$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/489ac930-1bcb-3d1b-ae05-6c485b3d05f4.roa File: 489ac930-1bcb-3d1b-ae05-6c485b3d05f4.roa (raw, json) Hash identifier: nmdp0U7MxAAYGdjvNukxfchLtWG4HZ0NjBom5vUyknE= Subject key identifier: 95:99:A6:9F:57:18:16:35:C4:83:E6:BE:50:EF:18:6E:8F:B6:90:A3 Certificate issuer: /CN=ebd609f9-488f-4ccb-b562-f82edd8191dd Certificate serial: 010D0C9F432858490B4C1E9C455981B313532E80 Authority key identifier: FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/489ac930-1bcb-3d1b-ae05-6c485b3d05f4.roa Signing time: Sat 01 Mar 2025 14:00:52 +0000 ROA not before: Sat 01 Mar 2025 14:00:52 +0000 ROA not after: Fri 30 May 2025 13:00:52 +0000 asID: 22147 IP address blocks: 2001:4830:c170::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0b:4c:1e:9c:45:59:81:b3:13:53:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebd609f9-488f-4ccb-b562-f82edd8191dd Validity Not Before: Mar 1 14:00:52 2025 GMT Not After : May 30 13:00:52 2025 GMT Subject: CN=c65cd051-4846-4fcf-bfd7-5a7071ef7bc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:4b:06:42:56:14:c6:fb:10:72:55:89:e4:d2: dc:3b:01:92:44:93:21:5e:89:ef:72:32:23:0f:e2: 74:25:2a:d4:e7:91:0b:89:3d:70:15:36:6f:95:db: 22:5d:85:62:39:f7:7a:c8:cf:8b:af:c1:0d:60:f3: 05:ff:a0:f0:34:08:c6:68:bf:49:e6:d2:80:0c:61: f2:51:1f:1d:23:70:b7:d4:70:07:60:0a:50:4b:cc: 4d:f1:df:01:c7:5e:f2:66:a8:ce:9d:d8:f6:8a:52: cb:30:4b:80:b6:c2:72:f3:c1:56:13:a1:22:6f:9b: 35:ff:ab:c9:da:95:a9:97:95:60:4b:dd:5b:81:0d: c3:b8:dd:71:68:c6:a3:e2:6b:f3:84:2b:e7:6a:ad: f4:cb:79:8f:dd:ff:87:b6:b6:e7:35:30:02:fe:53: cb:54:5f:2d:00:f6:93:4b:1d:d4:95:2c:63:fc:40: 8d:91:73:f2:9b:54:58:6b:73:4a:7a:67:f8:5c:d8: 36:08:79:7a:23:fa:74:e2:b6:c7:4d:37:3e:af:0d: ec:ec:8d:fa:28:2d:76:fb:f6:98:b3:4e:e3:78:da: e1:a4:41:9d:92:7e:f3:16:30:3c:99:e8:a7:a9:5f: 8b:64:7a:11:ee:39:e8:7d:52:2c:1c:00:75:b8:d0: a7:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:99:A6:9F:57:18:16:35:C4:83:E6:BE:50:EF:18:6E:8F:B6:90:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/489ac930-1bcb-3d1b-ae05-6c485b3d05f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl X509v3 Authority Key Identifier: keyid:FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer sbgp-ipAddrBlock: critical IPv6: 2001:4830:c170::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:7b:82:33:05:25:4f:32:b1:83:dd:9c:4a:e6:b9:5c:07:e5: 0c:cb:b5:0b:dd:44:ac:72:a6:3c:d4:ea:ef:aa:31:3a:ae:8b: 44:e9:94:cc:df:9a:15:35:f8:3e:3e:ac:b3:a7:e5:70:0f:d4: bd:d4:b8:13:a6:da:35:c3:74:56:35:89:54:bd:d8:69:65:09: be:ca:5d:5a:60:a7:7b:38:44:68:8e:ba:45:b0:6b:ba:e8:4a: ea:bf:2e:0e:8f:7a:2e:22:47:ae:5f:a6:39:0f:89:48:ea:b1: d3:32:cc:bb:91:b3:56:47:de:72:34:c7:71:7e:1e:0b:7f:9f: cc:00:bd:8b:09:92:03:35:ce:0a:1a:25:02:bf:ce:cc:21:64: 56:17:f7:1b:0b:b2:fa:cc:a3:c0:45:1c:86:c3:06:94:b1:a8: 7f:d7:e9:c0:f1:13:c3:95:35:7c:7e:4b:9d:d7:0c:33:39:fb: b6:83:55:40:8d:15:13:77:d3:f1:c5:e3:26:19:1c:bc:af:ad: b9:c4:40:13:3c:c0:f7:41:c6:26:b4:ba:c8:d2:5c:a6:69:0a: e0:14:8d:89:ae:7b:0d:34:15:4e:55:8e:09:c0:9b:70:b0:da: 9e:94:5f:74:10:20:ad:52:39:a7:cf:bd:bd:b6:36:49:a5:c9: 02:9f:1c:bb -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkLTB6cRVmBsxNTLoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWJkNjA5ZjktNDg4Zi00Y2NiLWI1NjItZjgyZWRkODE5 MWRkMB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk YzY1Y2QwNTEtNDg0Ni00ZmNmLWJmZDctNWE3MDcxZWY3YmM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg0sGQlYUxvsQclWJ5NLcOwGSRJMhXonvcjIj D+J0JSrU55ELiT1wFTZvldsiXYViOfd6yM+Lr8ENYPMF/6DwNAjGaL9J5tKADGHy UR8dI3C31HAHYApQS8xN8d8Bx17yZqjOndj2ilLLMEuAtsJy88FWE6Eib5s1/6vJ 2pWpl5VgS91bgQ3DuN1xaMaj4mvzhCvnaq30y3mP3f+HtrbnNTAC/lPLVF8tAPaT Sx3UlSxj/ECNkXPym1RYa3NKemf4XNg2CHl6I/p04rbHTTc+rw3s7I36KC12+/aY s07jeNrhpEGdkn7zFjA8meinqV+LZHoR7jnofVIsHAB1uNCnvwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJWZpp9XGBY1xIPmvlDvGG6PtpCjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lYmQ2 MDlmOS00ODhmLTRjY2ItYjU2Mi1mODJlZGQ4MTkxZGQvNDg5YWM5MzAtMWJjYi0z ZDFiLWFlMDUtNmM0ODViM2QwNWY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZWJkNjA5ZjktNDg4Zi00Y2NiLWI1 NjItZjgyZWRkODE5MWRkL2ViZDYwOWY5LTQ4OGYtNGNjYi1iNTYyLWY4MmVkZDgx OTFkZC5jcmwwHwYDVR0jBBgwFoAU/wob5oxF01YqMPBDjcIXckTApZQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lYmQ2MDlmOS00ODhmLTRjY2ItYjU2Mi1mODJl ZGQ4MTkxZGQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIMMFw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABp7gjMFJU8ysYPdnErmuVwH5QzLtQvdRKxypjzU6u+qMTqui0Tp lMzfmhU1+D4+rLOn5XAP1L3UuBOm2jXDdFY1iVS92GllCb7KXVpgp3s4RGiOukWw a7roSuq/Lg6Pei4iR65fpjkPiUjqsdMyzLuRs1ZH3nI0x3F+Hgt/n8wAvYsJkgM1 zgoaJQK/zswhZFYX9xsLsvrMo8BFHIbDBpSxqH/X6cDxE8OVNXx+S53XDDM5+7aD VUCNFRN30/HF4yYZHLyvrbnEQBM8wPdBxia0usjSXKZpCuAUjYmuew00FU5VjgnA m3Cw2p6UX3QQIK1SOafPvb22NkmlyQKfHLs= -----END CERTIFICATE-----Generated at Fri Mar 14 11:09:35 2025 by rpki-client