$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dd2a5a82-f542-399a-bf49-fb94c1347733.roa File: dd2a5a82-f542-399a-bf49-fb94c1347733.roa (raw, json) Hash identifier: lhbh65/ch7uuNe2J4Xi9YKFDczPEmsKU4nC9XMivUzU= Subject key identifier: A7:36:0F:94:A7:AD:6F:57:1B:13:09:83:13:92:25:8A:2D:32:E8:E8 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BAD7BA0E974E439B7A9280 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dd2a5a82-f542-399a-bf49-fb94c1347733.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 2607:f8b0:4014::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:d7:ba:0e:97:4e:43:9b:7a:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=2d3c75cf-d61a-441c-abf0-ff54f2ba32ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:51:a4:8c:31:8c:7e:a8:39:f1:a9:5b:99:d8: 4c:2b:c4:42:7a:b6:ef:a1:7e:d0:aa:e3:25:d1:a7: 98:5e:6f:a1:4a:6e:b3:63:e9:eb:0c:26:87:e5:23: b1:02:7d:22:f1:d2:1a:0b:61:19:1f:3d:0a:0a:bc: fc:8b:ea:4b:f8:14:7d:07:ab:b0:13:dc:5c:ad:b7: 46:76:d0:ba:74:7c:3b:11:06:93:d8:83:f0:a8:fb: 13:62:1b:3b:8e:54:86:4e:a7:aa:5c:23:ef:a8:b6: 06:c2:64:3f:f4:4c:3e:2e:78:eb:fd:ed:49:ef:22: e1:a8:60:59:a3:df:99:ca:30:07:af:5e:56:45:00: 73:eb:95:98:67:7d:01:55:cd:30:55:7b:f1:e4:d3: 9b:a0:fc:fd:3f:da:bb:9a:db:a5:48:da:31:d5:fa: ac:11:81:35:f4:ee:dc:24:60:62:2f:04:24:21:60: 2e:35:cc:0b:d9:6e:7d:68:45:5a:1d:0a:e1:88:20: 75:02:95:95:1e:b8:6d:92:45:41:91:f4:f2:b8:79: 0c:2a:ac:89:9a:ba:72:7e:fa:ad:1f:ea:22:53:2a: b8:16:26:44:87:63:42:69:02:79:b8:bd:2d:04:30: ec:ab:39:c3:df:d9:5e:48:b0:5b:27:ac:62:cb:22: 76:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:36:0F:94:A7:AD:6F:57:1B:13:09:83:13:92:25:8A:2D:32:E8:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dd2a5a82-f542-399a-bf49-fb94c1347733.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv6: 2607:f8b0:4014::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:ed:26:fc:4d:54:d7:4d:59:61:55:ed:5e:9f:32:fa:98:d8: 0c:7e:17:73:85:55:eb:35:31:d0:1b:e9:fb:19:d9:fa:09:51: 91:29:16:8f:99:bb:4c:08:8a:9f:69:42:93:80:df:51:e2:ad: 76:a7:9d:5d:50:e8:c9:f9:1d:bc:d7:e1:1a:84:38:b0:83:2d: 4f:ad:57:51:06:87:dd:6f:77:a9:b1:47:7b:f0:d5:dc:ff:6e: 98:4c:ea:ab:44:9e:48:56:24:10:15:f0:5b:7a:ff:c2:c9:52: 99:8e:3e:84:ee:a0:69:81:e4:e5:e4:59:99:f3:88:89:4b:8d: 3a:54:89:55:9b:dc:17:3c:1a:aa:60:55:85:eb:36:bc:bc:d3: 6c:f4:c3:04:6c:97:8c:89:7e:e0:11:a7:59:c3:2b:a2:df:8b: 99:97:40:3c:cb:e5:a9:98:67:ef:3d:d1:d6:2d:92:b9:65:a5: 62:5b:22:cd:95:e9:7c:3b:a9:5d:9d:7c:37:a0:c9:ad:38:76: a6:47:90:74:c2:77:ab:84:d0:50:7a:d2:fb:ea:31:e8:dc:e2: d8:81:28:eb:5c:38:34:07:ac:d7:77:c6:35:88:c2:ce:30:03: 07:61:48:e4:4f:c3:6b:9e:2c:cf:a0:d3:66:2b:64:ad:54:97: 3c:2b:4c:a5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmkute6DpdOQ5t6koAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MmQzYzc1Y2YtZDYxYS00NDFjLWFiZjAtZmY1NGYyYmEzMmVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFGkjDGMfqg58albmdhMK8RCerbvoX7QquMl 0aeYXm+hSm6zY+nrDCaH5SOxAn0i8dIaC2EZHz0KCrz8i+pL+BR9B6uwE9xcrbdG dtC6dHw7EQaT2IPwqPsTYhs7jlSGTqeqXCPvqLYGwmQ/9Ew+Lnjr/e1J7yLhqGBZ o9+ZyjAHr15WRQBz65WYZ30BVc0wVXvx5NOboPz9P9q7mtulSNox1fqsEYE19O7c JGBiLwQkIWAuNcwL2W59aEVaHQrhiCB1ApWVHrhtkkVBkfTyuHkMKqyJmrpyfvqt H+oiUyq4FiZEh2NCaQJ5uL0tBDDsqznD39leSLBbJ6xiyyJ2QwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKc2D5SnrW9XGxMJgxOSJYotMujoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZGQyYTVhODItZjU0Mi0z OTlhLWJmNDktZmI5NGMxMzQ3NzMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf4sEAU MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABDtJvxNVNdNWWFV7V6fMvqY2Ax+F3OFVes1MdAb6fsZ2foJUZEp Fo+Zu0wIip9pQpOA31HirXannV1Q6Mn5HbzX4RqEOLCDLU+tV1EGh91vd6mxR3vw 1dz/bphM6qtEnkhWJBAV8Ft6/8LJUpmOPoTuoGmB5OXkWZnziIlLjTpUiVWb3Bc8 GqpgVYXrNry802z0wwRsl4yJfuARp1nDK6Lfi5mXQDzL5amYZ+890dYtkrllpWJb Is2V6Xw7qV2dfDegya04dqZHkHTCd6uE0FB60vvqMejc4tiBKOtcODQHrNd3xjWI ws4wAwdhSORPw2ueLM+g02YrZK1UlzwrTKU= -----END CERTIFICATE-----Generated at Sun Apr 27 01:08:39 2025 by rpki-client