$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/1834e5ab-df96-322f-8714-bb237eefecc1.roa File: 1834e5ab-df96-322f-8714-bb237eefecc1.roa (raw, json) Hash identifier: Zc0l3rb7b/zGrlLqebgFb7shJ6lwAcSTWxtYlBTZqI4= Subject key identifier: 25:C5:81:03:8E:8A:0D:53:12:35:B4:5B:B0:44:10:8F:F8:B6:83:76 Certificate issuer: /CN=9de5b47f-bd49-4614-b658-9980cfd17769 Certificate serial: 010D0C9F43285848D7A642625CF4E684E3121B80 Authority key identifier: 8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/1834e5ab-df96-322f-8714-bb237eefecc1.roa Signing time: Tue 11 Feb 2025 02:00:39 +0000 ROA not before: Tue 11 Feb 2025 02:00:39 +0000 ROA not after: Mon 12 May 2025 01:00:39 +0000 asID: 19637 IP address blocks: 2604:b040:518::/48 maxlen: 48 2604:b040:519::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d7:a6:42:62:5c:f4:e6:84:e3:12:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9de5b47f-bd49-4614-b658-9980cfd17769 Validity Not Before: Feb 11 02:00:39 2025 GMT Not After : May 12 01:00:39 2025 GMT Subject: CN=07047a42-95ed-4671-8fd0-d9df364747cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:71:11:70:6d:5f:8e:b0:2a:1a:21:bf:df:be: fe:94:e6:32:5f:73:db:39:2b:30:3f:03:2c:06:44: 3c:7f:36:ae:19:44:59:e5:36:01:d6:72:44:fd:cc: 50:41:67:ec:3f:4f:2b:02:c8:5b:1f:26:03:97:de: 71:33:fb:21:da:66:80:f5:74:51:56:a7:c3:f5:08: d5:57:25:2e:47:82:04:7f:3f:03:26:f6:30:cc:ea: f9:89:15:d2:f9:d3:33:07:65:42:c4:e6:87:c3:34: cb:17:c1:11:70:34:ed:02:4e:b2:3a:29:a1:fb:27: 29:3a:30:4f:cb:95:55:ca:f3:2d:1f:11:b0:8d:c3: 2c:f7:fc:b0:08:31:88:9e:ad:b1:5a:04:35:8c:a4: cc:b8:0e:e9:39:69:d5:03:b9:51:18:13:e9:a7:69: b3:2c:a2:e9:0e:94:06:cd:8f:45:48:5e:61:60:79: 8a:b5:7a:a7:53:80:53:32:ae:db:5d:f5:56:f9:db: 66:12:9d:8c:4b:47:ad:19:f0:ff:45:d4:9d:fc:cf: dd:6a:cb:13:f1:b0:c9:a2:38:93:e5:c4:ad:a7:93: e9:e2:da:2f:9b:6a:b8:fa:a5:fe:5a:f9:9a:65:75: c8:ef:e6:13:f2:01:4f:dd:83:e4:4e:ca:93:24:0f: 8a:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:C5:81:03:8E:8A:0D:53:12:35:B4:5B:B0:44:10:8F:F8:B6:83:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/1834e5ab-df96-322f-8714-bb237eefecc1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl X509v3 Authority Key Identifier: keyid:8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer sbgp-ipAddrBlock: critical IPv6: 2604:b040:518::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:8f:2d:7b:e3:39:d0:73:ab:44:c1:f9:cf:57:28:d5:9b:68: b1:20:17:24:8a:3c:17:eb:5a:27:e1:94:8c:ad:51:4c:ba:c3: 40:35:0a:a4:a7:16:7f:65:31:b3:e3:c1:b4:7b:c6:43:89:29: 0f:58:53:83:0f:cf:92:22:8f:78:6d:c4:fa:86:b7:94:b6:56: 47:a6:f2:e5:87:55:ed:9d:ac:cf:24:23:f6:8d:8f:4b:6e:16: 9a:70:ec:ec:4f:a0:5b:f2:8c:37:16:0d:ae:c7:11:a5:10:51: 22:df:b9:b6:e6:6d:94:e0:1c:f5:dc:61:55:79:3d:26:1f:2d: 95:9b:70:df:db:9e:8c:80:53:e1:b7:b7:19:a1:be:1b:75:4d: 1a:23:be:24:2c:57:9a:1c:85:e5:90:b8:76:cc:1f:84:19:01: 48:65:31:6c:a0:dd:f7:aa:ef:18:56:f6:c5:28:e8:93:c3:81: e7:fa:e7:b5:7f:3b:82:e8:dc:bd:c6:c2:9d:0c:da:2d:9d:09: b0:ec:39:ed:a4:c9:1f:ca:ab:a2:7a:03:7d:af:5a:58:45:b5: c5:ec:76:b0:e6:46:92:b6:49:a8:e3:1f:01:cf:43:a8:95:af: 6a:d5:1a:a6:fd:ee:23:45:6d:5f:b8:f2:9a:ad:ee:32:93:6c: e6:75:e1:1f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjXpkJiXPTmhOMSG4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWRlNWI0N2YtYmQ0OS00NjE0LWI2NTgtOTk4MGNmZDE3 NzY5MB4XDTI1MDIxMTAyMDAzOVoXDTI1MDUxMjAxMDAzOVowLzEtMCsGA1UEAxMk MDcwNDdhNDItOTVlZC00NjcxLThmZDAtZDlkZjM2NDc0N2NmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXERcG1fjrAqGiG/377+lOYyX3PbOSswPwMs BkQ8fzauGURZ5TYB1nJE/cxQQWfsP08rAshbHyYDl95xM/sh2maA9XRRVqfD9QjV VyUuR4IEfz8DJvYwzOr5iRXS+dMzB2VCxOaHwzTLF8ERcDTtAk6yOimh+ycpOjBP y5VVyvMtHxGwjcMs9/ywCDGInq2xWgQ1jKTMuA7pOWnVA7lRGBPpp2mzLKLpDpQG zY9FSF5hYHmKtXqnU4BTMq7bXfVW+dtmEp2MS0etGfD/RdSd/M/dassT8bDJojiT 5cStp5Pp4tovm2q4+qX+WvmaZXXI7+YT8gFP3YPkTsqTJA+KjQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCXFgQOOig1TEjW0W7BEEI/4toN2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1 YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgwY2ZkMTc3NjkvMTgzNGU1YWItZGY5Ni0z MjJmLTg3MTQtYmIyMzdlZWZlY2MxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOWRlNWI0N2YtYmQ0OS00NjE0LWI2 NTgtOTk4MGNmZDE3NzY5LzlkZTViNDdmLWJkNDktNDYxNC1iNjU4LTk5ODBjZmQx Nzc2OS5jcmwwHwYDVR0jBBgwFoAUjxiLGO21eSNV+7m/BlYK0+IBpDcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgw Y2ZkMTc3NjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgSwQAUY MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFSPLXvjOdBzq0TB+c9XKNWbaLEgFySKPBfrWifhlIytUUy6w0A1 CqSnFn9lMbPjwbR7xkOJKQ9YU4MPz5Iij3htxPqGt5S2Vkem8uWHVe2drM8kI/aN j0tuFppw7OxPoFvyjDcWDa7HEaUQUSLfubbmbZTgHPXcYVV5PSYfLZWbcN/bnoyA U+G3txmhvht1TRojviQsV5ocheWQuHbMH4QZAUhlMWyg3feq7xhW9sUo6JPDgef6 57V/O4Lo3L3Gwp0M2i2dCbDsOe2kyR/Kq6J6A32vWlhFtcXsdrDmRpK2SajjHwHP Q6iVr2rVGqb97iNFbV+48pqt7jKTbOZ14R8= -----END CERTIFICATE-----Generated at Mon Apr 28 14:24:36 2025 by rpki-client