$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dd2a5a82-f542-399a-bf49-fb94c1347733.roa File: dd2a5a82-f542-399a-bf49-fb94c1347733.roa (raw, json) Hash identifier: cmCWXma5Qi/oQJh547esVNx5hi+UPi7MkO8fVzJvBLM= Subject key identifier: 5A:80:9C:4C:8F:65:D1:79:72:56:38:CC:06:EA:9D:F4:0E:61:A5:36 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C5818E2E6E123A52D35C61C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dd2a5a82-f542-399a-bf49-fb94c1347733.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 2607:f8b0:4014::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:8e:2e:6e:12:3a:52:d3:5c:61:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=2358c606-aefe-4cd6-87b0-70bd917bba29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:bb:46:e7:d2:02:31:41:4d:0c:6d:a9:f9:2e: 01:04:76:25:74:30:2f:5e:67:d8:ad:39:8f:59:a6: f5:83:aa:66:15:16:40:6c:e7:b4:90:ff:87:89:af: f1:78:f7:16:ca:23:a9:47:45:e3:be:fe:22:2f:58: d6:66:07:52:a9:dd:8f:3b:93:8d:e2:73:b6:0d:61: 90:a3:fa:f0:b1:32:09:53:83:17:98:d0:8d:b9:63: 1c:e8:e1:23:e7:5b:2a:1f:e6:52:3f:87:fc:28:df: b4:f4:76:d0:1f:75:96:5e:72:e6:64:8a:26:47:65: 05:07:f5:ae:5a:1c:61:f1:ed:40:6b:35:de:7e:cd: 15:b4:0b:d8:18:07:af:b9:ef:09:8e:97:a2:4a:ea: 8d:72:74:0b:3f:e8:31:29:df:b2:f3:41:0b:ca:3e: 16:ab:75:d6:eb:1f:e1:c9:e9:8d:94:bc:91:12:97: 76:c5:9b:14:70:8c:cd:52:2c:9f:c3:25:9c:d6:d2: 6b:83:2d:57:b3:ca:9b:49:11:42:e5:f4:78:65:8c: da:65:08:db:64:94:d6:c6:d8:80:59:45:32:b3:a5: 33:a0:09:7a:04:92:92:f5:8f:43:e2:68:d7:5f:81: 9f:c9:f8:23:b7:40:2c:32:8f:74:6c:32:e9:ba:ec: 30:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:80:9C:4C:8F:65:D1:79:72:56:38:CC:06:EA:9D:F4:0E:61:A5:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dd2a5a82-f542-399a-bf49-fb94c1347733.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv6: 2607:f8b0:4014::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:26:36:73:a7:48:be:17:dd:df:bc:42:51:8d:0d:2f:d3:94: f8:b2:41:fa:30:e2:68:68:96:c2:e9:a9:0c:f3:41:45:08:95: 57:0d:c2:42:cc:7c:ab:ed:1f:36:53:ed:cb:c5:cc:f8:86:31: c6:55:08:b9:ed:9e:73:46:07:f3:33:46:86:75:94:38:ca:3c: 13:f1:92:7e:00:f0:cf:64:07:e1:65:6c:11:e8:a4:df:a6:6a: 0c:5a:97:c7:26:5a:58:b7:3d:ff:e9:f7:e5:40:a7:ba:ba:53: ca:9f:a0:ff:b6:8e:d0:1c:1c:d5:a3:8e:e7:73:de:17:e4:0d: 60:4d:13:55:bf:df:49:11:e8:80:e1:3f:d7:a0:0a:be:93:f0: 7c:fe:3c:9d:ee:9f:66:38:01:1d:7f:41:de:70:1b:60:ba:86: 1a:85:0d:73:75:3f:06:c6:0c:05:fc:ee:63:cc:06:5f:a4:c2: 33:2c:06:58:da:60:f6:c2:c0:c5:3c:42:07:a0:d0:51:86:7d: d0:71:ff:df:ac:f5:5f:5c:7f:8d:be:c5:60:7f:ef:1b:73:df: e2:77:f3:77:bd:e8:90:14:0e:97:25:fb:de:fe:35:4f:b3:e2: 76:e6:ba:23:22:bb:a5:7f:d0:53:42:a7:3f:fb:93:33:68:94: 58:f8:40:ae -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjFgY4ubhI6UtNcYcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MjM1OGM2MDYtYWVmZS00Y2Q2LTg3YjAtNzBiZDkxN2JiYTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLtG59ICMUFNDG2p+S4BBHYldDAvXmfYrTmP Wab1g6pmFRZAbOe0kP+Hia/xePcWyiOpR0Xjvv4iL1jWZgdSqd2PO5ON4nO2DWGQ o/rwsTIJU4MXmNCNuWMc6OEj51sqH+ZSP4f8KN+09HbQH3WWXnLmZIomR2UFB/Wu Whxh8e1AazXefs0VtAvYGAevue8JjpeiSuqNcnQLP+gxKd+y80ELyj4Wq3XW6x/h yemNlLyREpd2xZsUcIzNUiyfwyWc1tJrgy1Xs8qbSRFC5fR4ZYzaZQjbZJTWxtiA WUUys6UzoAl6BJKS9Y9D4mjXX4Gfyfgjt0AsMo90bDLpuuwwWQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFqAnEyPZdF5clY4zAbqnfQOYaU2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZGQyYTVhODItZjU0Mi0z OTlhLWJmNDktZmI5NGMxMzQ3NzMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf4sEAU MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHQmNnOnSL4X3d+8QlGNDS/TlPiyQfow4mholsLpqQzzQUUIlVcN wkLMfKvtHzZT7cvFzPiGMcZVCLntnnNGB/MzRoZ1lDjKPBPxkn4A8M9kB+FlbBHo pN+magxal8cmWli3Pf/p9+VAp7q6U8qfoP+2jtAcHNWjjudz3hfkDWBNE1W/30kR 6IDhP9egCr6T8Hz+PJ3un2Y4AR1/Qd5wG2C6hhqFDXN1PwbGDAX87mPMBl+kwjMs BljaYPbCwMU8Qgeg0FGGfdBx/9+s9V9cf42+xWB/7xtz3+J383e96JAUDpcl+97+ NU+z4nbmuiMiu6V/0FNCpz/7kzNolFj4QK4= -----END CERTIFICATE-----Generated at Fri Apr 4 08:45:19 2025 by rpki-client