$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a250beff-0df5-3a60-afe1-77574f30a281.roa File: a250beff-0df5-3a60-afe1-77574f30a281.roa (raw, json) Hash identifier: 7uNLqyZyWSn+aUIbkVHfG/Rwv0/lHWRaOrVuiMaWKVc= Subject key identifier: B0:BC:5C:C4:A9:73:92:B2:73:5E:CD:D9:B9:AF:19:32:96:ED:E2:9C Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BAD8D9583E5D717CC61640 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a250beff-0df5-3a60-afe1-77574f30a281.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 2607:f8b0:4009::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:d8:d9:58:3e:5d:71:7c:c6:16:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=bac6cb09-e790-44aa-a07d-954b8957d69d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a4:01:81:23:5a:18:80:02:1b:77:d8:c9:1c: e7:c6:3a:a5:1d:1b:c3:a5:8e:04:b4:d8:ec:4b:42: f7:d3:53:55:8b:67:8f:58:10:02:a4:ce:78:07:bc: cb:09:b9:a0:07:be:03:3e:69:dc:90:79:f5:a1:d3: 16:80:45:94:64:b3:3f:da:1a:a8:0d:ad:77:02:14: 91:25:6f:6f:1d:ae:6e:51:73:12:3b:15:12:9d:93: 4a:d6:20:46:88:3b:7b:f8:c2:d3:34:25:01:ad:6a: 92:0c:05:4e:75:26:54:c7:7b:08:07:d7:0d:97:08: d9:84:ba:fc:ac:18:1e:43:85:20:1f:33:0d:6c:5c: 45:2c:2d:eb:5d:0d:59:dd:0a:e1:8b:66:89:d1:8a: 85:14:43:cd:5e:a2:58:24:f3:cc:2e:79:db:e1:96: 91:7b:82:b8:66:c9:d3:3d:50:7f:22:97:c7:3d:d1: b8:75:6c:85:a3:19:2e:1a:2c:5d:4c:c5:45:c5:52: 4b:ac:1a:b6:2d:2e:37:5e:e6:67:85:41:dd:e0:d5: a6:a5:59:0a:6b:de:ad:00:61:43:38:d3:8a:23:e1: f8:3c:6c:5e:1f:9a:c3:4b:b3:a8:73:ff:16:12:ec: ee:c2:86:3a:9b:b7:de:e1:cc:17:ae:52:80:c8:93: 52:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:BC:5C:C4:A9:73:92:B2:73:5E:CD:D9:B9:AF:19:32:96:ED:E2:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a250beff-0df5-3a60-afe1-77574f30a281.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv6: 2607:f8b0:4009::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:19:f4:96:71:66:55:09:71:03:6f:fb:a1:a2:e4:ed:bd:3c: 5b:fc:73:4d:68:c7:af:33:91:0c:c9:2e:84:06:f8:6d:aa:23: a2:15:9e:2c:0e:78:0e:e8:ec:19:9a:ed:c0:ca:0d:4f:e8:0c: a4:6a:1b:c8:6a:d6:ce:6a:4c:f8:cf:0d:a4:64:5b:01:58:2f: a7:7b:a6:e8:e6:6f:a3:48:3f:e1:e9:ba:a4:41:7b:e3:14:54: 45:f7:cf:af:a4:2e:f9:fe:ab:5c:15:22:89:ba:0b:bc:2a:b7: fb:4d:9e:4f:a1:53:90:ca:89:3c:16:20:ad:7c:57:25:84:2f: 56:30:c3:81:8d:9d:97:85:2f:a3:ee:66:01:ad:ac:90:f5:6a: 81:fa:bb:d9:48:75:77:c3:61:71:1e:df:4c:a6:60:a9:da:6c: 34:8c:6d:7e:49:48:0b:ac:11:d6:13:a8:67:cb:be:29:85:bd: aa:69:b7:06:84:d9:aa:bd:62:d4:a5:7d:12:17:43:55:c4:ac: c3:9c:1c:ce:7a:6d:05:aa:fc:ed:7e:53:25:85:1f:f4:b9:d2: 6b:e8:e8:47:10:1a:a3:11:11:ba:d1:a8:b2:1c:d7:1b:75:a0: 0f:3f:74:81:71:ce:bc:93:4a:2a:03:55:10:eb:14:fd:33:6e: 18:f4:83:cd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmkutjZWD5dcXzGFkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YmFjNmNiMDktZTc5MC00NGFhLWEwN2QtOTU0Yjg5NTdkNjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKQBgSNaGIACG3fYyRznxjqlHRvDpY4EtNjs S0L301NVi2ePWBACpM54B7zLCbmgB74DPmnckHn1odMWgEWUZLM/2hqoDa13AhSR JW9vHa5uUXMSOxUSnZNK1iBGiDt7+MLTNCUBrWqSDAVOdSZUx3sIB9cNlwjZhLr8 rBgeQ4UgHzMNbFxFLC3rXQ1Z3Qrhi2aJ0YqFFEPNXqJYJPPMLnnb4ZaRe4K4ZsnT PVB/IpfHPdG4dWyFoxkuGixdTMVFxVJLrBq2LS43XuZnhUHd4NWmpVkKa96tAGFD ONOKI+H4PGxeH5rDS7Ooc/8WEuzuwoY6m7fe4cwXrlKAyJNSEwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLC8XMSpc5Kyc17N2bmvGTKW7eKcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYTI1MGJlZmYtMGRmNS0z YTYwLWFmZTEtNzc1NzRmMzBhMjgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf4sEAJ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADMZ9JZxZlUJcQNv+6Gi5O29PFv8c01ox68zkQzJLoQG+G2qI6IV niwOeA7o7Bma7cDKDU/oDKRqG8hq1s5qTPjPDaRkWwFYL6d7pujmb6NIP+HpuqRB e+MUVEX3z6+kLvn+q1wVIom6C7wqt/tNnk+hU5DKiTwWIK18VyWEL1Yww4GNnZeF L6PuZgGtrJD1aoH6u9lIdXfDYXEe30ymYKnabDSMbX5JSAusEdYTqGfLvimFvapp twaE2aq9YtSlfRIXQ1XErMOcHM56bQWq/O1+UyWFH/S50mvo6EcQGqMREbrRqLIc 1xt1oA8/dIFxzryTSioDVRDrFP0zbhj0g80= -----END CERTIFICATE-----Generated at Sat Apr 26 19:54:48 2025 by rpki-client