$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b17422c2-35a1-3258-a55e-4b5f8a0b60a7.roa File: b17422c2-35a1-3258-a55e-4b5f8a0b60a7.roa (raw, json) Hash identifier: lIX13mn4Uk9gBMypjgb9DmyCO/U2tLxDc1Z5Wz2BJok= Subject key identifier: 35:C7:22:4B:10:84:7C:63:E2:14:0F:41:07:8A:BF:45:1D:76:BF:12 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C58233C7D12BD9F6555FCD80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b17422c2-35a1-3258-a55e-4b5f8a0b60a7.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 2607:f8b0:1001::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:33:c7:d1:2b:d9:f6:55:5f:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=0ee81352-2921-4520-aef0-9261dc0b515b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a4:24:cb:3f:2e:7f:0b:69:cf:d5:55:d8:7b: 08:1f:2a:3f:8b:67:50:e0:ee:84:50:91:df:1d:63: b2:e1:b6:05:15:88:39:b7:94:bb:9f:b5:5d:b1:d8: bd:1c:43:b0:a6:4f:db:29:1e:f8:f9:dc:c3:c2:23: a4:5c:3b:d3:da:7b:91:4d:21:c5:1a:01:df:fd:e6: 45:1c:2b:e5:90:75:11:90:94:64:84:ed:ba:d3:0c: 0f:94:ae:b0:11:2e:ec:2d:43:e1:ad:da:0a:37:54: 8e:f5:65:a2:ef:da:d9:7b:2b:eb:87:98:81:f9:be: 75:ef:ee:28:1a:12:80:b0:94:56:2f:d8:55:1c:1a: 6b:60:58:d4:f5:99:91:f7:4d:b3:2b:e9:ee:29:3b: 3c:eb:6e:c9:f9:e2:dc:d8:a2:84:69:3b:c6:d0:c2: 73:ff:98:ad:d2:1a:c3:ce:10:97:98:78:d6:b9:17: 6f:11:de:16:a8:4d:5f:90:17:83:b2:13:1d:98:d5: c6:33:77:e4:13:5a:0b:ec:77:14:8a:08:1d:ec:b4: 47:04:9c:58:3b:4a:a2:14:86:3e:3f:9e:56:5e:04: fb:f3:56:f8:1f:3e:b3:c8:62:97:b3:aa:20:92:b8: 57:fc:23:1f:13:9d:3f:f9:63:95:cd:ed:8d:d5:7f: 5c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:C7:22:4B:10:84:7C:63:E2:14:0F:41:07:8A:BF:45:1D:76:BF:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b17422c2-35a1-3258-a55e-4b5f8a0b60a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv6: 2607:f8b0:1001::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:da:1a:e7:bf:dd:07:8f:2f:1f:6d:9f:d3:b1:ed:39:e9:be: 0d:d0:db:8a:6b:60:45:6d:2f:42:54:95:e3:4f:cb:05:98:29: 75:5b:d6:71:5f:d6:ab:9c:a0:ba:ce:f8:8a:84:76:22:8b:a0: fe:b7:de:9c:46:57:bf:47:b5:16:f2:e4:3b:de:b0:74:1e:82: b0:0e:38:2c:3b:fc:dd:47:15:e9:00:17:be:fa:bc:94:a4:66: 74:77:b6:ad:f6:11:60:e5:a4:0a:48:52:80:c7:0b:ca:63:76: 7a:3b:43:0c:07:e0:31:ad:e3:4e:02:fa:89:2e:2b:c8:89:03: af:86:59:cb:47:79:9d:58:d0:50:22:16:11:3a:4f:47:b3:85: bd:75:ce:ac:ed:ab:87:dd:98:e5:fb:ce:74:50:b5:7f:80:8a: 4b:52:be:67:69:58:42:01:c3:17:b7:82:3d:7a:13:1b:bc:a3: a8:2b:53:f5:cc:66:3f:b3:64:a3:30:ad:3f:53:bc:14:3f:a9: 56:8d:88:a9:0a:95:1c:e1:4f:48:15:46:f3:6e:91:a1:7a:54: d6:c9:97:b2:a3:a6:39:10:ce:e2:7b:09:52:0f:13:b1:b3:92: 54:5b:e4:5b:7d:0e:28:63:f4:8d:4a:b6:a4:00:4f:f2:77:c1: a0:90:90:03 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjFgjPH0SvZ9lVfzYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MGVlODEzNTItMjkyMS00NTIwLWFlZjAtOTI2MWRjMGI1MTViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6Qkyz8ufwtpz9VV2HsIHyo/i2dQ4O6EUJHf HWOy4bYFFYg5t5S7n7Vdsdi9HEOwpk/bKR74+dzDwiOkXDvT2nuRTSHFGgHf/eZF HCvlkHURkJRkhO260wwPlK6wES7sLUPhrdoKN1SO9WWi79rZeyvrh5iB+b517+4o GhKAsJRWL9hVHBprYFjU9ZmR902zK+nuKTs8627J+eLc2KKEaTvG0MJz/5it0hrD zhCXmHjWuRdvEd4WqE1fkBeDshMdmNXGM3fkE1oL7HcUiggd7LRHBJxYO0qiFIY+ P55WXgT781b4Hz6zyGKXs6ogkrhX/CMfE50/+WOVze2N1X9cHQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDXHIksQhHxj4hQPQQeKv0Uddr8SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYjE3NDIyYzItMzVhMS0z MjU4LWE1NWUtNGI1ZjhhMGI2MGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf4sBAB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJfaGue/3QePLx9tn9Ox7Tnpvg3Q24prYEVtL0JUleNPywWYKXVb 1nFf1qucoLrO+IqEdiKLoP633pxGV79HtRby5DvesHQegrAOOCw7/N1HFekAF776 vJSkZnR3tq32EWDlpApIUoDHC8pjdno7QwwH4DGt404C+okuK8iJA6+GWctHeZ1Y 0FAiFhE6T0ezhb11zqztq4fdmOX7znRQtX+AiktSvmdpWEIBwxe3gj16Exu8o6gr U/XMZj+zZKMwrT9TvBQ/qVaNiKkKlRzhT0gVRvNukaF6VNbJl7KjpjkQzuJ7CVIP E7GzklRb5Ft9Dihj9I1KtqQAT/J3waCQkAM= -----END CERTIFICATE-----Generated at Sun Feb 16 15:08:28 2025 by rpki-client