$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/f89d5cb3-e413-3537-9cbd-032860d2eb44.roa File: f89d5cb3-e413-3537-9cbd-032860d2eb44.roa (raw, json) Hash identifier: ahxkyfjGsh2xbQiaN8ssHFRwabZpGrVKzyqmEEzTJLQ= Subject key identifier: 57:17:E0:51:72:6E:83:79:44:4F:B2:3D:F2:BA:1D:DB:53:55:E7:1A Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584968B42121FDFE88556903BB00 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/f89d5cb3-e413-3537-9cbd-032860d2eb44.roa Signing time: Fri 04 Apr 2025 01:00:47 +0000 ROA not before: Fri 04 Apr 2025 01:00:47 +0000 ROA not after: Thu 03 Jul 2025 01:00:47 +0000 asID: 8987 IP address blocks: 2605:4300:2c1f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:68:b4:21:21:fd:fe:88:55:69:03:bb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Apr 4 01:00:47 2025 GMT Not After : Jul 3 01:00:47 2025 GMT Subject: CN=9eebcbd8-751e-42ed-b0c0-ef51ca097a47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:7e:66:e4:c6:42:42:75:da:84:9d:c7:7e:6f: 7c:a9:7f:fe:5c:da:30:7c:78:a6:0b:b8:a8:60:dc: 65:55:cf:75:69:29:1e:5a:7b:ae:87:a3:fd:eb:76: 1e:48:52:79:ab:f3:3a:a8:19:ef:d9:88:72:e0:10: db:4d:e9:3c:0d:7c:c5:a3:c1:21:7a:c7:84:24:2c: e8:be:05:5b:a4:d9:22:1a:7f:ce:e7:3b:b9:4f:63: 07:9c:a7:f7:74:3d:ee:ba:a0:0c:18:10:22:7e:9d: f1:4e:ef:cb:dd:a9:c9:53:19:e2:6b:6f:57:95:e4: a6:04:23:09:4e:08:1d:7d:39:2e:ec:50:83:9d:e6: 12:a4:f7:55:5c:3d:81:f5:d8:2b:26:2f:b5:2a:1d: a7:9f:e7:ce:08:ce:b8:68:0d:b3:a9:e6:a3:64:e5: a3:4d:9e:68:f4:e8:6f:86:7d:4f:87:9b:de:2e:97: 1d:76:40:69:21:a5:59:9b:63:19:5d:77:11:9c:c8: 1c:ba:c5:60:c6:93:32:e9:12:8f:12:69:22:b7:cb: 29:33:4c:c2:e0:4c:2c:cf:85:a5:5c:11:61:97:bb: 40:1b:ab:b1:37:3c:82:ca:42:f7:f5:8d:a5:f0:ce: 73:d1:9b:2e:3d:17:56:40:78:5f:8d:dd:d4:e2:20: b7:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:17:E0:51:72:6E:83:79:44:4F:B2:3D:F2:BA:1D:DB:53:55:E7:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/f89d5cb3-e413-3537-9cbd-032860d2eb44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv6: 2605:4300:2c1f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:88:88:3a:02:c1:58:d0:f8:51:ea:b6:e6:da:be:d6:c2:86: 7d:1a:90:a7:7d:ab:88:6d:a3:8b:51:77:63:d8:e4:dd:a0:d1: 10:43:39:1c:b5:ca:cc:21:76:50:58:76:0e:02:a9:7f:f4:f3: 87:96:2d:13:34:c3:9a:e6:e7:ae:c3:36:80:37:cc:3f:09:af: 49:7c:1a:af:8c:74:c5:a9:d2:d4:03:df:1a:62:06:91:52:2a: 85:24:12:a1:54:7b:1d:1a:5a:8c:0f:34:78:08:3e:ca:44:6c: a7:9f:36:c4:d9:a5:d5:00:fe:6f:f1:7e:69:e2:06:cc:b0:72: b7:8b:e1:6d:76:50:1a:39:a6:8e:cd:93:4e:7b:c1:0c:be:6b: cb:be:fa:46:38:8f:d7:43:f4:16:1b:b8:8b:4e:80:4f:af:81: 4f:f5:04:e6:3f:8e:18:c9:8e:f7:a4:37:29:99:58:3a:fe:7d: 44:aa:ac:50:76:cc:db:61:6f:5c:98:db:7a:7e:4e:be:10:ec: c9:76:d3:be:d6:ca:84:8c:85:0f:2f:02:6b:1c:b5:ff:c3:5f: 1f:fe:78:2b:3b:73:8b:29:0d:d5:38:20:34:8d:8d:f2:d1:4e: 09:f7:13:29:a2:da:eb:d2:02:a8:f2:96:b9:1c:3c:27:eb:0f: 92:d2:93:dd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElotCEh/f6IVWkDuwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDQwNDAxMDA0N1oXDTI1MDcwMzAxMDA0N1owLzEtMCsGA1UEAxMk OWVlYmNiZDgtNzUxZS00MmVkLWIwYzAtZWY1MWNhMDk3YTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlX5m5MZCQnXahJ3Hfm98qX/+XNowfHimC7io YNxlVc91aSkeWnuuh6P963YeSFJ5q/M6qBnv2Yhy4BDbTek8DXzFo8EheseEJCzo vgVbpNkiGn/O5zu5T2MHnKf3dD3uuqAMGBAifp3xTu/L3anJUxnia29XleSmBCMJ TggdfTku7FCDneYSpPdVXD2B9dgrJi+1Kh2nn+fOCM64aA2zqeajZOWjTZ5o9Ohv hn1Ph5veLpcddkBpIaVZm2MZXXcRnMgcusVgxpMy6RKPEmkit8spM0zC4Ewsz4Wl XBFhl7tAG6uxNzyCykL39Y2l8M5z0ZsuPRdWQHhfjd3U4iC3bwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFcX4FFyboN5RE+yPfK6HdtTVecaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvZjg5ZDVjYjMtZTQxMy0z NTM3LTljYmQtMDMyODYwZDJlYjQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgVDACwf MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKmIiDoCwVjQ+FHqtubavtbChn0akKd9q4hto4tRd2PY5N2g0RBD ORy1yswhdlBYdg4CqX/084eWLRM0w5rm567DNoA3zD8Jr0l8Gq+MdMWp0tQD3xpi BpFSKoUkEqFUex0aWowPNHgIPspEbKefNsTZpdUA/m/xfmniBsywcreL4W12UBo5 po7Nk057wQy+a8u++kY4j9dD9BYbuItOgE+vgU/1BOY/jhjJjvekNymZWDr+fUSq rFB2zNthb1yY23p+Tr4Q7Ml2077WyoSMhQ8vAmsctf/DXx/+eCs7c4spDdU4IDSN jfLRTgn3Eymi2uvSAqjylrkcPCfrD5LSk90= -----END CERTIFICATE-----Generated at Sat Apr 26 16:15:42 2025 by rpki-client