$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8753160d-30e1-48b1-afdb-394389cbcc81/e980c2c3-fe84-3bf4-9a7b-327066ae8d7c.roa File: e980c2c3-fe84-3bf4-9a7b-327066ae8d7c.roa (raw, json) Hash identifier: wFdY3feX+EcmP3EY5yKJ/X2N2RIqWvAyL8pSjGbKxQk= Subject key identifier: 7A:5F:C4:95:67:7A:34:B5:4F:CD:63:B7:68:AE:F0:CF:A5:6C:00:7B Certificate issuer: /CN=8753160d-30e1-48b1-afdb-394389cbcc81 Certificate serial: 010D0C9F43285848EA8D40C052302319C3C5F500 Authority key identifier: F9:F1:BE:13:FB:A9:F8:E4:91:49:CD:66:0D:FD:65:4F:4E:F9:55:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8753160d-30e1-48b1-afdb-394389cbcc81.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8753160d-30e1-48b1-afdb-394389cbcc81/e980c2c3-fe84-3bf4-9a7b-327066ae8d7c.roa Signing time: Mon 17 Feb 2025 20:30:39 +0000 ROA not before: Mon 17 Feb 2025 20:30:39 +0000 ROA not after: Sun 18 May 2025 19:30:39 +0000 asID: 21723 IP address blocks: 2607:fc70::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8753160d-30e1-48b1-afdb-394389cbcc81/8753160d-30e1-48b1-afdb-394389cbcc81.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8753160d-30e1-48b1-afdb-394389cbcc81/8753160d-30e1-48b1-afdb-394389cbcc81.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8753160d-30e1-48b1-afdb-394389cbcc81.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ea:8d:40:c0:52:30:23:19:c3:c5:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8753160d-30e1-48b1-afdb-394389cbcc81 Validity Not Before: Feb 17 20:30:39 2025 GMT Not After : May 18 19:30:39 2025 GMT Subject: CN=8d93c0fe-5554-4ab8-9988-0131c37d13d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:1a:4f:01:3f:74:99:f1:eb:06:c0:6b:5e:b3: cf:96:3e:97:fc:f3:71:a1:65:87:ee:c6:db:cc:73: 06:81:01:1b:a6:bd:7d:ee:40:8a:aa:96:cb:51:62: 28:eb:9e:9b:18:c6:93:45:12:40:c9:3d:9f:80:04: 06:da:8c:81:fa:78:ce:af:d4:91:9e:37:ab:2e:37: 0d:ed:93:61:06:ab:d2:75:23:3a:d2:83:21:03:d2: 82:64:2a:dc:ff:46:fe:45:13:f0:13:d1:cd:70:6c: 2c:c9:2c:14:d8:bd:22:75:3c:71:8e:e6:eb:7f:b4: 2f:cd:02:79:80:56:de:c2:c7:43:18:71:1f:b0:93: 1e:cd:03:9e:d1:35:1e:a5:ac:7a:0a:e2:44:a7:a0: d1:8d:ed:33:14:eb:f6:ac:8a:63:8b:af:b5:6e:e4: 24:d4:a4:2b:52:a4:77:4e:5c:79:4d:06:4b:2a:7b: a4:3c:95:3b:19:fb:e0:58:f6:28:ef:8d:a3:2c:ee: e3:41:02:77:cb:dd:69:ad:1c:e2:40:5f:66:7c:8c: 28:f5:3b:32:cc:de:86:c0:33:76:97:f8:9a:af:52: fe:69:52:80:c3:ad:26:1a:6a:0e:e3:7f:a3:8c:e1: 2a:58:c3:d4:7a:7a:0f:be:05:73:98:78:43:c6:35: fd:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:5F:C4:95:67:7A:34:B5:4F:CD:63:B7:68:AE:F0:CF:A5:6C:00:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8753160d-30e1-48b1-afdb-394389cbcc81/e980c2c3-fe84-3bf4-9a7b-327066ae8d7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8753160d-30e1-48b1-afdb-394389cbcc81/8753160d-30e1-48b1-afdb-394389cbcc81.crl X509v3 Authority Key Identifier: keyid:F9:F1:BE:13:FB:A9:F8:E4:91:49:CD:66:0D:FD:65:4F:4E:F9:55:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8753160d-30e1-48b1-afdb-394389cbcc81.cer sbgp-ipAddrBlock: critical IPv6: 2607:fc70::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:e4:c5:e4:83:6e:12:62:2f:68:4d:1a:23:78:ce:77:0e:8d: 18:35:fa:2c:7a:e1:42:9b:bb:bb:4b:4f:62:72:da:04:a1:b6: 79:c8:d0:fa:de:71:db:cb:ca:bf:d3:1e:61:4a:2b:8a:ef:42: e2:67:3c:f9:38:94:9e:09:ed:1f:87:88:33:01:19:2b:09:2e: 4e:d0:12:85:7a:e7:09:31:ee:65:58:5c:84:bf:12:65:6b:39: 87:53:1a:12:a4:60:8c:b8:41:e7:6f:d4:73:42:48:60:ec:14: 63:60:b0:9d:8c:5e:c2:25:f9:9d:e4:1c:94:c6:c2:93:73:30: a7:54:43:3a:03:86:87:f2:94:e9:e5:3b:d7:d4:27:72:0d:e3: f1:1e:cd:82:45:26:e3:57:1d:1b:e1:74:36:8b:3d:7e:dd:f5: 69:5b:35:c2:e4:14:e8:43:93:d8:6e:24:df:03:64:65:b2:c4: 08:66:78:73:b0:33:5c:a8:c2:fd:f6:c6:a3:49:0d:d0:52:52: 53:cc:8a:a2:a9:af:45:f8:f4:2d:fc:48:42:29:14:de:07:f6: 21:05:50:c2:59:a9:0f:b4:f6:34:6c:e6:c7:a5:29:64:9c:c4: d1:ce:11:13:bf:32:aa:46:77:35:b6:c9:dd:d2:10:e3:19:7a: 5c:b8:90:fa -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjqjUDAUjAjGcPF9QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODc1MzE2MGQtMzBlMS00OGIxLWFmZGItMzk0Mzg5Y2Jj YzgxMB4XDTI1MDIxNzIwMzAzOVoXDTI1MDUxODE5MzAzOVowLzEtMCsGA1UEAxMk OGQ5M2MwZmUtNTU1NC00YWI4LTk5ODgtMDEzMWMzN2QxM2QwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBpPAT90mfHrBsBrXrPPlj6X/PNxoWWH7sbb zHMGgQEbpr197kCKqpbLUWIo656bGMaTRRJAyT2fgAQG2oyB+njOr9SRnjerLjcN 7ZNhBqvSdSM60oMhA9KCZCrc/0b+RRPwE9HNcGwsySwU2L0idTxxjubrf7QvzQJ5 gFbewsdDGHEfsJMezQOe0TUepax6CuJEp6DRje0zFOv2rIpji6+1buQk1KQrUqR3 Tlx5TQZLKnukPJU7GfvgWPYo742jLO7jQQJ3y91prRziQF9mfIwo9TsyzN6GwDN2 l/iar1L+aVKAw60mGmoO43+jjOEqWMPUenoPvgVzmHhDxjX9FwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHpfxJVnejS1T81jt2iu8M+lbAB7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84NzUz MTYwZC0zMGUxLTQ4YjEtYWZkYi0zOTQzODljYmNjODEvZTk4MGMyYzMtZmU4NC0z YmY0LTlhN2ItMzI3MDY2YWU4ZDdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODc1MzE2MGQtMzBlMS00OGIxLWFm ZGItMzk0Mzg5Y2JjYzgxLzg3NTMxNjBkLTMwZTEtNDhiMS1hZmRiLTM5NDM4OWNi Y2M4MS5jcmwwHwYDVR0jBBgwFoAU+fG+E/up+OSRSc1mDf1lT075VU4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84NzUzMTYwZC0zMGUxLTQ4YjEtYWZkYi0zOTQz ODljYmNjODEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf8cDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAP5MXkg24SYi9oTRojeM53Do0YNfoseuFCm7u7S09ictoEobZ5yND6 3nHby8q/0x5hSiuK70LiZzz5OJSeCe0fh4gzARkrCS5O0BKFeucJMe5lWFyEvxJl azmHUxoSpGCMuEHnb9RzQkhg7BRjYLCdjF7CJfmd5ByUxsKTczCnVEM6A4aH8pTp 5TvX1CdyDePxHs2CRSbjVx0b4XQ2iz1+3fVpWzXC5BToQ5PYbiTfA2RlssQIZnhz sDNcqML99sajSQ3QUlJTzIqiqa9F+PQt/EhCKRTeB/YhBVDCWakPtPY0bObHpSlk nMTRzhETvzKqRnc1tsnd0hDjGXpcuJD6 -----END CERTIFICATE-----Generated at Mon Apr 28 17:25:13 2025 by rpki-client