$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0222dca7-5124-3593-aa1f-f2b17529256b.roa File: 0222dca7-5124-3593-aa1f-f2b17529256b.roa (raw, json) Hash identifier: c2uSSas0vpiHPmQgUw5AASz8hw+K4IjTVI7rJk2Up0s= Subject key identifier: 13:53:32:8C:9B:0E:F2:05:47:89:91:07:0A:62:35:5D:10:67:EB:36 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584900215D48BF8D693A7EC60280 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0222dca7-5124-3593-aa1f-f2b17529256b.roa Signing time: Tue 25 Feb 2025 14:00:52 +0000 ROA not before: Tue 25 Feb 2025 14:00:52 +0000 ROA not after: Mon 26 May 2025 13:00:52 +0000 asID: 12222 IP address blocks: 2001:4878:a027::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:00:21:5d:48:bf:8d:69:3a:7e:c6:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 25 14:00:52 2025 GMT Not After : May 26 13:00:52 2025 GMT Subject: CN=72c0cfcf-0eda-4ea7-b08b-468561d3aa47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:19:35:2b:03:79:91:de:a3:5c:30:35:f0:5f: 15:7b:b5:b2:ca:ff:35:88:db:d1:29:cf:79:f8:b5: e2:c8:58:63:c2:ca:a8:e2:c2:d6:3a:21:f5:48:9a: 91:c8:99:19:a9:b6:0f:ed:a4:ac:55:ba:85:53:47: 15:85:b3:a5:a5:14:75:6d:d4:bb:80:4c:95:35:69: ae:0e:f1:4b:a0:69:29:6a:ab:3c:25:b8:47:29:15: 2b:ad:6f:39:07:fd:c0:53:6a:a1:f1:8d:83:a8:1a: 2c:6b:6f:83:4c:32:cc:cc:36:52:6b:69:c3:26:a2: ec:72:40:d7:64:c8:3e:12:73:5d:93:86:45:7b:a4: 7c:a6:85:5f:52:d9:00:09:ca:05:5b:7a:5d:64:10: 5b:92:38:2d:71:16:91:d7:5a:c4:0d:d0:13:a7:b8: 5a:91:a8:af:c9:38:27:6d:ff:98:d2:a1:87:06:dc: e4:df:15:f6:53:7c:2b:ab:3f:dc:87:02:57:4a:b5: c9:87:0f:7b:2c:21:59:f2:20:26:d2:1c:e2:c7:25: 77:41:2e:a6:99:78:ab:d6:6d:84:f1:0b:9d:35:33: af:df:a6:83:21:ee:e7:0e:2e:12:5d:1b:ca:6d:2c: c2:18:1d:42:68:96:b7:26:d8:81:1b:c0:13:46:b1: 62:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:53:32:8C:9B:0E:F2:05:47:89:91:07:0A:62:35:5D:10:67:EB:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0222dca7-5124-3593-aa1f-f2b17529256b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2001:4878:a027::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:6b:e7:c7:94:3f:e4:96:0a:ea:1b:9d:d1:80:8a:b3:a2:b6: 99:f0:62:77:ce:86:47:08:bd:ad:6d:49:aa:60:79:65:cc:2f: 3b:34:5f:39:53:09:37:37:81:fa:6c:63:04:e7:af:cd:a8:0b: 37:aa:48:8e:12:a0:18:53:2b:25:a4:ee:c3:ab:ef:41:bc:e2: 71:15:94:5d:6a:5f:67:8a:7b:34:d0:b8:2f:49:67:37:f6:99: a8:2d:d6:07:d4:78:28:19:6a:fa:82:67:20:d8:86:60:f1:f9: e9:ad:0e:1b:bc:ff:e2:d6:66:08:b4:bf:6b:e3:b5:6a:56:a2: 4b:7f:4b:ee:7d:65:5d:15:ad:2b:22:14:6e:75:ac:e5:ad:14: 2f:87:5f:6b:8b:9c:b1:e3:68:55:e8:a4:0c:3d:39:f5:12:7c: f8:28:79:58:a4:c3:df:fa:62:8b:ce:2b:92:0a:2a:ca:d1:92: da:21:d9:3d:1d:9c:5e:a1:90:f9:eb:ab:1b:f6:df:2c:0e:2b: 3c:bb:5d:7d:17:2d:ce:5c:61:06:1b:63:38:5f:b3:e6:5b:a7: 52:cf:cf:e0:cd:d1:bb:1f:84:a2:4e:3f:d6:e0:b1:2b:f2:95: 16:52:9d:bf:db:6e:31:9c:e4:76:6d:b2:d6:5c:72:a3:35:67: 3e:9c:8d:b3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkAIV1Iv41pOn7GAoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIyNTE0MDA1MloXDTI1MDUyNjEzMDA1MlowLzEtMCsGA1UEAxMk NzJjMGNmY2YtMGVkYS00ZWE3LWIwOGItNDY4NTYxZDNhYTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBk1KwN5kd6jXDA18F8Ve7Wyyv81iNvRKc95 +LXiyFhjwsqo4sLWOiH1SJqRyJkZqbYP7aSsVbqFU0cVhbOlpRR1bdS7gEyVNWmu DvFLoGkpaqs8JbhHKRUrrW85B/3AU2qh8Y2DqBosa2+DTDLMzDZSa2nDJqLsckDX ZMg+EnNdk4ZFe6R8poVfUtkACcoFW3pdZBBbkjgtcRaR11rEDdATp7hakaivyTgn bf+Y0qGHBtzk3xX2U3wrqz/chwJXSrXJhw97LCFZ8iAm0hzixyV3QS6mmXir1m2E 8QudNTOv36aDIe7nDi4SXRvKbSzCGB1CaJa3JtiBG8ATRrFi3wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBNTMoybDvIFR4mRBwpiNV0QZ+s2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDIyMmRjYTctNTEyNC0z NTkzLWFhMWYtZjJiMTc1MjkyNTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIeKAn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADxr58eUP+SWCuobndGAirOitpnwYnfOhkcIva1tSapgeWXMLzs0 XzlTCTc3gfpsYwTnr82oCzeqSI4SoBhTKyWk7sOr70G84nEVlF1qX2eKezTQuC9J Zzf2magt1gfUeCgZavqCZyDYhmDx+emtDhu8/+LWZgi0v2vjtWpWokt/S+59ZV0V rSsiFG51rOWtFC+HX2uLnLHjaFXopAw9OfUSfPgoeVikw9/6YovOK5IKKsrRktoh 2T0dnF6hkPnrqxv23ywOKzy7XX0XLc5cYQYbYzhfs+Zbp1LPz+DN0bsfhKJOP9bg sSvylRZSnb/bbjGc5HZtstZccqM1Zz6cjbM= -----END CERTIFICATE-----Generated at Sat Apr 5 11:15:55 2025 by rpki-client