$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/aab14d56-7fc6-3bfb-9185-b854cf74e081.roa File: aab14d56-7fc6-3bfb-9185-b854cf74e081.roa (raw, json) Hash identifier: DTwuAvwAeB5ElyGLchoVU/VbDgFy7kGltln80dsxObg= Subject key identifier: 0A:2D:35:04:1D:AF:78:16:CF:DF:42:43:74:ED:E1:32:28:90:A0:E3 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BAD5F89F3AC6175A7C11A0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/aab14d56-7fc6-3bfb-9185-b854cf74e081.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 2607:f8b0:400d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:d5:f8:9f:3a:c6:17:5a:7c:11:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=19f637b5-77d9-4fe2-9548-7878fcfc07b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:5a:57:51:b6:32:39:af:60:e6:a5:75:a3:51: c7:72:6c:e7:8f:c9:ab:fb:9c:69:c8:53:38:41:ed: c9:a7:bb:35:0c:50:74:94:c7:55:6c:84:e9:6b:34: 70:d4:8f:28:58:95:4e:8a:32:75:65:88:54:d0:c9: f7:40:d7:0d:1f:9d:ae:fa:06:3c:be:d4:a0:96:f5: b7:79:b9:8d:e2:29:1f:64:50:39:8c:22:6e:a0:f9: d3:de:5b:bf:7b:75:47:6a:12:4a:40:f7:f4:23:8d: d6:c9:b2:65:48:27:b2:b3:9e:aa:f2:f9:9d:65:c7: 7b:14:81:1e:c8:cd:d7:4a:bd:26:2a:25:21:2e:2c: bd:df:9f:65:8a:4c:f9:21:5f:8b:51:1c:aa:8a:75: 5a:ff:0b:44:c8:b4:1f:38:19:2b:cd:a8:de:51:26: 28:b6:d2:9b:64:34:f3:0c:45:ef:51:3a:d7:2c:dd: ea:94:ea:cb:8c:56:5a:0b:de:ff:1b:2a:3e:5a:b8: e8:35:23:b4:e8:62:e4:61:db:85:b5:35:cc:3a:45: 04:c2:34:f4:d1:b8:3f:47:d6:45:3a:17:65:4f:d1: 37:01:12:e2:19:4f:61:01:9e:19:c6:94:63:81:c9: f3:59:c2:30:dd:fc:b5:7c:68:a9:51:8a:05:ca:7a: 6c:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:2D:35:04:1D:AF:78:16:CF:DF:42:43:74:ED:E1:32:28:90:A0:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/aab14d56-7fc6-3bfb-9185-b854cf74e081.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv6: 2607:f8b0:400d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:3c:c0:ca:81:ba:6e:63:1e:a1:3f:7e:c2:3a:67:0a:85:1e: 50:61:ee:39:8e:7e:5f:07:d8:3a:c3:de:82:9f:a3:e3:a8:13: ca:c1:67:db:4c:68:c4:79:a0:d0:3d:c4:7e:37:ae:76:6a:05: 3f:b1:f7:d7:a0:f1:c0:76:43:fb:ad:b7:70:5c:d4:0e:fe:4e: 7f:fa:3f:2e:29:15:30:53:92:0f:c9:44:44:19:d7:cf:27:96: 3f:aa:6d:2d:f8:08:0c:52:3d:b7:bd:67:c8:91:53:8b:a1:78: b7:ef:96:c1:7e:77:9a:d5:e1:cb:f4:ff:b3:e8:2e:a1:8d:63: ff:10:c3:6b:67:56:54:f8:bf:95:de:eb:2d:20:9c:4b:09:68: bd:7e:97:4b:03:64:46:fd:e0:b0:68:98:f4:7c:58:01:46:1f: f9:92:64:03:4c:cc:3f:50:e1:fe:0a:cc:cc:fd:92:66:a3:ef: 02:aa:df:15:c9:ca:34:22:b9:bf:f8:1d:ed:11:fd:ca:96:8f: 76:de:e4:c0:10:7d:26:bb:5d:05:b8:18:57:22:e4:ae:ef:59: e8:8a:6f:e8:b5:e9:1e:b3:f2:65:db:0a:6d:c4:eb:49:4f:21: 00:f8:ee:ef:c6:4b:46:3a:69:a9:99:a3:02:11:54:01:b5:ab: c1:2b:71:41 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmkutX4nzrGF1p8EaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MTlmNjM3YjUtNzdkOS00ZmUyLTk1NDgtNzg3OGZjZmMwN2I4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVpXUbYyOa9g5qV1o1HHcmznj8mr+5xpyFM4 Qe3Jp7s1DFB0lMdVbITpazRw1I8oWJVOijJ1ZYhU0Mn3QNcNH52u+gY8vtSglvW3 ebmN4ikfZFA5jCJuoPnT3lu/e3VHahJKQPf0I43WybJlSCeys56q8vmdZcd7FIEe yM3XSr0mKiUhLiy9359likz5IV+LURyqinVa/wtEyLQfOBkrzajeUSYottKbZDTz DEXvUTrXLN3qlOrLjFZaC97/Gyo+WrjoNSO06GLkYduFtTXMOkUEwjT00bg/R9ZF OhdlT9E3ARLiGU9hAZ4ZxpRjgcnzWcIw3fy1fGipUYoFynps4wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAotNQQdr3gWz99CQ3Tt4TIokKDjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYWFiMTRkNTYtN2ZjNi0z YmZiLTkxODUtYjg1NGNmNzRlMDgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf4sEAN MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFM8wMqBum5jHqE/fsI6ZwqFHlBh7jmOfl8H2DrD3oKfo+OoE8rB Z9tMaMR5oNA9xH43rnZqBT+x99eg8cB2Q/utt3Bc1A7+Tn/6Py4pFTBTkg/JREQZ 188nlj+qbS34CAxSPbe9Z8iRU4uheLfvlsF+d5rV4cv0/7PoLqGNY/8Qw2tnVlT4 v5Xe6y0gnEsJaL1+l0sDZEb94LBomPR8WAFGH/mSZANMzD9Q4f4KzMz9kmaj7wKq 3xXJyjQiub/4He0R/cqWj3be5MAQfSa7XQW4GFci5K7vWeiKb+i16R6z8mXbCm3E 60lPIQD47u/GS0Y6aamZowIRVAG1q8ErcUE= -----END CERTIFICATE-----Generated at Sat Apr 26 19:54:46 2025 by rpki-client