$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c71b1b05-e55c-3676-9889-10923e86a187.roa File: c71b1b05-e55c-3676-9889-10923e86a187.roa (raw, json) Hash identifier: AqdcjJ+B2mrFPhHmewmtd7b0BRlrByqtUOEzOnE1s58= Subject key identifier: 4B:36:94:1A:45:A4:E5:E3:87:1F:A3:65:B8:04:9B:28:6D:38:36:7B Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C582337825436DDA1FCB2580 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c71b1b05-e55c-3676-9889-10923e86a187.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 2001:4860:4829::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:33:78:25:43:6d:da:1f:cb:25:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=2cf85e61-f93e-47f4-8b1e-583813b27910 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ba:ba:9f:61:51:c6:00:0a:18:6b:55:21:a4: 37:83:a6:52:21:cc:78:d8:5c:0c:1d:c4:35:bb:c8: 93:17:7d:d3:20:a6:00:43:f3:f2:ac:0c:8e:8c:0d: a2:37:a6:56:9d:65:f3:c8:11:17:1a:8e:03:3c:a1: 9e:b5:97:df:88:14:2e:66:31:93:3d:38:66:64:aa: 3b:39:b5:df:76:c3:26:a5:16:6f:ce:59:c8:ee:b8: 72:9c:a5:5c:da:18:b6:df:7f:4c:b4:e4:27:cd:1f: 2b:55:f2:6d:29:c7:35:d9:2c:72:d9:6f:28:6e:18: 4d:c1:92:da:fe:d9:a1:50:51:26:2c:02:c5:d4:f0: 44:e2:6a:79:4c:9e:6d:1e:66:26:31:10:8f:af:e9: d5:cb:62:a4:29:1a:4d:39:bb:b4:f2:97:40:af:31: 8f:21:69:9a:96:02:ab:20:ba:6a:54:94:60:7b:99: a7:53:e0:c9:4a:a8:e6:8a:3f:b9:2a:05:1a:9f:f6: 45:01:de:e8:ca:1c:11:35:94:58:9f:77:21:4d:5d: a0:fb:b7:77:51:54:7a:09:96:70:0d:69:d8:6f:f7: 2f:b1:9e:c6:b3:90:e7:f7:5b:38:93:3b:0a:aa:1e: 6e:de:d7:8c:3d:ed:f2:93:56:77:37:5f:80:9f:2c: 2a:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:36:94:1A:45:A4:E5:E3:87:1F:A3:65:B8:04:9B:28:6D:38:36:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c71b1b05-e55c-3676-9889-10923e86a187.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv6: 2001:4860:4829::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:45:7f:37:ab:2a:72:d1:a4:46:46:23:8e:d8:6d:c3:67:ec: 85:a8:a9:43:90:86:7e:1f:65:4a:d8:87:33:9f:92:de:fc:6f: 92:e9:cd:7e:20:01:d9:55:3f:86:d0:64:81:e7:85:87:3d:2b: b7:27:28:e8:0b:41:ee:c4:0c:a4:26:b2:33:fe:00:f0:b5:7a: 58:c5:a0:46:3d:06:b1:77:e8:14:b3:fd:df:fe:86:80:5f:7e: bd:09:b2:08:5b:0b:fb:4a:7d:ee:f1:7a:33:2e:a5:6e:d3:65: dc:f2:b5:b7:e6:94:d7:9a:b1:1a:fd:97:1d:d9:e0:72:cc:6b: 05:81:36:d7:e1:51:72:f5:b6:ae:c1:91:84:76:f0:af:9f:ce: 59:ec:7c:0d:f8:b5:29:1d:c2:79:bc:ea:6a:08:4c:98:1f:b7: d8:fc:ec:52:b4:f3:af:5b:6b:79:db:7e:cf:63:a6:05:a6:c1: 4e:06:ea:0d:d3:33:b7:4e:84:a2:4b:72:4b:bf:0d:3b:fb:92: 58:9a:1d:bd:b1:92:0b:fd:e0:3b:f2:43:89:a9:cf:1e:60:5b: b8:0e:38:e2:c4:ae:c2:39:18:f8:4e:e4:dd:8f:23:07:ce:52: b8:34:4a:e0:c0:67:37:4e:28:89:b2:9b:95:89:39:a1:57:c6: 96:79:3f:f0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjFgjN4JUNt2h/LJYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MmNmODVlNjEtZjkzZS00N2Y0LThiMWUtNTgzODEzYjI3OTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLq6n2FRxgAKGGtVIaQ3g6ZSIcx42FwMHcQ1 u8iTF33TIKYAQ/PyrAyOjA2iN6ZWnWXzyBEXGo4DPKGetZffiBQuZjGTPThmZKo7 ObXfdsMmpRZvzlnI7rhynKVc2hi2339MtOQnzR8rVfJtKcc12Sxy2W8obhhNwZLa /tmhUFEmLALF1PBE4mp5TJ5tHmYmMRCPr+nVy2KkKRpNObu08pdArzGPIWmalgKr ILpqVJRge5mnU+DJSqjmij+5KgUan/ZFAd7oyhwRNZRYn3chTV2g+7d3UVR6CZZw DWnYb/cvsZ7Gs5Dn91s4kzsKqh5u3teMPe3yk1Z3N1+Anywq0QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEs2lBpFpOXjhx+jZbgEmyhtODZ7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYzcxYjFiMDUtZTU1Yy0z Njc2LTk4ODktMTA5MjNlODZhMTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIYEgp MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJ9FfzerKnLRpEZGI47YbcNn7IWoqUOQhn4fZUrYhzOfkt78b5Lp zX4gAdlVP4bQZIHnhYc9K7cnKOgLQe7EDKQmsjP+APC1eljFoEY9BrF36BSz/d/+ hoBffr0JsghbC/tKfe7xejMupW7TZdzytbfmlNeasRr9lx3Z4HLMawWBNtfhUXL1 tq7BkYR28K+fzlnsfA34tSkdwnm86moITJgft9j87FK0869ba3nbfs9jpgWmwU4G 6g3TM7dOhKJLcku/DTv7kliaHb2xkgv94DvyQ4mpzx5gW7gOOOLErsI5GPhO5N2P IwfOUrg0SuDAZzdOKImym5WJOaFXxpZ5P/A= -----END CERTIFICATE-----Generated at Sun Feb 16 15:09:44 2025 by rpki-client