$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/5083a89f-9d21-38ba-a789-0910130bd723.roa File: 5083a89f-9d21-38ba-a789-0910130bd723.roa (raw, json) Hash identifier: i4Ejj8oKxnI1YOV5vhV4znhjhBWdWk+I1GevOX0QQOc= Subject key identifier: 9B:E3:C2:09:C5:EE:AA:6D:AB:84:B0:E5:69:4B:7A:BC:39:47:CE:07 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F43285848FBF126CA35A8E000E3E39360 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/5083a89f-9d21-38ba-a789-0910130bd723.roa Signing time: Mon 24 Feb 2025 02:00:38 +0000 ROA not before: Mon 24 Feb 2025 02:00:38 +0000 ROA not after: Sun 25 May 2025 01:00:38 +0000 asID: 22781 IP address blocks: 2607:fb50:8400::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fb:f1:26:ca:35:a8:e0:00:e3:e3:93:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Feb 24 02:00:38 2025 GMT Not After : May 25 01:00:38 2025 GMT Subject: CN=b9f8e25b-5829-4a92-bfa7-2d6527cfb4cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:79:4a:57:e6:55:93:7a:02:21:6b:f1:a8:57: ec:ad:34:12:5f:e0:20:69:ac:33:56:d9:c9:9b:2c: 0e:3b:29:d6:7f:80:ad:a6:b5:2b:ff:58:05:eb:ce: 71:bd:fb:b1:01:6c:68:56:54:c6:80:f3:f0:09:cb: d6:c4:d3:d8:de:0a:ef:8c:2c:f7:77:26:f1:65:b8: a6:64:fc:ad:4e:df:29:b4:40:56:f8:68:53:91:27: 95:35:31:e4:49:ed:7b:56:83:17:96:9f:a8:e3:1d: ff:d6:d3:f4:b9:54:48:87:5f:c4:4f:d4:13:01:19: 06:a4:d3:6e:a0:96:80:dc:5b:f4:4a:de:ee:28:eb: 11:34:77:26:e8:cd:1f:0c:13:75:60:9c:f9:ec:21: 11:ed:cc:a7:a1:35:41:74:0b:4c:98:d3:1d:ab:57: 41:2b:49:b8:6a:28:b1:36:88:fa:2f:99:be:2f:90: 99:fd:e1:24:b4:03:16:6e:f5:c1:8b:0b:4f:22:be: f6:db:01:5a:8d:d7:b8:2a:39:9f:0f:1a:7d:6d:54: 64:d3:b7:f2:bf:62:59:94:06:d0:6f:91:38:e1:56: 9b:a9:58:49:3a:26:67:91:30:85:8c:b9:c7:ca:97: 15:ef:8e:0a:c5:f2:f1:5d:f5:f7:83:eb:90:e2:97: 6d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:E3:C2:09:C5:EE:AA:6D:AB:84:B0:E5:69:4B:7A:BC:39:47:CE:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/5083a89f-9d21-38ba-a789-0910130bd723.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv6: 2607:fb50:8400::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:5e:24:47:af:dc:9d:80:d5:70:0d:4d:3a:ff:f0:da:90:df: b7:21:59:72:61:09:e8:a5:e7:db:f7:c1:23:40:fe:a6:a9:d7: 1f:1a:f7:f8:76:49:24:2d:da:ec:90:39:84:34:42:0a:b9:e9: 25:9f:84:53:f4:8e:a6:ad:01:ee:e2:f0:64:7d:76:60:7b:fc: cc:b7:24:e9:84:27:ec:12:98:c0:fa:c3:c4:ab:c0:59:1b:bb: 93:5f:52:c1:cb:29:49:46:e9:ad:05:4d:30:a9:a7:03:f1:68: 70:a9:f1:22:16:d2:83:4c:a2:eb:27:01:1b:df:99:a9:14:d7: ad:58:82:ba:8d:5c:36:f8:2b:4e:74:56:35:ec:cd:97:f8:90: c8:10:30:c3:74:51:bd:d2:4c:b4:57:3a:fd:c3:74:b9:25:6f: f4:b5:85:e4:7f:94:1c:77:01:e8:02:af:0d:46:f1:aa:bd:42: eb:c0:c8:d3:3c:fe:aa:7e:89:1b:dc:a5:2c:8a:f1:eb:03:f0: 09:64:ab:a0:ab:e2:7c:5d:0f:a2:d8:3c:48:c0:c0:72:31:c4: 28:e7:90:f0:79:32:48:2a:26:1e:e3:52:3a:b3:51:6d:34:ed: b9:b4:6c:a9:2e:65:63:a2:10:51:97:a6:9f:5f:97:ce:82:3d: 24:b8:00:b2 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEj78SbKNajgAOPjk2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI1MDIyNDAyMDAzOFoXDTI1MDUyNTAxMDAzOFowLzEtMCsGA1UEAxMk YjlmOGUyNWItNTgyOS00YTkyLWJmYTctMmQ2NTI3Y2ZiNGNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3lKV+ZVk3oCIWvxqFfsrTQSX+AgaawzVtnJ mywOOynWf4CtprUr/1gF685xvfuxAWxoVlTGgPPwCcvWxNPY3grvjCz3dybxZbim ZPytTt8ptEBW+GhTkSeVNTHkSe17VoMXlp+o4x3/1tP0uVRIh1/ET9QTARkGpNNu oJaA3Fv0St7uKOsRNHcm6M0fDBN1YJz57CER7cynoTVBdAtMmNMdq1dBK0m4aiix Noj6L5m+L5CZ/eEktAMWbvXBiwtPIr722wFajde4KjmfDxp9bVRk07fyv2JZlAbQ b5E44VabqVhJOiZnkTCFjLnHypcV744KxfLxXfX3g+uQ4pdtSwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFJvjwgnF7qptq4Sw5WlLerw5R84HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvNTA4M2E4OWYtOWQyMS0z OGJhLWE3ODktMDkxMDEzMGJkNzIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgf7UIQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEATF4kR6/cnYDVcA1NOv/w2pDftyFZcmEJ6KXn2/fBI0D+pqnXHxr3 +HZJJC3a7JA5hDRCCrnpJZ+EU/SOpq0B7uLwZH12YHv8zLck6YQn7BKYwPrDxKvA WRu7k19SwcspSUbprQVNMKmnA/FocKnxIhbSg0yi6ycBG9+ZqRTXrViCuo1cNvgr TnRWNezNl/iQyBAww3RRvdJMtFc6/cN0uSVv9LWF5H+UHHcB6AKvDUbxqr1C68DI 0zz+qn6JG9ylLIrx6wPwCWSroKvifF0Potg8SMDAcjHEKOeQ8HkySComHuNSOrNR bTTtubRsqS5lY6IQUZemn1+XzoI9JLgAsg== -----END CERTIFICATE-----Generated at Sat Apr 26 20:01:09 2025 by rpki-client