$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/058e8951-6243-3e09-9ea4-9c5f828671a1.roa File: 058e8951-6243-3e09-9ea4-9c5f828671a1.roa (raw, json) Hash identifier: IQu1/3Q2LXoWeeF9tjFzq2YpbAlFTG9l/BLO3EYmkfc= Subject key identifier: C9:5A:97:CB:96:4F:A3:E3:C2:8B:CC:3F:ED:A8:D4:D9:A4:F6:D0:E5 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C582345C57941D7B0A661460 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/058e8951-6243-3e09-9ea4-9c5f828671a1.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 2001:4860:4820::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:34:5c:57:94:1d:7b:0a:66:14:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=9aa29ad4-8972-461f-935c-dac0a31db265 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:4e:8c:fe:00:22:c0:95:ee:44:3c:9d:12:c0: 71:d2:f4:a2:16:20:e5:c0:d1:e2:bb:e9:13:cc:f7: 26:c8:7a:e9:45:f3:40:03:c7:d1:f2:75:8e:a9:d9: 23:3a:ee:e8:a7:60:48:6a:77:45:66:5e:4f:9a:69: 63:c2:aa:6f:a6:5c:39:66:1d:be:36:19:1c:51:6c: 78:6f:f7:42:38:8c:6f:63:32:cd:d4:a4:bf:5a:12: 7d:d0:b7:5d:15:96:c6:57:8e:50:eb:bd:8d:8d:65: 53:95:2c:36:f7:ff:55:2b:f5:7e:c9:3c:8d:df:a8: 76:f9:62:19:06:51:f1:f7:ee:df:43:e1:0d:c7:e9: 23:fd:6a:aa:81:28:71:59:4e:fd:59:54:f9:7f:01: 49:5a:fd:7f:f7:22:7e:a8:4e:eb:d2:2f:c2:2f:a9: fa:f5:d7:a0:30:93:92:9e:02:c2:90:3a:3b:7e:b9: 41:11:72:45:fb:fb:ba:a9:1e:fb:35:45:e6:d1:31: 3a:19:99:6f:03:69:df:eb:cb:32:d1:4d:d1:1c:21: 7f:68:72:10:0f:94:8d:ed:ca:5c:9e:c1:9f:57:94: ce:93:f5:8b:b4:c6:47:1b:45:49:11:d2:36:5d:5d: cc:78:a1:57:e9:1a:9b:b8:70:c0:73:c6:6f:0b:91: b6:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:5A:97:CB:96:4F:A3:E3:C2:8B:CC:3F:ED:A8:D4:D9:A4:F6:D0:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/058e8951-6243-3e09-9ea4-9c5f828671a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv6: 2001:4860:4820::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:50:7f:b5:3e:83:d5:be:d9:10:f9:28:1a:3a:e3:b1:b7:fa: 51:58:1d:db:00:8c:73:3c:c8:22:4b:9f:22:98:c5:f6:de:a4: e6:e3:e9:ae:75:c8:86:30:02:cc:d1:b7:4e:9c:93:67:df:a2: ae:b3:83:1f:c6:9b:a2:db:c7:a8:9e:ca:62:84:17:5d:ba:28: 1b:86:a4:78:bc:6b:93:12:15:08:fa:56:c6:41:8f:c7:ac:7f: 23:f6:01:9e:3d:bf:49:39:31:ec:c3:e0:51:ff:90:5d:de:d5: 87:dc:67:70:03:7b:b9:db:1a:7e:95:19:2c:62:3c:b7:47:b7: 80:d5:3b:e8:2c:65:14:f0:f2:bc:e8:4b:fd:a6:df:f5:3d:51: bb:4c:27:20:8d:54:e8:5a:5b:32:e8:0d:97:b1:49:eb:08:ea: 6e:57:b3:4d:f3:95:6c:89:ac:72:13:7a:ae:20:aa:a7:b7:07: f4:32:ed:2c:7e:eb:ae:91:9e:9a:38:08:5c:1b:9b:31:38:0e: 97:d7:57:ad:c3:6d:d4:c8:1f:c4:8e:60:d5:73:a0:5a:37:52: 2d:d7:9c:6b:44:8f:94:5c:18:e4:5c:f0:c0:22:ca:cf:ca:c0: 6e:c5:e5:6f:4c:b9:d1:26:1f:b8:24:63:d6:87:e0:46:a5:db: b8:61:ac:dc -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjFgjRcV5QdewpmFGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk OWFhMjlhZDQtODk3Mi00NjFmLTkzNWMtZGFjMGEzMWRiMjY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq06M/gAiwJXuRDydEsBx0vSiFiDlwNHiu+kT zPcmyHrpRfNAA8fR8nWOqdkjOu7op2BIandFZl5Pmmljwqpvplw5Zh2+NhkcUWx4 b/dCOIxvYzLN1KS/WhJ90LddFZbGV45Q672NjWVTlSw29/9VK/V+yTyN36h2+WIZ BlHx9+7fQ+ENx+kj/WqqgShxWU79WVT5fwFJWv1/9yJ+qE7r0i/CL6n69degMJOS ngLCkDo7frlBEXJF+/u6qR77NUXm0TE6GZlvA2nf68sy0U3RHCF/aHIQD5SN7cpc nsGfV5TOk/WLtMZHG0VJEdI2XV3MeKFX6RqbuHDAc8ZvC5G2RQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMlal8uWT6PjwovMP+2o1Nmk9tDlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDU4ZTg5NTEtNjI0My0z ZTA5LTllYTQtOWM1ZjgyODY3MWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIYEgg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJhQf7U+g9W+2RD5KBo647G3+lFYHdsAjHM8yCJLnyKYxfbepObj 6a51yIYwAszRt06ck2ffoq6zgx/Gm6Lbx6ieymKEF126KBuGpHi8a5MSFQj6VsZB j8esfyP2AZ49v0k5MezD4FH/kF3e1YfcZ3ADe7nbGn6VGSxiPLdHt4DVO+gsZRTw 8rzoS/2m3/U9UbtMJyCNVOhaWzLoDZexSesI6m5Xs03zlWyJrHITeq4gqqe3B/Qy 7Sx+666Rnpo4CFwbmzE4DpfXV63DbdTIH8SOYNVzoFo3Ui3XnGtEj5RcGORc8MAi ys/KwG7F5W9MudEmH7gkY9aH4Eal27hhrNw= -----END CERTIFICATE-----Generated at Sun Feb 16 15:24:57 2025 by rpki-client