$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/33b856a0-dad6-347d-a745-ddf890e79e43.roa File: 33b856a0-dad6-347d-a745-ddf890e79e43.roa (raw, json) Hash identifier: 0ejqt4xHrzqhZW5BHBNN7xHzQTfLq4ctGSacRt7BeuU= Subject key identifier: 97:47:B1:3D:59:B8:88:A8:AF:4E:43:64:9A:25:AE:54:35:BD:4B:6D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584902EC0030D98D442848836E80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/33b856a0-dad6-347d-a745-ddf890e79e43.roa Signing time: Wed 26 Feb 2025 14:00:51 +0000 ROA not before: Wed 26 Feb 2025 14:00:51 +0000 ROA not after: Tue 27 May 2025 13:00:51 +0000 asID: 12222 IP address blocks: 2001:4878:b008::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:ec:00:30:d9:8d:44:28:48:83:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 26 14:00:51 2025 GMT Not After : May 27 13:00:51 2025 GMT Subject: CN=3d3bd779-a49b-43b0-aef2-d35bd2c91144 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:2f:94:66:41:a1:e4:80:5f:56:7e:a2:c5:5e: 91:7c:07:f2:25:e3:bc:e6:79:9c:f5:fd:3d:f0:bb: 34:2c:3e:a1:be:ee:f6:2d:b8:90:41:95:aa:11:5a: dc:48:f6:f5:16:9e:41:b7:92:03:36:4f:35:b8:4a: 16:eb:93:39:0c:52:af:35:0a:00:b6:f8:0b:a9:20: 6d:0f:56:8c:b9:39:b9:5b:1a:99:67:a0:b4:fe:fb: de:bf:bd:48:cc:b9:57:5b:fe:f4:c0:5b:20:f2:f0: 92:a8:b6:f5:8f:37:2f:17:eb:3e:cf:0f:7d:31:d0: a8:32:df:d3:bd:af:54:4a:9f:26:2a:e3:78:c2:4a: 86:c3:e7:55:56:3a:bf:fa:ab:ec:b6:b7:ac:60:76: e3:99:b8:ca:57:ee:03:21:7a:81:25:d4:8d:a3:50: 80:34:fc:b4:e7:57:fa:ea:1a:72:e0:d3:47:7c:27: 72:83:6b:2a:93:1b:58:da:f5:7e:4e:3c:3e:fa:97: dd:cc:dc:b8:50:eb:47:f2:0f:34:05:f4:1b:52:07: 63:f0:e4:d0:57:e0:c9:9f:37:82:7a:f3:a7:3b:00: 5d:8e:ff:d4:34:1e:22:7f:48:d2:37:f9:4c:45:53: d8:7d:4e:51:74:f2:0c:88:3a:64:77:0a:22:2b:24: d1:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:47:B1:3D:59:B8:88:A8:AF:4E:43:64:9A:25:AE:54:35:BD:4B:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/33b856a0-dad6-347d-a745-ddf890e79e43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2001:4878:b008::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:ae:20:96:5a:bc:ce:a1:14:e4:e8:77:da:6c:8d:69:dd:c5: 70:e4:ad:b3:38:44:af:69:3e:34:33:7f:40:87:9c:19:cc:63: 52:06:22:d6:d0:48:3a:b2:52:85:d5:e4:83:03:47:8f:89:12: 1e:5c:f4:cf:b6:f0:62:f6:13:a8:27:bb:6b:07:b5:16:30:9f: 7b:9c:d8:99:b9:b1:5c:a5:da:ed:c9:9b:67:5a:26:6b:c5:06: d4:de:06:f3:71:c8:d5:91:7c:21:c6:82:7c:7c:b8:a9:7a:95: 87:0b:5f:5d:e5:68:f4:01:a7:ee:bf:26:6c:08:ee:f0:58:a4: 3b:ca:20:ae:6b:ab:8a:76:b9:b3:f6:4f:bf:fe:7c:49:98:5a: 65:e7:58:7f:3b:a1:65:42:5c:79:1c:08:75:a8:1b:95:e1:1c: 99:98:2f:1c:8b:ad:11:e4:d8:49:6a:81:06:33:af:9d:f5:ce: 33:15:65:fd:48:bc:59:ee:62:da:64:ea:fc:2d:0b:85:30:41: fc:ef:a1:c4:10:0b:f5:84:52:97:ad:a8:f8:75:f1:6b:5a:dc: a9:85:ac:12:fa:08:0e:c3:5f:05:82:9d:92:30:b9:65:0b:be: a3:e0:be:84:5b:f2:f2:02:ef:66:64:ff:2b:9b:85:fc:da:06: 1d:fb:89:8e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkC7AAw2Y1EKEiDboAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk M2QzYmQ3NzktYTQ5Yi00M2IwLWFlZjItZDM1YmQyYzkxMTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArC+UZkGh5IBfVn6ixV6RfAfyJeO85nmc9f09 8Ls0LD6hvu72LbiQQZWqEVrcSPb1Fp5Bt5IDNk81uEoW65M5DFKvNQoAtvgLqSBt D1aMuTm5WxqZZ6C0/vvev71IzLlXW/70wFsg8vCSqLb1jzcvF+s+zw99MdCoMt/T va9USp8mKuN4wkqGw+dVVjq/+qvstresYHbjmbjKV+4DIXqBJdSNo1CANPy051f6 6hpy4NNHfCdyg2sqkxtY2vV+Tjw++pfdzNy4UOtH8g80BfQbUgdj8OTQV+DJnzeC evOnOwBdjv/UNB4if0jSN/lMRVPYfU5RdPIMiDpkdwoiKyTREQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJdHsT1ZuIior05DZJolrlQ1vUttMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzNiODU2YTAtZGFkNi0z NDdkLWE3NDUtZGRmODkwZTc5ZTQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIeLAI MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGKuIJZavM6hFOTod9psjWndxXDkrbM4RK9pPjQzf0CHnBnMY1IG ItbQSDqyUoXV5IMDR4+JEh5c9M+28GL2E6gnu2sHtRYwn3uc2Jm5sVyl2u3Jm2da JmvFBtTeBvNxyNWRfCHGgnx8uKl6lYcLX13laPQBp+6/JmwI7vBYpDvKIK5rq4p2 ubP2T7/+fEmYWmXnWH87oWVCXHkcCHWoG5XhHJmYLxyLrRHk2ElqgQYzr531zjMV Zf1IvFnuYtpk6vwtC4UwQfzvocQQC/WEUpetqPh18Wta3KmFrBL6CA7DXwWCnZIw uWULvqPgvoRb8vIC72Zk/yubhfzaBh37iY4= -----END CERTIFICATE-----Generated at Sat Apr 5 11:04:53 2025 by rpki-client