$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d14ddef2-acc1-3f42-b63a-0d20d7bba4ca.roa File: d14ddef2-acc1-3f42-b63a-0d20d7bba4ca.roa (raw, json) Hash identifier: 9NHA8yvz9Rh7y1R2NUbUZ3S225Eayf3N1jw9bvei6Zc= Subject key identifier: A4:E5:B7:65:2A:84:E3:BA:AE:46:E9:B6:34:E1:D6:F4:7C:29:5F:A2 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C5818EBA4A30CADBC840A780 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d14ddef2-acc1-3f42-b63a-0d20d7bba4ca.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 2001:4860:4830::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:8e:ba:4a:30:ca:db:c8:40:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=e4177c92-87c6-400e-9838-8904366f67ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e9:01:88:89:1c:2a:cb:5d:98:ac:b2:5b:7b: b9:5c:c2:20:f7:fe:d5:33:7b:0f:1d:a3:55:da:6d: f0:38:0b:b1:b9:de:db:c1:25:7c:80:75:2c:4c:db: 70:3f:ef:10:31:bf:a0:dc:5b:20:38:06:88:b0:90: cb:17:39:cc:7d:06:8b:8e:bd:14:e5:ca:b3:83:2c: 77:8e:1d:5f:bc:ad:c6:cb:73:c7:fa:ea:d9:d6:bd: f0:3d:88:e8:7b:ad:cb:88:ae:bb:b3:57:b2:de:43: ff:1c:06:00:51:00:3a:0b:37:10:2d:75:44:c7:b0: c2:8c:fc:36:3e:b7:eb:83:a6:5c:0b:12:4e:6b:98: 1b:02:6e:6c:fe:5f:f3:40:cf:8c:60:94:c0:17:14: 24:90:16:3a:e0:ed:63:52:80:66:62:c4:63:ff:a8: ca:8d:c8:d5:41:8b:41:30:35:dc:88:cd:8e:9c:dd: e1:ef:97:33:11:92:2e:d8:03:de:09:d8:2a:67:5e: b6:f8:ed:ff:c0:4d:60:40:5e:2b:f0:55:a6:78:c5: 38:84:30:e7:0a:13:a8:0d:6f:48:d5:b6:24:14:01: 36:77:05:60:b0:37:6a:cf:22:b8:58:c2:86:9a:49: 83:25:e0:ac:2f:33:6d:e9:f0:d1:1e:46:95:b9:d5: 1d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:E5:B7:65:2A:84:E3:BA:AE:46:E9:B6:34:E1:D6:F4:7C:29:5F:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d14ddef2-acc1-3f42-b63a-0d20d7bba4ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv6: 2001:4860:4830::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:4c:03:87:48:84:8a:eb:b8:32:29:77:bc:e2:ac:bc:7a:c5: 14:46:d1:49:05:b3:18:58:7c:69:9f:49:2a:29:54:5a:0e:f6: e8:5b:22:88:c2:9e:a0:8d:83:24:0a:0c:f5:0d:23:c6:67:94: 5b:0f:95:0f:3e:28:7e:7b:08:c8:39:14:a3:0d:19:61:78:78: f0:64:a6:46:bd:07:9d:5c:60:e0:57:c5:c5:fa:37:fb:9f:b9: 97:eb:15:af:e1:96:16:95:0e:9d:93:42:00:98:ff:e4:40:d4: 1c:8f:fb:d9:02:4d:f7:28:26:59:4e:03:c6:d2:62:bf:73:5c: 97:e2:a2:fd:d5:d6:5b:ed:10:c6:0f:bc:b4:dc:5f:ad:bf:57: 07:a2:b2:ba:b7:0b:51:c4:0d:90:5b:4d:ad:5a:84:f7:d5:68: d4:06:16:4a:f6:81:12:33:67:3c:ea:fc:a3:74:69:e2:6d:fb: 58:ef:31:53:1f:7b:f5:36:46:b8:3f:92:95:f0:ae:c2:0e:a7: 51:48:fc:64:f3:cb:68:fc:ff:fe:68:52:05:16:fb:57:ee:83: da:41:82:a7:83:67:38:87:09:d0:81:c3:22:94:7d:44:02:e8: 3c:b6:41:7b:cd:32:95:b3:bd:da:1b:d0:b6:d5:32:8a:6b:cd: 2b:79:ea:e5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjFgY66SjDK28hAp4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ZTQxNzdjOTItODdjNi00MDBlLTk4MzgtODkwNDM2NmY2N2FkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmekBiIkcKstdmKyyW3u5XMIg9/7VM3sPHaNV 2m3wOAuxud7bwSV8gHUsTNtwP+8QMb+g3FsgOAaIsJDLFznMfQaLjr0U5cqzgyx3 jh1fvK3Gy3PH+urZ1r3wPYjoe63LiK67s1ey3kP/HAYAUQA6CzcQLXVEx7DCjPw2 Prfrg6ZcCxJOa5gbAm5s/l/zQM+MYJTAFxQkkBY64O1jUoBmYsRj/6jKjcjVQYtB MDXciM2OnN3h75czEZIu2APeCdgqZ162+O3/wE1gQF4r8FWmeMU4hDDnChOoDW9I 1bYkFAE2dwVgsDdqzyK4WMKGmkmDJeCsLzNt6fDRHkaVudUd7QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKTlt2UqhOO6rkbptjTh1vR8KV+iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZDE0ZGRlZjItYWNjMS0z ZjQyLWI2M2EtMGQyMGQ3YmJhNGNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIYEgw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJNMA4dIhIrruDIpd7zirLx6xRRG0UkFsxhYfGmfSSopVFoO9uhb IojCnqCNgyQKDPUNI8ZnlFsPlQ8+KH57CMg5FKMNGWF4ePBkpka9B51cYOBXxcX6 N/ufuZfrFa/hlhaVDp2TQgCY/+RA1ByP+9kCTfcoJllOA8bSYr9zXJfiov3V1lvt EMYPvLTcX62/Vweisrq3C1HEDZBbTa1ahPfVaNQGFkr2gRIzZzzq/KN0aeJt+1jv MVMfe/U2Rrg/kpXwrsIOp1FI/GTzy2j8//5oUgUW+1fug9pBgqeDZziHCdCBwyKU fUQC6Dy2QXvNMpWzvdob0LbVMoprzSt56uU= -----END CERTIFICATE-----Generated at Sun Feb 16 15:30:49 2025 by rpki-client