$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8f53cfe8-3766-31b5-8862-753274ab5043.roa File: 8f53cfe8-3766-31b5-8862-753274ab5043.roa (raw, json) Hash identifier: cs9GcZGKoXlccejLEZh266H1ERISZEleIRusfOJAbQM= Subject key identifier: 85:E8:28:43:2B:7E:A1:64:F0:5D:1D:19:B2:87:74:2E:F5:76:D6:19 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BAD669EA722D8E16DA7670 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8f53cfe8-3766-31b5-8862-753274ab5043.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 11344 IP address blocks: 2001:4860:6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:d6:69:ea:72:2d:8e:16:da:76:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=5ef7b98d-b5e4-49b7-870e-709384897c25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:0f:b0:46:db:1f:d3:a6:1d:aa:01:16:d5:c0: ea:b6:3a:c0:58:13:da:fc:55:4a:42:3b:77:02:bb: 4f:69:0b:4e:87:bb:04:26:53:f1:64:99:cf:7b:00: f3:25:a5:22:58:33:c6:d4:b2:08:4a:46:32:90:84: 06:0f:f0:22:c1:e7:5b:67:24:f2:a2:b3:b5:0f:02: a5:1d:3c:a2:5c:e2:33:8f:ce:03:15:2f:74:3d:81: eb:ef:11:76:d0:da:62:3c:95:3c:31:6f:63:40:1a: 33:a0:50:f1:e0:b8:9c:67:17:00:55:d6:da:6c:f8: ba:4c:fc:02:58:2b:53:43:ff:57:05:ac:00:27:3d: c3:8a:08:2d:c7:eb:ec:5b:6f:67:b3:f2:b8:2d:26: 3d:06:7b:ec:4f:80:c2:54:97:17:19:de:5d:a7:d2: 02:76:5c:a8:90:24:80:31:0e:c8:70:3d:4d:03:da: 89:f1:36:f9:45:70:57:5f:71:c9:12:95:f2:f4:ee: 87:18:cd:6a:3a:02:3e:7c:b8:6d:6b:5f:9b:f1:9b: 1e:89:eb:3b:23:4e:19:b3:98:11:60:64:d8:22:91: 48:85:10:13:70:cc:d9:fb:3f:80:73:78:2e:f6:dd: d3:30:e3:e8:73:c1:e1:1f:f9:14:06:cb:95:ba:b5: 44:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:E8:28:43:2B:7E:A1:64:F0:5D:1D:19:B2:87:74:2E:F5:76:D6:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8f53cfe8-3766-31b5-8862-753274ab5043.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv6: 2001:4860:6::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:f6:45:1e:09:12:09:7d:b7:43:ed:2c:80:4b:ef:3c:f2:3a: 28:f2:cf:8a:85:b1:80:ad:14:85:c9:ee:3a:aa:07:cf:78:25: 08:8d:04:5d:77:31:d8:6c:54:f8:00:e7:9d:a0:f2:74:2f:a3: 64:4a:d1:98:4b:f5:d1:7d:ef:a7:40:bc:06:6c:2e:0a:dd:3b: ca:93:fb:80:2a:cd:a3:bc:10:ce:c5:43:26:f4:25:af:65:46: d7:16:58:f9:87:20:d2:64:a5:2d:60:c3:02:06:f9:06:80:5b: 08:95:73:3f:24:12:30:0f:e1:33:5c:ab:87:a5:ae:d8:41:11: 3f:25:5c:38:2e:b9:95:a5:48:b5:84:28:9f:cb:0a:18:4f:71: 33:14:a9:61:05:88:97:79:e8:6f:82:77:50:c3:0e:0b:04:48: 09:8f:22:98:6d:50:df:a4:f1:d3:e5:89:27:54:0d:df:d4:a8: 64:71:09:9b:f6:3a:9c:9b:dc:d0:47:c7:f7:7e:6f:5b:24:c8: 23:4e:53:60:36:f1:6d:9c:22:22:21:75:c8:b8:38:f4:b0:69: 0d:39:6e:43:71:1e:42:cc:cf:11:04:c7:49:e0:67:d1:6b:22: 9d:2a:c5:dc:b7:d2:f4:83:f2:20:85:41:14:54:bc:e0:49:b4: f9:05:7b:34 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmkutZp6nItjhbadnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NWVmN2I5OGQtYjVlNC00OWI3LTg3MGUtNzA5Mzg0ODk3YzI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQ+wRtsf06YdqgEW1cDqtjrAWBPa/FVKQjt3 ArtPaQtOh7sEJlPxZJnPewDzJaUiWDPG1LIISkYykIQGD/AiwedbZyTyorO1DwKl HTyiXOIzj84DFS90PYHr7xF20NpiPJU8MW9jQBozoFDx4LicZxcAVdbabPi6TPwC WCtTQ/9XBawAJz3Diggtx+vsW29ns/K4LSY9BnvsT4DCVJcXGd5dp9ICdlyokCSA MQ7IcD1NA9qJ8Tb5RXBXX3HJEpXy9O6HGM1qOgI+fLhta1+b8Zseies7I04Zs5gR YGTYIpFIhRATcMzZ+z+Ac3gu9t3TMOPoc8HhH/kUBsuVurVEvwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIXoKEMrfqFk8F0dGbKHdC71dtYZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOGY1M2NmZTgtMzc2Ni0z MWI1LTg4NjItNzUzMjc0YWI1MDQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIYAAG MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA/2RR4JEgl9t0PtLIBL7zzyOijyz4qFsYCtFIXJ7jqqB894JQiN BF13MdhsVPgA552g8nQvo2RK0ZhL9dF976dAvAZsLgrdO8qT+4AqzaO8EM7FQyb0 Ja9lRtcWWPmHINJkpS1gwwIG+QaAWwiVcz8kEjAP4TNcq4elrthBET8lXDguuZWl SLWEKJ/LChhPcTMUqWEFiJd56G+Cd1DDDgsESAmPIphtUN+k8dPliSdUDd/UqGRx CZv2Opyb3NBHx/d+b1skyCNOU2A28W2cIiIhdci4OPSwaQ05bkNxHkLMzxEEx0ng Z9FrIp0qxdy30vSD8iCFQRRUvOBJtPkFezQ= -----END CERTIFICATE-----Generated at Sun Apr 27 02:17:39 2025 by rpki-client