$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/f16b790d-4b87-32cd-9555-4066086795a9.roa File: f16b790d-4b87-32cd-9555-4066086795a9.roa (raw, json) Hash identifier: DkONKL26ivaAY8bvXeL84RLqtMaG59cKtterdZrgRDI= Subject key identifier: C7:BC:60:22:70:CA:9E:5C:30:24:AF:A7:02:30:26:0D:73:00:8E:2C Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F43285848F65BEAB69E8EBECDF90748C0 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/f16b790d-4b87-32cd-9555-4066086795a9.roa Signing time: Sat 22 Feb 2025 02:00:38 +0000 ROA not before: Sat 22 Feb 2025 02:00:38 +0000 ROA not after: Fri 23 May 2025 01:00:38 +0000 asID: 395954 IP address blocks: 2607:f5b5:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f6:5b:ea:b6:9e:8e:be:cd:f9:07:48:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Feb 22 02:00:38 2025 GMT Not After : May 23 01:00:38 2025 GMT Subject: CN=87e84b37-9766-4c15-be21-74ef3c5e4267 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:46:f8:2d:da:73:b1:f0:84:52:f7:26:76:a1: dd:5b:a5:65:e6:86:23:5e:88:10:2f:73:96:ff:ff: 5f:cf:9d:31:ad:e3:e6:45:10:48:e6:15:3b:8e:c7: 1e:48:23:d9:dc:23:79:50:4a:0d:02:f9:61:e9:d9: 6f:18:39:be:b6:bc:d2:39:12:30:a2:c8:18:43:ce: 61:06:94:64:39:40:5c:95:b5:c3:4f:14:7a:b9:12: ef:59:46:fd:06:89:e2:61:48:e5:6b:a6:79:34:03: a6:dd:cf:01:48:21:05:50:22:97:58:b2:2f:83:23: 27:d5:d3:2d:31:f9:26:a1:7e:b5:cb:12:ab:95:73: 66:6d:cb:3b:61:90:94:1a:ca:7d:03:10:f4:bb:58: 6e:6b:28:84:4f:e7:f5:26:17:8b:ab:d8:e2:92:78: 41:bd:a2:ef:05:ab:5f:be:6d:fe:43:1c:93:ad:b6: 87:ab:45:88:0c:dc:e6:ca:62:21:b7:95:f1:6c:d4: 63:81:aa:8a:af:cc:d6:cc:c8:21:7e:e5:77:d5:6c: a6:40:7b:f8:98:e6:55:5e:f1:f7:73:47:d3:e2:01: f9:59:0d:2c:e7:a1:c6:1c:f3:97:53:09:dd:81:6c: b8:54:f7:5e:f9:f3:c3:81:78:ac:0d:9f:0e:09:68: 5e:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:BC:60:22:70:CA:9E:5C:30:24:AF:A7:02:30:26:0D:73:00:8E:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/f16b790d-4b87-32cd-9555-4066086795a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv6: 2607:f5b5:2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:4a:45:78:34:45:d7:5f:16:67:2f:e9:4c:22:e2:5a:eb:3b: 0f:98:ef:6f:ef:96:18:ff:e4:a0:d9:c8:64:f0:1a:3b:6d:76: 8d:a7:89:51:4d:66:7d:27:41:df:64:7c:f3:da:b6:ae:ef:67: 66:24:2f:59:37:51:40:1f:7f:b4:35:ee:84:b3:21:06:53:e5: 61:3d:85:52:be:6b:48:6f:57:b1:fd:43:d4:0e:ad:2d:4d:10: 19:8d:32:f3:a3:4c:33:eb:4b:39:d9:b1:06:a4:06:e3:27:00: d4:ea:df:ea:55:59:e0:f0:85:d7:71:86:40:59:b8:7f:84:fd: af:03:7c:3f:80:59:f4:dc:ab:2c:d3:95:df:49:42:d0:17:f2: 61:f5:de:64:8e:6c:bd:70:b2:aa:3d:5e:46:28:69:0c:dd:df: d6:04:d6:1a:94:cf:0c:4a:53:f5:97:db:77:93:09:6e:2c:02: f9:41:b0:d9:31:7b:b4:d1:33:7a:df:b5:8f:72:a5:bb:31:54: 69:af:0d:a8:99:d1:28:a9:54:13:c8:8f:3d:84:52:11:bd:e1: f9:3b:6f:af:c8:eb:a2:0f:1d:ef:bd:d4:f4:63:f5:4e:f7:6c: 8a:f2:d4:57:e8:a8:79:3c:66:ff:97:34:f8:7d:75:b0:b8:93: 7a:11:ce:09 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj2W+q2no6+zfkHSMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk ODdlODRiMzctOTc2Ni00YzE1LWJlMjEtNzRlZjNjNWU0MjY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0b4LdpzsfCEUvcmdqHdW6Vl5oYjXogQL3OW //9fz50xrePmRRBI5hU7jsceSCPZ3CN5UEoNAvlh6dlvGDm+trzSORIwosgYQ85h BpRkOUBclbXDTxR6uRLvWUb9BoniYUjla6Z5NAOm3c8BSCEFUCKXWLIvgyMn1dMt MfkmoX61yxKrlXNmbcs7YZCUGsp9AxD0u1huayiET+f1JheLq9jiknhBvaLvBatf vm3+QxyTrbaHq0WIDNzmymIht5XxbNRjgaqKr8zWzMghfuV31WymQHv4mOZVXvH3 c0fT4gH5WQ0s56HGHPOXUwndgWy4VPde+fPDgXisDZ8OCWhe4QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMe8YCJwyp5cMCSvpwIwJg1zAI4sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvZjE2Yjc5MGQtNGI4Ny0z MmNkLTk1NTUtNDA2NjA4Njc5NWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf1tQAC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALFKRXg0RddfFmcv6Uwi4lrrOw+Y72/vlhj/5KDZyGTwGjttdo2n iVFNZn0nQd9kfPPatq7vZ2YkL1k3UUAff7Q17oSzIQZT5WE9hVK+a0hvV7H9Q9QO rS1NEBmNMvOjTDPrSznZsQakBuMnANTq3+pVWeDwhddxhkBZuH+E/a8DfD+AWfTc qyzTld9JQtAX8mH13mSObL1wsqo9XkYoaQzd39YE1hqUzwxKU/WX23eTCW4sAvlB sNkxe7TRM3rftY9ypbsxVGmvDaiZ0SipVBPIjz2EUhG94fk7b6/I66IPHe+91PRj 9U73bIry1FfoqHk8Zv+XNPh9dbC4k3oRzgk= -----END CERTIFICATE-----Generated at Sat Apr 5 02:59:20 2025 by rpki-client