$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/25509d3a-441d-3eab-84a4-78dbb77e18df.roa File: 25509d3a-441d-3eab-84a4-78dbb77e18df.roa (raw, json) Hash identifier: JnCgRaV/jQAeGpFkz/tcSy1CMDawpmlMWkZVFu5Jyc4= Subject key identifier: CD:4B:07:39:3D:A4:AF:FF:61:20:BF:69:9C:48:57:DA:C3:D0:37:9B Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C5823402E9D8CD48A6E4D200 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/25509d3a-441d-3eab-84a4-78dbb77e18df.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 2001:4860:482c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:34:02:e9:d8:cd:48:a6:e4:d2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=94b74f1d-7acb-45c8-9ca4-ebd6418fba3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:8e:65:09:c3:72:69:c5:ad:e0:e3:e5:38:48: 31:42:46:35:1c:41:8c:0a:f5:ec:30:06:7f:27:45: d3:22:8b:79:52:81:cd:4e:65:80:d2:9e:83:0f:50: e3:54:ac:64:a6:99:f4:a3:85:e7:84:06:0f:37:9a: e8:37:11:83:14:fe:87:03:61:bb:bc:2c:ae:f6:ec: 7c:c5:2b:2f:c2:18:0a:bb:df:88:fd:79:ec:fd:77: 4d:d1:ae:9a:2c:8f:a7:30:11:8b:19:dc:11:89:6e: 24:be:59:25:94:60:4f:a1:2c:d4:0c:48:31:0b:88: 30:37:63:d2:f6:92:76:15:0c:3d:99:20:42:b7:a3: 09:cf:a7:f1:62:13:b3:29:95:ec:c4:5f:a7:a5:ab: 39:8d:1f:ee:9a:af:81:72:98:86:66:f2:02:dc:50: db:03:a1:e4:46:74:f2:88:52:b9:9b:05:b7:10:a9: 60:1a:02:e8:87:df:09:bf:3b:6c:16:1b:12:56:ab: 07:6d:f6:3c:e3:f5:d7:6f:9c:09:d3:bc:9a:46:5a: b6:98:e4:00:90:c5:57:f1:45:85:24:bf:c4:f6:02: 48:e2:70:ec:4c:87:c6:a8:13:6b:05:66:bd:0b:11: 73:f4:fb:55:5d:e8:8f:78:b9:d4:a4:3b:4b:9a:62: 41:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:4B:07:39:3D:A4:AF:FF:61:20:BF:69:9C:48:57:DA:C3:D0:37:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/25509d3a-441d-3eab-84a4-78dbb77e18df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv6: 2001:4860:482c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:dd:be:09:91:8c:b3:e8:1a:f3:88:48:fd:26:31:bb:01:5f: 7e:90:c7:5b:ef:61:85:9d:60:55:da:2e:04:f0:c7:65:ae:aa: 06:7a:6d:24:7c:02:9c:01:67:50:0f:3a:59:36:d5:93:b6:b6: 00:78:11:7e:53:9c:8c:22:31:9d:a5:d3:95:64:ee:26:c8:cc: f1:3d:bc:00:e2:84:e3:c8:88:77:f3:bc:9a:09:25:80:08:43: 79:ef:68:11:50:de:19:35:52:8c:7a:dd:96:4e:1e:c9:9f:64: da:1c:36:a9:8b:70:8d:50:f7:b1:c2:2b:13:a0:1f:be:22:f6: 12:5a:09:14:04:d7:19:30:41:69:00:a1:3a:4b:e8:fb:7c:b7: c3:0e:56:84:d9:f2:1c:49:41:7d:3b:b1:0a:25:a3:a6:c1:28: 7b:28:c7:11:2d:83:c3:9e:c7:76:e1:74:a6:e9:1c:34:b6:cf: 58:9b:0b:26:6c:b8:a5:c7:96:b8:54:c2:3c:9e:76:68:a7:d3: 2f:ef:88:cc:d0:4b:b4:ef:32:0b:cd:10:9b:24:50:30:4b:11: 0f:b1:7b:4d:2d:70:93:34:95:fd:c2:11:2d:c9:aa:70:30:3b: 7f:6d:ce:a9:e1:72:61:a2:a3:6a:8d:50:ab:e5:9d:22:57:33: 43:b6:8f:ba -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjFgjQC6djNSKbk0gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk OTRiNzRmMWQtN2FjYi00NWM4LTljYTQtZWJkNjQxOGZiYTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj45lCcNyacWt4OPlOEgxQkY1HEGMCvXsMAZ/ J0XTIot5UoHNTmWA0p6DD1DjVKxkppn0o4XnhAYPN5roNxGDFP6HA2G7vCyu9ux8 xSsvwhgKu9+I/Xns/XdN0a6aLI+nMBGLGdwRiW4kvlkllGBPoSzUDEgxC4gwN2PS 9pJ2FQw9mSBCt6MJz6fxYhOzKZXsxF+npas5jR/umq+BcpiGZvIC3FDbA6HkRnTy iFK5mwW3EKlgGgLoh98JvztsFhsSVqsHbfY84/XXb5wJ07yaRlq2mOQAkMVX8UWF JL/E9gJI4nDsTIfGqBNrBWa9CxFz9PtVXeiPeLnUpDtLmmJBRQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFM1LBzk9pK//YSC/aZxIV9rD0DebMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjU1MDlkM2EtNDQxZC0z ZWFiLTg0YTQtNzhkYmI3N2UxOGRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIYEgs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIXdvgmRjLPoGvOISP0mMbsBX36Qx1vvYYWdYFXaLgTwx2WuqgZ6 bSR8ApwBZ1APOlk21ZO2tgB4EX5TnIwiMZ2l05Vk7ibIzPE9vADihOPIiHfzvJoJ JYAIQ3nvaBFQ3hk1Uox63ZZOHsmfZNocNqmLcI1Q97HCKxOgH74i9hJaCRQE1xkw QWkAoTpL6Pt8t8MOVoTZ8hxJQX07sQolo6bBKHsoxxEtg8Oex3bhdKbpHDS2z1ib CyZsuKXHlrhUwjyedmin0y/viMzQS7TvMgvNEJskUDBLEQ+xe00tcJM0lf3CES3J qnAwO39tzqnhcmGio2qNUKvlnSJXM0O2j7o= -----END CERTIFICATE-----Generated at Fri Apr 4 08:46:53 2025 by rpki-client