$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b8834e10-c093-3b7a-9522-5b7f8a5044ff.roa File: b8834e10-c093-3b7a-9522-5b7f8a5044ff.roa (raw, json) Hash identifier: buv56Z2EIrVeEhooPSz3iC11ggIv/BtAUC+HogjEa2o= Subject key identifier: 56:BD:2A:7D:27:66:AF:4E:EB:C8:8F:FE:42:DB:41:B4:61:04:E1:E4 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C58235A70A3064288FFFFE40 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b8834e10-c093-3b7a-9522-5b7f8a5044ff.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 2607:f8b0:480e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:35:a7:0a:30:64:28:8f:ff:fe:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=e6be1be7-8324-4766-a37d-2f06e5946e67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:72:bb:2f:b9:5a:e7:e3:11:dd:08:db:b8:e4: d7:bd:74:b7:32:c9:9e:d7:bd:9d:6c:65:a0:26:04: 57:a2:4c:84:fc:ad:07:81:61:72:89:db:ca:95:a9: 30:c8:ab:7e:b4:43:b4:ab:62:3d:e8:ad:3f:43:de: 9c:f6:f6:06:29:99:e6:13:fd:1f:50:9e:be:b4:9c: 77:25:a6:de:89:58:f9:ee:47:cf:56:32:fc:e7:b6: c7:4e:f8:c8:38:dd:c1:84:09:49:50:92:e6:ca:7d: ef:38:d7:ee:9a:23:37:61:53:5e:92:3e:73:e7:9f: f7:e8:54:bf:db:61:4f:d0:87:a4:ef:10:75:7d:67: e7:b2:24:61:d5:54:7f:f2:3e:ef:71:90:b1:c7:8d: f7:8c:bb:f0:18:dd:d2:30:50:8b:d5:60:3e:ef:8f: a6:81:30:cb:d7:8f:78:31:56:a2:34:07:b7:a3:42: 45:60:08:18:7f:b4:1c:38:78:f6:77:a3:bf:49:9a: 82:e4:99:b0:af:6a:3d:38:bc:bd:5f:a5:ff:6c:8a: 6b:93:d2:19:ec:9d:17:bf:db:75:be:aa:32:ca:fe: 19:41:27:ff:f5:5f:88:41:1a:b8:ba:ff:66:0d:3d: e1:77:ed:85:16:29:74:c0:37:1e:4e:55:83:99:26: f8:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:BD:2A:7D:27:66:AF:4E:EB:C8:8F:FE:42:DB:41:B4:61:04:E1:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b8834e10-c093-3b7a-9522-5b7f8a5044ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv6: 2607:f8b0:480e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:2b:9c:65:a7:8b:6b:18:c5:75:dd:e5:98:ed:55:3f:59:ff: 64:de:35:46:a2:73:fc:82:ef:bb:83:09:aa:61:7b:c6:c6:7b: c9:73:81:24:b7:30:4e:a5:81:78:06:0e:0f:09:27:c8:7e:66: 8a:c6:f8:a2:52:72:b8:eb:b4:34:f8:71:cd:a0:ad:7e:22:72: 24:f5:a9:e4:bb:ad:99:1b:0e:44:7d:87:53:6e:f7:84:86:48: 12:d2:1e:38:46:83:4b:67:98:c9:14:a3:2f:0a:e1:ab:b5:0a: fe:ed:6b:27:42:32:3e:c0:93:ed:ba:97:c8:fd:1f:e6:f5:f3: 07:d2:2f:fe:19:04:0e:04:b3:aa:98:0b:f8:c8:6b:9f:95:26: b2:fc:e0:11:a5:e8:81:48:a0:25:f7:d3:40:3f:20:ad:83:b2: 44:ac:41:9e:32:fc:0a:4e:b1:23:b5:ff:98:72:41:78:62:09: 36:90:80:b4:21:38:7c:37:20:a6:e9:0f:00:03:a5:b3:2b:74: 08:a1:f1:b2:a4:68:b3:b8:43:32:91:d7:05:4d:18:8d:bd:8f: fe:f6:c1:a0:58:fd:6c:2d:41:74:88:cf:98:0b:13:27:44:0d: 8a:16:ef:7a:0f:52:fe:0e:91:1b:2d:90:df:be:41:de:25:03: 01:dd:48:81 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjFgjWnCjBkKI///kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ZTZiZTFiZTctODMyNC00NzY2LWEzN2QtMmYwNmU1OTQ2ZTY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnK7L7la5+MR3QjbuOTXvXS3Msme172dbGWg JgRXokyE/K0HgWFyidvKlakwyKt+tEO0q2I96K0/Q96c9vYGKZnmE/0fUJ6+tJx3 JabeiVj57kfPVjL857bHTvjION3BhAlJUJLmyn3vONfumiM3YVNekj5z55/36FS/ 22FP0Iek7xB1fWfnsiRh1VR/8j7vcZCxx433jLvwGN3SMFCL1WA+74+mgTDL1494 MVaiNAe3o0JFYAgYf7QcOHj2d6O/SZqC5Jmwr2o9OLy9X6X/bIprk9IZ7J0Xv9t1 vqoyyv4ZQSf/9V+IQRq4uv9mDT3hd+2FFil0wDceTlWDmSb4ZQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFa9Kn0nZq9O68iP/kLbQbRhBOHkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYjg4MzRlMTAtYzA5My0z YjdhLTk1MjItNWI3ZjhhNTA0NGZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf4sEgO MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFsrnGWni2sYxXXd5ZjtVT9Z/2TeNUaic/yC77uDCaphe8bGe8lz gSS3ME6lgXgGDg8JJ8h+ZorG+KJScrjrtDT4cc2grX4iciT1qeS7rZkbDkR9h1Nu 94SGSBLSHjhGg0tnmMkUoy8K4au1Cv7taydCMj7Ak+26l8j9H+b18wfSL/4ZBA4E s6qYC/jIa5+VJrL84BGl6IFIoCX300A/IK2DskSsQZ4y/ApOsSO1/5hyQXhiCTaQ gLQhOHw3IKbpDwADpbMrdAih8bKkaLO4QzKR1wVNGI29j/72waBY/WwtQXSIz5gL EydEDYoW73oPUv4OkRstkN++Qd4lAwHdSIE= -----END CERTIFICATE-----Generated at Fri Apr 4 08:31:38 2025 by rpki-client