$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b8834e10-c093-3b7a-9522-5b7f8a5044ff.roa File: b8834e10-c093-3b7a-9522-5b7f8a5044ff.roa (raw, json) Hash identifier: vio939dcB7tcQEpGeBbJ+TE25ETsAbIL/6Gad7XvUpU= Subject key identifier: F5:8B:20:D6:22:FA:FD:9A:4E:5D:80:01:7E:54:AD:60:8E:2E:F5:AB Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BB7C69CDAD1EE018D5B500 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b8834e10-c093-3b7a-9522-5b7f8a5044ff.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 2607:f8b0:480e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:7c:69:cd:ad:1e:e0:18:d5:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=7ea255a7-eb82-45a5-8706-17a6722fa482 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:9c:d6:eb:b8:e0:7d:d8:bf:ce:8f:ed:55:0c: e2:83:dc:8e:2d:76:87:5d:66:d7:e3:d6:6c:2b:93: 4c:08:25:81:0c:92:6b:dc:59:05:19:81:ee:bf:00: 2b:9b:1c:4c:20:b3:f5:a4:60:41:4a:6b:40:5a:23: 3d:f4:e0:fc:f0:0b:1f:31:13:73:23:ec:ba:11:f6: 4f:ad:b3:e6:51:4b:29:0f:7c:4e:95:6e:21:28:8e: 65:f7:33:c1:4b:0a:7b:e2:57:90:97:d7:b7:f9:41: 57:e6:6a:a7:c7:ce:20:bb:2a:8c:68:f1:43:b4:34: df:26:65:99:a3:7b:f3:17:3c:a1:5c:7e:8b:b2:c7: 77:a6:55:5d:08:30:7f:09:a8:54:4b:50:b2:c0:8d: 98:8c:71:aa:39:d0:38:dd:0c:4c:3a:5e:7f:b7:2c: 47:6e:6f:b4:8b:23:16:70:5b:3c:8e:68:f4:5e:57: c8:39:d9:9e:26:3b:bb:22:e1:5b:8e:e3:38:07:16: c3:05:57:5c:b6:12:8c:e5:24:e1:c5:5f:88:9f:0f: c1:56:46:5d:9f:64:96:e8:45:a2:ed:2c:5b:9a:2f: cc:65:06:30:fb:b8:27:3e:56:ab:b9:a9:05:dc:cf: 7c:6b:1a:6f:fa:18:26:05:e8:76:2c:64:57:74:d4: 6b:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:8B:20:D6:22:FA:FD:9A:4E:5D:80:01:7E:54:AD:60:8E:2E:F5:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b8834e10-c093-3b7a-9522-5b7f8a5044ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv6: 2607:f8b0:480e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:15:7c:a7:86:8e:d6:29:35:95:b0:b1:74:ef:4d:77:fd:dd: 58:72:71:4f:de:0b:aa:d7:44:3b:60:e9:ba:c5:12:70:7c:e9: 7e:16:14:4d:a3:ac:7f:a4:10:20:5b:42:11:6b:ed:27:ef:60: 90:f1:f1:1c:80:b4:f0:da:92:a4:a8:f4:fc:3e:30:ba:67:7a: 30:d3:33:33:fd:14:05:cf:31:96:17:2d:bd:99:36:85:82:90: ed:df:28:43:c8:93:cb:96:f8:e7:b7:1a:3b:51:40:78:d8:5e: ee:04:19:cf:f2:23:eb:ac:03:f5:ed:2b:c1:7f:8b:10:68:e0: 14:9c:e6:dd:65:95:69:a7:51:63:83:29:50:fc:d0:71:c4:04: 3a:5b:3c:1a:64:64:33:14:eb:49:a8:1e:03:8d:ad:1a:e9:33: c1:5a:8d:0d:c0:5a:3e:a3:1e:85:71:e3:6b:d7:98:cc:c3:94: af:08:c7:4c:84:06:a7:d7:5a:70:57:19:3b:39:0f:ce:52:1e: fb:4f:82:4d:6c:5a:60:2a:5f:9a:ca:b9:07:6d:e1:3b:f7:80: de:c1:aa:a3:e1:70:f3:74:d9:4a:69:eb:c0:3c:dc:89:4b:dd: b2:ff:04:f4:86:15:c9:48:a3:35:74:c3:d6:df:71:61:34:14: 5e:ec:2c:e8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmku3xpza0e4BjVtQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk N2VhMjU1YTctZWI4Mi00NWE1LTg3MDYtMTdhNjcyMmZhNDgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZzW67jgfdi/zo/tVQzig9yOLXaHXWbX49Zs K5NMCCWBDJJr3FkFGYHuvwArmxxMILP1pGBBSmtAWiM99OD88AsfMRNzI+y6EfZP rbPmUUspD3xOlW4hKI5l9zPBSwp74leQl9e3+UFX5mqnx84guyqMaPFDtDTfJmWZ o3vzFzyhXH6Lssd3plVdCDB/CahUS1CywI2YjHGqOdA43QxMOl5/tyxHbm+0iyMW cFs8jmj0XlfIOdmeJju7IuFbjuM4BxbDBVdcthKM5SThxV+Inw/BVkZdn2SW6EWi 7Sxbmi/MZQYw+7gnPlaruakF3M98axpv+hgmBeh2LGRXdNRreQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPWLINYi+v2aTl2AAX5UrWCOLvWrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYjg4MzRlMTAtYzA5My0z YjdhLTk1MjItNWI3ZjhhNTA0NGZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf4sEgO MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHMVfKeGjtYpNZWwsXTvTXf93VhycU/eC6rXRDtg6brFEnB86X4W FE2jrH+kECBbQhFr7SfvYJDx8RyAtPDakqSo9Pw+MLpnejDTMzP9FAXPMZYXLb2Z NoWCkO3fKEPIk8uW+Oe3GjtRQHjYXu4EGc/yI+usA/XtK8F/ixBo4BSc5t1llWmn UWODKVD80HHEBDpbPBpkZDMU60moHgONrRrpM8FajQ3AWj6jHoVx42vXmMzDlK8I x0yEBqfXWnBXGTs5D85SHvtPgk1sWmAqX5rKuQdt4Tv3gN7BqqPhcPN02Upp68A8 3IlL3bL/BPSGFclIozV0w9bfcWE0FF7sLOg= -----END CERTIFICATE-----Generated at Sun Apr 27 09:28:45 2025 by rpki-client