$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2f8beddf-a87e-360a-bcff-2db90bb64c60.roa File: 2f8beddf-a87e-360a-bcff-2db90bb64c60.roa (raw, json) Hash identifier: pwzO1DXBY9fE0SPtGSBPqUyyn/v7YEy9dEYltmMDZb8= Subject key identifier: 7C:86:C0:5F:FF:38:58:26:43:C5:D9:02:34:5B:6C:B8:48:97:7F:67 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BB7CF495920B979DEC6D80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2f8beddf-a87e-360a-bcff-2db90bb64c60.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 43515 IP address blocks: 2001:4860:4805::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:7c:f4:95:92:0b:97:9d:ec:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=35ab153f-f742-424c-87c3-93bbd8aa2e9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:4f:86:e4:31:2e:19:e4:b3:f4:fc:1e:fa:da: 53:fa:d8:06:6b:d3:f7:aa:c2:47:cc:2b:77:dc:00: 08:0b:b6:f3:09:76:e7:7a:54:9c:e9:0e:31:c7:91: 75:2e:b6:c3:5b:40:fe:9f:ca:15:ee:04:43:cc:6e: c6:1e:86:66:81:eb:8f:2d:b4:68:04:12:41:16:03: c2:e4:d7:64:84:59:62:a6:a0:93:9c:3f:18:4f:8e: 9f:8a:ab:ad:29:b0:c4:22:a9:3f:04:cc:7c:86:14: 02:a5:79:90:23:b0:dc:b2:37:2a:28:f8:fc:e8:fb: 5a:22:3a:33:e3:55:f2:4d:64:01:c2:bb:3a:d8:c2: f5:6f:4d:26:22:53:c9:0f:b0:50:1b:4f:00:21:03: 13:6b:7c:09:4e:fc:bd:90:15:28:c4:78:13:8c:57: c8:87:62:45:2a:4e:e2:0f:99:a9:7a:56:6d:09:24: 02:9b:47:52:82:d3:e9:d9:82:8e:48:81:99:ac:fd: 20:9d:0f:fb:bb:4e:67:a7:b5:01:2a:c9:4f:70:28: b0:5d:a9:e8:14:eb:08:8a:d3:d9:54:25:13:13:fa: 2f:a3:9c:8a:ac:7d:8b:6c:82:90:38:c6:5d:b9:d8: 46:2c:b6:10:52:74:6e:46:d5:b2:24:6a:6e:42:4c: a7:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:86:C0:5F:FF:38:58:26:43:C5:D9:02:34:5B:6C:B8:48:97:7F:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2f8beddf-a87e-360a-bcff-2db90bb64c60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv6: 2001:4860:4805::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:21:34:5b:d7:f1:74:71:a0:df:45:95:8c:9c:4e:98:14:61: 35:4b:91:51:d4:aa:83:2e:f9:78:01:ea:21:e5:ba:66:13:12: 58:11:3f:6e:b6:36:00:f0:31:0f:88:bb:c0:cb:0f:f6:30:c2: 17:3a:62:4c:20:1f:66:27:94:8b:a9:24:44:2e:78:fd:1f:08: 19:1c:c3:61:24:f5:e7:9b:07:a9:84:26:a9:76:a9:15:fb:27: c4:c0:55:95:5f:12:66:e4:a0:74:be:90:92:a4:df:1f:9b:c4: 81:cb:52:61:74:22:ba:c5:8e:90:a4:86:78:2e:98:e7:83:d0: 96:fc:3d:36:7d:e4:28:b4:64:d4:1a:b2:8d:3e:33:73:5c:cd: 37:ab:97:b9:75:b8:27:98:0e:9d:06:e9:a6:38:23:ac:49:49: 08:79:ac:4b:fe:f8:88:2b:09:77:73:e6:9f:83:9f:17:04:f5: 40:d9:28:89:98:ba:0f:4f:eb:47:d8:6a:95:e5:5a:10:2e:38: 2e:c0:60:23:24:a6:0b:45:0c:c6:50:e9:8b:e7:cf:47:67:74: 12:c0:06:e5:e1:88:50:0f:cf:49:40:05:e5:02:04:a4:94:b0: ea:74:6d:22:c4:43:9d:6e:03:22:34:94:83:86:43:22:2e:e3: c9:4b:aa:95 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmku3z0lZILl53sbYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MzVhYjE1M2YtZjc0Mi00MjRjLTg3YzMtOTNiYmQ4YWEyZTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnk+G5DEuGeSz9Pwe+tpT+tgGa9P3qsJHzCt3 3AAIC7bzCXbnelSc6Q4xx5F1LrbDW0D+n8oV7gRDzG7GHoZmgeuPLbRoBBJBFgPC 5NdkhFlipqCTnD8YT46fiqutKbDEIqk/BMx8hhQCpXmQI7DcsjcqKPj86PtaIjoz 41XyTWQBwrs62ML1b00mIlPJD7BQG08AIQMTa3wJTvy9kBUoxHgTjFfIh2JFKk7i D5mpelZtCSQCm0dSgtPp2YKOSIGZrP0gnQ/7u05np7UBKslPcCiwXanoFOsIitPZ VCUTE/ovo5yKrH2LbIKQOMZdudhGLLYQUnRuRtWyJGpuQkynGwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHyGwF//OFgmQ8XZAjRbbLhIl39nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMmY4YmVkZGYtYTg3ZS0z NjBhLWJjZmYtMmRiOTBiYjY0YzYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIYEgF MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFEhNFvX8XRxoN9FlYycTpgUYTVLkVHUqoMu+XgB6iHlumYTElgR P262NgDwMQ+Iu8DLD/Ywwhc6YkwgH2YnlIupJEQueP0fCBkcw2Ek9eebB6mEJql2 qRX7J8TAVZVfEmbkoHS+kJKk3x+bxIHLUmF0IrrFjpCkhngumOeD0Jb8PTZ95Ci0 ZNQaso0+M3NczTerl7l1uCeYDp0G6aY4I6xJSQh5rEv++IgrCXdz5p+DnxcE9UDZ KImYug9P60fYapXlWhAuOC7AYCMkpgtFDMZQ6Yvnz0dndBLABuXhiFAPz0lABeUC BKSUsOp0bSLEQ51uAyI0lIOGQyIu48lLqpU= -----END CERTIFICATE-----Generated at Sun Apr 27 12:09:51 2025 by rpki-client