$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3e519fb3-b4f6-30d0-9172-c6e0411b96b8.roa File: 3e519fb3-b4f6-30d0-9172-c6e0411b96b8.roa (raw, json) Hash identifier: XQxukZkEIcBmYJZpV5Rc2ZEhAy2Va9Foh2LBVFEr92w= Subject key identifier: 45:B2:2E:BC:31:15:47:90:B5:C9:BD:59:19:5D:30:11:32:8A:A0:16 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BB7A8D4A0E7D80160A0800 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3e519fb3-b4f6-30d0-9172-c6e0411b96b8.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 2607:f8b0:4008::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:7a:8d:4a:0e:7d:80:16:0a:08:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=a55af433-ea84-4fe5-b949-098d90d14542 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:b7:9d:13:62:01:02:7d:25:a5:69:2b:6e:09: 6f:9b:c6:e2:06:00:00:3f:a7:e7:d1:e8:5b:b6:7b: 46:6e:6a:c0:34:ff:08:ae:c9:6f:68:4b:fb:ab:28: d2:ac:62:69:2a:12:4d:cb:7a:35:fb:3a:5b:bd:7b: f1:70:98:42:a6:4f:6c:ed:1a:6f:1a:67:b9:52:3d: 70:65:08:b2:5b:69:ca:1f:d1:bf:3c:98:68:80:82: 3c:55:85:f7:28:6c:5d:53:3f:62:7a:0d:dd:ba:e3: 89:5e:8a:04:4b:2b:93:e7:66:85:68:2d:c8:37:d9: 08:b9:34:5a:d7:7a:9f:24:ab:f0:a2:6e:bf:54:ba: e4:c7:0b:d6:d7:dd:81:72:47:72:6f:af:1d:80:14: 55:5b:d4:14:6c:9f:f2:11:05:56:5b:ee:1b:27:c4: 4d:25:36:63:66:16:12:b6:e9:0b:6a:b7:4c:ad:37: 46:e7:56:56:57:f9:83:c6:0e:b3:8d:30:2f:eb:c7: 52:3e:73:64:41:88:d5:98:6e:49:07:3e:ea:6d:85: e1:20:e5:1f:b5:09:46:5f:08:4d:c3:fc:6b:81:85: 95:fb:69:89:71:ba:59:24:c7:56:89:76:be:68:92: fa:ec:e7:f9:17:b6:ee:0d:03:6a:08:23:b3:3f:ba: cf:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:B2:2E:BC:31:15:47:90:B5:C9:BD:59:19:5D:30:11:32:8A:A0:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3e519fb3-b4f6-30d0-9172-c6e0411b96b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv6: 2607:f8b0:4008::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:4c:0d:c6:49:f9:d5:51:bd:5a:e5:7b:f7:3b:df:45:9b:f5: df:9c:4f:30:48:24:1f:3b:e2:24:3f:69:0c:01:36:49:5e:3d: 25:2b:35:4c:c1:df:2a:9e:87:93:9f:12:02:b6:c6:de:5c:70: 46:3a:e1:e8:8c:f5:f5:cb:d0:36:d0:26:5e:93:61:3c:72:9a: 62:33:f6:12:fe:f7:d5:a1:a4:b0:24:de:1d:6b:ba:5b:2b:3f: 6c:d7:01:0f:bc:ae:a6:fc:15:00:ab:17:2d:5e:d2:e8:ca:86: 28:d0:97:d4:ac:97:1b:7b:3a:ca:e1:99:0e:99:f7:9a:c3:0f: 9f:bd:94:4f:a7:eb:c4:e2:4c:b9:40:71:d4:bc:c1:7a:a2:55: 15:5b:49:f8:79:33:b8:c6:d0:44:86:ab:ea:d2:c6:87:ce:d9: 27:8b:82:fe:80:8a:79:c2:4c:e5:44:5b:b5:96:b1:0e:c9:0f: 60:3a:d4:2f:e7:4e:ef:61:a0:d4:4e:5e:91:cc:cd:26:91:25: d4:9d:32:74:46:5b:2e:b1:94:20:80:3f:6e:0b:7a:12:4c:a7: 7a:23:c9:1d:43:3a:6e:df:36:e7:0b:88:58:1b:ee:7e:cb:86: 7a:f4:12:9a:aa:1f:58:56:4d:08:5c:6e:4c:39:99:b0:61:d8: 18:a7:df:c6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmku3qNSg59gBYKCAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YTU1YWY0MzMtZWE4NC00ZmU1LWI5NDktMDk4ZDkwZDE0NTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLedE2IBAn0lpWkrbglvm8biBgAAP6fn0ehb tntGbmrANP8IrslvaEv7qyjSrGJpKhJNy3o1+zpbvXvxcJhCpk9s7RpvGme5Uj1w ZQiyW2nKH9G/PJhogII8VYX3KGxdUz9ieg3duuOJXooESyuT52aFaC3IN9kIuTRa 13qfJKvwom6/VLrkxwvW192Bckdyb68dgBRVW9QUbJ/yEQVWW+4bJ8RNJTZjZhYS tukLardMrTdG51ZWV/mDxg6zjTAv68dSPnNkQYjVmG5JBz7qbYXhIOUftQlGXwhN w/xrgYWV+2mJcbpZJMdWiXa+aJL67Of5F7buDQNqCCOzP7rPywIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEWyLrwxFUeQtcm9WRldMBEyiqAWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvM2U1MTlmYjMtYjRmNi0z MGQwLTkxNzItYzZlMDQxMWI5NmI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf4sEAI MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAxMDcZJ+dVRvVrle/c730Wb9d+cTzBIJB874iQ/aQwBNklePSUr NUzB3yqeh5OfEgK2xt5ccEY64eiM9fXL0DbQJl6TYTxymmIz9hL+99WhpLAk3h1r ulsrP2zXAQ+8rqb8FQCrFy1e0ujKhijQl9Sslxt7OsrhmQ6Z95rDD5+9lE+n68Ti TLlAcdS8wXqiVRVbSfh5M7jG0ESGq+rSxofO2SeLgv6AinnCTOVEW7WWsQ7JD2A6 1C/nTu9hoNROXpHMzSaRJdSdMnRGWy6xlCCAP24LehJMp3ojyR1DOm7fNucLiFgb 7n7Lhnr0EpqqH1hWTQhcbkw5mbBh2Bin38Y= -----END CERTIFICATE-----Generated at Sun Apr 27 17:44:02 2025 by rpki-client