$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d0ce65e8-81a7-368d-978d-9407cbffcc4a.roa File: d0ce65e8-81a7-368d-978d-9407cbffcc4a.roa (raw, json) Hash identifier: SPbFSnx7OhWFV0G5wUokzIqQgo+q7ZZvJZmlAdMZ76Y= Subject key identifier: 31:6F:AF:29:52:2A:C1:0D:67:8B:26:13:62:17:F5:C4:9E:78:37:AD Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584900215CBE7FEDD0E9B82CEF40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d0ce65e8-81a7-368d-978d-9407cbffcc4a.roa Signing time: Tue 25 Feb 2025 14:00:52 +0000 ROA not before: Tue 25 Feb 2025 14:00:52 +0000 ROA not after: Mon 26 May 2025 13:00:52 +0000 asID: 12222 IP address blocks: 2001:4878:8324::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:00:21:5c:be:7f:ed:d0:e9:b8:2c:ef:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 25 14:00:52 2025 GMT Not After : May 26 13:00:52 2025 GMT Subject: CN=dec2fddc-c149-4894-be70-c8781928bb4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:38:30:86:bc:b0:28:5e:95:ac:ce:0b:c2:9f: d0:a1:dc:fb:73:05:2a:b6:28:11:a9:69:c2:76:1e: db:d8:2b:b6:d9:4f:0d:13:d4:aa:a3:32:1a:06:83: 74:52:55:4a:25:63:9e:45:10:f1:6f:e0:a1:60:ac: c0:28:8a:14:9c:42:8b:24:c6:ad:92:1d:fc:f5:dd: 6a:06:fd:50:87:31:1f:65:d0:89:98:ac:ef:39:a9: 7c:ee:eb:8d:f7:1e:df:a8:05:09:2e:4c:bc:aa:20: 1e:77:0c:0b:07:7a:29:81:05:36:b4:a5:e0:f5:24: b8:2d:fb:e8:1e:60:5b:e3:d4:12:11:a7:a1:e4:32: a3:56:4b:ec:71:ef:4a:92:1b:89:91:b3:e2:99:ef: 8d:55:ee:e0:7e:3b:db:f8:bc:09:1e:ee:a3:e4:c0: 71:77:7c:b8:52:25:c4:c9:58:aa:03:1a:db:42:3c: 80:17:36:3b:62:99:80:1d:f8:f4:55:d8:47:5f:84: 99:b4:ab:1c:1b:7e:e8:9a:51:18:b4:85:d0:d2:ea: 8b:10:f3:e1:11:56:20:cc:73:9e:2d:56:07:71:80: 92:64:e7:ee:13:f7:9e:a1:bd:a7:95:9f:e2:9a:ed: 0a:b7:ab:78:93:cb:ef:24:5a:ad:36:ea:89:77:48: 81:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:6F:AF:29:52:2A:C1:0D:67:8B:26:13:62:17:F5:C4:9E:78:37:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d0ce65e8-81a7-368d-978d-9407cbffcc4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2001:4878:8324::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:08:de:59:ed:23:73:70:0c:11:e3:65:2a:8c:08:cc:42:9d: 67:65:2e:a3:7d:23:f6:1b:c3:fe:f3:22:b3:18:97:51:a5:9b: 35:d4:d3:02:e7:f9:35:a6:3c:c7:d0:93:53:d7:fe:f7:8e:c8: 2e:66:89:3b:2a:bf:dc:a0:9b:6f:f5:50:68:88:71:fc:73:e6: 83:7e:8d:36:59:01:b3:89:b0:64:62:06:bf:b7:ea:a4:d0:72: 25:4c:ea:a4:1b:f3:bf:03:cd:c6:a0:01:9c:fb:6b:6b:af:df: 14:2c:0e:98:70:ef:f1:73:3b:8d:73:01:fe:63:50:e3:a0:b6: 39:7c:7f:f3:97:5e:1f:ee:56:98:dc:0b:bc:76:c0:6e:91:aa: ab:25:12:68:95:d5:dd:0a:ba:fe:99:cc:50:54:cc:f2:b6:0f: 72:7a:f1:6a:b1:6e:bf:bb:1b:18:cd:03:3f:62:d0:ad:6e:95: a8:21:60:de:5f:9e:ad:9b:00:8c:70:d8:bd:38:7e:26:21:87: 3b:69:62:8d:ed:c8:74:f6:0e:95:0f:31:61:f3:f1:b0:72:12: a9:07:eb:14:3d:99:0d:46:0b:6b:51:c5:9e:b6:a5:87:01:42: e3:c9:33:64:72:50:18:7a:d4:36:83:aa:12:ac:ca:e6:0b:db: 49:c0:24:68 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkAIVy+f+3Q6bgs70AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIyNTE0MDA1MloXDTI1MDUyNjEzMDA1MlowLzEtMCsGA1UEAxMk ZGVjMmZkZGMtYzE0OS00ODk0LWJlNzAtYzg3ODE5MjhiYjRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDgwhrywKF6VrM4Lwp/Qodz7cwUqtigRqWnC dh7b2Cu22U8NE9SqozIaBoN0UlVKJWOeRRDxb+ChYKzAKIoUnEKLJMatkh389d1q Bv1QhzEfZdCJmKzvOal87uuN9x7fqAUJLky8qiAedwwLB3opgQU2tKXg9SS4Lfvo HmBb49QSEaeh5DKjVkvsce9KkhuJkbPime+NVe7gfjvb+LwJHu6j5MBxd3y4UiXE yViqAxrbQjyAFzY7YpmAHfj0VdhHX4SZtKscG37omlEYtIXQ0uqLEPPhEVYgzHOe LVYHcYCSZOfuE/eeob2nlZ/imu0Kt6t4k8vvJFqtNuqJd0iBBQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDFvrylSKsENZ4smE2IX9cSeeDetMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDBjZTY1ZTgtODFhNy0z NjhkLTk3OGQtOTQwN2NiZmZjYzRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIeIMk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEUI3lntI3NwDBHjZSqMCMxCnWdlLqN9I/Ybw/7zIrMYl1GlmzXU 0wLn+TWmPMfQk1PX/veOyC5miTsqv9ygm2/1UGiIcfxz5oN+jTZZAbOJsGRiBr+3 6qTQciVM6qQb878DzcagAZz7a2uv3xQsDphw7/FzO41zAf5jUOOgtjl8f/OXXh/u VpjcC7x2wG6RqqslEmiV1d0Kuv6ZzFBUzPK2D3J68Wqxbr+7GxjNAz9i0K1ulagh YN5fnq2bAIxw2L04fiYhhztpYo3tyHT2DpUPMWHz8bByEqkH6xQ9mQ1GC2tRxZ62 pYcBQuPJM2RyUBh61DaDqhKsyuYL20nAJGg= -----END CERTIFICATE-----Generated at Mon May 5 01:22:14 2025 by rpki-client