$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/838607c9-7d41-392b-8c5d-4e6bf3826f5e.roa File: 838607c9-7d41-392b-8c5d-4e6bf3826f5e.roa (raw, json) Hash identifier: sFuU4spmX/wPchiTuR+LjOAi/Rd8TElNnEVHaRpDPy4= Subject key identifier: 5A:DA:55:C0:5B:D1:AA:CF:5E:21:5A:0D:49:24:DF:BC:88:B8:FA:2C Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BB7B5BCD52A068E3FD6EA0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/838607c9-7d41-392b-8c5d-4e6bf3826f5e.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 2607:f8b0:4016::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:7b:5b:cd:52:a0:68:e3:fd:6e:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=6b20a05e-23e3-4355-a489-1039c3b5e94c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:53:7c:1d:df:4e:7c:98:ec:75:ec:35:1e:c5: 7f:ec:55:2b:30:10:aa:3d:8a:31:e7:89:ba:7c:dc: 95:d9:ef:a4:07:b4:d4:61:e2:86:fd:07:43:b6:db: e0:27:db:c8:2e:68:61:93:ea:6f:47:d1:9f:40:48: da:a7:6a:5f:8d:e8:c0:95:66:18:7f:60:8b:2d:3f: 40:71:f0:a4:fb:0f:62:3e:e0:c5:72:a2:6c:b5:c5: 58:cd:0d:ad:95:ec:46:9d:48:3c:2d:24:da:40:d4: 77:f5:e8:2d:30:6e:ac:1b:86:5f:72:22:d8:2d:f3: 6d:29:33:8b:52:c3:b8:a5:62:54:76:3c:3e:a5:0d: 21:9a:f7:fe:12:2a:5a:f4:eb:e7:a0:5f:b6:7c:9d: 75:dc:a9:4a:81:46:32:0a:52:93:a8:fc:a3:53:fc: 74:24:a8:a1:fc:1b:49:43:46:92:0c:4b:de:3b:1e: 88:2d:ec:a7:5a:93:23:09:e6:23:c5:01:bd:1f:99: 1f:5a:18:f3:a3:52:c3:66:ef:af:e7:35:56:44:6d: 26:94:a0:13:9c:57:8e:6c:65:f4:c6:ef:b5:a2:12: d6:14:4a:25:5c:fc:35:0f:15:a3:45:d6:a4:8e:1d: 67:37:35:bc:bf:44:24:9c:dd:71:f8:41:ef:44:72: f5:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:DA:55:C0:5B:D1:AA:CF:5E:21:5A:0D:49:24:DF:BC:88:B8:FA:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/838607c9-7d41-392b-8c5d-4e6bf3826f5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv6: 2607:f8b0:4016::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:c8:fb:53:8f:b9:fd:05:07:11:6d:53:eb:6c:d2:0c:a3:a2: f4:43:c4:31:58:8b:3b:5f:87:d9:66:99:77:1e:81:c8:27:ad: df:2a:ba:c0:cd:e1:a3:a3:95:ab:f3:d1:1d:d4:c4:58:db:b1: 60:a4:a9:a2:7b:9e:a2:48:81:7c:01:1e:ba:59:55:a1:df:1d: 34:df:8f:23:a3:de:e3:ec:1c:cd:9a:0b:63:ea:17:55:21:8c: 35:7e:6d:c0:23:0c:7d:e9:d6:7d:7d:8d:97:45:55:2a:76:ed: 03:7c:db:95:93:83:ff:6c:69:d9:e8:a0:6d:d9:2b:d2:78:b8: 24:1b:ff:c5:dd:7e:f5:8c:d2:74:b3:af:10:44:24:28:41:01: de:2c:11:80:81:b3:56:01:df:1a:ac:21:31:43:37:48:c5:8c: 1d:10:00:be:86:b2:65:00:1b:6c:c0:06:21:96:2d:29:ba:27: 19:73:c0:ee:44:34:42:b7:52:2b:ff:fb:09:b5:a4:9b:03:a5: 98:17:54:c8:dc:85:b8:b2:7e:71:63:88:62:39:d4:08:69:d9: 9a:1d:d4:ba:5f:07:db:c9:1d:46:4b:39:17:e8:0a:6c:f4:af: fc:04:66:6d:d8:4b:d3:48:8a:cf:af:a8:00:8d:44:39:4c:73: 1f:03:f4:f5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmku3tbzVKgaOP9bqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NmIyMGEwNWUtMjNlMy00MzU1LWE0ODktMTAzOWMzYjVlOTRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVN8Hd9OfJjsdew1HsV/7FUrMBCqPYox54m6 fNyV2e+kB7TUYeKG/QdDttvgJ9vILmhhk+pvR9GfQEjap2pfjejAlWYYf2CLLT9A cfCk+w9iPuDFcqJstcVYzQ2tlexGnUg8LSTaQNR39egtMG6sG4ZfciLYLfNtKTOL UsO4pWJUdjw+pQ0hmvf+Eipa9OvnoF+2fJ113KlKgUYyClKTqPyjU/x0JKih/BtJ Q0aSDEveOx6ILeynWpMjCeYjxQG9H5kfWhjzo1LDZu+v5zVWRG0mlKATnFeObGX0 xu+1ohLWFEolXPw1DxWjRdakjh1nNzW8v0QknN1x+EHvRHL1MwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFraVcBb0arPXiFaDUkk37yIuPosMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvODM4NjA3YzktN2Q0MS0z OTJiLThjNWQtNGU2YmYzODI2ZjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf4sEAW MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB7I+1OPuf0FBxFtU+ts0gyjovRDxDFYiztfh9lmmXcegcgnrd8q usDN4aOjlavz0R3UxFjbsWCkqaJ7nqJIgXwBHrpZVaHfHTTfjyOj3uPsHM2aC2Pq F1UhjDV+bcAjDH3p1n19jZdFVSp27QN825WTg/9sadnooG3ZK9J4uCQb/8XdfvWM 0nSzrxBEJChBAd4sEYCBs1YB3xqsITFDN0jFjB0QAL6GsmUAG2zABiGWLSm6Jxlz wO5ENEK3Uiv/+wm1pJsDpZgXVMjchbiyfnFjiGI51Ahp2Zod1LpfB9vJHUZLORfo Cmz0r/wEZm3YS9NIis+vqACNRDlMcx8D9PU= -----END CERTIFICATE-----Generated at Sat Apr 26 20:55:23 2025 by rpki-client