$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/64c77c06-2a0b-39b6-96f9-5abf73d4255d.roa File: 64c77c06-2a0b-39b6-96f9-5abf73d4255d.roa (raw, json) Hash identifier: Yvj41ZgPn1XzVcwy8SXzVzsgkjaae5jz+bHVrzEoIJo= Subject key identifier: A2:83:AD:3E:AE:26:85:68:9F:69:EE:AD:78:D5:B8:B5:18:44:27:4E Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BAD5C26C3720869A0B7C80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/64c77c06-2a0b-39b6-96f9-5abf73d4255d.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 2607:f8b0:480f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:d5:c2:6c:37:20:86:9a:0b:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=ace91980-d09b-457c-9e35-d8163c34e55c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:14:5f:65:8b:20:a2:00:85:c2:d1:bb:d0:7f: 90:8c:7a:3b:c9:75:b8:fa:59:85:21:6b:6d:38:cf: 24:07:0b:ed:ba:e6:96:37:21:7b:89:d3:41:d0:49: 80:90:34:8e:e2:6e:19:86:ee:85:6d:a2:e7:18:63: 73:55:9f:81:7a:8e:50:77:4c:5e:90:9b:a8:ac:18: 0b:ad:d1:79:b5:f6:20:2d:21:41:25:fd:09:84:d4: d5:ce:30:39:4a:ed:56:f2:ec:a6:4c:85:4c:d8:a8: 3a:9a:5f:75:70:21:d8:7e:23:01:d6:5c:67:13:e5: 7a:e5:de:81:b4:45:53:e1:b9:0c:52:57:8d:7e:33: f6:81:27:be:a1:6c:c2:0c:57:85:f5:f1:f1:3f:74: 82:58:99:f2:0e:d7:13:de:90:dd:67:9b:32:a1:61: c9:36:e0:e5:6e:d5:ae:c6:08:2e:73:2c:c7:68:e6: c9:5c:06:85:76:4b:90:c1:91:b5:cb:c2:1f:2c:cd: 59:54:a3:d4:90:a5:74:e7:9c:b4:e3:b0:0c:93:7d: e5:a2:39:04:67:03:8d:98:4a:a1:44:c8:3e:7e:c5: 3c:51:1f:ce:95:86:29:74:1f:5c:e3:e9:a1:83:df: 06:0b:e5:cb:e3:92:9e:a9:fd:3e:f9:05:61:a6:92: 84:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:83:AD:3E:AE:26:85:68:9F:69:EE:AD:78:D5:B8:B5:18:44:27:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/64c77c06-2a0b-39b6-96f9-5abf73d4255d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv6: 2607:f8b0:480f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:58:a5:1a:1d:fd:71:d8:f2:b5:6b:cb:41:61:5c:61:80:88: d2:0a:c8:92:ef:b7:1d:a9:a8:be:cc:27:61:58:d7:a6:99:1c: 8e:23:80:59:a3:8f:00:ae:7e:81:9d:28:8d:29:1d:e1:97:26: 01:d1:33:ee:4c:95:e9:84:dd:08:f2:6f:55:3f:05:12:bb:e7: 7a:6f:1e:b7:2a:32:12:0a:1d:8a:89:89:9a:8e:49:27:8a:cf: 3c:57:51:6d:1f:eb:d6:f7:96:4a:ca:fd:95:36:ee:16:d4:12: 45:77:5b:57:84:5e:55:60:c1:70:a6:f1:f2:d5:95:e8:be:61: 84:2f:43:7d:f6:00:5d:12:31:a9:3d:86:14:6d:d1:ca:e1:9f: f1:78:64:cc:29:01:86:22:d3:8c:18:81:8b:a2:fb:02:f8:9a: 4f:33:84:6d:a1:57:10:9d:68:a8:08:c3:eb:f0:15:7f:64:ca: 29:7c:93:02:aa:57:d3:96:8e:3e:c0:46:8f:69:08:27:e2:4c: e6:fd:46:f8:16:92:d7:01:04:53:e3:82:de:ab:95:56:2a:17: c9:b0:2b:49:d9:10:54:8f:44:8f:1f:25:54:b5:a2:14:67:21: f4:c7:66:ca:a8:9e:db:bf:34:7b:94:30:da:36:23:d4:c7:94: d1:c6:83:33 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmkutXCbDcghpoLfIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YWNlOTE5ODAtZDA5Yi00NTdjLTllMzUtZDgxNjNjMzRlNTVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBRfZYsgogCFwtG70H+QjHo7yXW4+lmFIWtt OM8kBwvtuuaWNyF7idNB0EmAkDSO4m4Zhu6FbaLnGGNzVZ+Beo5Qd0xekJuorBgL rdF5tfYgLSFBJf0JhNTVzjA5Su1W8uymTIVM2Kg6ml91cCHYfiMB1lxnE+V65d6B tEVT4bkMUleNfjP2gSe+oWzCDFeF9fHxP3SCWJnyDtcT3pDdZ5syoWHJNuDlbtWu xggucyzHaObJXAaFdkuQwZG1y8IfLM1ZVKPUkKV055y047AMk33lojkEZwONmEqh RMg+fsU8UR/OlYYpdB9c4+mhg98GC+XL45Keqf0++QVhppKE/wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKKDrT6uJoVon2nurXjVuLUYRCdOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjRjNzdjMDYtMmEwYi0z OWI2LTk2ZjktNWFiZjczZDQyNTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf4sEgP MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHJYpRod/XHY8rVry0FhXGGAiNIKyJLvtx2pqL7MJ2FY16aZHI4j gFmjjwCufoGdKI0pHeGXJgHRM+5MlemE3Qjyb1U/BRK753pvHrcqMhIKHYqJiZqO SSeKzzxXUW0f69b3lkrK/ZU27hbUEkV3W1eEXlVgwXCm8fLVlei+YYQvQ332AF0S Mak9hhRt0crhn/F4ZMwpAYYi04wYgYui+wL4mk8zhG2hVxCdaKgIw+vwFX9kyil8 kwKqV9OWjj7ARo9pCCfiTOb9RvgWktcBBFPjgt6rlVYqF8mwK0nZEFSPRI8fJVS1 ohRnIfTHZsqontu/NHuUMNo2I9THlNHGgzM= -----END CERTIFICATE-----Generated at Sat Apr 26 19:52:53 2025 by rpki-client