$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/064bb556-40a8-3b7a-9c55-3217f244b17d.roa File: 064bb556-40a8-3b7a-9c55-3217f244b17d.roa (raw, json) Hash identifier: IO9/OqYWKCM22e0RsbAM8nN/gKvAoBr9HNM0afWzTa0= Subject key identifier: F0:EC:56:78:1B:23:F3:94:9C:A7:F0:0B:86:02:58:3A:B7:1D:1E:CE Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F43285848F65BEA173F68078A2429AB80 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/064bb556-40a8-3b7a-9c55-3217f244b17d.roa Signing time: Sat 22 Feb 2025 02:00:38 +0000 ROA not before: Sat 22 Feb 2025 02:00:38 +0000 ROA not after: Fri 23 May 2025 01:00:38 +0000 asID: 205544 IP address blocks: 2607:f5b5:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f6:5b:ea:17:3f:68:07:8a:24:29:ab:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Feb 22 02:00:38 2025 GMT Not After : May 23 01:00:38 2025 GMT Subject: CN=fbde1ce3-5213-4f0a-b07b-61bc7df3ced2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:2b:74:a4:87:c6:47:3c:dd:6c:84:1a:e8:26: 7e:23:c4:61:f9:ae:07:be:e0:4b:dc:52:b3:b0:98: 8a:b7:7c:5e:39:5e:d7:4e:ee:1c:2c:26:95:4e:d9: 23:f1:28:49:f8:33:e9:99:20:66:0c:ba:48:e3:71: b2:ee:ea:18:4b:c1:b8:95:9b:f6:e9:c9:b0:ed:1e: f0:57:b9:34:41:98:6d:40:44:71:71:85:68:3e:54: ba:25:23:9f:ff:28:40:df:81:f1:8b:1e:a0:b2:1a: cc:dd:e6:3b:dd:66:4a:38:ea:26:c5:dd:48:30:37: 1c:75:4d:0b:33:43:06:65:12:30:af:b3:20:19:87: 5a:13:b0:a3:e0:f7:f9:ab:36:06:ff:c2:5a:71:6b: 8a:33:d7:9e:76:89:c8:1b:75:02:4e:55:ad:4e:64: a4:62:cc:04:7c:2a:93:c0:11:b2:82:77:e5:60:09: 24:be:b6:3b:8b:3a:67:14:9a:1c:71:c2:d6:c2:b9: ab:ad:f6:5a:2e:e9:a6:76:c7:79:bd:bc:34:08:f5: cc:1e:15:13:36:27:53:89:79:5e:29:08:97:46:eb: ee:b5:74:03:f3:e8:c5:ab:13:5a:7e:de:f9:db:c6: bf:a0:30:cc:33:a2:d6:f1:4b:c1:d6:1e:86:a8:e0: b8:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:EC:56:78:1B:23:F3:94:9C:A7:F0:0B:86:02:58:3A:B7:1D:1E:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/064bb556-40a8-3b7a-9c55-3217f244b17d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv6: 2607:f5b5:2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:36:08:48:00:af:02:7b:ee:a4:d5:ca:de:ab:6c:87:6a:34: 93:fa:73:22:5e:a5:12:d5:85:54:b8:b4:62:cf:09:bc:f5:ac: 3c:d9:72:4b:c0:ef:f6:5f:4f:9a:0e:05:8f:3d:d6:fe:49:13: e6:80:99:a7:81:80:cc:18:99:0a:8b:f4:07:49:db:71:77:7f: f9:71:44:c4:fd:cf:02:14:1d:9a:9d:47:30:c9:5d:c0:38:1a: 29:25:73:d4:92:a8:d1:5b:7e:f6:39:ad:cf:ce:ac:8b:57:bb: de:3c:08:a9:8c:e3:98:34:d1:a5:a5:61:fa:12:59:2e:48:ed: 5d:fc:f3:c3:a5:cf:29:99:b9:1d:78:53:36:2f:09:a8:21:75: 73:76:53:89:a7:a5:c1:d8:04:96:0a:76:31:e9:e3:0a:f8:2b: f9:4c:3d:ac:88:db:af:40:17:33:db:fe:30:7e:ac:b9:95:d0: 46:23:95:ee:2c:02:c2:60:be:e7:0b:33:08:e7:14:94:26:01: d7:71:1c:4e:d5:e0:fe:88:e4:db:c7:3c:6a:56:a3:53:7b:53: 5d:d3:d6:71:fe:0e:57:55:21:71:c4:c6:d7:d0:62:3c:5d:51: d7:aa:ed:41:1a:6f:c2:88:46:7a:46:00:c2:76:dd:7e:16:20: 1b:e1:a1:56 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj2W+oXP2gHiiQpq4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk ZmJkZTFjZTMtNTIxMy00ZjBhLWIwN2ItNjFiYzdkZjNjZWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyt0pIfGRzzdbIQa6CZ+I8Rh+a4HvuBL3FKz sJiKt3xeOV7XTu4cLCaVTtkj8ShJ+DPpmSBmDLpI43Gy7uoYS8G4lZv26cmw7R7w V7k0QZhtQERxcYVoPlS6JSOf/yhA34Hxix6gshrM3eY73WZKOOomxd1IMDccdU0L M0MGZRIwr7MgGYdaE7Cj4Pf5qzYG/8JacWuKM9eedonIG3UCTlWtTmSkYswEfCqT wBGygnflYAkkvrY7izpnFJocccLWwrmrrfZaLummdsd5vbw0CPXMHhUTNidTiXle KQiXRuvutXQD8+jFqxNaft7528a/oDDMM6LW8UvB1h6GqOC4dQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPDsVngbI/OUnKfwC4YCWDq3HR7OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvMDY0YmI1NTYtNDBhOC0z YjdhLTljNTUtMzIxN2YyNDRiMTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf1tQAC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKQ2CEgArwJ77qTVyt6rbIdqNJP6cyJepRLVhVS4tGLPCbz1rDzZ ckvA7/ZfT5oOBY891v5JE+aAmaeBgMwYmQqL9AdJ23F3f/lxRMT9zwIUHZqdRzDJ XcA4Giklc9SSqNFbfvY5rc/OrItXu948CKmM45g00aWlYfoSWS5I7V3888OlzymZ uR14UzYvCaghdXN2U4mnpcHYBJYKdjHp4wr4K/lMPayI269AFzPb/jB+rLmV0EYj le4sAsJgvucLMwjnFJQmAddxHE7V4P6I5NvHPGpWo1N7U13T1nH+DldVIXHExtfQ YjxdUdeq7UEab8KIRnpGAMJ23X4WIBvhoVY= -----END CERTIFICATE-----Generated at Mon Apr 28 07:48:53 2025 by rpki-client