$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/321f74ce-9c7c-3ab5-b0ba-c0345846027b.roa File: 321f74ce-9c7c-3ab5-b0ba-c0345846027b.roa (raw, json) Hash identifier: Hq0Hwhus7cr4aI37111cQmuqQ0Zh8UKSvaFrtdi/R7g= Subject key identifier: 25:32:44:5B:E1:18:96:3E:61:7F:47:0D:62:73:67:0A:CE:98:E4:48 Certificate issuer: /CN=ebd609f9-488f-4ccb-b562-f82edd8191dd Certificate serial: 010D0C9F43285848FD56B55E95371484CB2B7880 Authority key identifier: FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/321f74ce-9c7c-3ab5-b0ba-c0345846027b.roa Signing time: Mon 24 Feb 2025 14:00:52 +0000 ROA not before: Mon 24 Feb 2025 14:00:52 +0000 ROA not after: Sun 25 May 2025 13:00:52 +0000 asID: 25623 IP address blocks: 2001:4830:3100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:56:b5:5e:95:37:14:84:cb:2b:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebd609f9-488f-4ccb-b562-f82edd8191dd Validity Not Before: Feb 24 14:00:52 2025 GMT Not After : May 25 13:00:52 2025 GMT Subject: CN=00aae278-95fe-44f1-a58a-7d22befe48da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:11:5c:92:54:49:6a:d8:ab:9a:56:ac:4d:b5: 3c:8c:15:c3:41:7f:eb:f1:8e:1e:1a:7f:c5:25:66: e9:cd:ee:04:04:6c:ca:2c:66:fb:d3:7a:54:98:13: 3d:3b:05:8c:a7:8b:ab:62:1b:b8:3e:ca:90:09:be: 39:8c:d3:e0:31:72:07:9a:f9:b2:c0:8a:de:40:59: 80:e7:1c:b2:dc:26:da:ce:22:21:0d:8e:91:61:7e: 89:4e:45:ac:c6:ad:8c:a0:73:07:c4:a3:18:41:fa: 0b:09:11:a5:5a:66:c7:97:20:a0:da:15:e2:e5:d8: 1f:5e:ff:03:df:6e:2d:ee:30:6e:2f:b8:75:6b:9e: c4:b4:e7:d3:49:d2:97:83:53:63:16:20:7f:8a:0b: 97:4c:24:54:f2:a6:f7:bf:54:26:01:eb:21:e1:48: e9:92:fc:75:58:bc:2e:d1:f5:64:bc:b0:e6:5d:f0: 0c:b1:20:59:2f:e2:a3:07:64:d5:fb:ab:dd:78:4b: 0e:4b:25:04:b3:60:67:fc:01:9d:8c:9c:d1:76:b5: c2:1a:0e:8f:7d:11:a4:26:91:81:f1:14:97:f6:9b: eb:d5:6b:71:80:45:d7:c5:59:d1:5a:55:3f:0a:21: 15:e2:03:22:56:83:dd:c8:32:5f:75:b8:32:13:4d: e0:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:32:44:5B:E1:18:96:3E:61:7F:47:0D:62:73:67:0A:CE:98:E4:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/321f74ce-9c7c-3ab5-b0ba-c0345846027b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl X509v3 Authority Key Identifier: keyid:FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer sbgp-ipAddrBlock: critical IPv6: 2001:4830:3100::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:34:31:c1:d5:7b:39:8f:da:6e:20:68:5a:9f:2f:8c:85:85: a2:c2:d6:1f:54:c9:24:52:d3:1a:cb:78:72:7e:7f:71:95:7a: dd:2f:06:61:4c:06:4b:64:ab:77:7f:e0:7b:4d:59:af:e1:16: 71:b2:48:57:8c:f7:0a:ae:70:9c:04:fc:ec:e0:b8:9a:99:72: a7:14:0b:50:a8:44:13:26:c8:9d:3d:23:69:af:5c:7a:9e:ba: a5:80:ee:da:3f:da:be:a3:e4:25:ab:e6:66:8d:8b:60:8c:8e: c0:ad:eb:1e:53:db:04:6e:f4:0b:eb:6f:5c:9f:bb:15:41:63: a1:9b:04:ce:a5:4b:1d:91:d9:16:93:2e:b8:fc:86:7b:d7:2e: 94:79:e8:ef:6b:12:e8:6c:59:63:0c:c4:65:42:ca:ae:fe:63: 45:0c:4e:23:f0:e4:1e:fb:8b:3a:cd:87:a1:1c:1f:25:b0:7f: 71:de:b3:a4:88:3f:d3:b3:30:2b:2e:75:4a:6f:08:55:0d:c7: 88:3c:97:bc:9f:85:ff:86:b5:6f:e2:a6:88:e6:92:b6:b9:11: 60:75:45:3a:85:8f:90:a2:70:ca:6d:e6:0c:df:18:90:67:d6: d3:e4:65:5a:f2:06:12:fa:3e:74:59:74:9b:1b:e9:17:fd:e2: 9e:d1:5b:a2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj9VrVelTcUhMsreIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWJkNjA5ZjktNDg4Zi00Y2NiLWI1NjItZjgyZWRkODE5 MWRkMB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk MDBhYWUyNzgtOTVmZS00NGYxLWE1OGEtN2QyMmJlZmU0OGRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5hFcklRJatirmlasTbU8jBXDQX/r8Y4eGn/F JWbpze4EBGzKLGb703pUmBM9OwWMp4urYhu4PsqQCb45jNPgMXIHmvmywIreQFmA 5xyy3CbaziIhDY6RYX6JTkWsxq2MoHMHxKMYQfoLCRGlWmbHlyCg2hXi5dgfXv8D 324t7jBuL7h1a57EtOfTSdKXg1NjFiB/iguXTCRU8qb3v1QmAesh4Ujpkvx1WLwu 0fVkvLDmXfAMsSBZL+KjB2TV+6vdeEsOSyUEs2Bn/AGdjJzRdrXCGg6PfRGkJpGB 8RSX9pvr1WtxgEXXxVnRWlU/CiEV4gMiVoPdyDJfdbgyE03gywIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCUyRFvhGJY+YX9HDWJzZwrOmORIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lYmQ2 MDlmOS00ODhmLTRjY2ItYjU2Mi1mODJlZGQ4MTkxZGQvMzIxZjc0Y2UtOWM3Yy0z YWI1LWIwYmEtYzAzNDU4NDYwMjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZWJkNjA5ZjktNDg4Zi00Y2NiLWI1 NjItZjgyZWRkODE5MWRkL2ViZDYwOWY5LTQ4OGYtNGNjYi1iNTYyLWY4MmVkZDgx OTFkZC5jcmwwHwYDVR0jBBgwFoAU/wob5oxF01YqMPBDjcIXckTApZQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lYmQ2MDlmOS00ODhmLTRjY2ItYjU2Mi1mODJl ZGQ4MTkxZGQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIMDEA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACE0McHVezmP2m4gaFqfL4yFhaLC1h9UySRS0xrLeHJ+f3GVet0v BmFMBktkq3d/4HtNWa/hFnGySFeM9wqucJwE/OzguJqZcqcUC1CoRBMmyJ09I2mv XHqeuqWA7to/2r6j5CWr5maNi2CMjsCt6x5T2wRu9Avrb1yfuxVBY6GbBM6lSx2R 2RaTLrj8hnvXLpR56O9rEuhsWWMMxGVCyq7+Y0UMTiPw5B77izrNh6EcHyWwf3He s6SIP9OzMCsudUpvCFUNx4g8l7yfhf+GtW/ipojmkra5EWB1RTqFj5CicMpt5gzf GJBn1tPkZVryBhL6PnRZdJsb6Rf94p7RW6I= -----END CERTIFICATE-----Generated at Fri Mar 14 11:09:36 2025 by rpki-client