$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/07e27c71-593d-3acc-8379-a281e1956b7a.roa File: 07e27c71-593d-3acc-8379-a281e1956b7a.roa (raw, json) Hash identifier: xHLfXmCJlDoPY5+zEcFMP8AGYWpQ+jm6queEwMOtZ3s= Subject key identifier: 05:0A:F4:43:6F:7B:57:EE:39:0D:70:C8:38:95:57:42:B0:28:5C:CF Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BB7A3B694F18207AC031C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/07e27c71-593d-3acc-8379-a281e1956b7a.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 2001:4860:4826::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:7a:3b:69:4f:18:20:7a:c0:31:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=e4865750-c799-41e5-819f-d53897590ff9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:e2:20:2f:5a:ac:81:68:bb:c8:ba:af:bb:9e: 1b:52:78:95:29:cd:7c:5c:26:f9:fc:2f:57:77:bd: bb:26:b3:a4:ef:a4:93:ec:e5:16:d2:6d:7d:fa:36: d9:84:6b:f2:83:1a:74:9f:17:49:2d:65:7e:a1:12: e6:3a:a3:87:f2:f1:68:18:c8:09:a8:1f:58:71:87: d1:25:4c:98:cd:55:10:6a:cb:7a:00:7d:ae:94:b2: e1:0f:54:4c:1c:f1:4f:a8:9c:57:8b:8e:da:0f:7c: 54:f0:7e:6c:c5:8f:99:86:f7:53:38:24:71:25:46: 45:a8:1e:6c:fd:d2:66:66:13:73:ed:7c:43:60:5d: b9:4e:5d:11:a7:bb:c6:b4:60:f1:75:b5:0d:0d:bb: 9b:17:ef:ff:88:47:86:0e:42:aa:78:9f:cb:f5:b6: 49:82:90:bf:a9:e5:3e:50:16:4f:8a:65:93:f6:ed: 3b:f2:83:f6:a4:85:70:54:b2:28:92:fc:6a:4b:b0: 48:54:4b:e8:5d:8f:d5:99:61:0f:1c:e8:a1:39:c3: b6:8f:13:61:35:de:20:45:78:8f:f3:30:9d:d4:a4: 3c:ea:74:a8:ba:d4:eb:4f:ba:93:ac:92:f9:b0:9e: bf:9c:7a:e7:82:3e:c2:12:5d:cf:c8:23:81:e3:81: 1a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:0A:F4:43:6F:7B:57:EE:39:0D:70:C8:38:95:57:42:B0:28:5C:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/07e27c71-593d-3acc-8379-a281e1956b7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv6: 2001:4860:4826::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:2d:60:5c:87:18:2e:1f:2e:58:ae:91:ca:26:58:6f:0e:2c: 8e:f1:80:d1:95:37:c0:f2:65:d0:6e:06:7f:6a:be:5c:89:7a: e5:1c:ae:86:fa:dd:45:89:10:56:c6:26:49:88:64:f3:58:0a: 28:0e:7a:1b:0c:2a:1d:6c:ab:d6:4a:d7:10:2d:6a:e4:ca:d7: 32:9d:6b:29:c6:30:a7:d9:87:da:eb:a3:1c:d2:14:5f:b7:bf: e5:6c:f1:f3:be:b4:ec:f5:78:41:f2:9f:7f:21:86:5a:9e:de: d0:95:3c:de:45:89:63:2c:d1:48:e4:8f:11:36:48:4a:6b:1f: b3:d8:0f:31:5b:53:13:7c:45:0b:61:7b:d8:a4:d8:f0:fe:81: 50:be:57:a1:c2:54:00:09:05:76:5f:06:72:c5:89:74:de:ad: 64:1a:38:38:cb:f3:61:c0:34:fc:9a:b1:91:4a:bc:b5:78:a1: ed:a2:66:02:e0:d7:95:66:37:83:f5:8f:63:3d:57:e9:70:be: 58:47:75:5e:8e:80:4f:f8:78:0e:ef:9c:81:35:d1:27:03:e4: e9:6c:0a:aa:85:0b:d8:5f:b6:b9:a2:43:ff:de:a5:20:35:cb: fc:b9:f2:a7:45:6b:3f:93:38:48:a4:6d:5a:61:09:2a:cb:24: 2d:0c:18:b3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmku3o7aU8YIHrAMcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZTQ4NjU3NTAtYzc5OS00MWU1LTgxOWYtZDUzODk3NTkwZmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkeIgL1qsgWi7yLqvu54bUniVKc18XCb5/C9X d727JrOk76ST7OUW0m19+jbZhGvygxp0nxdJLWV+oRLmOqOH8vFoGMgJqB9YcYfR JUyYzVUQast6AH2ulLLhD1RMHPFPqJxXi47aD3xU8H5sxY+ZhvdTOCRxJUZFqB5s /dJmZhNz7XxDYF25Tl0Rp7vGtGDxdbUNDbubF+//iEeGDkKqeJ/L9bZJgpC/qeU+ UBZPimWT9u078oP2pIVwVLIokvxqS7BIVEvoXY/VmWEPHOihOcO2jxNhNd4gRXiP 8zCd1KQ86nSoutTrT7qTrJL5sJ6/nHrngj7CEl3PyCOB44EaNwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAUK9ENve1fuOQ1wyDiVV0KwKFzPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDdlMjdjNzEtNTkzZC0z YWNjLTgzNzktYTI4MWUxOTU2YjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIYEgm MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJ8tYFyHGC4fLliukcomWG8OLI7xgNGVN8DyZdBuBn9qvlyJeuUc rob63UWJEFbGJkmIZPNYCigOehsMKh1sq9ZK1xAtauTK1zKdaynGMKfZh9rroxzS FF+3v+Vs8fO+tOz1eEHyn38hhlqe3tCVPN5FiWMs0UjkjxE2SEprH7PYDzFbUxN8 RQthe9ik2PD+gVC+V6HCVAAJBXZfBnLFiXTerWQaODjL82HANPyasZFKvLV4oe2i ZgLg15VmN4P1j2M9V+lwvlhHdV6OgE/4eA7vnIE10ScD5OlsCqqFC9hftrmiQ//e pSA1y/y58qdFaz+TOEikbVphCSrLJC0MGLM= -----END CERTIFICATE-----Generated at Sun May 4 11:38:15 2025 by rpki-client