbGtGkdu70glLpph7kV ea7HaY1WufwF67pbCCnUoYyx2iB6yjuTeMeFddIxYD/CgkAC9W12/4OcXQKdbv2I th1917eUjevmF7gEdtQzvfEIC+9u8oel+1+qwdzZsx2yJU3UHQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCi0qy81s8Ap7uV1+Am15K7VkuO8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jYjQ4 YmFhOC02YzgzLTQ1ZWItYjA5Yi01ZmJkMWU0MmM1N2QvZDc3MGRlNmMtZTc5NS0z NDU4LWIzZmEtNzY3OTdhOGZjMTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvY2I0OGJhYTgtNmM4My00NWViLWIw OWItNWZiZDFlNDJjNTdkL2NiNDhiYWE4LTZjODMtNDVlYi1iMDliLTVmYmQxZTQy YzU3ZC5jcmwwHwYDVR0jBBgwFoAU6TbcWGb8aAK/ppnetN0TXkzRJ84wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jYjQ4YmFhOC02YzgzLTQ1ZWItYjA5Yi01ZmJk MWU0MmM1N2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIqGj3 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHsJDjF6j/+uQxsyBbkFthozCNi7KQ1h2WM0KsdLXS8eGc3/ogWN qq9gIFWIR6Ox07VG0vpXFqpVTMN28VryVCIXxJK652e8tdZ9u172z/hVca0b3rCg +firi//MEitMGqhzCxSZHm7V0UzS7t41n7hP73wNXfPPWDm2LsiVdt+4VqpLr3dQ Cxz0ta1UmDm6DI2XCjLe3HeUbXcCOwA/5SPOoBXb0S9kXyxvwdss0YRtm66DXEat e3ZY/YV8Z+DUt+g6LSKymnCNpnw5V3dLG2Npg9kpjXN+N+qYk0soUT7jAKDy7ZoL h7c3dEiPPq6Hd1NTv5/dQhAUSjyAfo7RAJQ= -----END CERTIFICATE-----Generated at Sun Apr 20 13:17:39 2025 by rpki-client