$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3ff2c0ec-3e5e-30ad-ac5e-910b0b4b3667.roa File: 3ff2c0ec-3e5e-30ad-ac5e-910b0b4b3667.roa (raw, json) Hash identifier: 07zpKhDEcYDgB9w2HDrsw+lpWlCmOQc7f/tIzKBrZvM= Subject key identifier: F1:E1:09:EB:2E:2D:2F:14:94:9F:85:43:62:EA:28:82:CE:DE:D0:7B Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BB7AC746F27C8DC80438C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3ff2c0ec-3e5e-30ad-ac5e-910b0b4b3667.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 2001:4860:4831::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:7a:c7:46:f2:7c:8d:c8:04:38:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=c5a04e2f-2b11-478b-8693-e239b1d62adf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:5e:05:36:3b:92:6f:b1:f0:64:63:5e:15:16: 67:3f:88:bd:2b:88:47:98:47:f8:70:b4:97:df:2b: 31:8f:7c:8f:35:87:4b:f7:fb:66:e2:19:db:bb:1f: 59:18:7b:c5:8b:05:93:c5:4d:5e:90:bb:86:9a:a3: b8:c7:86:07:0a:2c:16:fb:49:92:93:51:d5:4d:59: 98:8b:4a:19:2f:7c:5e:cc:3c:9d:d1:51:15:7a:de: a2:9b:03:9f:2e:2e:95:97:8e:22:c5:36:5a:dd:5e: 77:a6:e6:6c:41:44:64:6f:de:db:d0:32:39:ca:83: e2:c4:9a:cc:fd:ee:0a:ff:81:92:5f:7a:c9:f7:f9: e4:d2:73:fe:d0:b9:2c:84:85:6b:5b:72:24:66:7b: eb:f9:b3:0d:6e:79:b7:aa:50:32:b6:ba:0b:c4:62: 6e:62:ef:f7:4a:f9:eb:26:ed:ce:10:cb:43:7d:e3: b3:e3:50:8c:cd:0f:56:87:f0:75:17:a8:d5:47:89: b7:ed:b5:67:6c:54:9e:43:28:15:6c:28:74:9b:b0: e4:47:b4:f7:c5:28:5b:f5:97:c6:12:89:13:39:b7: 13:0c:b5:45:b1:ed:ed:2a:b7:18:6b:9b:4f:66:a5: b2:a8:7d:a2:f2:fb:3a:d1:e2:05:42:01:cc:16:a5: a0:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:E1:09:EB:2E:2D:2F:14:94:9F:85:43:62:EA:28:82:CE:DE:D0:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3ff2c0ec-3e5e-30ad-ac5e-910b0b4b3667.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv6: 2001:4860:4831::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:dd:2c:d4:35:c5:d9:53:0e:3d:40:58:65:f4:83:b7:f3:8c: 35:8e:d4:d4:23:39:54:a7:e0:dc:f7:9c:99:52:bc:a1:99:64: 18:fb:e6:e9:b1:62:48:4b:55:5c:3b:e5:53:7b:91:bd:e1:46: ed:1f:27:da:6e:96:02:61:da:be:4c:c8:e4:a4:24:c2:7d:90: 8f:bc:21:f3:fe:61:b0:b2:1e:fa:61:82:a4:4f:73:45:2f:ce: 0d:95:1d:3a:f4:de:48:87:1e:77:14:c8:1f:3b:7c:e1:cf:19: d6:64:60:01:25:a4:83:f4:c9:e0:5a:c8:74:67:c8:39:33:82: 78:30:c0:9b:5a:70:24:2e:01:ad:1a:29:78:b6:b8:ef:03:93: 6f:eb:22:80:28:4c:93:63:17:a9:21:62:02:62:b9:00:89:08: a9:36:5c:70:a7:e4:45:fb:66:07:99:8b:ae:bc:0f:30:f4:92: b2:4d:27:37:06:22:21:b4:12:eb:ae:d5:6e:08:75:68:5c:5b: e3:66:20:91:62:89:94:04:9f:ac:ae:2c:71:a8:3c:2c:8d:16: 0a:55:0f:be:0c:bb:8e:13:41:6e:f6:fc:5f:b8:4b:48:9c:b2: 4f:c1:04:bd:db:82:7c:35:2d:94:c1:db:c7:3c:ff:9e:48:96: 7e:ab:a1:dd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmku3rHRvJ8jcgEOMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YzVhMDRlMmYtMmIxMS00NzhiLTg2OTMtZTIzOWIxZDYyYWRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwV4FNjuSb7HwZGNeFRZnP4i9K4hHmEf4cLSX 3ysxj3yPNYdL9/tm4hnbux9ZGHvFiwWTxU1ekLuGmqO4x4YHCiwW+0mSk1HVTVmY i0oZL3xezDyd0VEVet6imwOfLi6Vl44ixTZa3V53puZsQURkb97b0DI5yoPixJrM /e4K/4GSX3rJ9/nk0nP+0LkshIVrW3IkZnvr+bMNbnm3qlAytroLxGJuYu/3Svnr Ju3OEMtDfeOz41CMzQ9Wh/B1F6jVR4m37bVnbFSeQygVbCh0m7DkR7T3xShb9ZfG EokTObcTDLVFse3tKrcYa5tPZqWyqH2i8vs60eIFQgHMFqWgTQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPHhCesuLS8UlJ+FQ2LqKILO3tB7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvM2ZmMmMwZWMtM2U1ZS0z MGFkLWFjNWUtOTEwYjBiNGIzNjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIYEgx MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIPdLNQ1xdlTDj1AWGX0g7fzjDWO1NQjOVSn4Nz3nJlSvKGZZBj7 5umxYkhLVVw75VN7kb3hRu0fJ9pulgJh2r5MyOSkJMJ9kI+8IfP+YbCyHvphgqRP c0Uvzg2VHTr03kiHHncUyB87fOHPGdZkYAElpIP0yeBayHRnyDkzgngwwJtacCQu Aa0aKXi2uO8Dk2/rIoAoTJNjF6khYgJiuQCJCKk2XHCn5EX7ZgeZi668DzD0krJN JzcGIiG0Euuu1W4IdWhcW+NmIJFiiZQEn6yuLHGoPCyNFgpVD74Mu44TQW72/F+4 S0icsk/BBL3bgnw1LZTB28c8/55Iln6rod0= -----END CERTIFICATE-----Generated at Mon Apr 28 09:11:35 2025 by rpki-client