$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/07231d67-9f09-3f69-b773-3c3fa25b3b66.roa File: 07231d67-9f09-3f69-b773-3c3fa25b3b66.roa (raw, json) Hash identifier: 66ANhcRhq1CZX9jTy4antSotmPAkt9f7ZFxhoFY7Dsk= Subject key identifier: 41:35:15:E6:2D:20:F7:1F:1F:96:EE:82:42:9B:E6:D9:DB:C0:22:11 Certificate issuer: /CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d Certificate serial: 010D0C9F43285849088171500C02D728D987F2A4 Authority key identifier: EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/07231d67-9f09-3f69-b773-3c3fa25b3b66.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 64213 IP address blocks: 2001:504:57::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 17 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:71:50:0c:02:d7:28:d9:87:f2:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=f9f4a084-a13a-4d3a-aa87-db98bb5d9a97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:fb:be:c2:4f:a5:32:17:5b:ab:56:20:14:3e: c3:9c:3a:30:a1:94:e4:b2:d9:72:1c:2a:f2:08:fb: 21:18:65:fd:bf:aa:77:f5:e7:56:f0:2c:41:de:ec: 1f:7f:34:f0:0e:ec:1e:f6:a0:50:d6:cf:cb:3a:e7: e2:3b:80:aa:f3:8f:65:d9:30:a1:c8:9d:00:17:1a: 3a:b6:4c:2e:e9:ee:9c:e6:c0:e0:26:34:88:19:e3: e0:48:b2:53:48:c4:83:20:06:74:1c:b7:6b:9d:3f: ec:3a:6f:bc:3b:c6:a2:68:62:e2:10:9e:84:e9:8e: d3:c2:5c:ab:a1:25:f7:8c:b4:c5:25:cd:5e:37:50: be:0a:86:b7:8e:24:50:13:5d:ab:fc:42:98:be:66: 6a:5b:b4:79:e1:95:01:6b:c3:c2:ab:c1:a5:d7:d1: 87:c2:6c:7b:60:06:c9:8d:69:20:17:42:a2:9e:c9: a8:7a:c2:51:e9:23:01:1f:60:ae:cd:2a:9e:39:53: 90:35:87:c5:5f:f2:a4:36:73:46:2b:3b:b7:3d:62: 0a:eb:9c:9f:72:a4:7b:b1:7f:86:23:1f:4a:ef:82: f8:2c:9b:88:6a:c3:4f:01:eb:1b:b1:d0:5f:f9:04: 69:f7:4b:a6:b9:45:91:2a:59:f9:21:2e:bb:2e:8c: 14:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:35:15:E6:2D:20:F7:1F:1F:96:EE:82:42:9B:E6:D9:DB:C0:22:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/07231d67-9f09-3f69-b773-3c3fa25b3b66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.crl X509v3 Authority Key Identifier: keyid:EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer sbgp-ipAddrBlock: critical IPv6: 2001:504:57::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:44:0f:93:e9:a5:39:6f:2a:59:1d:8e:6e:52:88:a1:64:91: c0:b7:8b:57:80:ca:93:97:94:02:95:2c:e4:b9:50:e2:44:61: ed:07:c6:c4:a7:40:5d:28:ac:28:87:d3:f5:8c:3c:63:cd:da: 99:95:6c:b3:f5:19:30:fb:e2:b7:5c:e5:72:f6:63:d1:18:13: 2e:8a:92:af:2c:8f:69:fa:73:b6:5b:31:0e:07:b1:f2:83:e1: 4b:e1:cb:5e:e4:f2:df:a1:8a:24:85:cd:17:e3:42:9a:94:91: 51:4f:13:3b:5d:f4:e4:c2:c7:69:70:b7:43:35:ef:2d:9b:2c: e5:36:71:3f:95:68:1c:06:33:f6:98:8e:09:e7:d5:d8:79:24: ce:59:93:3b:91:9b:61:11:d8:cc:1e:b7:ed:a0:1e:d4:15:3c: bb:90:b8:f3:75:d9:d4:4e:8c:c0:d0:7c:33:82:37:2e:b7:11: ed:5f:09:17:e7:b3:c3:89:57:09:37:69:7a:ed:6b:9f:95:58: 08:6f:b0:76:ed:9c:95:ed:a0:33:e2:c1:1e:8d:f3:4e:92:0d: ab:33:4a:e9:0d:33:a6:1e:4e:d2:07:fc:c1:a8:14:43:27:59: 59:96:95:32:4c:9e:e6:9b:c8:c8:02:60:c7:5a:c7:d6:be:16: a4:8d:9f:4c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkIgXFQDALXKNmH8qQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmMzMDdlNWQtY2ZhNC00MzA0LThiMjktZWYyODlkNGEz ODdkMB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk ZjlmNGEwODQtYTEzYS00ZDNhLWFhODctZGI5OGJiNWQ5YTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvu+wk+lMhdbq1YgFD7DnDowoZTkstlyHCry CPshGGX9v6p39edW8CxB3uwffzTwDuwe9qBQ1s/LOufiO4Cq849l2TChyJ0AFxo6 tkwu6e6c5sDgJjSIGePgSLJTSMSDIAZ0HLdrnT/sOm+8O8aiaGLiEJ6E6Y7Twlyr oSX3jLTFJc1eN1C+Coa3jiRQE12r/EKYvmZqW7R54ZUBa8PCq8Gl19GHwmx7YAbJ jWkgF0KinsmoesJR6SMBH2CuzSqeOVOQNYfFX/KkNnNGKzu3PWIK65yfcqR7sX+G Ix9K74L4LJuIasNPAesbsdBf+QRp90umuUWRKln5IS67LowU2QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEE1FeYtIPcfH5bugkKb5tnbwCIRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iYzMw N2U1ZC1jZmE0LTQzMDQtOGIyOS1lZjI4OWQ0YTM4N2QvMDcyMzFkNjctOWYwOS0z ZjY5LWI3NzMtM2MzZmEyNWIzYjY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmMzMDdlNWQtY2ZhNC00MzA0LThi MjktZWYyODlkNGEzODdkL2JjMzA3ZTVkLWNmYTQtNDMwNC04YjI5LWVmMjg5ZDRh Mzg3ZC5jcmwwHwYDVR0jBBgwFoAU62IHpERFM2GPZDoMLR26uW9u0TwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iYzMwN2U1ZC1jZmE0LTQzMDQtOGIyOS1lZjI4 OWQ0YTM4N2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFBABX MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJdED5PppTlvKlkdjm5SiKFkkcC3i1eAypOXlAKVLOS5UOJEYe0H xsSnQF0orCiH0/WMPGPN2pmVbLP1GTD74rdc5XL2Y9EYEy6Kkq8sj2n6c7ZbMQ4H sfKD4Uvhy17k8t+hiiSFzRfjQpqUkVFPEztd9OTCx2lwt0M17y2bLOU2cT+VaBwG M/aYjgnn1dh5JM5ZkzuRm2ER2Mwet+2gHtQVPLuQuPN12dROjMDQfDOCNy63Ee1f CRfns8OJVwk3aXrta5+VWAhvsHbtnJXtoDPiwR6N806SDaszSukNM6YeTtIH/MGo FEMnWVmWlTJMnuabyMgCYMdax9a+FqSNn0w= -----END CERTIFICATE-----Generated at Wed Apr 16 16:44:42 2025 by rpki-client