$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7afa8df2-6b6d-3cfb-a1ee-11c1e206586c.roa File: 7afa8df2-6b6d-3cfb-a1ee-11c1e206586c.roa (raw, json) Hash identifier: sqSRFZ4kYa0QOhPdROWLGx1GOV3oQDQ4aa/gers2zmQ= Subject key identifier: 8D:E8:2D:87:1B:71:96:D5:6D:30:FA:75:3A:EB:66:FD:D5:62:39:8D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584902EC0B0DCA6D8913279D7E80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7afa8df2-6b6d-3cfb-a1ee-11c1e206586c.roa Signing time: Wed 26 Feb 2025 14:00:51 +0000 ROA not before: Wed 26 Feb 2025 14:00:51 +0000 ROA not after: Tue 27 May 2025 13:00:51 +0000 asID: 12222 IP address blocks: 2001:4878:b141::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:ec:0b:0d:ca:6d:89:13:27:9d:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 26 14:00:51 2025 GMT Not After : May 27 13:00:51 2025 GMT Subject: CN=bd5234f8-dd36-4adb-975a-b8a6c8397443 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:53:f4:d3:cc:f5:28:3a:15:ce:d7:2c:f9:a9: 07:d1:8a:49:ad:6a:51:75:b2:4c:0f:49:73:99:1e: 26:f1:8c:18:3a:0b:ef:4d:5e:61:18:81:11:bb:c2: c5:d9:43:f6:ea:3d:b1:00:15:8b:02:b0:03:01:ae: 3d:56:93:f8:01:87:c7:c2:3d:c5:b0:ec:69:58:e4: 87:56:be:8e:6b:b9:84:9a:6f:0c:9b:28:32:be:c5: 43:33:4d:ff:58:fd:ea:b2:2a:0b:ee:c8:8f:b5:e4: e9:55:8d:e7:cb:0b:35:0e:be:eb:35:d0:77:8c:f6: 44:53:a4:c4:4d:c1:91:14:51:48:b6:8e:53:9f:b1: e4:ec:65:98:a2:f5:29:11:e7:35:09:10:0b:e3:83: f7:9d:fd:27:33:10:ed:29:4e:eb:f2:11:bb:33:1f: cc:46:74:4f:a5:ac:c9:ad:e4:61:9a:19:6b:da:03: 7c:d4:21:35:8e:e2:6a:1e:4b:f2:ca:15:d8:02:c8: 6c:5d:63:aa:ad:b9:b9:b5:88:c5:1d:ce:6b:fe:b1: 69:1c:60:20:bb:3f:67:81:4f:94:6a:12:bb:a3:a1: 42:9a:c9:61:f7:3d:84:4f:57:9a:8b:10:b3:46:60: 4c:fa:55:ba:a1:ca:9d:8e:9a:56:85:49:d6:ac:b3: 74:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:E8:2D:87:1B:71:96:D5:6D:30:FA:75:3A:EB:66:FD:D5:62:39:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7afa8df2-6b6d-3cfb-a1ee-11c1e206586c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2001:4878:b141::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:38:ca:2c:78:a2:e2:02:37:06:a3:03:a4:54:5c:29:22:f3: 73:bb:3b:1f:29:77:e4:1a:69:ef:71:86:fc:26:11:50:7d:7d: 85:90:8b:08:1a:3b:d3:3b:e1:cb:31:d4:6a:d5:a3:a3:2b:82: de:95:6c:a4:23:f9:79:3d:3b:1f:4c:36:e6:60:94:57:d1:38: 7a:51:5d:49:dc:d4:d0:da:6e:68:2f:00:d6:7a:99:b6:15:75: 8b:e2:1c:86:7a:17:cd:8a:98:d0:90:bf:a9:c8:2d:04:35:31: 32:cf:f4:32:e4:b1:33:58:51:80:f1:d3:1c:5e:ec:ec:fc:b0: 64:ab:6c:61:80:a6:84:a2:76:3a:7a:4e:aa:91:d6:69:95:77: df:dc:f7:7e:41:ed:07:02:36:80:f8:16:64:82:46:fd:bf:2c: ac:74:2a:c2:15:a6:c2:72:da:ef:0a:0f:37:e7:ac:fb:f7:84: 74:fa:55:2d:f4:8c:d7:dd:ff:ac:67:86:18:e5:e6:1d:2d:3f: 56:60:79:b2:21:88:54:42:05:4b:a4:f1:45:7e:80:17:a2:f5: ba:11:b6:9a:d9:f2:51:26:90:6b:77:74:91:7a:09:0a:fe:fa: 95:b2:5b:fc:d3:d9:00:13:0e:43:89:97:9e:b6:76:46:15:79: b7:a4:d0:5d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkC7AsNym2JEyedfoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk YmQ1MjM0ZjgtZGQzNi00YWRiLTk3NWEtYjhhNmM4Mzk3NDQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlP008z1KDoVztcs+akH0YpJrWpRdbJMD0lz mR4m8YwYOgvvTV5hGIERu8LF2UP26j2xABWLArADAa49VpP4AYfHwj3FsOxpWOSH Vr6Oa7mEmm8MmygyvsVDM03/WP3qsioL7siPteTpVY3nyws1Dr7rNdB3jPZEU6TE TcGRFFFIto5Tn7Hk7GWYovUpEec1CRAL44P3nf0nMxDtKU7r8hG7Mx/MRnRPpazJ reRhmhlr2gN81CE1juJqHkvyyhXYAshsXWOqrbm5tYjFHc5r/rFpHGAguz9ngU+U ahK7o6FCmslh9z2ET1eaixCzRmBM+lW6ocqdjppWhUnWrLN0uQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFI3oLYcbcZbVbTD6dTrrZv3VYjmNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvN2FmYThkZjItNmI2ZC0z Y2ZiLWExZWUtMTFjMWUyMDY1ODZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIeLFB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIQ4yix4ouICNwajA6RUXCki83O7Ox8pd+Qaae9xhvwmEVB9fYWQ iwgaO9M74csx1GrVo6Mrgt6VbKQj+Xk9Ox9MNuZglFfROHpRXUnc1NDabmgvANZ6 mbYVdYviHIZ6F82KmNCQv6nILQQ1MTLP9DLksTNYUYDx0xxe7Oz8sGSrbGGApoSi djp6TqqR1mmVd9/c935B7QcCNoD4FmSCRv2/LKx0KsIVpsJy2u8KDzfnrPv3hHT6 VS30jNfd/6xnhhjl5h0tP1ZgebIhiFRCBUuk8UV+gBei9boRtprZ8lEmkGt3dJF6 CQr++pWyW/zT2QATDkOJl562dkYVebek0F0= -----END CERTIFICATE-----Generated at Sun Apr 27 12:16:43 2025 by rpki-client