$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab/c9ff6e96-e7d6-3b2e-9cc9-c6a1b53046ef.roa File: c9ff6e96-e7d6-3b2e-9cc9-c6a1b53046ef.roa (raw, json) Hash identifier: pWYNFYNMEjrylCsLpKGasANc67T54BqnXdqq3q60hd4= Subject key identifier: EF:DF:42:A1:8A:8D:5E:FE:5A:B3:2A:3B:E1:87:AF:86:9B:24:77:F9 Certificate issuer: /CN=f5dd2f3b-d544-4a90-84a5-58af0db84dab Certificate serial: 010D0C9F43285848FD56999D436BF0965A67D580 Authority key identifier: 2A:21:7E:D8:28:3A:D2:41:FE:CF:E5:E9:1D:32:3F:C0:B7:8A:F7:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab/c9ff6e96-e7d6-3b2e-9cc9-c6a1b53046ef.roa Signing time: Mon 24 Feb 2025 14:00:52 +0000 ROA not before: Mon 24 Feb 2025 14:00:52 +0000 ROA not after: Sun 25 May 2025 13:00:52 +0000 asID: 11961 IP address blocks: 2607:8380::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab/f5dd2f3b-d544-4a90-84a5-58af0db84dab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab/f5dd2f3b-d544-4a90-84a5-58af0db84dab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:56:99:9d:43:6b:f0:96:5a:67:d5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5dd2f3b-d544-4a90-84a5-58af0db84dab Validity Not Before: Feb 24 14:00:52 2025 GMT Not After : May 25 13:00:52 2025 GMT Subject: CN=5478aa1a-7f75-4be9-b236-5c39242d040c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:84:ad:9c:ec:4a:0d:41:91:72:4b:e2:ef:f8: c4:36:84:98:a9:2b:1b:12:dc:64:90:51:57:d7:3d: d6:08:e5:0c:fa:2f:e5:bb:29:59:57:2b:dd:f7:7e: 9a:58:6d:d0:d8:40:3e:69:d6:e0:90:2a:f7:8c:92: 1d:a3:eb:73:95:c8:65:29:d9:99:74:53:55:20:29: f7:ab:37:61:e3:1e:2f:17:9a:62:1c:c4:fb:23:94: 18:5b:69:03:20:c1:91:88:58:a8:9c:79:c3:50:03: aa:07:1f:33:9a:4c:30:a2:0b:6c:08:cd:2b:2c:32: 27:4a:4f:3f:c5:47:7d:60:c0:26:fd:93:8f:65:6b: 87:ac:f4:a0:57:ed:8e:3e:15:48:80:b5:f6:da:40: fb:2b:8f:2e:58:6e:7b:5b:61:eb:b7:82:74:c5:20: 16:64:54:d6:9b:ab:64:60:e0:f4:5b:8f:21:9b:75: f4:2c:74:32:16:76:a3:f3:92:a1:6d:a8:55:4c:99: c6:2d:56:8b:72:13:3e:d7:3d:b8:5c:e6:ce:cc:42: 29:56:17:48:b7:60:31:51:03:66:d9:3c:e2:cc:11: 9b:64:8f:41:01:5f:e9:e3:db:e5:54:0e:d5:4a:24: 56:5b:01:4a:27:e7:1b:1a:72:b5:54:36:f9:74:e3: d2:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:DF:42:A1:8A:8D:5E:FE:5A:B3:2A:3B:E1:87:AF:86:9B:24:77:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab/c9ff6e96-e7d6-3b2e-9cc9-c6a1b53046ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab/f5dd2f3b-d544-4a90-84a5-58af0db84dab.crl X509v3 Authority Key Identifier: keyid:2A:21:7E:D8:28:3A:D2:41:FE:CF:E5:E9:1D:32:3F:C0:B7:8A:F7:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab.cer sbgp-ipAddrBlock: critical IPv6: 2607:8380::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:bf:e2:7e:e4:50:af:e1:0d:40:17:62:a0:6f:5e:6e:ef:8a: ec:04:50:4c:f6:c9:20:03:f8:86:9a:bb:ab:cb:56:05:76:0c: a3:b6:ed:83:f0:d6:ef:72:6a:be:c7:46:3f:68:f7:88:ec:7c: 06:96:35:fa:d5:05:3a:f1:85:42:a1:55:09:2c:27:d8:0e:f0: bd:4a:20:39:50:be:c4:e8:8b:2a:93:f4:ad:93:00:0d:84:aa: 62:6c:99:1f:21:66:8d:a4:d3:4a:61:1a:55:1f:d8:02:4c:f2: a7:e6:74:11:a0:54:f8:7d:98:06:b4:6b:50:34:4a:2d:f1:05: 1d:6b:e3:25:bf:bd:18:c4:40:be:2a:ec:d0:ec:cd:53:e3:16: 65:a2:9c:7b:27:b2:e6:15:bb:3c:19:de:03:18:dd:29:0c:80: 8f:89:7b:a9:62:f2:23:4d:f5:e3:ab:b4:48:f1:0d:c3:0d:6d: f6:92:39:cd:3f:4b:51:2f:50:d2:85:a5:89:18:bd:09:36:e9: bf:19:cd:87:02:5e:6c:b9:99:11:34:10:9c:23:b7:f1:dc:60: cc:67:a0:6c:fe:d9:6f:45:95:6b:93:5a:68:9e:fd:55:a3:ea: d9:01:da:d7:48:73:55:02:57:19:4b:9a:25:08:eb:33:04:4d: 34:56:d8:24 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEj9VpmdQ2vwllpn1YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjVkZDJmM2ItZDU0NC00YTkwLTg0YTUtNThhZjBkYjg0 ZGFiMB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk NTQ3OGFhMWEtN2Y3NS00YmU5LWIyMzYtNWMzOTI0MmQwNDBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYStnOxKDUGRckvi7/jENoSYqSsbEtxkkFFX 1z3WCOUM+i/luylZVyvd936aWG3Q2EA+adbgkCr3jJIdo+tzlchlKdmZdFNVICn3 qzdh4x4vF5piHMT7I5QYW2kDIMGRiFionHnDUAOqBx8zmkwwogtsCM0rLDInSk8/ xUd9YMAm/ZOPZWuHrPSgV+2OPhVIgLX22kD7K48uWG57W2Hrt4J0xSAWZFTWm6tk YOD0W48hm3X0LHQyFnaj85KhbahVTJnGLVaLchM+1z24XObOzEIpVhdIt2AxUQNm 2TzizBGbZI9BAV/p49vlVA7VSiRWWwFKJ+cbGnK1VDb5dOPS2wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFO/fQqGKjV7+WrMqO+GHr4abJHf5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mNWRk MmYzYi1kNTQ0LTRhOTAtODRhNS01OGFmMGRiODRkYWIvYzlmZjZlOTYtZTdkNi0z YjJlLTljYzktYzZhMWI1MzA0NmVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjVkZDJmM2ItZDU0NC00YTkwLTg0 YTUtNThhZjBkYjg0ZGFiL2Y1ZGQyZjNiLWQ1NDQtNGE5MC04NGE1LTU4YWYwZGI4 NGRhYi5jcmwwHwYDVR0jBBgwFoAUKiF+2Cg60kH+z+XpHTI/wLeK9wswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mNWRkMmYzYi1kNTQ0LTRhOTAtODRhNS01OGFm MGRiODRkYWIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgeDgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBIv+J+5FCv4Q1AF2Kgb15u74rsBFBM9skgA/iGmrury1YFdgyjtu2D 8Nbvcmq+x0Y/aPeI7HwGljX61QU68YVCoVUJLCfYDvC9SiA5UL7E6Isqk/StkwAN hKpibJkfIWaNpNNKYRpVH9gCTPKn5nQRoFT4fZgGtGtQNEot8QUda+Mlv70YxEC+ KuzQ7M1T4xZlopx7J7LmFbs8Gd4DGN0pDICPiXupYvIjTfXjq7RI8Q3DDW32kjnN P0tRL1DShaWJGL0JNum/Gc2HAl5suZkRNBCcI7fx3GDMZ6Bs/tlvRZVrk1ponv1V o+rZAdrXSHNVAlcZS5olCOszBE00Vtgk -----END CERTIFICATE-----Generated at Mon Apr 28 09:25:07 2025 by rpki-client