$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/77debda9-7647-3bc8-8ebc-825155c00ab7.roa File: 77debda9-7647-3bc8-8ebc-825155c00ab7.roa (raw, json) Hash identifier: A8MfWl1KYdSKBl8ZDsVqZN8Msoui/08EZhqvUz394lI= Subject key identifier: 21:F8:04:AA:02:D7:89:96:54:D7:C6:BF:59:74:08:0A:AA:71:C7:B5 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BB7B9DF9564461D749F180 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/77debda9-7647-3bc8-8ebc-825155c00ab7.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 2607:f8b0:400f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:7b:9d:f9:56:44:61:d7:49:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=3974084c-06e6-4f99-822f-a59558c661f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:0e:17:7e:7d:cf:ee:7e:f2:5a:7a:4b:ff:da: 6b:26:41:80:dd:2d:1a:d0:cc:49:44:f7:72:19:7e: a8:ad:4c:09:22:fc:72:83:ce:ab:99:7d:08:03:c4: 8f:1e:83:ac:20:46:dc:45:f9:cf:30:c4:83:94:f7: ac:23:1f:4b:41:9e:84:aa:83:02:2c:1d:22:28:d6: cb:3e:d1:71:5a:72:9a:43:5d:eb:06:0c:db:e8:5f: 4f:5b:4b:bb:80:37:37:48:d6:9e:58:4a:b0:ef:a0: ae:f7:3c:05:3d:7e:5f:2e:e7:a3:3f:b3:39:b5:3e: 0b:3b:dc:93:2b:8f:cd:9a:07:90:96:fd:dd:08:d6: 19:f7:61:2e:ac:e4:0d:13:dd:25:66:06:22:48:38: f6:41:c6:9c:06:5e:aa:ce:21:43:71:ac:cf:1f:75: 09:de:07:a7:d6:c9:ed:b7:0c:7f:2e:86:5e:05:7b: 2e:8d:98:cf:9f:57:f2:76:6b:9a:b3:18:28:69:1d: ab:b5:db:56:c8:16:37:97:cf:7e:0c:8e:19:28:91: 59:15:03:e7:46:21:e7:61:be:a7:5a:1e:0a:b7:5c: b8:b3:ff:c0:20:ad:8f:83:f2:f7:9b:b4:fb:e3:1b: e6:2e:20:44:48:75:77:62:b7:de:4d:2b:56:1f:2a: b1:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:F8:04:AA:02:D7:89:96:54:D7:C6:BF:59:74:08:0A:AA:71:C7:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/77debda9-7647-3bc8-8ebc-825155c00ab7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv6: 2607:f8b0:400f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:0d:8b:c5:93:56:61:2b:8d:e2:16:d5:8b:b4:9f:5a:ee:df: d6:f4:78:57:a6:c3:31:fc:28:2f:57:b4:ca:8d:7c:da:57:d6: 1d:48:00:05:38:e4:76:48:5d:7f:b2:f1:39:ce:65:ad:df:ce: 2e:72:46:e5:ad:d7:9b:00:f6:70:f7:8d:24:2a:8c:68:c1:bb: ed:90:88:ec:5d:3c:73:81:60:48:55:08:e8:3b:f8:ff:f1:36: 34:2d:e7:d2:30:b3:b3:f8:de:aa:2f:0a:85:78:d0:a2:87:4a: 79:fa:09:ca:0d:19:38:27:2b:d2:25:71:55:2f:6f:58:3b:3d: 7f:88:18:7d:a6:b4:7e:55:ab:c5:03:26:95:ee:17:29:9f:7c: dc:04:61:b6:1b:53:67:50:0e:cc:56:14:21:28:be:71:ad:e5: 3a:d1:a0:04:69:e6:58:10:80:7a:4f:ee:c4:17:ba:24:c5:b3: 85:9b:ba:d6:6e:4e:b1:4c:81:d6:f8:ca:78:de:0a:65:ec:45: 16:d9:36:e9:c2:d0:48:a4:7f:08:e3:a6:b2:ed:19:d2:79:dc: d2:f9:d2:1a:91:f7:18:a9:b1:8b:75:b0:06:06:5d:70:e6:97: eb:03:e6:c6:a9:b5:a4:e7:bf:96:3a:e0:38:65:82:55:9d:fa: 61:a6:ea:3f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmku3ud+VZEYddJ8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk Mzk3NDA4NGMtMDZlNi00Zjk5LTgyMmYtYTU5NTU4YzY2MWYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4w4Xfn3P7n7yWnpL/9prJkGA3S0a0MxJRPdy GX6orUwJIvxyg86rmX0IA8SPHoOsIEbcRfnPMMSDlPesIx9LQZ6EqoMCLB0iKNbL PtFxWnKaQ13rBgzb6F9PW0u7gDc3SNaeWEqw76Cu9zwFPX5fLuejP7M5tT4LO9yT K4/NmgeQlv3dCNYZ92EurOQNE90lZgYiSDj2QcacBl6qziFDcazPH3UJ3gen1snt twx/LoZeBXsujZjPn1fydmuasxgoaR2rtdtWyBY3l89+DI4ZKJFZFQPnRiHnYb6n Wh4Kt1y4s//AIK2Pg/L3m7T74xvmLiBESHV3YrfeTStWHyqxjwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCH4BKoC14mWVNfGv1l0CAqqcce1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNzdkZWJkYTktNzY0Ny0z YmM4LThlYmMtODI1MTU1YzAwYWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf4sEAP MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIQNi8WTVmErjeIW1Yu0n1ru39b0eFemwzH8KC9XtMqNfNpX1h1I AAU45HZIXX+y8TnOZa3fzi5yRuWt15sA9nD3jSQqjGjBu+2QiOxdPHOBYEhVCOg7 +P/xNjQt59Iws7P43qovCoV40KKHSnn6CcoNGTgnK9IlcVUvb1g7PX+IGH2mtH5V q8UDJpXuFymffNwEYbYbU2dQDsxWFCEovnGt5TrRoARp5lgQgHpP7sQXuiTFs4Wb utZuTrFMgdb4ynjeCmXsRRbZNunC0EikfwjjprLtGdJ53NL50hqR9xipsYt1sAYG XXDml+sD5saptaTnv5Y64DhlglWd+mGm6j8= -----END CERTIFICATE-----Generated at Sun Apr 27 11:20:34 2025 by rpki-client