$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/84f025aa-f12b-3ffd-8316-3f7e3ba07332.roa File: 84f025aa-f12b-3ffd-8316-3f7e3ba07332.roa (raw, json) Hash identifier: osvDwls1qjD/fDeg063KkN+IL2TgFhCVWvnUMrpUcOY= Subject key identifier: 48:CB:E4:06:F0:6A:FE:D2:2B:FB:7A:BF:9D:EC:CC:24:E7:8C:7D:7D Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BAD714249489519B830140 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/84f025aa-f12b-3ffd-8316-3f7e3ba07332.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 36040 IP address blocks: 2001:4860:3::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:d7:14:24:94:89:51:9b:83:01:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=6ecf0068-724f-406c-9cca-0b6d95aa7fa4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:08:6b:47:8c:6a:bd:79:fa:81:56:9a:d6:f7: 23:56:6b:c4:4f:35:ea:71:52:56:6d:fa:8e:2a:08: f7:18:a1:6c:f9:b9:f2:6f:79:ab:e7:bd:cc:95:8a: 7b:01:95:0f:5b:77:48:ef:45:88:f5:45:85:57:c8: e3:09:55:23:72:a0:8f:0f:fa:b4:71:28:0e:2b:a4: 1f:e0:70:70:6c:44:d1:f2:35:d4:27:17:4e:04:9c: 9d:8e:c3:ee:e9:18:b1:13:3d:c8:fb:47:0c:b6:35: e8:ff:23:76:ab:23:35:12:0e:37:64:24:e7:7a:02: 91:cc:16:60:90:af:15:db:2f:55:29:d7:2d:a4:51: e0:4d:6b:65:98:39:d1:82:a5:3a:dc:07:e9:aa:77: 50:8f:c1:54:f5:e6:a2:f5:03:eb:fa:85:45:24:d2: 9f:5e:38:ec:d9:f5:74:3f:12:c2:60:cb:29:0a:9e: 41:fa:eb:78:95:81:0c:4b:cd:9b:b2:7e:37:56:72: c6:29:99:11:e8:99:8c:46:35:92:2d:53:c1:e6:b0: 5a:6d:5a:eb:e5:1d:d0:f6:34:95:48:e4:3b:ff:5e: bb:fd:79:92:40:1c:96:62:b9:69:3d:37:1d:e9:b9: d7:14:ac:5d:ab:c4:d2:7e:25:a6:f8:02:11:aa:fb: ad:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:CB:E4:06:F0:6A:FE:D2:2B:FB:7A:BF:9D:EC:CC:24:E7:8C:7D:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/84f025aa-f12b-3ffd-8316-3f7e3ba07332.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv6: 2001:4860:3::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:41:a6:30:07:97:dc:a4:da:0d:c8:4f:7f:13:fe:bc:dc:84: 7e:df:aa:d2:f8:65:41:1a:0b:fa:f9:33:e2:98:2b:40:f1:e5: cd:39:79:3f:dd:a8:94:17:76:c9:a7:23:be:e7:0e:08:9d:fa: e7:68:a7:d8:0e:77:fe:85:2e:a3:14:13:ad:59:a5:ec:86:6d: 2c:43:bd:d6:f1:e4:37:c7:16:97:7f:f9:ac:f7:6f:c1:1f:d3: 89:8e:87:9a:39:03:e7:f7:6b:68:08:59:9f:d2:64:03:57:eb: 77:9f:c8:c7:9f:72:2a:8c:26:c5:5c:fa:d6:5c:ca:e1:09:13: cb:b2:66:7d:30:7b:e6:f0:49:fe:b9:bf:82:ad:a9:9a:9f:59: ce:0a:cf:52:73:5c:15:30:ec:16:cf:03:53:96:25:ca:10:0b: b2:c4:24:f6:7c:aa:df:eb:d4:b8:a1:3a:6b:21:e0:27:cd:af: a6:e8:96:b4:85:fa:28:1c:30:4f:f8:b0:da:6c:b6:f8:51:be: 62:81:f7:7e:67:5d:14:92:72:8f:e0:7a:60:5c:5e:10:36:82: f6:76:9b:57:20:d4:ed:b1:45:bf:01:73:53:d4:51:b9:46:6d: 49:d6:23:cd:83:83:eb:8a:6d:72:1e:d0:54:9d:74:86:cd:08: 57:47:71:4d -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWEmkutcUJJSJUZuDAUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NmVjZjAwNjgtNzI0Zi00MDZjLTljY2EtMGI2ZDk1YWE3ZmE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhAhrR4xqvXn6gVaa1vcjVmvETzXqcVJWbfqO Kgj3GKFs+bnyb3mr573MlYp7AZUPW3dI70WI9UWFV8jjCVUjcqCPD/q0cSgOK6Qf 4HBwbETR8jXUJxdOBJydjsPu6RixEz3I+0cMtjXo/yN2qyM1Eg43ZCTnegKRzBZg kK8V2y9VKdctpFHgTWtlmDnRgqU63AfpqndQj8FU9eai9QPr+oVFJNKfXjjs2fV0 PxLCYMspCp5B+ut4lYEMS82bsn43VnLGKZkR6JmMRjWSLVPB5rBabVrr5R3Q9jSV SOQ7/167/XmSQByWYrlpPTcd6bnXFKxdq8TSfiWm+AIRqvutuQIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFEjL5Abwav7SK/t6v53szCTnjH19MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvODRmMDI1YWEtZjEyYi0z ZmZkLTgzMTYtM2Y3ZTNiYTA3MzMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAIAFIYAAD AAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAlkGmMAeX3KTaDchPfxP+vNyEft+q0vhlQRoL+vkz4pgrQPHl zTl5P92olBd2yacjvucOCJ3652in2A53/oUuoxQTrVml7IZtLEO91vHkN8cWl3/5 rPdvwR/TiY6HmjkD5/draAhZn9JkA1frd5/Ix59yKowmxVz61lzK4QkTy7JmfTB7 5vBJ/rm/gq2pmp9ZzgrPUnNcFTDsFs8DU5YlyhALssQk9nyq3+vUuKE6ayHgJ82v puiWtIX6KBwwT/iw2my2+FG+YoH3fmddFJJyj+B6YFxeEDaC9nabVyDU7bFFvwFz U9RRuUZtSdYjzYOD64ptch7QVJ10hs0IV0dxTQ== -----END CERTIFICATE-----Generated at Sun Apr 27 01:07:29 2025 by rpki-client