$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f82fa447-907a-3d5e-89e3-dcb30e1186a3.roa File: f82fa447-907a-3d5e-89e3-dcb30e1186a3.roa (raw, json) Hash identifier: uY+aLScf3/GazBgw/SnpbKYANysb/E4y3ijH6D1hz6E= Subject key identifier: C9:34:49:BC:B3:E9:92:7F:21:9F:E3:92:24:5F:E4:33:92:0A:46:7D Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BAD7DE5F8941D53F338900 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f82fa447-907a-3d5e-89e3-dcb30e1186a3.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 2607:f8b0:4013::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:d7:de:5f:89:41:d5:3f:33:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=cb8fa339-3e98-46cb-a477-5f629cb23485 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ee:e0:42:82:3c:39:02:f0:e7:94:17:40:a8: f0:c4:67:86:8d:bc:db:35:0f:1d:bb:4c:4b:58:52: 3f:df:ad:32:39:ab:c3:f2:d3:f5:91:dc:ed:99:9c: 39:35:44:47:20:cd:51:f2:14:6c:16:30:b2:62:4f: 7a:26:c0:33:c9:f2:09:b1:cd:39:fc:67:4e:4d:eb: 3f:ad:94:34:ef:e3:58:b4:44:03:8f:a9:d9:6a:e5: bc:77:16:4b:00:a1:cc:4f:aa:fa:2c:be:c4:8f:27: fd:26:c0:5f:3f:5a:a5:6e:52:9d:00:15:19:59:c1: 0a:ee:8b:ba:74:f9:10:49:f2:40:54:e5:17:22:dd: 63:ee:62:09:75:cb:ff:28:67:3f:9b:14:5a:03:f7: a1:3b:77:9e:f0:81:2b:24:1e:6f:14:4c:1c:72:94: 7d:8c:50:f6:a6:6d:9e:32:28:23:4d:e6:7a:c7:ef: f1:7d:7c:6f:11:a7:61:cc:45:0a:98:db:9c:bf:44: 60:56:5c:de:24:71:ed:7c:29:f7:89:1e:40:53:7c: a1:80:15:6a:9a:80:fb:5a:b8:30:5f:af:97:4a:de: e8:af:c4:df:74:dc:78:e1:e9:5d:5b:7e:4d:99:b5: 66:78:ce:5b:8f:f3:e8:91:e9:1a:9a:f6:95:94:e4: 1e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:34:49:BC:B3:E9:92:7F:21:9F:E3:92:24:5F:E4:33:92:0A:46:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f82fa447-907a-3d5e-89e3-dcb30e1186a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv6: 2607:f8b0:4013::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:a4:bd:1a:6b:2f:02:54:2d:c3:24:42:d3:b8:dc:b6:5e:2d: 56:d8:03:74:6b:aa:e2:f0:66:4c:1f:a9:a6:77:90:6e:ea:9a: ee:dd:cb:4a:82:66:3e:5d:61:dd:eb:c4:1e:14:0e:8c:47:f9: d8:58:a7:82:06:ef:2f:2f:95:88:f1:82:2a:95:99:75:84:da: f1:19:ba:e4:fa:da:ff:4e:cb:26:d8:e8:c7:e0:23:9b:c9:6a: 8b:62:c0:a4:d8:78:83:45:43:dc:73:61:48:54:3a:5d:9b:31: ee:e7:0b:22:a3:ff:fe:3a:1e:2e:0e:06:df:1d:0d:54:9f:b7: c2:ab:59:57:57:55:dc:5b:2f:15:71:1c:89:13:64:58:ac:2f: fa:dd:49:82:b8:bd:f6:1a:cf:7b:eb:6f:ac:5b:ec:dd:b7:a2: 58:91:3c:e9:57:36:5a:2b:79:85:2f:ba:81:76:f0:f5:0c:10: 70:1e:34:72:c0:71:13:f5:70:7a:41:fb:7f:38:65:67:e8:f1: 4e:c1:57:e6:25:3a:09:32:3b:2d:8d:f3:7c:46:12:f6:1b:f3: 0e:93:9d:72:a2:d3:f6:89:59:ee:59:b2:b7:21:32:6c:83:45: d7:bb:e5:07:4a:79:48:c2:58:a4:26:bc:6d:10:62:fc:68:5e: 9f:de:c7:d2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmkutfeX4lB1T8ziQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk Y2I4ZmEzMzktM2U5OC00NmNiLWE0NzctNWY2MjljYjIzNDg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqu7gQoI8OQLw55QXQKjwxGeGjbzbNQ8du0xL WFI/360yOavD8tP1kdztmZw5NURHIM1R8hRsFjCyYk96JsAzyfIJsc05/GdOTes/ rZQ07+NYtEQDj6nZauW8dxZLAKHMT6r6LL7Ejyf9JsBfP1qlblKdABUZWcEK7ou6 dPkQSfJAVOUXIt1j7mIJdcv/KGc/mxRaA/ehO3ee8IErJB5vFEwccpR9jFD2pm2e MigjTeZ6x+/xfXxvEadhzEUKmNucv0RgVlzeJHHtfCn3iR5AU3yhgBVqmoD7Wrgw X6+XSt7or8TfdNx44eldW35NmbVmeM5bj/PokekamvaVlOQehwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMk0Sbyz6ZJ/IZ/jkiRf5DOSCkZ9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZjgyZmE0NDctOTA3YS0z ZDVlLTg5ZTMtZGNiMzBlMTE4NmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf4sEAT MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH6kvRprLwJULcMkQtO43LZeLVbYA3RrquLwZkwfqaZ3kG7qmu7d y0qCZj5dYd3rxB4UDoxH+dhYp4IG7y8vlYjxgiqVmXWE2vEZuuT62v9OyybY6Mfg I5vJaotiwKTYeINFQ9xzYUhUOl2bMe7nCyKj//46Hi4OBt8dDVSft8KrWVdXVdxb LxVxHIkTZFisL/rdSYK4vfYaz3vrb6xb7N23oliRPOlXNloreYUvuoF28PUMEHAe NHLAcRP1cHpB+384ZWfo8U7BV+YlOgkyOy2N83xGEvYb8w6TnXKi0/aJWe5Zsrch MmyDRde75QdKeUjCWKQmvG0QYvxoXp/ex9I= -----END CERTIFICATE-----Generated at Sat Apr 26 20:53:40 2025 by rpki-client