$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/d12e5708-1aaf-3a48-be6d-c36976cf0409.roa File: d12e5708-1aaf-3a48-be6d-c36976cf0409.roa (raw, json) Hash identifier: f12P4ylT72UytzqwdDJoCs0r+0O149m/eWtU4Z2NvoY= Subject key identifier: 50:68:02:C8:0D:2D:83:A1:15:47:25:EE:13:3D:04:EC:3E:24:B1:66 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F43285848F65BEA277EE7B44D05B66600 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/d12e5708-1aaf-3a48-be6d-c36976cf0409.roa Signing time: Sat 22 Feb 2025 02:00:38 +0000 ROA not before: Sat 22 Feb 2025 02:00:38 +0000 ROA not after: Fri 23 May 2025 01:00:38 +0000 asID: 396362 IP address blocks: 2607:f5b5:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f6:5b:ea:27:7e:e7:b4:4d:05:b6:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Feb 22 02:00:38 2025 GMT Not After : May 23 01:00:38 2025 GMT Subject: CN=c5e36a7c-f486-47d9-bc7f-7f1b635d8dc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:6f:3c:ba:cf:af:b3:76:75:18:e4:3f:f3:f5: b1:fe:a8:16:21:8d:d5:42:e3:10:ff:49:2d:7c:c7: 2c:10:36:ea:09:a0:74:a6:5f:97:66:8e:7e:4c:4b: b4:2e:be:6c:c2:4c:be:9e:d9:f6:72:89:84:5a:fa: 89:52:2a:12:08:fd:9a:4e:09:b0:e7:a3:be:2d:0b: 4a:aa:0b:a7:7f:42:da:a3:4c:cb:ff:b5:a0:32:d8: a4:0b:c2:9a:eb:65:55:f7:ca:84:57:6b:d2:80:3f: 4e:c3:0d:fc:7c:fd:16:d5:dd:8f:d1:29:1f:57:2a: d3:5d:b5:c4:e4:6a:8c:a9:ea:35:73:60:26:f7:39: ad:36:49:d6:96:ac:1a:5e:8d:54:64:2f:fa:18:ba: 49:b6:ee:4f:91:10:c7:9b:46:0c:37:73:3e:07:a5: 15:cc:6a:65:a2:bc:e6:74:1a:0a:52:bf:e4:f7:e5: 4a:19:bd:ba:34:6e:b4:02:c4:4e:63:8a:db:6f:fa: e2:b8:57:bc:48:2d:5c:95:c0:34:1d:1b:97:c4:a2: b2:dc:64:20:12:67:36:64:39:f6:e0:d0:5a:11:69: c8:a2:f2:a3:70:c5:79:90:ae:58:3f:9a:bf:7e:43: 9b:7c:d8:54:1f:f3:c2:1b:70:4f:c1:0b:8d:1f:36: fd:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:68:02:C8:0D:2D:83:A1:15:47:25:EE:13:3D:04:EC:3E:24:B1:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/d12e5708-1aaf-3a48-be6d-c36976cf0409.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv6: 2607:f5b5:2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:03:97:2c:5c:07:fe:ab:7d:b5:82:cd:ce:d6:bc:d9:c9:c9: 2c:da:91:f9:d4:92:78:6f:af:73:d6:a6:5a:f4:54:fa:fb:2a: 41:dd:83:2d:fc:d0:80:8c:c2:f3:0a:77:b4:b5:82:ed:88:df: 47:08:07:46:4e:6e:63:c8:b1:ab:28:61:e6:85:0a:5f:63:05: b0:13:80:54:2a:35:ca:7c:c5:e9:20:b1:cb:11:a6:47:e1:4c: 7a:36:68:71:72:84:46:de:51:d0:80:2d:b5:0a:fa:43:10:b7: 02:d3:41:a1:87:1a:33:93:8f:8c:a8:68:41:83:55:ee:e2:6a: 73:24:1b:31:58:c1:67:7d:8c:47:99:90:9e:b4:f7:50:9f:cb: cd:b8:5b:fb:3f:45:90:d1:ff:22:4e:65:be:2f:25:31:34:9f: c1:0e:5c:a3:fa:43:33:0f:8c:89:6a:a2:5a:63:43:3b:8f:84: d4:dc:7b:6d:e0:c0:04:34:58:26:08:23:d4:1b:97:6a:56:7e: 49:e5:42:e9:8b:0c:69:fc:d4:68:43:ab:67:c5:97:6b:6f:00: 76:ca:38:ea:b4:d8:f0:93:37:0b:af:39:91:d2:d6:a7:a2:e4: d7:b0:d5:60:bf:64:77:c5:fa:96:87:c9:fb:87:da:8a:25:48: dd:fa:84:95 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj2W+onfue0TQW2ZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk YzVlMzZhN2MtZjQ4Ni00N2Q5LWJjN2YtN2YxYjYzNWQ4ZGMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi288us+vs3Z1GOQ/8/Wx/qgWIY3VQuMQ/0kt fMcsEDbqCaB0pl+XZo5+TEu0Lr5swky+ntn2comEWvqJUioSCP2aTgmw56O+LQtK qgunf0Lao0zL/7WgMtikC8Ka62VV98qEV2vSgD9Oww38fP0W1d2P0SkfVyrTXbXE 5GqMqeo1c2Am9zmtNknWlqwaXo1UZC/6GLpJtu5PkRDHm0YMN3M+B6UVzGplorzm dBoKUr/k9+VKGb26NG60AsROY4rbb/riuFe8SC1clcA0HRuXxKKy3GQgEmc2ZDn2 4NBaEWnIovKjcMV5kK5YP5q/fkObfNhUH/PCG3BPwQuNHzb9ZwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFBoAsgNLYOhFUcl7hM9BOw+JLFmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvZDEyZTU3MDgtMWFhZi0z YTQ4LWJlNmQtYzM2OTc2Y2YwNDA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf1tQAC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAL8DlyxcB/6rfbWCzc7WvNnJySzakfnUknhvr3PWplr0VPr7KkHd gy380ICMwvMKd7S1gu2I30cIB0ZObmPIsasoYeaFCl9jBbATgFQqNcp8xekgscsR pkfhTHo2aHFyhEbeUdCALbUK+kMQtwLTQaGHGjOTj4yoaEGDVe7ianMkGzFYwWd9 jEeZkJ6091Cfy824W/s/RZDR/yJOZb4vJTE0n8EOXKP6QzMPjIlqolpjQzuPhNTc e23gwAQ0WCYII9Qbl2pWfknlQumLDGn81GhDq2fFl2tvAHbKOOq02PCTNwuvOZHS 1qei5New1WC/ZHfF+paHyfuH2oolSN36hJU= -----END CERTIFICATE-----Generated at Fri Apr 4 16:11:00 2025 by rpki-client