$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83/a68416c0-1952-319d-8981-4f1a935dc45c.roa File: a68416c0-1952-319d-8981-4f1a935dc45c.roa (raw, json) Hash identifier: Ls6szoaJwWdCZR7iBDAZyg+DVAiWx3otSokBmFR+SRQ= Subject key identifier: A7:2B:26:E8:CB:EC:90:75:1E:80:3E:0D:2E:C7:A6:FB:B3:C2:8A:34 Certificate issuer: /CN=e89b44b0-a151-49f2-b4a6-d917e3c95e83 Certificate serial: 010D0C9F43285848F65BDC27AC8D33B1741E7E80 Authority key identifier: 65:DE:38:46:E6:89:94:A2:11:8F:52:2F:F6:E4:DD:24:48:A6:04:60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83/a68416c0-1952-319d-8981-4f1a935dc45c.roa Signing time: Sat 22 Feb 2025 02:00:38 +0000 ROA not before: Sat 22 Feb 2025 02:00:38 +0000 ROA not after: Fri 23 May 2025 01:00:38 +0000 asID: 0 IP address blocks: 2001:504:3f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83/e89b44b0-a151-49f2-b4a6-d917e3c95e83.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83/e89b44b0-a151-49f2-b4a6-d917e3c95e83.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f6:5b:dc:27:ac:8d:33:b1:74:1e:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e89b44b0-a151-49f2-b4a6-d917e3c95e83 Validity Not Before: Feb 22 02:00:38 2025 GMT Not After : May 23 01:00:38 2025 GMT Subject: CN=55bdbb03-5129-4e2d-a9be-4594f8003e47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:dd:85:d7:ce:85:0b:06:dc:b9:f6:c5:d4:70: 76:01:05:b7:40:7e:f1:1d:0f:9f:d9:56:9d:68:43: dc:d9:a9:f4:b7:16:95:bd:aa:5a:24:fd:ec:09:d8: 97:fe:78:c3:51:43:99:d0:0c:b6:be:20:79:46:c5: 32:44:9b:5a:0e:e8:65:67:9d:fd:1e:ca:21:20:6c: f2:e0:72:60:a7:94:9e:99:46:2a:27:d5:80:d7:22: 59:09:7a:fa:d8:89:0c:35:fb:5e:d3:4a:0c:06:07: 39:e4:5e:fd:27:a3:51:36:82:c4:ec:d5:ed:a7:75: a8:83:6e:9b:29:6a:eb:47:ca:48:e4:c9:8d:f6:49: ae:85:63:e4:cd:49:97:0c:01:12:ec:39:d8:69:f8: c4:c0:f9:92:05:2f:dc:63:eb:fc:bf:7a:12:04:45: ec:57:54:bc:63:78:66:65:1d:39:ce:ba:85:07:82: c8:af:ef:29:ea:69:f1:37:a8:bc:0c:5b:d9:55:b5: 2a:ec:14:54:82:0d:70:41:00:66:22:b8:e0:30:ee: 69:06:03:8f:47:62:0e:2b:01:99:a6:c1:c1:13:a7: c3:f7:ac:69:e5:71:22:19:ac:60:3c:5a:31:f9:19: 74:66:56:36:bc:a1:92:8d:ac:38:26:30:e5:af:0f: cb:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:2B:26:E8:CB:EC:90:75:1E:80:3E:0D:2E:C7:A6:FB:B3:C2:8A:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83/a68416c0-1952-319d-8981-4f1a935dc45c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83/e89b44b0-a151-49f2-b4a6-d917e3c95e83.crl X509v3 Authority Key Identifier: keyid:65:DE:38:46:E6:89:94:A2:11:8F:52:2F:F6:E4:DD:24:48:A6:04:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83.cer sbgp-ipAddrBlock: critical IPv6: 2001:504:3f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:6b:fc:85:7b:94:41:66:ae:d2:a9:29:2f:7e:05:54:8b:33: c4:4f:fa:9d:f4:7d:68:b0:db:9f:5a:23:b2:10:ab:7a:04:d8: eb:d3:1e:80:09:dd:f7:a2:fd:45:46:5f:6c:b3:47:12:bd:29: de:59:18:83:4c:04:81:4d:da:93:ed:fa:6f:6a:6e:84:a6:03: 93:74:a5:59:98:fb:46:1d:df:6b:62:70:2e:bb:fc:5f:7c:f1: ce:13:d9:ef:ca:e5:e2:cd:d9:d0:94:67:f5:e9:78:26:6c:3d: 97:fb:c2:c1:5a:8e:21:ad:89:85:f3:1e:f8:c9:1f:75:95:cf: 3e:ce:1c:ef:15:3d:9f:42:1d:db:04:b9:66:da:f1:cf:e7:34: 32:27:b7:c5:b2:3a:da:61:96:2c:de:86:d8:5e:0c:a9:d4:d8: be:02:8f:88:2b:19:ed:ec:e7:7d:55:f9:6f:f4:38:54:6f:21: 02:35:33:5f:a3:3c:99:b1:c8:60:13:98:47:b6:f4:8c:fe:07: 25:f8:9e:5e:b7:13:90:24:b6:71:43:db:19:e0:87:2d:69:22: cb:5b:71:83:9c:47:79:ef:a7:ae:0e:09:4b:e1:74:0b:da:17: 82:18:92:19:7e:4f:2c:71:2a:cc:f6:2c:0b:94:1a:8f:f6:9c: ee:40:c0:2f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj2W9wnrI0zsXQefoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTg5YjQ0YjAtYTE1MS00OWYyLWI0YTYtZDkxN2UzYzk1 ZTgzMB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk NTViZGJiMDMtNTEyOS00ZTJkLWE5YmUtNDU5NGY4MDAzZTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp92F186FCwbcufbF1HB2AQW3QH7xHQ+f2Vad aEPc2an0txaVvapaJP3sCdiX/njDUUOZ0Ay2viB5RsUyRJtaDuhlZ539HsohIGzy 4HJgp5SemUYqJ9WA1yJZCXr62IkMNfte00oMBgc55F79J6NRNoLE7NXtp3Wog26b KWrrR8pI5MmN9kmuhWPkzUmXDAES7DnYafjEwPmSBS/cY+v8v3oSBEXsV1S8Y3hm ZR05zrqFB4LIr+8p6mnxN6i8DFvZVbUq7BRUgg1wQQBmIrjgMO5pBgOPR2IOKwGZ psHBE6fD96xp5XEiGaxgPFox+Rl0ZlY2vKGSjaw4JjDlrw/LpwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKcrJujL7JB1HoA+DS7Hpvuzwoo0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lODli NDRiMC1hMTUxLTQ5ZjItYjRhNi1kOTE3ZTNjOTVlODMvYTY4NDE2YzAtMTk1Mi0z MTlkLTg5ODEtNGYxYTkzNWRjNDVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTg5YjQ0YjAtYTE1MS00OWYyLWI0 YTYtZDkxN2UzYzk1ZTgzL2U4OWI0NGIwLWExNTEtNDlmMi1iNGE2LWQ5MTdlM2M5 NWU4My5jcmwwHwYDVR0jBBgwFoAUZd44RuaJlKIRj1Iv9uTdJEimBGAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9lODliNDRiMC1hMTUxLTQ5ZjItYjRhNi1kOTE3 ZTNjOTVlODMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFBAA/ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABtr/IV7lEFmrtKpKS9+BVSLM8RP+p30fWiw259aI7IQq3oE2OvT HoAJ3fei/UVGX2yzRxK9Kd5ZGINMBIFN2pPt+m9qboSmA5N0pVmY+0Yd32ticC67 /F988c4T2e/K5eLN2dCUZ/XpeCZsPZf7wsFajiGtiYXzHvjJH3WVzz7OHO8VPZ9C HdsEuWba8c/nNDInt8WyOtphlizehtheDKnU2L4Cj4grGe3s531V+W/0OFRvIQI1 M1+jPJmxyGATmEe29Iz+ByX4nl63E5AktnFD2xnghy1pIstbcYOcR3nvp64OCUvh dAvaF4IYkhl+TyxxKsz2LAuUGo/2nO5AwC8= -----END CERTIFICATE-----Generated at Sat Apr 26 14:50:56 2025 by rpki-client