$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/b8f00c80-28df-3bec-8197-b1c1cd901f79.roa File: b8f00c80-28df-3bec-8197-b1c1cd901f79.roa (raw, json) Hash identifier: NrPAxXdGHQ7eq4ot2LUwsYnPkftkcAtWNkxqDwbd5jY= Subject key identifier: 0B:32:5A:9F:09:F5:E9:76:CB:34:C0:30:35:35:FC:8E:50:18:5A:DF Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F43285848F65BEA91C6831DA5BC48EF80 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/b8f00c80-28df-3bec-8197-b1c1cd901f79.roa Signing time: Sat 22 Feb 2025 02:00:38 +0000 ROA not before: Sat 22 Feb 2025 02:00:38 +0000 ROA not after: Fri 23 May 2025 01:00:38 +0000 asID: 136988 IP address blocks: 2607:f5b5:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f6:5b:ea:91:c6:83:1d:a5:bc:48:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Feb 22 02:00:38 2025 GMT Not After : May 23 01:00:38 2025 GMT Subject: CN=90af20e9-1b2d-4065-9f6d-7de6c140d33d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:50:ea:80:4f:3b:4b:af:9c:e0:69:4c:cc:36: 3a:4d:b8:dc:b7:05:57:be:31:7d:fc:bf:a3:58:8f: ee:cf:b8:3d:c9:43:d6:9b:48:9b:7b:50:3b:95:69: 8e:5a:8e:7d:88:81:18:87:90:dc:db:b9:f3:d4:60: 30:96:19:40:3e:ee:29:10:fd:a6:9b:73:24:ed:72: 88:92:b2:05:90:29:ed:07:d6:c7:76:a0:56:14:f6: ea:a3:1c:9a:4e:f3:bf:02:b3:e8:ab:8b:c8:ba:36: f7:f6:6c:13:d3:f1:f7:66:07:cd:5f:c4:ed:b0:5a: 94:5a:46:7e:5a:9b:d6:aa:5e:a7:b8:1d:2e:9d:93: 22:fd:05:1b:84:25:38:00:ee:6e:a8:a2:57:54:ca: 04:d6:91:1e:30:fb:6a:f3:73:df:89:67:df:fe:2b: 19:85:a0:16:99:be:03:f4:34:af:62:ae:df:1f:35: 05:4d:0c:e7:10:98:40:3a:75:85:2a:52:1c:5d:45: 45:f8:2a:97:58:c6:83:ea:e6:f3:75:62:04:a0:d5: 00:f6:f1:24:26:9a:f1:3f:63:08:0e:ab:4a:18:e5: 1c:78:ba:ce:8b:47:52:6b:54:e0:26:b2:88:42:ce: f1:c2:c5:8e:b5:51:7d:29:70:67:58:81:29:9f:bd: 90:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:32:5A:9F:09:F5:E9:76:CB:34:C0:30:35:35:FC:8E:50:18:5A:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/b8f00c80-28df-3bec-8197-b1c1cd901f79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv6: 2607:f5b5:2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:0b:57:b1:81:3b:6d:87:3b:94:b0:c8:e6:17:b9:8a:ab:6b: c7:d4:54:aa:1d:19:48:be:cb:ef:f4:0f:03:de:2d:75:78:36: 9b:29:9e:ae:d4:71:18:9c:10:66:ca:6e:de:05:69:be:3c:ba: 55:9a:15:83:33:29:ab:70:b0:22:e7:af:8a:88:78:6f:4d:b6: aa:d5:7a:bc:3c:56:91:ce:ea:39:90:e7:21:99:24:fb:0c:6f: df:72:f0:f0:b5:3b:55:79:48:80:cd:45:92:c8:4d:52:5b:ca: 69:08:41:55:85:33:2d:b0:d7:48:3a:30:72:bc:07:ee:27:a0: 75:8c:76:f9:72:74:95:d2:75:9d:ca:49:32:50:dc:13:92:c2: 47:3a:99:9c:b7:fa:09:6b:cc:99:77:4e:e9:74:c5:66:a9:41: a3:88:d8:9b:34:ca:35:6a:da:00:20:df:54:73:fa:9d:98:31: 0b:48:ad:96:d9:88:e0:44:60:43:6c:55:f9:f0:77:b7:20:82: 62:2c:42:12:eb:87:ce:be:ed:9f:4b:09:13:de:68:dd:51:1b: fb:e5:b4:b7:26:96:69:9f:db:3a:0f:51:74:db:60:86:b4:ad: a7:82:da:d1:7b:53:21:6d:e9:7a:eb:bf:c2:f8:25:cf:a1:61: 1b:e6:14:45 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj2W+qRxoMdpbxI74AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk OTBhZjIwZTktMWIyZC00MDY1LTlmNmQtN2RlNmMxNDBkMzNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1DqgE87S6+c4GlMzDY6TbjctwVXvjF9/L+j WI/uz7g9yUPWm0ibe1A7lWmOWo59iIEYh5Dc27nz1GAwlhlAPu4pEP2mm3Mk7XKI krIFkCntB9bHdqBWFPbqoxyaTvO/ArPoq4vIujb39mwT0/H3ZgfNX8TtsFqUWkZ+ WpvWql6nuB0unZMi/QUbhCU4AO5uqKJXVMoE1pEeMPtq83PfiWff/isZhaAWmb4D 9DSvYq7fHzUFTQznEJhAOnWFKlIcXUVF+CqXWMaD6ubzdWIEoNUA9vEkJprxP2MI DqtKGOUceLrOi0dSa1TgJrKIQs7xwsWOtVF9KXBnWIEpn72QrwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAsyWp8J9el2yzTAMDU1/I5QGFrfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvYjhmMDBjODAtMjhkZi0z YmVjLTgxOTctYjFjMWNkOTAxZjc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf1tQAC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACYLV7GBO22HO5SwyOYXuYqra8fUVKodGUi+y+/0DwPeLXV4Npsp nq7UcRicEGbKbt4Fab48ulWaFYMzKatwsCLnr4qIeG9NtqrVerw8VpHO6jmQ5yGZ JPsMb99y8PC1O1V5SIDNRZLITVJbymkIQVWFMy2w10g6MHK8B+4noHWMdvlydJXS dZ3KSTJQ3BOSwkc6mZy3+glrzJl3Tul0xWapQaOI2Js0yjVq2gAg31Rz+p2YMQtI rZbZiOBEYENsVfnwd7cggmIsQhLrh86+7Z9LCRPeaN1RG/vltLcmlmmf2zoPUXTb YIa0raeC2tF7UyFt6Xrrv8L4Jc+hYRvmFEU= -----END CERTIFICATE-----Generated at Fri Apr 4 19:16:16 2025 by rpki-client