$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c8aab726-9047-3d58-a2eb-f2bf7901caf1.roa File: c8aab726-9047-3d58-a2eb-f2bf7901caf1.roa (raw, json) Hash identifier: 4fP8uiFdPpp+B92Bk4aiozY2RIL5tijEtWBsdSdiCcc= Subject key identifier: 96:FF:67:15:2B:E5:47:54:ED:0D:EB:B7:84:C0:07:DA:CE:30:AB:18 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BAD804DEA6E68B5A68B280 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c8aab726-9047-3d58-a2eb-f2bf7901caf1.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 2001:4860:4833::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:d8:04:de:a6:e6:8b:5a:68:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=b1bc0c30-1e7c-4a17-a123-a560c04c8a90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:7e:62:50:a1:c9:92:bb:90:78:f3:1d:f3:28: 37:bd:cb:42:c5:db:6b:bf:e9:c6:fe:13:8a:d0:6d: 22:24:d7:0c:69:e1:93:4a:55:b7:c0:5f:77:c5:d9: f7:81:c9:86:7a:82:46:2d:1b:7e:16:a0:dc:0b:3d: c3:a5:87:f2:4d:d7:d8:13:00:75:24:77:74:36:ff: d7:9f:84:09:b7:d9:af:f0:c3:99:9b:8e:b1:4a:06: 04:26:58:4c:a9:13:8a:e1:7a:08:12:c4:cf:ac:c1: c2:e0:9d:46:38:fa:c5:73:3c:20:a4:84:14:67:56: c2:0d:f7:05:aa:ba:2c:b2:c2:df:67:84:48:20:72: ff:cc:30:5f:51:0e:56:2a:c1:72:18:aa:b6:02:36: 82:a5:fa:3e:4d:65:4e:91:cb:46:2f:28:26:6d:c8: 97:07:c8:dc:d4:32:8c:7c:d7:e7:78:0a:84:c6:0e: 25:0b:d3:12:11:b4:86:a4:f1:85:09:e1:17:ab:2b: 8d:c2:6e:6a:c1:a0:5d:43:85:26:36:f3:09:90:d3: ad:a1:62:c1:5d:79:32:b1:16:93:0a:8b:17:aa:b4: d8:32:79:a8:f1:92:af:c2:4c:d9:0d:24:76:97:9a: a1:3a:9d:26:7d:80:d0:86:79:70:df:50:f9:b7:c0: 92:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:FF:67:15:2B:E5:47:54:ED:0D:EB:B7:84:C0:07:DA:CE:30:AB:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c8aab726-9047-3d58-a2eb-f2bf7901caf1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv6: 2001:4860:4833::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:2b:61:1a:37:41:2e:80:35:f0:f1:1c:38:d8:b8:73:b1:6e: 0e:a3:93:c3:46:24:f4:d1:63:5c:18:93:6b:66:c8:fe:10:cb: e2:9f:e4:f7:98:bf:4d:02:6e:25:ba:d9:c1:a8:fa:a6:8c:01: 94:84:81:da:49:3d:e4:22:c7:30:7c:0b:2f:93:34:46:23:80: fc:c5:63:1f:e4:1e:4f:d2:44:2c:de:fb:af:6d:46:51:cd:57: 17:fc:8a:0a:f5:5c:1c:e4:5a:ca:a0:f1:2a:7f:ec:cf:cc:95: 20:e0:c9:ab:6c:01:2f:95:d6:03:3d:c8:11:4f:d2:2d:05:1a: 7b:f0:ea:bf:cc:e3:dc:23:2d:cf:45:55:07:5a:88:a6:45:7c: bc:b5:68:de:4d:67:49:42:c6:76:9e:c6:2a:41:f6:4d:6b:e6: 40:24:e9:45:06:12:02:0b:ff:2c:f9:26:41:8e:55:9f:a8:11: 6e:29:7a:15:a3:59:f2:5d:28:a7:47:5e:6a:8e:8a:c7:2c:9e: 42:59:b0:b7:75:e8:f3:a6:06:8d:9a:f5:65:3f:ff:c7:99:79: 65:0e:ac:d8:8e:41:e8:8f:3b:62:c9:01:ff:99:7f:71:a2:21: 45:f6:4f:ef:e3:6f:bc:79:f1:2e:3e:93:bf:8f:91:cc:39:85: 51:73:90:8b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmkutgE3qbmi1posoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YjFiYzBjMzAtMWU3Yy00YTE3LWExMjMtYTU2MGMwNGM4YTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo35iUKHJkruQePMd8yg3vctCxdtrv+nG/hOK 0G0iJNcMaeGTSlW3wF93xdn3gcmGeoJGLRt+FqDcCz3DpYfyTdfYEwB1JHd0Nv/X n4QJt9mv8MOZm46xSgYEJlhMqROK4XoIEsTPrMHC4J1GOPrFczwgpIQUZ1bCDfcF qrosssLfZ4RIIHL/zDBfUQ5WKsFyGKq2AjaCpfo+TWVOkctGLygmbciXB8jc1DKM fNfneAqExg4lC9MSEbSGpPGFCeEXqyuNwm5qwaBdQ4UmNvMJkNOtoWLBXXkysRaT CosXqrTYMnmo8ZKvwkzZDSR2l5qhOp0mfYDQhnlw31D5t8CSeQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJb/ZxUr5UdU7Q3rt4TAB9rOMKsYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYzhhYWI3MjYtOTA0Ny0z ZDU4LWEyZWItZjJiZjc5MDFjYWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIYEgz MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAYrYRo3QS6ANfDxHDjYuHOxbg6jk8NGJPTRY1wYk2tmyP4Qy+Kf 5PeYv00CbiW62cGo+qaMAZSEgdpJPeQixzB8Cy+TNEYjgPzFYx/kHk/SRCze+69t RlHNVxf8igr1XBzkWsqg8Sp/7M/MlSDgyatsAS+V1gM9yBFP0i0FGnvw6r/M49wj Lc9FVQdaiKZFfLy1aN5NZ0lCxnaexipB9k1r5kAk6UUGEgIL/yz5JkGOVZ+oEW4p ehWjWfJdKKdHXmqOiscsnkJZsLd16POmBo2a9WU//8eZeWUOrNiOQeiPO2LJAf+Z f3GiIUX2T+/jb7x58S4+k7+Pkcw5hVFzkIs= -----END CERTIFICATE-----Generated at Sat Apr 26 20:52:26 2025 by rpki-client