$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/148affb1-156b-381d-b01e-cb66e8fab060.roa File: 148affb1-156b-381d-b01e-cb66e8fab060.roa (raw, json) Hash identifier: a3NRiSLD8cUO7ZzHjrwlXvCwC86nH+mpjzdb2ZXhV5Y= Subject key identifier: 31:EC:B7:9C:6A:D5:F4:BA:46:2A:72:24:38:4F:DD:75:2F:E9:6B:3D Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BB7C8BF582F83E298DAA80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/148affb1-156b-381d-b01e-cb66e8fab060.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 2001:4860:482b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:7c:8b:f5:82:f8:3e:29:8d:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=aa28a4a8-d1c0-4151-822c-e432312977cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:95:6e:9b:58:19:b4:c5:89:cb:cb:35:41:6f: d8:dd:f4:e7:83:37:5e:c2:e0:78:40:a1:0a:41:2e: a4:84:4c:c0:70:0d:41:7e:95:2e:76:be:a7:31:c9: 91:e8:b4:a1:6a:1d:7c:92:68:d1:77:11:2f:65:2d: f5:ef:9f:1e:68:ab:4c:ed:ac:62:d5:2e:d6:ef:fa: f7:23:a1:e8:24:f0:b1:86:22:79:40:71:db:9c:c6: 19:ba:18:36:7e:a5:74:4f:fe:63:50:a0:78:0c:d8: 22:44:fd:99:c1:22:1e:47:ff:90:b0:b5:a6:92:96: 6d:bd:63:48:b1:66:b0:ff:b2:29:b6:79:1e:4c:e5: d6:e3:32:b8:16:92:74:db:84:c6:d1:44:f6:d4:f0: 69:c6:37:3b:4a:ca:7c:ff:32:62:be:d7:03:44:ac: 35:43:7f:6c:97:cd:63:67:20:21:ae:20:63:cf:0e: e2:28:a7:ef:ac:09:51:b5:df:b9:de:08:d9:19:07: 9d:74:79:9d:d2:96:f5:cd:23:79:84:cf:25:a5:b0: 26:f1:4c:54:d5:f2:26:a6:a1:5d:43:f5:40:2e:13: f5:d8:d3:c5:25:f5:9b:51:e1:7b:10:f0:65:de:80: 2b:09:3f:65:7a:ce:96:25:de:9f:7e:3c:9e:71:d9: 35:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:EC:B7:9C:6A:D5:F4:BA:46:2A:72:24:38:4F:DD:75:2F:E9:6B:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/148affb1-156b-381d-b01e-cb66e8fab060.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv6: 2001:4860:482b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:cf:5c:ec:f2:89:89:2e:2a:45:d2:66:45:c1:35:c1:5f:fc: a9:d2:db:ae:9c:84:7c:ad:19:78:c6:fb:bc:96:ca:da:de:29: 46:46:2f:73:5f:6e:7e:36:ea:41:0c:c6:41:27:e8:64:f4:60: f2:c0:fa:d3:6e:a6:c5:80:28:47:23:fa:5c:61:df:5e:f1:dd: cc:b1:70:a9:6a:d2:22:10:54:2e:8b:68:e4:ad:0b:1d:00:ca: bd:d8:3d:fa:57:37:90:4b:53:83:7a:72:4a:3d:27:7f:ca:ce: 9d:be:f6:b0:81:14:93:f0:e3:7f:f3:1b:ca:3a:7a:e9:ab:e4: 7e:08:53:c1:2b:ec:44:a3:11:b5:22:54:6b:0d:50:91:0d:a5: 08:b5:5e:71:0e:4a:a8:98:f0:c2:31:db:3f:fa:36:ab:50:e4: 6c:77:1b:72:f1:c7:03:6c:06:3b:2d:15:48:fa:5e:98:88:e8: 52:31:c7:9c:d8:85:56:12:08:77:91:24:3e:98:5e:ae:ca:20: 84:6a:1d:e3:2e:06:13:bc:43:a3:b3:06:1d:43:86:b5:86:fb: 98:e9:5c:c4:ea:7c:06:2e:69:40:33:08:9f:7b:b4:be:90:7b: e8:4e:73:12:12:85:d1:72:76:97:ec:00:97:de:a0:a4:b3:37: 9e:f7:2e:e3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmku3yL9YL4PimNqoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YWEyOGE0YTgtZDFjMC00MTUxLTgyMmMtZTQzMjMxMjk3N2NjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJVum1gZtMWJy8s1QW/Y3fTngzdewuB4QKEK QS6khEzAcA1BfpUudr6nMcmR6LShah18kmjRdxEvZS31758eaKtM7axi1S7W7/r3 I6HoJPCxhiJ5QHHbnMYZuhg2fqV0T/5jUKB4DNgiRP2ZwSIeR/+QsLWmkpZtvWNI sWaw/7IptnkeTOXW4zK4FpJ024TG0UT21PBpxjc7Ssp8/zJivtcDRKw1Q39sl81j ZyAhriBjzw7iKKfvrAlRtd+53gjZGQeddHmd0pb1zSN5hM8lpbAm8UxU1fImpqFd Q/VALhP12NPFJfWbUeF7EPBl3oArCT9les6WJd6ffjyecdk1wwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDHst5xq1fS6RipyJDhP3XUv6Ws9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMTQ4YWZmYjEtMTU2Yi0z ODFkLWIwMWUtY2I2NmU4ZmFiMDYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIYEgr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACHPXOzyiYkuKkXSZkXBNcFf/KnS266chHytGXjG+7yWytreKUZG L3Nfbn426kEMxkEn6GT0YPLA+tNupsWAKEcj+lxh317x3cyxcKlq0iIQVC6LaOSt Cx0Ayr3YPfpXN5BLU4N6cko9J3/Kzp2+9rCBFJPw43/zG8o6eumr5H4IU8Er7ESj EbUiVGsNUJENpQi1XnEOSqiY8MIx2z/6NqtQ5Gx3G3LxxwNsBjstFUj6XpiI6FIx x5zYhVYSCHeRJD6YXq7KIIRqHeMuBhO8Q6OzBh1DhrWG+5jpXMTqfAYuaUAzCJ97 tL6Qe+hOcxIShdFydpfsAJfeoKSzN573LuM= -----END CERTIFICATE-----Generated at Sat Apr 26 19:55:42 2025 by rpki-client