$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d049ed4b-d7b5-36aa-87e3-55b846e688a1.roa File: d049ed4b-d7b5-36aa-87e3-55b846e688a1.roa (raw, json) Hash identifier: tbMMc1+uLzEqZkw9nEVTSaLFs4Sws70/cFrvM+v0qH4= Subject key identifier: 7E:4D:83:20:5E:28:F5:BF:5E:A8:8F:CF:E2:21:19:65:69:15:EF:EC Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C5818CAD02BD6066F27C7C00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d049ed4b-d7b5-36aa-87e3-55b846e688a1.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 2607:f8b0:4000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:8c:ad:02:bd:60:66:f2:7c:7c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=406127c3-5811-41fb-863d-4a738994ac61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:dd:5a:4b:4a:6a:45:b9:5b:3e:fe:f4:b6:a4: 36:b8:1f:86:f3:18:f6:ce:ed:c8:df:d2:59:4f:6b: 3e:5e:40:aa:f9:a4:85:9d:37:60:76:aa:de:81:50: 77:ac:4b:bf:13:43:9d:ef:d9:c3:b3:3a:a2:d8:d0: d4:83:2b:3b:33:a3:cf:15:6a:80:3e:6d:d6:3c:1b: 53:ef:66:9a:02:78:6a:fb:ff:4b:3d:74:a3:ab:07: e0:ba:74:fa:60:c7:01:35:e7:ed:5f:f0:54:fb:2c: 06:48:a9:13:a8:c0:a0:53:00:28:21:59:d7:1f:de: ea:71:db:3e:ee:82:df:3c:3b:da:a1:ce:74:07:21: cd:f5:95:95:fe:b7:1b:9b:fe:37:15:34:82:12:03: f8:18:e7:a0:2a:5d:6a:9b:6a:00:d7:a8:80:07:8e: 16:2f:4a:1e:f5:4f:29:0c:d0:6b:1c:d9:86:e5:eb: 5e:aa:f9:c3:28:a3:2a:9f:ac:f9:87:0e:8a:b9:a3: a1:be:f2:54:b4:5e:4f:82:5c:d9:32:53:5c:d5:28: 99:8a:45:d7:3e:eb:d3:d3:27:f8:46:27:00:1b:0c: 56:df:49:5a:35:9a:46:97:9c:17:55:9b:36:b9:2b: 71:92:73:07:72:23:49:19:dd:d6:0f:43:14:00:0a: 1d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:4D:83:20:5E:28:F5:BF:5E:A8:8F:CF:E2:21:19:65:69:15:EF:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d049ed4b-d7b5-36aa-87e3-55b846e688a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv6: 2607:f8b0:4000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:aa:bc:d5:b2:c3:e1:4a:b1:8b:49:df:5c:b3:c1:25:94:c2: e1:ee:ac:0d:5c:f8:7e:a8:e1:0b:05:ae:94:0d:f1:0b:9c:fe: ea:71:91:01:99:61:64:3e:bd:a0:1e:3c:8e:9c:85:fe:bf:ad: c0:7f:a9:e9:8c:75:df:51:01:dc:7d:03:00:bd:e3:15:b2:a5: 26:c4:0e:19:13:e3:7d:e2:65:15:59:61:09:1c:fc:bd:f0:15: 1c:3e:4c:5c:04:e7:6a:ee:11:9f:ab:7a:6f:da:35:af:cd:67: aa:4c:ea:41:27:b3:93:36:be:d0:5e:6e:e8:30:85:c3:e1:3d: 02:d3:3c:85:6d:63:08:37:84:ef:c8:b9:c3:ee:2f:16:05:a2: 72:65:af:34:94:a5:70:bd:af:7b:ab:57:e4:ba:40:f8:a2:ad: 00:7d:49:70:11:33:18:05:ab:b1:71:60:80:1f:b1:c5:a4:46: d9:6d:0c:67:88:72:9c:eb:22:01:d5:02:48:f3:70:df:5b:2f: 19:98:4b:af:a9:ba:27:bf:77:d6:10:46:c5:11:cc:0a:ae:0b: 12:86:6b:05:d1:dd:04:35:4c:38:b0:f4:08:96:cc:5d:b2:99: b3:8b:2d:ff:dd:4a:a0:da:b3:23:95:e7:57:eb:b1:2c:bf:7a: e4:9e:7d:0e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjFgYytAr1gZvJ8fAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NDA2MTI3YzMtNTgxMS00MWZiLTg2M2QtNGE3Mzg5OTRhYzYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAod1aS0pqRblbPv70tqQ2uB+G8xj2zu3I39JZ T2s+XkCq+aSFnTdgdqregVB3rEu/E0Od79nDszqi2NDUgys7M6PPFWqAPm3WPBtT 72aaAnhq+/9LPXSjqwfgunT6YMcBNeftX/BU+ywGSKkTqMCgUwAoIVnXH97qcds+ 7oLfPDvaoc50ByHN9ZWV/rcbm/43FTSCEgP4GOegKl1qm2oA16iAB44WL0oe9U8p DNBrHNmG5eteqvnDKKMqn6z5hw6KuaOhvvJUtF5PglzZMlNc1SiZikXXPuvT0yf4 RicAGwxW30laNZpGl5wXVZs2uStxknMHciNJGd3WD0MUAAod0wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFH5NgyBeKPW/XqiPz+IhGWVpFe/sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZDA0OWVkNGItZDdiNS0z NmFhLTg3ZTMtNTViODQ2ZTY4OGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf4sEAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALOqvNWyw+FKsYtJ31yzwSWUwuHurA1c+H6o4QsFrpQN8Quc/upx kQGZYWQ+vaAePI6chf6/rcB/qemMdd9RAdx9AwC94xWypSbEDhkT433iZRVZYQkc /L3wFRw+TFwE52ruEZ+rem/aNa/NZ6pM6kEns5M2vtBebugwhcPhPQLTPIVtYwg3 hO/IucPuLxYFonJlrzSUpXC9r3urV+S6QPiirQB9SXARMxgFq7FxYIAfscWkRtlt DGeIcpzrIgHVAkjzcN9bLxmYS6+puie/d9YQRsURzAquCxKGawXR3QQ1TDiw9AiW zF2ymbOLLf/dSqDasyOV51frsSy/euSefQ4= -----END CERTIFICATE-----Generated at Sun Feb 16 15:13:54 2025 by rpki-client