$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/838607c9-7d41-392b-8c5d-4e6bf3826f5e.roa File: 838607c9-7d41-392b-8c5d-4e6bf3826f5e.roa (raw, json) Hash identifier: ElCvvoEJ6owa8I3aB06spuVABuSYni2+CJXL6JRLmHw= Subject key identifier: 9E:D1:8D:4E:D7:A2:4F:09:5C:D2:3B:C6:9E:B4:4C:6D:59:F4:5C:D7 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C5823495410297E58A878B30 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/838607c9-7d41-392b-8c5d-4e6bf3826f5e.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 2607:f8b0:4016::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:34:95:41:02:97:e5:8a:87:8b:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=e7958962-45a7-4f56-b53a-967bb77f7a4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:94:22:24:ec:a7:95:cd:4a:36:88:1c:30:c6: 63:8b:c7:88:ae:e0:b1:f4:8b:1b:e9:2d:d9:89:00: 85:77:70:e1:14:86:bd:dd:95:44:ec:31:9f:ce:42: 5f:66:ad:f1:47:3f:72:b6:27:01:2c:f2:8d:6d:f2: 16:f0:94:ae:e1:1a:c7:16:c0:cd:d4:68:dd:8e:ed: 3e:84:84:d6:e2:08:b0:f3:6c:1f:12:c1:c8:4c:ab: 31:93:79:5f:34:05:8e:de:2c:4f:09:1e:b3:bf:23: 85:bf:eb:d7:b2:05:b9:fc:e1:7e:0a:52:11:bc:2d: 2a:d6:e5:92:b9:08:4f:ed:0c:9a:d8:e5:10:2b:9b: e2:a1:73:67:23:51:eb:11:bd:ad:18:be:de:88:ee: 99:89:2c:d0:dd:d1:00:2a:77:ce:1f:3a:51:a7:15: 38:2c:da:22:4c:94:e5:b5:3b:15:7c:78:2c:b0:91: 69:ce:48:47:6e:44:3e:92:3c:05:b3:b2:78:cd:a2: 6d:6b:d4:95:b7:c4:12:1c:02:67:3a:02:5e:c0:0b: d9:69:20:dd:03:13:e0:98:e6:a4:3d:ef:a0:ea:0f: ed:a0:a7:c0:45:af:16:95:52:88:22:c5:f4:78:53: 48:ab:96:80:0a:30:0f:c2:fc:cb:63:e0:5f:78:7c: 14:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:D1:8D:4E:D7:A2:4F:09:5C:D2:3B:C6:9E:B4:4C:6D:59:F4:5C:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/838607c9-7d41-392b-8c5d-4e6bf3826f5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv6: 2607:f8b0:4016::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:34:11:30:35:99:f0:db:be:29:e4:2b:57:9b:53:9c:b7:24: 51:24:68:17:de:74:ae:6c:c5:7e:da:73:4a:e6:1c:97:31:c5: 12:49:30:05:eb:63:b4:36:7d:c5:69:41:cf:c7:dc:24:c1:80: 07:96:78:2b:f0:1e:cf:aa:cd:db:b5:4b:99:51:ef:a4:f5:0e: 7c:25:38:99:89:65:db:3a:c3:a8:3c:6b:db:a3:16:59:a0:26: 46:55:43:a8:d3:b6:f7:38:98:dc:0b:41:0d:df:04:96:46:b5: 93:d6:aa:87:96:12:99:86:14:82:6c:dc:13:94:82:ed:49:50: 47:42:3c:e2:10:45:83:83:e4:7b:5c:37:81:8d:71:9a:aa:1b: ae:aa:54:a3:51:af:9a:b1:d9:ba:b9:8d:52:d4:23:ae:8d:0f: 99:1e:b1:2d:e4:a7:5b:08:f8:3e:f0:91:25:ef:ec:0e:10:52: 21:4e:78:c8:60:86:eb:34:5d:d5:2b:e3:23:c7:c0:94:4d:1d: 61:b6:28:5c:0a:d4:8c:4a:5d:e7:5a:cf:67:34:b0:8e:1a:3c: 4b:59:4d:44:51:f6:f0:2d:8f:7b:83:23:08:5b:62:2f:ab:6b: 78:ae:4a:21:8c:ad:e7:2e:62:23:33:93:b5:a7:43:98:ed:98: 7f:ab:7a:8a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjFgjSVQQKX5YqHizAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ZTc5NTg5NjItNDVhNy00ZjU2LWI1M2EtOTY3YmI3N2Y3YTRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJQiJOynlc1KNogcMMZji8eIruCx9Isb6S3Z iQCFd3DhFIa93ZVE7DGfzkJfZq3xRz9yticBLPKNbfIW8JSu4RrHFsDN1Gjdju0+ hITW4giw82wfEsHITKsxk3lfNAWO3ixPCR6zvyOFv+vXsgW5/OF+ClIRvC0q1uWS uQhP7Qya2OUQK5vioXNnI1HrEb2tGL7eiO6ZiSzQ3dEAKnfOHzpRpxU4LNoiTJTl tTsVfHgssJFpzkhHbkQ+kjwFs7J4zaJta9SVt8QSHAJnOgJewAvZaSDdAxPgmOak Pe+g6g/toKfARa8WlVKIIsX0eFNIq5aACjAPwvzLY+BfeHwUPwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJ7RjU7Xok8JXNI7xp60TG1Z9FzXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvODM4NjA3YzktN2Q0MS0z OTJiLThjNWQtNGU2YmYzODI2ZjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf4sEAW MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEo0ETA1mfDbvinkK1ebU5y3JFEkaBfedK5sxX7ac0rmHJcxxRJJ MAXrY7Q2fcVpQc/H3CTBgAeWeCvwHs+qzdu1S5lR76T1DnwlOJmJZds6w6g8a9uj FlmgJkZVQ6jTtvc4mNwLQQ3fBJZGtZPWqoeWEpmGFIJs3BOUgu1JUEdCPOIQRYOD 5HtcN4GNcZqqG66qVKNRr5qx2bq5jVLUI66ND5kesS3kp1sI+D7wkSXv7A4QUiFO eMhghus0XdUr4yPHwJRNHWG2KFwK1IxKXedaz2c0sI4aPEtZTURR9vAtj3uDIwhb Yi+ra3iuSiGMrecuYiMzk7WnQ5jtmH+reoo= -----END CERTIFICATE-----Generated at Sun Feb 16 15:10:55 2025 by rpki-client