$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fd1e0ae3-923a-32d9-a9a3-cb7e116a988a.roa File: fd1e0ae3-923a-32d9-a9a3-cb7e116a988a.roa (raw, json) Hash identifier: g9YgUVvzVEFEu/CwQy6kKz0ww2787so/jwbaXjhLtp8= Subject key identifier: 1C:17:0B:46:27:28:7D:08:08:F9:BD:E0:EE:21:2A:A6:7B:A3:F7:4F Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BAD8BDB6679420CCCF4600 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fd1e0ae3-923a-32d9-a9a3-cb7e116a988a.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 2001:4860:4864::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:d8:bd:b6:67:94:20:cc:cf:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=6d4c6bb4-dd10-459e-ad16-b23ab091a92b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:42:58:95:07:6a:9f:e2:81:12:11:62:be:db: c0:3a:f6:fc:81:9c:42:eb:93:a8:32:9d:40:d5:f6: 61:cf:be:a6:4d:11:3d:20:20:26:95:f0:da:b1:73: 09:4b:ae:5d:85:d3:3f:eb:85:77:b8:0d:88:c1:28: 3a:50:85:04:b0:5b:62:29:73:81:96:48:d5:76:7b: 97:dc:61:89:bd:53:8a:4a:da:0d:ed:6b:91:16:bb: 88:5d:63:d8:5e:03:69:3f:6c:f6:d5:07:d1:c2:70: 51:26:18:43:95:18:e2:77:36:e3:92:c4:03:f5:f4: 3a:90:cb:64:6a:6f:94:cb:b9:4e:53:7f:96:78:48: b4:03:8f:a8:38:31:8e:8e:c7:c2:be:6b:d0:7f:30: 71:d9:5f:83:09:47:88:b0:2f:c5:aa:78:81:32:84: 88:15:56:ea:6a:a6:46:a1:67:47:f8:3d:56:4f:d3: 0d:80:0f:25:d7:3f:41:53:27:64:29:5f:8b:9f:8f: e7:48:58:bf:9c:68:ec:75:37:49:ca:85:85:ab:11: 3b:f8:3c:e3:67:1e:fc:b0:b7:f1:be:72:af:db:57: d1:f1:f4:a4:4c:6d:30:8a:45:a7:d1:f9:6b:66:0b: 70:98:8b:e0:ac:cd:80:27:f5:3f:8e:50:4b:f4:48: c3:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:17:0B:46:27:28:7D:08:08:F9:BD:E0:EE:21:2A:A6:7B:A3:F7:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fd1e0ae3-923a-32d9-a9a3-cb7e116a988a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv6: 2001:4860:4864::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:80:5a:5b:a0:85:64:4d:53:fa:b9:8a:67:c7:32:5c:ad:39: cd:dc:e2:f0:fb:c5:d5:b9:39:61:b2:1c:67:67:62:9e:fb:9e: f7:bf:5f:9a:44:d1:2d:08:dd:60:1a:b5:1e:ae:2c:96:d6:73: 93:95:3f:ce:91:95:cd:7c:37:68:5c:6e:31:05:a2:2d:eb:cc: e4:c6:3b:8c:fc:69:23:10:f7:7d:34:b1:c7:e4:28:08:7d:a1: c4:a1:dc:fc:01:78:22:b4:fb:45:ed:2c:96:c0:85:eb:7d:01: ec:79:eb:0f:1f:a2:49:1b:5b:4e:d2:f8:3f:a8:dd:e1:76:ba: 3f:5e:62:e4:56:b7:17:b8:d6:0b:12:03:56:b1:b0:f0:a5:49: 49:19:55:19:42:bb:47:5a:cb:00:74:db:33:a1:bc:28:af:cf: f1:de:0f:84:90:ab:61:14:bb:7a:b3:ae:a0:c8:4c:75:10:c5: f3:02:0e:f3:d5:cb:dc:6a:55:ff:d6:1c:a5:19:f7:31:89:56: 5f:24:c6:09:50:a8:10:bd:b2:c7:14:5c:42:74:c2:7b:1c:98: 35:f4:3f:2c:7b:6d:9b:d9:85:79:ca:0f:08:1d:25:df:1d:c7: da:32:dc:2a:d2:96:89:f9:93:4d:fb:a5:d6:94:d4:fc:ff:15: a8:77:6d:0f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmkuti9tmeUIMzPRgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NmQ0YzZiYjQtZGQxMC00NTllLWFkMTYtYjIzYWIwOTFhOTJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0JYlQdqn+KBEhFivtvAOvb8gZxC65OoMp1A 1fZhz76mTRE9ICAmlfDasXMJS65dhdM/64V3uA2IwSg6UIUEsFtiKXOBlkjVdnuX 3GGJvVOKStoN7WuRFruIXWPYXgNpP2z21QfRwnBRJhhDlRjidzbjksQD9fQ6kMtk am+Uy7lOU3+WeEi0A4+oODGOjsfCvmvQfzBx2V+DCUeIsC/FqniBMoSIFVbqaqZG oWdH+D1WT9MNgA8l1z9BUydkKV+Ln4/nSFi/nGjsdTdJyoWFqxE7+DzjZx78sLfx vnKv21fR8fSkTG0wikWn0flrZgtwmIvgrM2AJ/U/jlBL9EjDDQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBwXC0YnKH0ICPm94O4hKqZ7o/dPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZmQxZTBhZTMtOTIzYS0z MmQ5LWE5YTMtY2I3ZTExNmE5ODhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIYEhk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACSAWlughWRNU/q5imfHMlytOc3c4vD7xdW5OWGyHGdnYp77nve/ X5pE0S0I3WAatR6uLJbWc5OVP86Rlc18N2hcbjEFoi3rzOTGO4z8aSMQ9300scfk KAh9ocSh3PwBeCK0+0XtLJbAhet9Aex56w8fokkbW07S+D+o3eF2uj9eYuRWtxe4 1gsSA1axsPClSUkZVRlCu0daywB02zOhvCivz/HeD4SQq2EUu3qzrqDITHUQxfMC DvPVy9xqVf/WHKUZ9zGJVl8kxglQqBC9sscUXEJ0wnscmDX0Pyx7bZvZhXnKDwgd Jd8dx9oy3CrSlon5k037pdaU1Pz/Fah3bQ8= -----END CERTIFICATE-----Generated at Sun Apr 27 09:16:37 2025 by rpki-client