$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/02490b1e-0527-346f-a427-fa83c48a1597.roa File: 02490b1e-0527-346f-a427-fa83c48a1597.roa (raw, json) Hash identifier: jSjKxN1xjloBVXE/me7MeHacJFBH7Jl27N6nKpf7ahk= Subject key identifier: 10:D2:BE:0E:1E:C8:38:71:61:E4:72:4D:56:34:4B:59:92:99:EC:AA Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C5818F051FCDD34166061400 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/02490b1e-0527-346f-a427-fa83c48a1597.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 2607:f8b0:400c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:8f:05:1f:cd:d3:41:66:06:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=942204f2-12d3-4d9e-8dba-02390a23e2ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2b:be:c2:55:b0:bf:e7:29:9c:12:d5:9d:34: ac:84:ea:df:af:dc:8b:45:71:24:ad:49:da:06:55: ca:93:61:01:4e:20:25:af:77:18:63:cc:b6:2d:4d: b7:3d:75:16:6f:6d:08:d5:dd:2b:67:11:62:3a:7a: a4:3e:9e:86:29:02:57:17:7f:43:31:b2:fb:e0:63: 52:21:72:79:42:20:b8:c0:29:57:e9:04:26:3e:78: 2c:14:8f:fb:ca:91:48:1c:30:f9:ef:e1:b5:bd:5a: c1:75:c8:e8:65:6f:0e:84:dd:4e:51:af:97:0f:ce: 59:b7:0a:5d:93:8c:60:da:64:b9:63:f0:f9:88:25: 66:c9:f0:18:02:02:64:a4:70:f3:56:e0:65:6a:73: 96:2f:56:dd:4b:f3:df:6b:76:62:ef:5a:0c:c9:93: 09:9e:5e:7c:f7:83:57:aa:61:32:c5:5e:eb:ab:4d: 10:f0:ed:9e:a9:b7:f0:4e:c6:cf:c0:61:8d:85:f9: a6:73:da:c9:01:31:32:b7:dd:1a:87:ee:38:32:32: db:62:0f:f0:f5:0a:c4:b7:4c:d2:12:d2:3d:c5:ec: f8:6a:2c:75:44:51:f1:91:1d:cd:e1:d2:47:5a:9f: 2c:56:63:a5:88:fa:bb:0a:f3:7b:28:b5:34:52:a2: 8d:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:D2:BE:0E:1E:C8:38:71:61:E4:72:4D:56:34:4B:59:92:99:EC:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/02490b1e-0527-346f-a427-fa83c48a1597.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv6: 2607:f8b0:400c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:31:40:2a:ea:52:07:a5:46:dd:29:e6:f1:53:d6:8c:60:ab: 3c:1a:d3:6f:11:7a:3b:44:19:96:31:6b:50:fa:14:ed:3e:93: a0:c2:cc:88:63:8d:14:60:a8:92:11:e6:22:d3:37:82:40:f3: 50:dc:fb:d0:39:c1:81:b5:ed:25:a8:fa:48:3a:5e:82:5e:3f: c1:97:f0:58:e0:7a:e5:49:87:3c:47:db:8c:a4:66:98:75:99: 59:7f:60:e3:d8:23:cc:7d:90:2a:35:86:4c:dc:ea:f3:e7:c6: 52:a6:3f:de:36:91:8e:d2:25:5f:fa:f6:f1:1f:d0:c6:3c:8d: 12:47:7a:00:51:3a:84:bc:1d:fe:4f:1a:2c:91:f8:cb:9c:1e: a9:9d:cd:93:40:27:dc:72:a3:ad:b1:62:ee:66:8e:8b:4c:0d: f7:97:f9:7a:4c:a8:1e:f1:54:0b:91:44:c5:d4:68:82:5c:4b: 6c:20:4c:b5:ca:70:6a:57:1f:a4:85:a7:23:c4:18:cd:ac:5a: 62:7d:d1:ee:a4:ca:c3:1b:2a:fe:92:05:43:13:b3:17:fb:23: 6a:20:27:5d:14:19:b0:cb:ed:11:1c:6c:4a:96:57:75:ba:67: 23:60:76:40:ad:f1:88:10:19:62:0f:e8:de:a9:41:c7:02:5f: 9c:44:f4:bd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjFgY8FH83TQWYGFAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk OTQyMjA0ZjItMTJkMy00ZDllLThkYmEtMDIzOTBhMjNlMmFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyu+wlWwv+cpnBLVnTSshOrfr9yLRXEkrUna BlXKk2EBTiAlr3cYY8y2LU23PXUWb20I1d0rZxFiOnqkPp6GKQJXF39DMbL74GNS IXJ5QiC4wClX6QQmPngsFI/7ypFIHDD57+G1vVrBdcjoZW8OhN1OUa+XD85Ztwpd k4xg2mS5Y/D5iCVmyfAYAgJkpHDzVuBlanOWL1bdS/Pfa3Zi71oMyZMJnl5894NX qmEyxV7rq00Q8O2eqbfwTsbPwGGNhfmmc9rJATEyt90ah+44MjLbYg/w9QrEt0zS EtI9xez4aix1RFHxkR3N4dJHWp8sVmOliPq7CvN7KLU0UqKN8wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBDSvg4eyDhxYeRyTVY0S1mSmeyqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDI0OTBiMWUtMDUyNy0z NDZmLWE0MjctZmE4M2M0OGExNTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf4sEAM MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEAxQCrqUgelRt0p5vFT1oxgqzwa028RejtEGZYxa1D6FO0+k6DC zIhjjRRgqJIR5iLTN4JA81Dc+9A5wYG17SWo+kg6XoJeP8GX8FjgeuVJhzxH24yk Zph1mVl/YOPYI8x9kCo1hkzc6vPnxlKmP942kY7SJV/69vEf0MY8jRJHegBROoS8 Hf5PGiyR+MucHqmdzZNAJ9xyo62xYu5mjotMDfeX+XpMqB7xVAuRRMXUaIJcS2wg TLXKcGpXH6SFpyPEGM2sWmJ90e6kysMbKv6SBUMTsxf7I2ogJ10UGbDL7REcbEqW V3W6ZyNgdkCt8YgQGWIP6N6pQccCX5xE9L0= -----END CERTIFICATE-----Generated at Fri Apr 4 08:32:50 2025 by rpki-client