$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/058e8951-6243-3e09-9ea4-9c5f828671a1.roa File: 058e8951-6243-3e09-9ea4-9c5f828671a1.roa (raw, json) Hash identifier: Gf7V4TNb96rwMOBDwHmDCezw59QUnO8ZfWm42KpSH9M= Subject key identifier: C8:5D:81:66:31:76:A7:03:CB:F1:DC:CE:C4:C6:80:47:A1:D2:A2:2A Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BB7B1E01BC5DDA67DA4820 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/058e8951-6243-3e09-9ea4-9c5f828671a1.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 2001:4860:4820::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:7b:1e:01:bc:5d:da:67:da:48:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=d196215b-0211-4d38-89d8-f3b27609cd61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ed:76:d8:0c:4f:ac:be:f9:05:1b:cb:e7:36: 6b:1c:78:ee:42:2f:a9:3c:d4:af:ab:3b:06:79:a5: ee:be:44:a5:a1:0d:0e:e9:dd:83:6d:e7:f7:c9:39: df:93:30:17:47:b2:c3:89:bb:08:9d:e5:9a:0b:1c: 14:32:ca:27:29:00:97:11:f0:2e:02:a0:27:4d:ba: 9c:aa:b7:82:99:16:6a:6a:23:d6:1e:c6:f9:45:25: dd:e0:5a:3c:8b:24:c2:79:7a:4b:17:68:6b:5f:29: 6f:dd:33:15:68:39:8a:88:bb:ca:f3:0a:c1:69:86: a0:7a:a8:51:f3:2a:dc:92:d4:c5:ff:c1:ba:4a:7c: 47:89:07:8b:ec:34:90:b1:0a:8a:86:71:3d:f8:e2: 93:ca:bc:f9:32:45:f2:20:51:96:e9:95:6f:48:54: a5:c7:66:77:e8:bb:75:3a:35:19:c6:c0:02:4f:19: 50:ae:ed:80:88:a5:d1:36:72:ff:88:c3:4f:9b:c1: 90:36:b5:a2:42:e4:da:cd:62:18:fd:20:63:a6:d4: 3d:23:6e:20:49:1e:62:79:da:bd:c5:f1:e0:57:6f: e2:07:70:11:70:ad:37:aa:86:7a:82:7c:72:f7:5f: ba:32:8c:5b:08:d1:be:b6:0d:e7:d2:03:75:eb:b3: 7f:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:5D:81:66:31:76:A7:03:CB:F1:DC:CE:C4:C6:80:47:A1:D2:A2:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/058e8951-6243-3e09-9ea4-9c5f828671a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv6: 2001:4860:4820::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:36:7b:d7:ea:0f:0a:8f:a0:db:b7:66:f1:4b:fc:a2:a8:cf: e1:f4:df:06:27:08:9e:47:fc:0d:89:2a:31:df:1e:86:f9:f0: 11:df:ad:6c:51:ad:83:40:8b:85:82:f9:79:52:a2:ad:25:ce: d8:16:50:05:37:2a:55:ea:e4:83:90:1e:ce:8c:ba:4e:1c:26: 73:12:20:99:f9:c8:49:75:6f:50:c0:4e:99:20:5a:ae:e9:c8: 38:4a:ac:47:62:92:b3:1a:92:8e:0a:01:a7:5b:de:9d:fb:af: 8e:1f:86:61:18:09:d0:f9:8a:ba:ba:c2:fd:77:72:a9:4c:d6: dc:98:77:6e:3b:02:fa:7e:21:04:a1:31:d6:49:16:83:65:7d: 96:f9:4f:14:f3:13:64:22:9e:9a:90:47:72:7a:70:d3:e3:50: 87:56:55:2c:84:4b:19:45:57:a7:a0:e1:fc:e6:34:7e:30:e8: d3:ca:b7:cc:80:7f:eb:01:9b:4d:6d:b0:90:7b:05:5e:df:43: 4d:fd:52:60:5c:42:e8:bd:0d:c1:3d:f5:c4:28:f3:e4:a2:b5: 50:c7:b2:79:a4:30:fd:e4:90:02:70:5c:8e:32:7e:46:fe:04: f7:dc:f1:b3:db:94:46:d5:dc:36:29:e6:48:91:aa:ba:a7:f4: 0f:ec:14:7e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmku3seAbxd2mfaSCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZDE5NjIxNWItMDIxMS00ZDM4LTg5ZDgtZjNiMjc2MDljZDYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAne122AxPrL75BRvL5zZrHHjuQi+pPNSvqzsG eaXuvkSloQ0O6d2Dbef3yTnfkzAXR7LDibsIneWaCxwUMsonKQCXEfAuAqAnTbqc qreCmRZqaiPWHsb5RSXd4Fo8iyTCeXpLF2hrXylv3TMVaDmKiLvK8wrBaYageqhR 8yrcktTF/8G6SnxHiQeL7DSQsQqKhnE9+OKTyrz5MkXyIFGW6ZVvSFSlx2Z36Lt1 OjUZxsACTxlQru2AiKXRNnL/iMNPm8GQNrWiQuTazWIY/SBjptQ9I24gSR5iedq9 xfHgV2/iB3ARcK03qoZ6gnxy91+6MoxbCNG+tg3n0gN167N/DwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMhdgWYxdqcDy/HczsTGgEeh0qIqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDU4ZTg5NTEtNjI0My0z ZTA5LTllYTQtOWM1ZjgyODY3MWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIYEgg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA82e9fqDwqPoNu3ZvFL/KKoz+H03wYnCJ5H/A2JKjHfHob58BHf rWxRrYNAi4WC+XlSoq0lztgWUAU3KlXq5IOQHs6Muk4cJnMSIJn5yEl1b1DATpkg Wq7pyDhKrEdikrMako4KAadb3p37r44fhmEYCdD5irq6wv13cqlM1tyYd247Avp+ IQShMdZJFoNlfZb5TxTzE2QinpqQR3J6cNPjUIdWVSyESxlFV6eg4fzmNH4w6NPK t8yAf+sBm01tsJB7BV7fQ039UmBcQui9DcE99cQo8+SitVDHsnmkMP3kkAJwXI4y fkb+BPfc8bPblEbV3DYp5kiRqrqn9A/sFH4= -----END CERTIFICATE-----Generated at Sun May 4 10:48:34 2025 by rpki-client