$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3f51e877-1ec2-3992-a53c-c0a0b4652f10.roa File: 3f51e877-1ec2-3992-a53c-c0a0b4652f10.roa (raw, json) Hash identifier: XZRGgFmv4CD61Tg4tNSH3p0gLKae7C4AjMgFax9lrMc= Subject key identifier: 7F:F5:48:E7:39:67:E7:FF:DC:2A:56:F0:16:A5:2F:40:E9:FB:25:2A Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BAD8CC55947E980F348A00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3f51e877-1ec2-3992-a53c-c0a0b4652f10.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 32381 IP address blocks: 2001:4860:480c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:d8:cc:55:94:7e:98:0f:34:8a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=ddf33c70-d94b-4357-b370-24d4dbfbad0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:cf:78:48:5c:ae:bc:f3:f1:eb:72:40:e5:57: 85:6f:e4:14:44:83:b6:c4:97:f9:00:26:f9:b9:12: a1:f2:f4:73:8c:d5:ba:10:39:d8:a4:c8:47:2e:78: 36:64:8e:06:ac:5c:d2:9d:79:f0:ce:39:f9:f6:94: af:9b:29:72:b5:be:3c:92:0a:a3:65:33:e9:68:ea: 2e:6e:b6:83:b1:30:ec:37:9c:86:86:b8:bc:6d:0e: 9b:23:91:4c:94:7c:70:4f:42:33:2f:ec:f4:b9:b5: fc:ce:88:58:9c:7d:0a:27:25:5a:a6:9e:63:1c:c3: a4:97:8c:c4:16:8a:68:71:c0:f7:c5:82:c6:d4:79: af:78:25:75:1e:a6:3e:13:7d:6c:7a:7b:2d:b6:31: cd:02:20:f6:bc:9a:a8:64:5e:d5:a9:54:11:b3:d3: 98:4d:d2:60:1a:39:c0:bd:c0:a9:4b:12:71:6f:34: 89:ef:0b:19:88:11:d4:4c:36:c2:bc:1e:bb:06:2f: 88:34:23:3f:9e:1d:72:0e:d4:ee:c5:57:7f:93:a2: 57:d0:f5:1d:00:28:5e:3a:7e:2e:8d:d1:e2:0f:c9: f3:2f:00:1c:26:0c:95:78:7d:76:7e:9d:e2:b0:cf: 7b:a8:43:43:83:bd:1a:de:f9:57:83:34:a8:74:0b: 4e:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:F5:48:E7:39:67:E7:FF:DC:2A:56:F0:16:A5:2F:40:E9:FB:25:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3f51e877-1ec2-3992-a53c-c0a0b4652f10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv6: 2001:4860:480c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:62:d0:76:48:a9:5b:bc:d4:97:9a:50:62:82:ba:97:b7:de: de:06:92:19:42:52:de:89:30:e6:86:b3:d8:90:63:91:d6:64: 25:40:14:24:a3:64:5b:c5:a4:46:fd:77:9e:97:13:f0:fe:26: 60:68:a0:28:ed:87:f6:b1:c0:c4:12:de:7e:2a:5d:5c:82:f7: 42:f2:17:fb:38:90:f2:88:6d:c5:bf:ed:f8:50:97:c9:46:fd: 3b:ee:ab:6a:e6:c9:df:62:e0:99:66:b7:6d:9b:9d:c6:15:60: 44:af:a9:eb:b8:f7:e9:f1:6a:6a:f4:1b:fc:0a:64:6c:ba:2c: e7:2e:3c:53:8e:15:bd:e2:91:a5:73:3d:fa:dc:29:dc:43:3b: d9:fd:2e:35:a0:7b:e7:a5:cc:21:9f:5e:c9:0b:18:db:40:a4: f1:1c:33:bc:2b:51:cf:f3:8a:c2:e4:00:61:35:f7:28:12:e8: 53:09:77:db:b9:3a:f4:5f:dd:fb:8e:3f:f0:cf:b3:6b:a8:7b: f4:0a:33:37:91:1a:c0:d3:56:df:7b:bc:62:d1:31:b5:72:f2: 15:98:c0:ee:85:bd:86:21:d6:20:fa:50:70:8d:7c:5b:03:e2: 8c:b7:92:fe:ea:16:aa:42:26:1c:30:22:90:f9:d7:7d:53:30: ff:ab:53:b4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmkutjMVZR+mA80igAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZGRmMzNjNzAtZDk0Yi00MzU3LWIzNzAtMjRkNGRiZmJhZDBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlc94SFyuvPPx63JA5VeFb+QURIO2xJf5ACb5 uRKh8vRzjNW6EDnYpMhHLng2ZI4GrFzSnXnwzjn59pSvmylytb48kgqjZTPpaOou braDsTDsN5yGhri8bQ6bI5FMlHxwT0IzL+z0ubX8zohYnH0KJyVapp5jHMOkl4zE FopoccD3xYLG1HmveCV1HqY+E31sensttjHNAiD2vJqoZF7VqVQRs9OYTdJgGjnA vcCpSxJxbzSJ7wsZiBHUTDbCvB67Bi+INCM/nh1yDtTuxVd/k6JX0PUdACheOn4u jdHiD8nzLwAcJgyVeH12fp3isM97qENDg70a3vlXgzSodAtOtwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFH/1SOc5Z+f/3CpW8BalL0Dp+yUqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvM2Y1MWU4NzctMWVjMi0z OTkyLWE1M2MtYzBhMGI0NjUyZjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIYEgM MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHpi0HZIqVu81JeaUGKCupe33t4GkhlCUt6JMOaGs9iQY5HWZCVA FCSjZFvFpEb9d56XE/D+JmBooCjth/axwMQS3n4qXVyC90LyF/s4kPKIbcW/7fhQ l8lG/Tvuq2rmyd9i4Jlmt22bncYVYESvqeu49+nxamr0G/wKZGy6LOcuPFOOFb3i kaVzPfrcKdxDO9n9LjWge+elzCGfXskLGNtApPEcM7wrUc/zisLkAGE19ygS6FMJ d9u5OvRf3fuOP/DPs2uoe/QKMzeRGsDTVt97vGLRMbVy8hWYwO6FvYYh1iD6UHCN fFsD4oy3kv7qFqpCJhwwIpD5131TMP+rU7Q= -----END CERTIFICATE-----Generated at Sun Apr 27 06:10:46 2025 by rpki-client