$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/03ff2a67-7ed0-37d1-938c-255c5ef6b444.roa File: 03ff2a67-7ed0-37d1-938c-255c5ef6b444.roa (raw, json) Hash identifier: PJ/9eS8mgzwVav1T/5vQJDvy6VL8GO404NfUSE5NqaY= Subject key identifier: 59:46:51:14:07:8A:17:6E:34:01:2F:0C:C6:F3:9A:9D:08:53:A8:26 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848A99637AECFB1768B057151F8 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/03ff2a67-7ed0-37d1-938c-255c5ef6b444.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 20940 IP address blocks: 2600:1488:a280::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:37:ae:cf:b1:76:8b:05:71:51:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=a0f504b3-f014-4bdd-9735-31f4e20db6b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ca:1c:ab:fa:15:89:09:46:16:0c:3e:59:3f: dd:6b:56:27:c1:8d:e8:28:fa:3f:06:76:bc:5c:c8: 9c:b6:58:5b:23:1c:48:9c:8e:2a:59:a1:47:7e:a6: 09:49:c9:f1:f1:95:64:43:e3:47:c3:78:89:a6:6b: f7:e2:14:07:b7:d0:5e:e6:28:1a:1c:e6:2f:0c:d7: e9:11:7e:b2:f3:c0:ab:0b:01:f1:ac:9e:48:40:1b: 4a:22:bd:f7:a0:d4:0e:32:5a:9e:ca:f4:7f:c6:0a: 56:58:c2:4d:93:cf:f5:1f:51:bc:63:93:73:60:c4: fe:8b:cf:c7:b0:1d:d7:8d:d1:ed:b3:d9:ec:0c:ee: a8:10:e3:45:8b:43:89:69:ed:cc:92:e8:4a:08:90: 0d:73:e0:73:53:96:b1:03:72:bf:8e:4a:e3:f0:19: f1:63:cf:c7:93:66:3d:37:09:15:49:27:a6:3b:18: 71:dd:12:1c:53:92:e2:2e:88:43:cf:3e:cb:b3:8e: 09:b5:5e:e7:2f:ee:c8:53:88:e8:19:f7:4c:38:9a: 0c:56:d1:41:a8:1a:7e:aa:41:58:b1:92:95:bf:27: c6:a4:df:eb:75:e5:e9:36:16:10:27:41:11:cb:62: 08:f6:5d:fb:9e:fe:08:7e:60:c7:e6:c9:9d:b8:4a: a3:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:46:51:14:07:8A:17:6E:34:01:2F:0C:C6:F3:9A:9D:08:53:A8:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/03ff2a67-7ed0-37d1-938c-255c5ef6b444.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1488:a280::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:82:44:4b:78:04:e2:2f:c7:79:b0:03:cf:21:ee:59:21:34: 3a:9b:69:40:88:84:35:d4:7d:e7:17:bf:81:0d:39:2a:f8:40: 0f:79:3e:10:c0:19:4a:2c:ed:9d:40:92:9d:69:49:6c:72:c1: 80:f3:a9:42:2b:92:82:de:a1:1a:6a:2c:93:56:78:0a:90:8f: a0:1a:4a:45:14:66:11:ce:8f:df:1a:c2:f4:27:d4:72:d5:d6: be:b4:a3:df:b7:e1:4a:b5:7b:8f:5f:80:58:19:e3:a1:be:e1: c6:34:3c:d4:30:68:4f:a2:c1:84:c4:a8:f8:f4:89:5b:9a:dd: d2:a9:79:6c:89:02:a3:0a:41:b8:40:1e:2f:58:3c:ff:42:db: 8f:7b:ab:d8:ff:88:2e:7e:3a:85:6f:f5:78:d3:71:f8:c0:0b: 78:ea:dd:45:8d:c0:38:56:26:2b:c8:0d:d3:c9:be:3d:57:18: 72:48:a5:ef:e1:15:dc:c0:4b:af:b2:26:0f:ca:13:97:19:5f: e4:d9:82:9d:5e:b5:81:bb:70:59:05:b2:ca:92:78:8d:4c:f3: db:6c:9c:a0:9e:71:b0:f5:a8:3c:46:1a:8e:da:3e:00:fb:ce: ba:e7:a6:d5:29:e0:5e:68:d4:ed:d2:25:26:c3:be:2a:6d:54: ac:e9:6d:ec -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEipljeuz7F2iwVxUfgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk YTBmNTA0YjMtZjAxNC00YmRkLTk3MzUtMzFmNGUyMGRiNmI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMocq/oViQlGFgw+WT/da1YnwY3oKPo/Bna8 XMictlhbIxxInI4qWaFHfqYJScnx8ZVkQ+NHw3iJpmv34hQHt9Be5igaHOYvDNfp EX6y88CrCwHxrJ5IQBtKIr33oNQOMlqeyvR/xgpWWMJNk8/1H1G8Y5NzYMT+i8/H sB3XjdHts9nsDO6oEONFi0OJae3MkuhKCJANc+BzU5axA3K/jkrj8BnxY8/Hk2Y9 NwkVSSemOxhx3RIcU5LiLohDzz7Ls44JtV7nL+7IU4joGfdMOJoMVtFBqBp+qkFY sZKVvyfGpN/rdeXpNhYQJ0ERy2II9l37nv4IfmDH5smduEqjJwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFlGURQHihduNAEvDMbzmp0IU6gmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDNmZjJhNjctN2VkMC0z N2QxLTkzOGMtMjU1YzVlZjZiNDQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUiKKA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAECCREt4BOIvx3mwA88h7lkhNDqbaUCIhDXUfecXv4ENOSr4QA95 PhDAGUos7Z1Akp1pSWxywYDzqUIrkoLeoRpqLJNWeAqQj6AaSkUUZhHOj98awvQn 1HLV1r60o9+34Uq1e49fgFgZ46G+4cY0PNQwaE+iwYTEqPj0iVua3dKpeWyJAqMK QbhAHi9YPP9C2497q9j/iC5+OoVv9XjTcfjAC3jq3UWNwDhWJivIDdPJvj1XGHJI pe/hFdzAS6+yJg/KE5cZX+TZgp1etYG7cFkFssqSeI1M89tsnKCecbD1qDxGGo7a PgD7zrrnptUp4F5o1O3SJSbDviptVKzpbew= -----END CERTIFICATE-----Generated at Sat Apr 5 11:00:03 2025 by rpki-client