$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0f18e3c4-beaa-3824-9939-87c2fd49f0bc.roa File: 0f18e3c4-beaa-3824-9939-87c2fd49f0bc.roa (raw, json) Hash identifier: /xeCJSytUOwC3YL/sVBGlz6IwTifA7degxZp9IqvXf0= Subject key identifier: 3F:6F:0D:CC:5C:21:70:92:40:7A:51:F2:2D:8E:95:39:AF:A3:63:B7 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BB7BB53D34ECB0397A7FB1 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0f18e3c4-beaa-3824-9939-87c2fd49f0bc.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 2607:f8b0:400e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:7b:b5:3d:34:ec:b0:39:7a:7f:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=c4012e5d-086a-4eae-bfe1-99f6c92a9b5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:a5:9c:4a:99:9c:1a:40:65:86:9d:25:d6:c2: 15:cf:47:98:87:62:7c:ca:74:bc:d4:04:ce:f6:46: 9e:9a:44:e4:7e:f0:43:d3:ea:bd:7e:68:76:87:ff: 63:1d:70:c5:30:68:50:d9:e2:8b:24:ec:b5:a9:80: b1:c5:12:08:92:c9:cf:26:be:d9:30:48:ba:46:86: 74:f5:26:ac:c2:a3:0d:66:28:60:ac:39:c9:a8:d8: 78:2e:77:28:de:61:b0:13:46:a3:2d:f5:92:ce:64: 81:71:a9:37:11:fe:64:3b:5a:5d:c6:60:c5:78:b1: b1:b9:ef:4d:60:88:12:d2:5a:ef:67:01:43:97:dd: bc:81:74:30:ab:78:70:1d:91:2b:b7:3c:81:27:41: 09:a9:1e:70:eb:4f:8f:7d:93:b8:76:8a:fb:18:a5: 00:92:88:fa:01:c7:7c:60:19:cd:a8:93:7b:2b:5b: e4:5a:fe:e1:e7:29:a7:90:06:cd:8f:33:b2:e3:55: 1a:83:67:70:e3:07:52:94:8d:49:56:e1:13:03:65: 72:50:fe:68:59:f0:58:11:a4:5e:ea:99:3f:3d:90: 7e:53:7a:77:a5:ec:d2:b5:13:c5:02:f1:24:57:76: 15:67:bb:3e:5c:a0:64:f8:25:e1:d8:29:0b:89:d3: 6b:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:6F:0D:CC:5C:21:70:92:40:7A:51:F2:2D:8E:95:39:AF:A3:63:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0f18e3c4-beaa-3824-9939-87c2fd49f0bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv6: 2607:f8b0:400e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:45:ce:b9:c2:4d:02:c2:a7:8c:00:cc:0b:94:c5:03:1b:cc: 17:b2:c1:f2:12:36:3e:6e:d3:40:68:b6:c2:a7:23:98:55:54: f1:e6:df:54:66:94:e6:c9:73:8c:6f:a8:58:2b:b9:13:2d:81: f3:a6:86:1e:7e:20:69:48:12:ae:de:42:98:f0:2e:3d:48:15: 75:82:81:48:29:b0:f0:b9:1a:15:07:ef:53:89:ca:52:1c:85: 03:37:69:19:97:36:76:4a:58:54:22:75:5e:cb:a0:f4:c8:2b: d5:3b:18:84:17:19:51:23:8a:46:73:8d:46:cf:b6:5c:d1:d7: 43:61:6c:7b:df:05:c9:63:28:a4:fe:c6:1a:7a:b4:2a:d1:e6: 86:b1:75:52:e1:9a:ee:7f:47:7d:40:1d:b6:83:5c:bc:f2:1e: 01:fb:e1:99:37:d8:ca:d6:e1:bd:13:c7:72:99:6d:23:b3:a0: fd:ef:ec:29:79:c9:25:0a:8c:b2:34:87:d2:da:65:d1:06:1b: 9c:9f:39:e9:67:59:75:a4:4f:d3:bb:64:aa:b7:7c:9e:a1:b0: 3d:46:6c:b6:51:6e:f0:6e:8f:40:dd:93:81:a2:9a:d0:9a:91: 80:55:f6:49:81:1f:aa:a3:79:e8:97:0d:7d:79:a1:b5:78:f3: 95:34:28:b1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmku3u1PTTssDl6f7EwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YzQwMTJlNWQtMDg2YS00ZWFlLWJmZTEtOTlmNmM5MmE5YjVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqWcSpmcGkBlhp0l1sIVz0eYh2J8ynS81ATO 9kaemkTkfvBD0+q9fmh2h/9jHXDFMGhQ2eKLJOy1qYCxxRIIksnPJr7ZMEi6RoZ0 9SaswqMNZihgrDnJqNh4Lnco3mGwE0ajLfWSzmSBcak3Ef5kO1pdxmDFeLGxue9N YIgS0lrvZwFDl928gXQwq3hwHZErtzyBJ0EJqR5w60+PfZO4dor7GKUAkoj6Acd8 YBnNqJN7K1vkWv7h5ymnkAbNjzOy41Uag2dw4wdSlI1JVuETA2VyUP5oWfBYEaRe 6pk/PZB+U3p3pezStRPFAvEkV3YVZ7s+XKBk+CXh2CkLidNr7QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFD9vDcxcIXCSQHpR8i2OlTmvo2O3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMGYxOGUzYzQtYmVhYS0z ODI0LTk5MzktODdjMmZkNDlmMGJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf4sEAO MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKpFzrnCTQLCp4wAzAuUxQMbzBeywfISNj5u00BotsKnI5hVVPHm 31RmlObJc4xvqFgruRMtgfOmhh5+IGlIEq7eQpjwLj1IFXWCgUgpsPC5GhUH71OJ ylIchQM3aRmXNnZKWFQidV7LoPTIK9U7GIQXGVEjikZzjUbPtlzR10NhbHvfBclj KKT+xhp6tCrR5oaxdVLhmu5/R31AHbaDXLzyHgH74Zk32MrW4b0Tx3KZbSOzoP3v 7Cl5ySUKjLI0h9LaZdEGG5yfOelnWXWkT9O7ZKq3fJ6hsD1GbLZRbvBuj0Ddk4Gi mtCakYBV9kmBH6qjeeiXDX15obV485U0KLE= -----END CERTIFICATE-----Generated at Sat Apr 26 19:54:06 2025 by rpki-client