$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d355633e-4ce4-383d-a8cd-f57ef09d250f.roa File: d355633e-4ce4-383d-a8cd-f57ef09d250f.roa (raw, json) Hash identifier: n5Vf//jWOnlikSP+a1gyTxZEjK+tbe0kkSoBitPp1ZQ= Subject key identifier: B5:43:12:F9:31:5C:A4:D6:30:D7:63:8D:B9:C0:7C:7C:BE:B7:3A:31 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C58234F876BF255341D63120 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d355633e-4ce4-383d-a8cd-f57ef09d250f.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 2607:f8b0:4004::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:34:f8:76:bf:25:53:41:d6:31:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=e5700803-0d9f-4fc7-8652-1b897446a39a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:0f:17:40:1b:7b:6b:ac:81:76:b8:00:99:bc: d3:ee:d6:8b:1b:67:79:50:25:5f:80:ab:cc:54:d4: 69:60:95:7b:86:64:01:8a:0b:fc:f2:88:ed:5c:19: 4a:80:8d:bb:48:88:98:ca:00:ae:80:8a:f4:b4:ac: ff:02:3a:05:0b:a4:ed:2c:6d:61:f3:72:ab:3f:a5: d6:41:65:94:38:d3:3a:bf:2a:7c:06:f1:cd:35:7b: 0b:e7:fa:7c:a2:14:14:da:c3:63:45:4c:9b:08:ba: 8a:17:7e:77:e6:46:3b:9b:c4:00:71:78:bd:e1:85: 49:d6:eb:8e:0e:0f:c1:c1:1c:8d:52:41:09:d1:e9: e1:f6:6c:fd:27:ec:52:d9:a2:7a:c8:eb:a0:99:d1: 29:90:a5:93:59:51:21:8b:78:83:d3:56:d8:33:72: 31:c9:42:a5:0f:2d:2a:fe:91:16:c5:b2:10:bd:f9: 18:0d:44:d4:d8:bb:a4:11:59:8c:8f:9f:d4:e1:be: b1:21:f2:ec:96:ab:c1:fe:b7:11:8a:6a:81:2b:ee: c9:84:9a:b2:a8:44:26:6b:ad:f2:1d:3e:17:ed:4c: 9c:cd:03:e1:62:57:78:41:99:c7:e7:b1:49:8a:44: 2e:50:a8:c8:04:e1:58:19:6f:fa:b1:b5:5b:8c:c6: fa:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:43:12:F9:31:5C:A4:D6:30:D7:63:8D:B9:C0:7C:7C:BE:B7:3A:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d355633e-4ce4-383d-a8cd-f57ef09d250f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv6: 2607:f8b0:4004::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:b6:54:ad:35:9f:54:54:f9:c6:94:90:c8:85:6c:7f:1e:9c: ac:8b:fb:c7:3d:15:20:a9:83:65:ab:32:36:7f:7b:be:b2:68: a0:b9:a5:ca:c2:2a:f7:f6:82:21:d6:5d:c8:f6:1a:1f:99:42: cf:b3:94:15:c9:03:c6:1f:63:6b:dd:1f:47:cc:2a:b1:f0:4b: 40:2d:22:f4:30:18:4f:ea:57:c4:bf:6e:8c:79:d4:b1:0e:43: f1:bf:77:99:bd:8e:19:e8:58:70:6e:cc:21:c0:4d:0c:36:46: 01:fc:79:36:8a:dd:1b:2f:a2:f7:a5:0f:a2:fa:8f:6b:b0:45: 0f:20:1f:25:ad:c8:03:84:90:0c:7c:25:09:6c:4c:9e:ae:ff: 1e:47:8b:63:67:5b:4e:56:32:0c:f3:4d:f2:a2:04:cd:84:da: 7a:eb:3f:02:ac:82:77:8b:76:1d:f2:6e:47:59:b6:0c:7c:8c: bb:bb:4c:6f:0e:1a:a0:64:48:08:ca:70:f9:81:57:80:50:ea: e2:cb:14:1b:28:9a:e8:d8:e1:69:f9:2a:52:c1:7c:84:f8:3a: dd:a8:2a:a4:64:82:98:b7:8c:b7:0f:15:0c:d6:eb:50:6e:09: 1b:e5:11:f2:63:e4:25:30:b6:ef:76:fa:d3:6e:55:da:2e:59: dd:3e:37:18 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjFgjT4dr8lU0HWMSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ZTU3MDA4MDMtMGQ5Zi00ZmM3LTg2NTItMWI4OTc0NDZhMzlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjg8XQBt7a6yBdrgAmbzT7taLG2d5UCVfgKvM VNRpYJV7hmQBigv88ojtXBlKgI27SIiYygCugIr0tKz/AjoFC6TtLG1h83KrP6XW QWWUONM6vyp8BvHNNXsL5/p8ohQU2sNjRUybCLqKF3535kY7m8QAcXi94YVJ1uuO Dg/BwRyNUkEJ0enh9mz9J+xS2aJ6yOugmdEpkKWTWVEhi3iD01bYM3IxyUKlDy0q /pEWxbIQvfkYDUTU2LukEVmMj5/U4b6xIfLslqvB/rcRimqBK+7JhJqyqEQma63y HT4X7UyczQPhYld4QZnH57FJikQuUKjIBOFYGW/6sbVbjMb6VQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLVDEvkxXKTWMNdjjbnAfHy+tzoxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZDM1NTYzM2UtNGNlNC0z ODNkLWE4Y2QtZjU3ZWYwOWQyNTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf4sEAE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIa2VK01n1RU+caUkMiFbH8enKyL+8c9FSCpg2WrMjZ/e76yaKC5 pcrCKvf2giHWXcj2Gh+ZQs+zlBXJA8YfY2vdH0fMKrHwS0AtIvQwGE/qV8S/box5 1LEOQ/G/d5m9jhnoWHBuzCHATQw2RgH8eTaK3RsvovelD6L6j2uwRQ8gHyWtyAOE kAx8JQlsTJ6u/x5Hi2NnW05WMgzzTfKiBM2E2nrrPwKsgneLdh3ybkdZtgx8jLu7 TG8OGqBkSAjKcPmBV4BQ6uLLFBsomujY4Wn5KlLBfIT4Ot2oKqRkgpi3jLcPFQzW 61BuCRvlEfJj5CUwtu92+tNuVdouWd0+Nxg= -----END CERTIFICATE-----Generated at Sun Feb 16 15:54:39 2025 by rpki-client