$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/f3d8c32d-472b-38e3-8718-679438b174ef.roa File: f3d8c32d-472b-38e3-8718-679438b174ef.roa (raw, json) Hash identifier: BKwzKYtnsIgoyHZs1vohfXvmzo4gqnff5RviMR1LYt8= Subject key identifier: 59:56:B0:50:0A:07:A9:03:7C:C7:C3:A0:8D:B8:BA:47:66:A7:40:02 Certificate issuer: /CN=4bc604de-ac2b-4921-b601-a2c976ab18e8 Certificate serial: 010D0C9F43285849B14A0790AAEB489C6707E800 Authority key identifier: 5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/f3d8c32d-472b-38e3-8718-679438b174ef.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 55195 IP address blocks: 2001:500:a7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:07:90:aa:eb:48:9c:67:07:e8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bc604de-ac2b-4921-b601-a2c976ab18e8 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=11c932e3-7fb4-4893-ab95-fc27f4af77b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:42:8f:30:39:a3:5d:13:54:9f:a8:05:e9:4c: 7b:c4:8e:4e:b6:5c:b2:d7:de:81:da:18:28:24:5b: ac:e6:f8:1c:6b:f8:48:96:07:ac:e7:98:c8:2d:92: 5e:20:93:11:a2:20:e2:4b:d1:90:49:3d:e8:3f:4d: 10:a5:ef:12:1c:53:e1:8d:86:48:ea:65:49:b1:c6: 94:56:af:e1:1c:f8:19:22:e7:1c:da:68:5b:d4:38: 90:60:79:10:8f:a6:28:27:4f:35:9b:aa:d6:63:5f: 0d:fd:48:cd:9e:fe:0e:14:9a:fb:4e:fe:3c:90:75: a4:39:b4:54:8d:60:c2:7e:cc:75:d5:5e:9f:c4:40: ad:25:24:f3:43:19:3e:50:28:de:05:2b:07:30:8e: fd:f4:fc:e2:84:0d:65:f7:d0:2d:72:32:e2:22:5d: f2:46:12:7e:56:31:6e:5a:a6:e2:04:89:e1:45:42: fc:2c:b4:4c:2c:d8:8d:7f:c2:91:e8:c9:8c:60:17: 5a:8c:92:16:6f:7b:98:80:d2:4a:87:35:ef:6f:e7: 89:94:64:4a:e4:24:39:d3:95:48:9b:3d:f4:50:8d: 0c:b4:4e:18:b1:4f:e8:e0:95:95:e8:91:80:0f:af: db:2a:09:83:9a:52:42:54:ad:54:f1:85:d0:ff:0d: b5:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:56:B0:50:0A:07:A9:03:7C:C7:C3:A0:8D:B8:BA:47:66:A7:40:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/f3d8c32d-472b-38e3-8718-679438b174ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl X509v3 Authority Key Identifier: keyid:5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:a7::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:b7:20:76:b5:54:50:68:ab:62:e8:c5:ff:4a:ed:f6:51:1c: 11:60:9b:fc:46:86:70:6c:29:fe:32:ae:ef:50:76:3b:ec:15: ab:a8:d9:c3:bd:3b:2f:68:d8:6d:46:ea:41:a9:2c:a5:bf:25: f8:88:3b:b0:bd:a6:21:40:4e:6a:7c:4f:90:dc:1f:8e:0a:9e: 88:51:af:10:c8:f5:b8:df:f3:71:1c:7d:8e:ae:b6:32:a4:3c: 47:af:c6:73:a4:9e:4c:57:3d:2e:84:03:ac:71:fb:5f:86:b7: 20:69:3e:fa:f3:21:2f:32:44:11:71:9d:ed:87:21:3d:55:b4: 02:cb:52:94:56:77:84:36:aa:6b:e4:cc:a3:54:da:14:07:9f: cf:db:51:c6:7c:a1:f9:0e:d2:9e:36:c9:e5:7e:ec:b2:61:b0: a1:9b:2a:3b:8d:65:fb:dc:13:bd:6d:41:67:ba:32:e8:86:65: 4e:0a:2e:79:45:75:25:43:92:98:23:02:60:c1:e3:7c:dc:46: 08:06:10:6b:d7:f2:1f:29:c6:96:30:9e:d9:a2:57:52:6d:6d: 29:ee:f9:3f:70:5b:bc:fa:f0:b9:b9:cc:49:7c:2a:8f:8c:ad: f1:a9:52:68:f4:66:33:35:49:bc:b6:c2:7e:4f:1f:ae:0c:2b: a5:0e:c5:25 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmxSgeQqutInGcH6AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGJjNjA0ZGUtYWMyYi00OTIxLWI2MDEtYTJjOTc2YWIx OGU4MB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk MTFjOTMyZTMtN2ZiNC00ODkzLWFiOTUtZmMyN2Y0YWY3N2IwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkEKPMDmjXRNUn6gF6Ux7xI5Otlyy196B2hgo JFus5vgca/hIlges55jILZJeIJMRoiDiS9GQST3oP00Qpe8SHFPhjYZI6mVJscaU Vq/hHPgZIucc2mhb1DiQYHkQj6YoJ081m6rWY18N/UjNnv4OFJr7Tv48kHWkObRU jWDCfsx11V6fxECtJSTzQxk+UCjeBSsHMI799PzihA1l99AtcjLiIl3yRhJ+VjFu WqbiBInhRUL8LLRMLNiNf8KR6MmMYBdajJIWb3uYgNJKhzXvb+eJlGRK5CQ505VI mz30UI0MtE4YsU/o4JWV6JGAD6/bKgmDmlJCVK1U8YXQ/w21bQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFlWsFAKB6kDfMfDoI24ukdmp0ACMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80YmM2 MDRkZS1hYzJiLTQ5MjEtYjYwMS1hMmM5NzZhYjE4ZTgvZjNkOGMzMmQtNDcyYi0z OGUzLTg3MTgtNjc5NDM4YjE3NGVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGJjNjA0ZGUtYWMyYi00OTIxLWI2 MDEtYTJjOTc2YWIxOGU4LzRiYzYwNGRlLWFjMmItNDkyMS1iNjAxLWEyYzk3NmFi MThlOC5jcmwwHwYDVR0jBBgwFoAUXezCHp0HnbEJciCnXQk9+uP8rEAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80YmM2MDRkZS1hYzJiLTQ5MjEtYjYwMS1hMmM5 NzZhYjE4ZTguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAACn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADa3IHa1VFBoq2Loxf9K7fZRHBFgm/xGhnBsKf4yru9QdjvsFauo 2cO9Oy9o2G1G6kGpLKW/JfiIO7C9piFATmp8T5DcH44KnohRrxDI9bjf83EcfY6u tjKkPEevxnOknkxXPS6EA6xx+1+GtyBpPvrzIS8yRBFxne2HIT1VtALLUpRWd4Q2 qmvkzKNU2hQHn8/bUcZ8ofkO0p42yeV+7LJhsKGbKjuNZfvcE71tQWe6MuiGZU4K LnlFdSVDkpgjAmDB43zcRggGEGvX8h8pxpYwntmiV1JtbSnu+T9wW7z68Lm5zEl8 Ko+MrfGpUmj0ZjM1Sby2wn5PH64MK6UOxSU= -----END CERTIFICATE-----Generated at Sun May 11 04:14:37 2025 by rpki-client