$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/c76cf674-7ae1-309b-b202-b2e206711325.roa File: c76cf674-7ae1-309b-b202-b2e206711325.roa (raw, json) Hash identifier: KAMPtEwNePllI2+1cxWeoq7zS9VF0g/Dr4Y5kARjJrE= Subject key identifier: 4A:C0:62:9A:C2:92:CA:EC:F4:C9:07:3E:E0:B9:9D:B1:18:E5:94:A5 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F43285848F65BEA85D60428D43B0C5F80 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/c76cf674-7ae1-309b-b202-b2e206711325.roa Signing time: Sat 22 Feb 2025 02:00:38 +0000 ROA not before: Sat 22 Feb 2025 02:00:38 +0000 ROA not after: Fri 23 May 2025 01:00:38 +0000 asID: 59253 IP address blocks: 2607:f5b5:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f6:5b:ea:85:d6:04:28:d4:3b:0c:5f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Feb 22 02:00:38 2025 GMT Not After : May 23 01:00:38 2025 GMT Subject: CN=4096d7da-fd43-4240-ba3c-1805ed00f57e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f7:47:41:9b:c4:ef:cf:c9:55:c1:be:78:0e: 5b:a5:d9:1e:0e:be:c2:89:b2:02:ef:25:19:aa:65: 8d:ce:9a:ee:32:cd:0a:b6:a1:71:de:70:6c:1a:c6: 7c:ee:df:78:05:f4:f1:e7:74:af:bd:6d:6d:9c:11: cb:46:01:4e:8c:c8:33:37:97:d1:e6:41:10:dc:bc: 7a:0e:e8:da:d6:7d:c5:2d:5d:85:dd:a6:09:a0:92: 6f:63:79:37:6f:dd:4d:b1:43:7d:35:9d:38:7c:06: 59:84:56:34:be:d0:1d:e7:e3:f6:85:ee:fd:d5:cc: cc:37:db:8d:cc:b2:c3:cb:3d:07:1f:a4:9a:30:7c: 7a:54:4f:78:8d:ee:75:e8:c5:56:82:ae:63:d0:ab: 9c:c3:6d:1e:f9:50:ee:3b:aa:e5:72:9a:6d:c2:a1: c5:5d:dd:06:bd:cb:48:a6:5b:98:7b:01:f4:43:33: e9:b6:4c:07:ff:03:68:59:fd:fe:31:6b:b9:59:74: e5:bb:1c:74:21:c3:60:a9:2e:e4:65:77:3e:01:cd: 2e:d9:3f:e5:a8:f1:22:3f:6f:7b:5d:e4:f4:be:06: 47:fa:3c:56:6b:29:a2:e5:1b:8e:9c:f0:dd:1f:dd: 20:aa:44:dc:00:55:2a:37:47:98:f0:3c:76:9e:b5: cb:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:C0:62:9A:C2:92:CA:EC:F4:C9:07:3E:E0:B9:9D:B1:18:E5:94:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/c76cf674-7ae1-309b-b202-b2e206711325.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv6: 2607:f5b5:2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:d3:c9:31:d0:a2:f3:31:b7:58:b8:01:99:61:81:8f:f7:33: 00:ae:11:9a:74:5f:97:6c:22:ec:9a:74:88:b6:eb:2a:1f:70: 23:eb:72:98:3a:f6:70:37:4c:96:82:35:d9:4f:d0:b5:14:7f: cb:73:ac:ca:97:70:d0:c6:8f:a0:22:12:33:fd:8b:9d:7b:ea: 7c:63:20:23:53:3d:36:2b:c8:5f:72:81:93:bd:67:de:22:a9: bb:12:af:d1:0c:4d:37:64:63:66:8c:b8:51:d8:d3:d6:2e:e1: 34:1f:ac:10:a5:e9:4f:cc:3c:90:12:34:86:ff:7a:33:9e:6b: 99:7a:99:d6:c4:52:18:46:4f:40:3a:df:36:94:77:07:14:45: 2e:fb:d5:34:3a:c7:9c:ad:c0:fa:22:a4:83:85:90:97:fc:7e: e3:c8:32:f3:82:c7:9e:29:42:59:c8:c6:48:70:30:5f:58:a0: 76:6c:5f:fc:bd:75:fc:ec:0c:86:c9:cf:95:d2:e6:d0:79:cb: 70:ce:0b:60:a4:45:11:d0:ee:44:8a:5c:d2:83:b0:bd:05:ac: 17:cd:9c:ac:d2:c8:04:41:9c:4e:f7:36:2e:3c:38:59:74:2b: e9:6c:49:e9:ea:67:bb:34:8c:af:55:8f:bf:77:49:0c:6f:d0: 87:a4:ce:55 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj2W+qF1gQo1DsMX4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk NDA5NmQ3ZGEtZmQ0My00MjQwLWJhM2MtMTgwNWVkMDBmNTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2PdHQZvE78/JVcG+eA5bpdkeDr7CibIC7yUZ qmWNzpruMs0KtqFx3nBsGsZ87t94BfTx53SvvW1tnBHLRgFOjMgzN5fR5kEQ3Lx6 Duja1n3FLV2F3aYJoJJvY3k3b91NsUN9NZ04fAZZhFY0vtAd5+P2he791czMN9uN zLLDyz0HH6SaMHx6VE94je516MVWgq5j0Kucw20e+VDuO6rlcpptwqHFXd0GvctI pluYewH0QzPptkwH/wNoWf3+MWu5WXTluxx0IcNgqS7kZXc+Ac0u2T/lqPEiP297 XeT0vgZH+jxWaymi5RuOnPDdH90gqkTcAFUqN0eY8Dx2nrXLLwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFErAYprCksrs9MkHPuC5nbEY5ZSlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvYzc2Y2Y2NzQtN2FlMS0z MDliLWIyMDItYjJlMjA2NzExMzI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf1tQAC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIXTyTHQovMxt1i4AZlhgY/3MwCuEZp0X5dsIuyadIi26yofcCPr cpg69nA3TJaCNdlP0LUUf8tzrMqXcNDGj6AiEjP9i5176nxjICNTPTYryF9ygZO9 Z94iqbsSr9EMTTdkY2aMuFHY09Yu4TQfrBCl6U/MPJASNIb/ejOea5l6mdbEUhhG T0A63zaUdwcURS771TQ6x5ytwPoipIOFkJf8fuPIMvOCx54pQlnIxkhwMF9YoHZs X/y9dfzsDIbJz5XS5tB5y3DOC2CkRRHQ7kSKXNKDsL0FrBfNnKzSyARBnE73Ni48 OFl0K+lsSenqZ7s0jK9Vj793SQxv0IekzlU= -----END CERTIFICATE-----Generated at Fri Apr 4 16:18:21 2025 by rpki-client