$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/998dfc67-1e75-3c43-a0fc-c512e0f3477c.roa File: 998dfc67-1e75-3c43-a0fc-c512e0f3477c.roa (raw, json) Hash identifier: uX8EjDfEgyT/JLkRLwkrjQR4BomBpWpwmvcPTKTG5sI= Subject key identifier: 50:81:EA:E4:6D:EF:13:40:86:C2:3C:01:50:17:82:EF:70:42:49:2A Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F43285848F65BEB090AE7C4BE11613A80 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/998dfc67-1e75-3c43-a0fc-c512e0f3477c.roa Signing time: Sat 22 Feb 2025 02:00:38 +0000 ROA not before: Sat 22 Feb 2025 02:00:38 +0000 ROA not after: Fri 23 May 2025 01:00:38 +0000 asID: 60781 IP address blocks: 2607:f5b5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f6:5b:eb:09:0a:e7:c4:be:11:61:3a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Feb 22 02:00:38 2025 GMT Not After : May 23 01:00:38 2025 GMT Subject: CN=91cd994f-1cba-4acf-af5b-033eeb6aa145 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:6f:b0:08:fc:79:9e:8d:b1:7c:53:91:92:53: 1f:5f:53:60:51:5b:c2:9b:5a:ae:dc:ca:e4:65:db: 0d:80:96:0a:21:57:17:1b:66:74:ef:71:37:f6:f9: 00:ec:cf:5c:37:0a:1e:45:24:55:70:f1:ba:08:dc: 20:70:9e:3b:8c:2a:d7:45:a1:a8:95:f4:9e:cc:e6: 28:9d:25:f6:59:66:9d:3c:32:8b:df:a9:12:8e:70: 39:40:72:42:0f:fe:d5:b3:c1:af:65:5f:bb:9c:35: 33:43:d6:ab:b1:3b:05:5f:2f:21:05:86:07:b7:f3: d4:3a:62:f6:21:88:16:b6:10:81:5e:00:9e:e7:39: 41:ea:0e:62:50:ec:43:6a:d4:1e:69:be:b6:5c:50: 37:69:7e:bb:b4:1a:10:07:e8:b1:36:59:ad:a9:1e: ab:8e:11:b7:dd:ab:93:a2:4b:54:2f:96:20:53:1b: 42:41:0a:55:00:56:0d:de:9e:3a:75:4d:28:57:91: d8:d4:b7:0d:97:79:03:08:c8:0a:ae:da:3e:d7:a1: 71:04:bc:9b:3d:d7:bc:42:23:bd:d6:40:c9:4a:11: 8f:73:0c:db:02:e0:ca:d1:79:b0:61:8a:63:0b:fc: da:65:70:41:b6:b1:ee:87:8b:2f:95:5b:ad:26:b7: 06:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:81:EA:E4:6D:EF:13:40:86:C2:3C:01:50:17:82:EF:70:42:49:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/998dfc67-1e75-3c43-a0fc-c512e0f3477c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv6: 2607:f5b5::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:9a:cf:08:0a:3b:52:58:c8:58:3a:65:54:34:ef:c3:8a:0f: 5b:82:31:4f:02:71:f5:3c:35:77:7c:af:a3:95:9c:be:9b:9e: e6:1d:89:20:79:ab:14:d5:61:89:54:e7:b1:96:56:36:e4:41: 53:ab:d6:1d:e6:2b:5d:98:e6:82:d2:1b:29:a4:bd:a8:af:ee: 3b:fe:c2:16:cb:39:f7:db:4b:9f:4e:2d:c6:77:a5:c0:87:47: 95:5f:dc:a0:1a:87:7f:86:b2:59:22:a3:bd:89:03:69:9e:40: b4:66:21:8c:81:50:5d:36:91:50:c7:92:4e:22:8d:d8:cb:89: 2d:1d:b5:67:e7:93:6e:3b:45:f3:43:71:31:42:31:de:07:c6: b7:c7:85:e7:7a:e1:a4:6a:04:04:57:0d:45:49:e8:0c:38:2b: 41:16:1e:b4:17:3e:c0:64:46:89:d5:43:ab:b5:39:93:bc:b7: a8:00:79:0a:a4:e8:d2:49:71:4e:2a:08:01:c0:23:ef:56:95: b9:d3:ac:02:cf:b4:28:ff:d4:19:1b:dc:10:1e:9f:8a:4e:5e: cf:e2:9f:19:a7:8e:80:cc:46:ad:06:10:25:cc:8d:70:01:d6: 6f:72:0a:51:67:fb:06:c6:80:9a:57:df:c1:6f:60:1c:1f:31: d1:cc:80:51 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj2W+sJCufEvhFhOoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk OTFjZDk5NGYtMWNiYS00YWNmLWFmNWItMDMzZWViNmFhMTQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgW+wCPx5no2xfFORklMfX1NgUVvCm1qu3Mrk ZdsNgJYKIVcXG2Z073E39vkA7M9cNwoeRSRVcPG6CNwgcJ47jCrXRaGolfSezOYo nSX2WWadPDKL36kSjnA5QHJCD/7Vs8GvZV+7nDUzQ9arsTsFXy8hBYYHt/PUOmL2 IYgWthCBXgCe5zlB6g5iUOxDatQeab62XFA3aX67tBoQB+ixNlmtqR6rjhG33auT oktUL5YgUxtCQQpVAFYN3p46dU0oV5HY1LcNl3kDCMgKrto+16FxBLybPde8QiO9 1kDJShGPcwzbAuDK0XmwYYpjC/zaZXBBtrHuh4svlVutJrcGQQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFCB6uRt7xNAhsI8AVAXgu9wQkkqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvOTk4ZGZjNjctMWU3NS0z YzQzLWEwZmMtYzUxMmUwZjM0NzdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf1tQAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGSazwgKO1JYyFg6ZVQ078OKD1uCMU8CcfU8NXd8r6OVnL6bnuYd iSB5qxTVYYlU57GWVjbkQVOr1h3mK12Y5oLSGymkvaiv7jv+whbLOffbS59OLcZ3 pcCHR5Vf3KAah3+Gslkio72JA2meQLRmIYyBUF02kVDHkk4ijdjLiS0dtWfnk247 RfNDcTFCMd4HxrfHhed64aRqBARXDUVJ6Aw4K0EWHrQXPsBkRonVQ6u1OZO8t6gA eQqk6NJJcU4qCAHAI+9WlbnTrALPtCj/1Bkb3BAen4pOXs/inxmnjoDMRq0GECXM jXAB1m9yClFn+wbGgJpX38FvYBwfMdHMgFE= -----END CERTIFICATE-----Generated at Fri Apr 4 15:58:44 2025 by rpki-client