$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/08565d01-5f90-39d0-b9b2-6839bb80d5c0.roa File: 08565d01-5f90-39d0-b9b2-6839bb80d5c0.roa (raw, json) Hash identifier: OH7+M+DctFclSDDatlTRuCksxc2vXqxOo9lNAs7Ykcg= Subject key identifier: 2C:DE:2C:B6:12:02:9E:C7:8F:EE:AC:75:DC:0D:87:18:96:61:A1:63 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F43285848F65BEA64C3DCBEFEB3A6AB80 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/08565d01-5f90-39d0-b9b2-6839bb80d5c0.roa Signing time: Sat 22 Feb 2025 02:00:38 +0000 ROA not before: Sat 22 Feb 2025 02:00:38 +0000 ROA not after: Fri 23 May 2025 01:00:38 +0000 asID: 28753 IP address blocks: 2607:f5b5:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f6:5b:ea:64:c3:dc:be:fe:b3:a6:ab:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Feb 22 02:00:38 2025 GMT Not After : May 23 01:00:38 2025 GMT Subject: CN=7aee33f4-8d12-44b5-9e89-6be21b467bac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:51:cc:b9:9a:1a:06:cf:71:cc:09:93:09:96: 6b:24:b5:30:80:16:9d:cf:52:18:ab:2e:f6:13:51: a9:56:2e:9f:76:ab:be:9c:5c:67:84:29:f8:b5:1d: c0:f4:25:3e:63:1c:b5:0d:7f:2a:b5:d1:d5:78:8c: e7:cd:2e:01:78:ee:61:ca:e5:50:28:19:68:e5:71: 7c:b9:a4:fc:9b:59:81:ea:d9:b8:98:8b:19:c4:df: b0:f4:24:ba:f5:9a:ae:a2:cb:c2:c5:4d:97:8d:5b: e6:df:9d:02:2e:e6:4f:19:0d:04:d0:93:b2:40:be: 1d:68:f6:7d:74:c5:a7:5a:cf:00:06:54:be:a6:e9: cf:5a:38:8a:04:05:f0:06:56:76:9b:3c:1c:b0:44: c0:0a:b9:31:f3:f5:80:b1:12:bc:3e:cd:95:36:0a: 9d:9f:0a:31:7d:fb:82:f1:e0:37:49:67:a1:12:61: d4:bf:e1:82:c7:2f:f2:a0:26:cc:72:7b:e2:a5:92: 59:29:0d:81:32:50:89:e2:c3:09:c7:d4:24:3d:dc: d7:6d:15:ee:71:d0:4d:8d:12:1d:74:29:e5:98:47: 4a:ac:5e:44:9f:fe:c7:f8:c9:ef:2c:c6:74:64:6b: 69:fa:56:bc:58:19:68:35:8a:00:74:3e:52:15:9e: f3:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:DE:2C:B6:12:02:9E:C7:8F:EE:AC:75:DC:0D:87:18:96:61:A1:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/08565d01-5f90-39d0-b9b2-6839bb80d5c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv6: 2607:f5b5:2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:2d:e5:45:b2:6a:88:3f:fb:1d:bf:78:bd:3e:a5:cd:3c:d0: dc:48:74:69:57:3f:6e:cd:43:b7:6d:3d:0f:f8:e4:4f:2c:6b: 84:33:2a:91:0e:07:0f:96:7d:1c:35:42:7a:03:2d:71:e9:01: f1:67:0f:ff:1b:b8:4f:4a:d6:6c:6a:95:2e:98:6c:8f:2c:2f: 5d:97:e5:cb:93:cb:06:c8:fc:93:32:6c:c1:c6:7f:41:98:8a: 70:ff:70:c1:56:c3:1c:eb:92:0b:f7:77:e1:bb:62:1b:5c:cb: 9c:78:c7:40:c7:35:5a:60:da:db:c6:4d:9b:b3:4a:c3:c3:21: 1f:15:0d:7e:e7:35:41:1a:a8:c9:50:42:2a:53:bf:c5:dc:16: 03:13:2e:cf:01:b7:d6:27:75:d8:a0:d3:e9:a9:27:a8:23:68: 1e:71:93:28:29:e1:75:9b:55:ea:57:b9:42:15:d3:be:ae:bd: 32:8d:26:01:29:1a:5f:61:6c:f5:08:97:60:0f:4f:9a:23:b2: b6:db:3e:a4:a0:8d:86:09:21:d7:17:36:7c:65:df:4c:77:1b: 5f:b4:f2:e2:64:23:56:d0:fd:d1:21:77:51:bc:12:f6:a9:19: dc:df:82:a1:d4:da:e7:1e:4c:a5:d0:29:f0:bf:f5:28:e5:b2: c4:ea:5b:37 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj2W+pkw9y+/rOmq4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk N2FlZTMzZjQtOGQxMi00NGI1LTllODktNmJlMjFiNDY3YmFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVHMuZoaBs9xzAmTCZZrJLUwgBadz1IYqy72 E1GpVi6fdqu+nFxnhCn4tR3A9CU+Yxy1DX8qtdHVeIznzS4BeO5hyuVQKBlo5XF8 uaT8m1mB6tm4mIsZxN+w9CS69ZquosvCxU2XjVvm350CLuZPGQ0E0JOyQL4daPZ9 dMWnWs8ABlS+punPWjiKBAXwBlZ2mzwcsETACrkx8/WAsRK8Ps2VNgqdnwoxffuC 8eA3SWehEmHUv+GCxy/yoCbMcnvipZJZKQ2BMlCJ4sMJx9QkPdzXbRXucdBNjRId dCnlmEdKrF5En/7H+MnvLMZ0ZGtp+la8WBloNYoAdD5SFZ7zFQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCzeLLYSAp7Hj+6sddwNhxiWYaFjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvMDg1NjVkMDEtNWY5MC0z OWQwLWI5YjItNjgzOWJiODBkNWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf1tQAC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALkt5UWyaog/+x2/eL0+pc080NxIdGlXP27NQ7dtPQ/45E8sa4Qz KpEOBw+WfRw1QnoDLXHpAfFnD/8buE9K1mxqlS6YbI8sL12X5cuTywbI/JMybMHG f0GYinD/cMFWwxzrkgv3d+G7Yhtcy5x4x0DHNVpg2tvGTZuzSsPDIR8VDX7nNUEa qMlQQipTv8XcFgMTLs8Bt9Ynddig0+mpJ6gjaB5xkygp4XWbVepXuUIV076uvTKN JgEpGl9hbPUIl2APT5ojsrbbPqSgjYYJIdcXNnxl30x3G1+08uJkI1bQ/dEhd1G8 EvapGdzfgqHU2uceTKXQKfC/9SjlssTqWzc= -----END CERTIFICATE-----Generated at Fri Apr 4 16:04:45 2025 by rpki-client