$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b858dd81-8456-3817-9d2b-bf4fc5a64280.roa File: b858dd81-8456-3817-9d2b-bf4fc5a64280.roa (raw, json) Hash identifier: PfiLuOfQ7RS6THdAjhKGN7dtBhBy5Kv7wTjHw6Jd9uk= Subject key identifier: 30:65:15:1E:21:4D:C3:E4:77:FA:07:C5:56:A8:83:9B:3A:D9:4D:C9 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848ADC62028B045A35D830867E0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b858dd81-8456-3817-9d2b-bf4fc5a64280.roa Signing time: Mon 27 Jan 2025 02:00:39 +0000 ROA not before: Mon 27 Jan 2025 02:00:39 +0000 ROA not after: Sun 27 Apr 2025 01:00:39 +0000 asID: 9498 IP address blocks: 2600:140f:b000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ad:c6:20:28:b0:45:a3:5d:83:08:67:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 27 02:00:39 2025 GMT Not After : Apr 27 01:00:39 2025 GMT Subject: CN=c078cf1b-c816-46ad-bd23-1d7e25176859 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:72:14:cb:42:18:c3:2f:e9:5c:d2:4f:cc:30: 7f:d8:a4:5e:24:f1:61:38:3e:85:e2:4d:87:bd:04: df:ea:12:04:76:bd:4e:00:f4:72:97:87:91:d2:cb: 7b:56:60:2f:a0:59:ad:9e:5e:29:5c:a9:77:80:ea: 1a:09:dc:f7:05:73:d5:bd:6f:32:ec:8f:ca:75:db: 9e:83:86:c1:ed:bc:8d:bf:c0:4f:2b:ba:13:d4:41: ce:80:ae:dc:7c:7d:a3:48:4c:cc:af:f9:4c:11:89: 72:30:30:c8:23:4d:37:d0:13:0b:d9:35:38:f7:ab: ca:6a:0a:54:4c:4d:4d:9f:fd:a8:b7:d8:fc:41:f3: 6f:21:ed:c7:f4:b5:8f:73:5f:7b:cf:8a:ba:34:85: e4:af:63:e2:c9:02:70:b4:d7:52:b2:bf:2f:27:7e: 04:ea:a5:19:20:83:f7:50:3d:e2:42:e6:ad:84:f1: 81:ee:c6:59:f5:c1:15:df:1b:5e:93:28:d6:63:dd: 54:97:3e:4f:b5:40:3a:ba:79:50:c3:f4:6b:5c:59: 6b:76:5c:cc:da:13:09:76:c9:26:72:3e:a9:8d:64: 06:13:ff:b0:10:39:2e:59:02:14:80:fd:2d:fd:fb: f5:14:23:91:78:f2:75:66:1e:5b:e0:09:38:ab:e9: ea:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:65:15:1E:21:4D:C3:E4:77:FA:07:C5:56:A8:83:9B:3A:D9:4D:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b858dd81-8456-3817-9d2b-bf4fc5a64280.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:140f:b000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:e1:3f:d6:79:06:66:4f:6d:c0:11:6d:a9:85:ca:5a:aa:a0: 44:96:c1:e3:dd:52:d7:aa:c9:cc:72:78:94:27:4f:eb:fd:99: 35:67:b3:15:6f:a7:e5:95:85:7e:d9:7a:39:07:d0:0e:13:0b: 2d:0b:a8:a4:6b:31:ab:42:ce:e2:c3:46:8d:9d:99:74:b8:1b: 47:1b:71:ae:c2:71:5e:9c:2a:02:0c:ef:7e:91:4d:0c:a3:8c: e2:2d:e9:99:1b:9a:06:c3:14:69:3b:24:3e:92:b6:48:17:84: 7f:a1:49:0f:6a:eb:c8:1e:d0:67:1a:74:bd:52:b7:22:4c:dc: cf:63:b7:a6:29:8f:d3:25:1c:00:17:d7:0b:ec:48:01:29:88: d2:9a:65:b8:b2:00:f4:89:c2:e3:b6:08:d6:7d:67:fd:a2:ed: 71:d2:80:d8:62:06:b3:ec:91:39:7e:23:69:82:29:23:25:93: 42:b3:c8:29:e7:47:84:1d:fe:88:4c:91:c0:17:7e:f5:56:a4: 3b:de:49:8f:c2:71:62:8a:65:b0:6f:e2:ea:f6:e4:c9:66:8e: 60:d4:13:16:d2:82:72:15:6e:96:07:0d:e0:e9:91:2b:78:1f: 23:65:ba:f4:87:35:a8:0e:18:80:7a:e9:90:9e:7b:ba:e9:9c: fd:48:5e:27 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEitxiAosEWjXYMIZ+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyNzAyMDAzOVoXDTI1MDQyNzAxMDAzOVowLzEtMCsGA1UEAxMk YzA3OGNmMWItYzgxNi00NmFkLWJkMjMtMWQ3ZTI1MTc2ODU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHIUy0IYwy/pXNJPzDB/2KReJPFhOD6F4k2H vQTf6hIEdr1OAPRyl4eR0st7VmAvoFmtnl4pXKl3gOoaCdz3BXPVvW8y7I/Kddue g4bB7byNv8BPK7oT1EHOgK7cfH2jSEzMr/lMEYlyMDDII0030BML2TU496vKagpU TE1Nn/2ot9j8QfNvIe3H9LWPc197z4q6NIXkr2PiyQJwtNdSsr8vJ34E6qUZIIP3 UD3iQuathPGB7sZZ9cEV3xtekyjWY91Ulz5PtUA6unlQw/RrXFlrdlzM2hMJdskm cj6pjWQGE/+wEDkuWQIUgP0t/fv1FCORePJ1Zh5b4Ak4q+nqYQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDBlFR4hTcPkd/oHxVaog5s62U3JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjg1OGRkODEtODQ1Ni0z ODE3LTlkMmItYmY0ZmM1YTY0MjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUD7AA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGLhP9Z5BmZPbcARbamFylqqoESWwePdUteqycxyeJQnT+v9mTVn sxVvp+WVhX7ZejkH0A4TCy0LqKRrMatCzuLDRo2dmXS4G0cbca7CcV6cKgIM736R TQyjjOIt6ZkbmgbDFGk7JD6StkgXhH+hSQ9q68ge0GcadL1StyJM3M9jt6Ypj9Ml HAAX1wvsSAEpiNKaZbiyAPSJwuO2CNZ9Z/2i7XHSgNhiBrPskTl+I2mCKSMlk0Kz yCnnR4Qd/ohMkcAXfvVWpDveSY/CcWKKZbBv4ur25MlmjmDUExbSgnIVbpYHDeDp kSt4HyNluvSHNagOGIB66ZCee7rpnP1IXic= -----END CERTIFICATE-----Generated at Sat Apr 5 06:31:16 2025 by rpki-client