$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/ae0ccfe5-813a-30c6-ad89-44f55329642c.roa File: ae0ccfe5-813a-30c6-ad89-44f55329642c.roa (raw, json) Hash identifier: n82zOCiAndq3bTrpy7uwe1gT0nh7iATchE2kGZaABIc= Subject key identifier: 1F:FC:3C:39:26:5E:EB:8B:04:6B:27:3C:3E:34:39:96:77:3F:52:34 Certificate issuer: /CN=a521f5ee-89d2-4088-abb9-f69291655e39 Certificate serial: 010D0C9F43285849194173BC8B0F058D3FD03F80 Authority key identifier: 14:EE:0D:BC:78:58:6F:49:6A:4F:7C:2E:30:4A:4E:11:A9:FE:9B:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/ae0ccfe5-813a-30c6-ad89-44f55329642c.roa Signing time: Thu 06 Mar 2025 14:00:52 +0000 ROA not before: Thu 06 Mar 2025 14:00:52 +0000 ROA not after: Wed 04 Jun 2025 13:00:52 +0000 asID: 25820 IP address blocks: 2607:8700::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/a521f5ee-89d2-4088-abb9-f69291655e39.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/a521f5ee-89d2-4088-abb9-f69291655e39.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:19:41:73:bc:8b:0f:05:8d:3f:d0:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a521f5ee-89d2-4088-abb9-f69291655e39 Validity Not Before: Mar 6 14:00:52 2025 GMT Not After : Jun 4 13:00:52 2025 GMT Subject: CN=ed19848c-97b0-4b99-800d-db8e1ea1ef09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:5e:b2:53:3e:39:f1:50:f1:e7:87:f2:1d:00: ae:0f:98:30:c6:46:03:59:66:89:3b:bc:7b:23:67: ef:7a:87:b2:af:6d:6d:8b:28:e3:24:16:be:b4:1a: 33:94:cd:2e:88:8b:6d:87:2c:f4:51:f6:f9:4c:ca: 3c:2d:a7:b5:b9:3e:a6:e7:1d:04:26:cc:08:e7:64: 93:07:aa:38:5b:d9:d0:aa:d0:d9:9a:72:57:bd:3d: d7:88:a3:27:37:33:2e:47:3b:80:0c:27:42:e0:e0: 51:d5:9e:af:3f:91:54:cf:00:b9:94:bb:05:42:5b: c3:8e:15:09:d6:65:18:10:bc:a3:a5:28:7d:39:f8: 03:69:89:c0:60:ef:6b:7d:ad:4c:f3:ee:27:5f:cf: 17:48:55:70:4c:f0:53:a6:ab:b7:51:99:c7:75:14: 23:49:68:cb:6d:b4:06:96:f2:6c:9b:fa:8f:16:de: 33:ff:c2:23:ea:bd:35:b6:bf:e9:89:55:73:1b:c1: 6a:08:12:fd:3a:51:ab:9d:87:85:a2:fc:7a:d9:fa: 72:f3:80:28:21:97:fb:b1:17:4c:20:e7:da:20:e8: 21:7d:b1:56:a9:1f:5d:1c:82:b5:d3:aa:0e:27:f8: 94:51:de:6a:ea:5f:c8:2e:ed:64:ad:d5:f7:85:95: 29:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:FC:3C:39:26:5E:EB:8B:04:6B:27:3C:3E:34:39:96:77:3F:52:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/ae0ccfe5-813a-30c6-ad89-44f55329642c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/a521f5ee-89d2-4088-abb9-f69291655e39.crl X509v3 Authority Key Identifier: keyid:14:EE:0D:BC:78:58:6F:49:6A:4F:7C:2E:30:4A:4E:11:A9:FE:9B:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39.cer sbgp-ipAddrBlock: critical IPv6: 2607:8700::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:51:fc:bb:3a:15:8f:f2:e9:8b:30:4d:52:cd:95:db:5b:62: e3:a6:8d:10:49:60:34:05:0d:4c:19:d5:54:52:f0:59:24:41: e9:33:b8:67:c2:08:d1:1a:a8:55:c9:fa:20:d9:d6:ee:c2:07: 7e:be:0f:b2:29:9d:fa:f9:6d:a7:da:50:cf:47:ea:22:45:68: e9:b0:24:22:8a:ec:6a:e0:31:18:c0:33:3e:92:62:67:de:d9: c5:c9:78:61:00:af:a6:c6:6c:63:89:b5:06:4e:fc:ea:a0:b2: d1:05:30:40:5d:ce:9a:cc:33:59:4c:75:26:f5:25:b4:d4:1f: 60:cb:e3:5a:30:4d:53:c8:62:9c:3b:f2:8b:22:54:a1:13:73: c7:09:6e:dc:a2:5d:c2:ea:09:47:b3:ff:c4:f2:b3:09:4b:ec: 84:21:58:48:0b:c7:f7:3c:33:06:52:1d:57:e1:ad:aa:75:68: 7a:c9:fc:f2:79:94:b8:0d:14:0d:a4:a0:57:a0:2b:36:97:84: 46:40:4d:ce:b5:c7:42:5d:24:63:84:ed:1e:1d:fa:e8:8a:54: 38:d9:97:37:30:2e:d5:a4:8a:a8:28:8e:58:15:b0:b7:ee:dc: ee:5d:51:2b:3e:25:00:bb:7c:4a:43:0f:20:5b:b1:ac:ba:0e: 8f:8c:5c:98 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkZQXO8iw8FjT/QP4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUyMWY1ZWUtODlkMi00MDg4LWFiYjktZjY5MjkxNjU1 ZTM5MB4XDTI1MDMwNjE0MDA1MloXDTI1MDYwNDEzMDA1MlowLzEtMCsGA1UEAxMk ZWQxOTg0OGMtOTdiMC00Yjk5LTgwMGQtZGI4ZTFlYTFlZjA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhV6yUz458VDx54fyHQCuD5gwxkYDWWaJO7x7 I2fveoeyr21tiyjjJBa+tBozlM0uiItthyz0Ufb5TMo8Lae1uT6m5x0EJswI52ST B6o4W9nQqtDZmnJXvT3XiKMnNzMuRzuADCdC4OBR1Z6vP5FUzwC5lLsFQlvDjhUJ 1mUYELyjpSh9OfgDaYnAYO9rfa1M8+4nX88XSFVwTPBTpqu3UZnHdRQjSWjLbbQG lvJsm/qPFt4z/8Ij6r01tr/piVVzG8FqCBL9OlGrnYeFovx62fpy84AoIZf7sRdM IOfaIOghfbFWqR9dHIK106oOJ/iUUd5q6l/ILu1krdX3hZUpoQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFB/8PDkmXuuLBGsnPD40OZZ3P1I0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hNTIx ZjVlZS04OWQyLTQwODgtYWJiOS1mNjkyOTE2NTVlMzkvYWUwY2NmZTUtODEzYS0z MGM2LWFkODktNDRmNTUzMjk2NDJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTUyMWY1ZWUtODlkMi00MDg4LWFi YjktZjY5MjkxNjU1ZTM5L2E1MjFmNWVlLTg5ZDItNDA4OC1hYmI5LWY2OTI5MTY1 NWUzOS5jcmwwHwYDVR0jBBgwFoAUFO4NvHhYb0lqT3wuMEpOEan+m3MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hNTIxZjVlZS04OWQyLTQwODgtYWJiOS1mNjky OTE2NTVlMzkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgeHADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAeUfy7OhWP8umLME1SzZXbW2Ljpo0QSWA0BQ1MGdVUUvBZJEHpM7hn wgjRGqhVyfog2dbuwgd+vg+yKZ36+W2n2lDPR+oiRWjpsCQiiuxq4DEYwDM+kmJn 3tnFyXhhAK+mxmxjibUGTvzqoLLRBTBAXc6azDNZTHUm9SW01B9gy+NaME1TyGKc O/KLIlShE3PHCW7col3C6glHs//E8rMJS+yEIVhIC8f3PDMGUh1X4a2qdWh6yfzy eZS4DRQNpKBXoCs2l4RGQE3OtcdCXSRjhO0eHfroilQ42Zc3MC7VpIqoKI5YFbC3 7tzuXVErPiUAu3xKQw8gW7Gsug6PjFyY -----END CERTIFICATE-----Generated at Sat Apr 12 15:14:12 2025 by rpki-client