$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/baf67ca6-4645-3e8c-b1f1-8b1cc93cfc8b.roa File: baf67ca6-4645-3e8c-b1f1-8b1cc93cfc8b.roa (raw, json) Hash identifier: NDNobb1YabCfb/+FIqbtOr1PU1VxsNYSDp2H3mxrmLs= Subject key identifier: A0:87:51:54:0D:A0:3A:D0:A0:B5:BC:D9:5A:1D:51:D3:0C:CD:F6:97 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F43285848F65BEA3732CD98815AC67E58 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/baf67ca6-4645-3e8c-b1f1-8b1cc93cfc8b.roa Signing time: Sat 22 Feb 2025 02:00:38 +0000 ROA not before: Sat 22 Feb 2025 02:00:38 +0000 ROA not after: Fri 23 May 2025 01:00:38 +0000 asID: 394380 IP address blocks: 2607:f5b5:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f6:5b:ea:37:32:cd:98:81:5a:c6:7e:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Feb 22 02:00:38 2025 GMT Not After : May 23 01:00:38 2025 GMT Subject: CN=4086dd76-5360-4905-b7bb-3607d2627ac8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:72:d1:e3:05:c2:e6:a7:b6:5f:4f:04:41:31: 27:52:43:e8:b1:ac:c6:2b:dc:d8:fb:dc:fe:f4:7b: c3:24:bb:6a:fd:f0:ec:63:22:9e:0c:61:ae:9e:2b: ba:72:da:e4:49:2e:90:80:ad:6c:90:88:ce:c9:57: 3c:66:90:18:4c:7c:b3:b2:62:d0:fe:e0:88:f6:c1: 52:b2:c2:eb:36:cc:ef:21:6e:7f:ca:29:3a:62:ed: 2b:ff:d1:31:8e:ca:a8:8a:8f:7d:de:e8:9a:8a:24: 5c:a0:79:13:bb:0e:e4:12:22:31:7c:41:dc:1a:38: d3:2c:b5:0c:3d:40:03:96:23:9f:b0:36:8e:a0:1f: 5f:33:07:e1:2a:5a:6b:21:d9:59:1b:46:3a:5e:4c: 70:cf:79:b1:62:b8:3d:48:27:f3:ea:f0:d5:bc:4b: ba:bd:32:eb:01:f1:1f:00:19:b7:90:d3:cb:56:0c: c0:c0:ed:f7:dc:7f:8b:f9:97:83:e6:91:16:79:46: f1:b3:b0:5b:6d:fe:46:78:82:71:47:43:f7:67:66: 5c:15:c2:82:42:f3:af:24:d4:26:4f:de:81:5f:b4: 97:ed:94:27:03:bb:b9:d7:0d:2a:d4:3a:c3:93:a1: 05:98:e8:25:a5:8f:a6:86:1e:f1:5a:4a:fe:f4:88: 09:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:87:51:54:0D:A0:3A:D0:A0:B5:BC:D9:5A:1D:51:D3:0C:CD:F6:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/baf67ca6-4645-3e8c-b1f1-8b1cc93cfc8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv6: 2607:f5b5:2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:4b:26:86:a8:40:41:53:0a:41:ac:11:08:c6:57:5f:9a:77: 73:f1:ca:55:52:06:c1:31:bf:f6:a2:1b:af:4a:1a:89:da:57: d7:a7:e3:d1:67:b3:0f:05:a1:dc:bc:1d:1f:be:4f:4a:40:aa: 52:30:95:07:a3:74:0f:8a:0b:55:93:3e:df:ca:5f:31:70:f7: 58:c5:cb:56:58:70:b1:d3:71:33:90:b3:b4:fb:dd:b0:6b:64: 3b:9f:70:c4:5a:f3:4b:8e:e6:88:68:ec:b9:a8:31:7e:fb:ad: 8a:f5:c9:67:34:7c:c1:62:f6:08:3d:be:94:17:b0:47:29:d8: 43:25:39:4f:e4:57:54:a0:ff:b5:25:d1:17:13:09:f9:6d:14: 07:85:7d:e5:5a:26:60:1c:9f:73:12:4c:2c:c6:73:18:0b:65: 13:8b:56:8e:fb:08:7e:16:7d:8b:5f:47:3f:f6:ce:c6:fd:ad: 80:f0:16:f5:c6:53:f6:61:9f:6a:fd:85:b1:8f:46:4b:97:85: fc:16:5c:30:1e:68:f7:eb:91:13:a6:f3:b0:12:17:26:29:34: 96:e6:9b:e9:58:ec:95:82:c7:5a:7b:c7:a6:69:7f:39:ff:40: de:d7:ed:c7:f3:4b:7d:9b:e9:d6:c2:f6:bf:59:1a:c3:f2:be: b9:4e:f0:d2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj2W+o3Ms2YgVrGflgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk NDA4NmRkNzYtNTM2MC00OTA1LWI3YmItMzYwN2QyNjI3YWM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXLR4wXC5qe2X08EQTEnUkPosazGK9zY+9z+ 9HvDJLtq/fDsYyKeDGGuniu6ctrkSS6QgK1skIjOyVc8ZpAYTHyzsmLQ/uCI9sFS ssLrNszvIW5/yik6Yu0r/9Exjsqoio993uiaiiRcoHkTuw7kEiIxfEHcGjjTLLUM PUADliOfsDaOoB9fMwfhKlprIdlZG0Y6Xkxwz3mxYrg9SCfz6vDVvEu6vTLrAfEf ABm3kNPLVgzAwO333H+L+ZeD5pEWeUbxs7Bbbf5GeIJxR0P3Z2ZcFcKCQvOvJNQm T96BX7SX7ZQnA7u51w0q1DrDk6EFmOglpY+mhh7xWkr+9IgJKQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKCHUVQNoDrQoLW82VodUdMMzfaXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvYmFmNjdjYTYtNDY0NS0z ZThjLWIxZjEtOGIxY2M5M2NmYzhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf1tQAC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABtLJoaoQEFTCkGsEQjGV1+ad3PxylVSBsExv/aiG69KGonaV9en 49Fnsw8Fody8HR++T0pAqlIwlQejdA+KC1WTPt/KXzFw91jFy1ZYcLHTcTOQs7T7 3bBrZDufcMRa80uO5oho7LmoMX77rYr1yWc0fMFi9gg9vpQXsEcp2EMlOU/kV1Sg /7Ul0RcTCfltFAeFfeVaJmAcn3MSTCzGcxgLZROLVo77CH4WfYtfRz/2zsb9rYDw FvXGU/Zhn2r9hbGPRkuXhfwWXDAeaPfrkROm87ASFyYpNJbmm+lY7JWCx1p7x6Zp fzn/QN7X7cfzS32b6dbC9r9ZGsPyvrlO8NI= -----END CERTIFICATE-----Generated at Mon Apr 28 12:23:38 2025 by rpki-client