$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0643a5b1-12f8-3823-9851-1590244b2064.roa File: 0643a5b1-12f8-3823-9851-1590244b2064.roa (raw, json) Hash identifier: hl+0LrDchqnSEMQ7KsglDVMwn2u24APpfqZqdyheHRI= Subject key identifier: D6:3A:B1:0D:2A:76:42:D3:32:AA:C9:7F:38:C2:E8:46:0B:BA:74:6B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848B78B7EE9D3DC392FBF676520 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0643a5b1-12f8-3823-9851-1590244b2064.roa Signing time: Thu 30 Jan 2025 14:00:51 +0000 ROA not before: Thu 30 Jan 2025 14:00:51 +0000 ROA not after: Wed 30 Apr 2025 13:00:51 +0000 asID: 20940 IP address blocks: 2600:141b:f800::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b7:8b:7e:e9:d3:dc:39:2f:bf:67:65:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 30 14:00:51 2025 GMT Not After : Apr 30 13:00:51 2025 GMT Subject: CN=704eb56d-dabd-4bdb-a1ac-a5a18398ed43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:03:a7:8c:ef:47:35:03:2b:54:29:d2:4d:8e: 4d:22:93:f1:d7:e6:75:fa:86:34:de:d9:e8:89:04: eb:43:b1:f4:e4:6f:48:d0:3a:c2:7c:52:63:3e:e2: 85:55:b5:d5:5a:82:c4:47:f4:fd:d3:37:18:48:14: 75:18:38:42:13:f0:d5:e1:1e:05:1c:cb:06:61:39: ff:a2:e0:c6:9d:4a:32:21:6c:8d:40:89:80:15:6e: 46:4e:9a:ad:ff:38:63:d6:9f:f9:2d:62:47:51:dd: 34:87:66:a9:cb:b2:35:a1:70:ff:a7:39:f2:70:2f: 5a:b2:61:28:e0:06:d7:6d:19:27:a3:92:ed:89:04: c4:bc:c2:36:1f:92:d4:35:e9:51:a1:4d:22:95:9d: 86:c6:67:ee:0b:8b:bf:fe:8c:ed:da:3c:42:07:e0: c3:d4:d9:c2:a0:64:78:e6:d2:74:9e:7e:5d:92:8c: bd:9a:fd:d9:29:3d:9b:6e:b3:4b:82:4f:fd:7b:89: da:43:00:f1:98:a5:1c:43:66:d5:9b:9d:39:c8:2f: 7c:63:98:18:50:ff:fa:9f:a0:51:e7:0e:61:c1:3e: fd:2b:41:0c:47:ca:56:8c:92:a7:13:03:14:57:a2: 1c:56:00:e1:88:13:2f:12:ea:a8:a6:8e:00:63:62: 73:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:3A:B1:0D:2A:76:42:D3:32:AA:C9:7F:38:C2:E8:46:0B:BA:74:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0643a5b1-12f8-3823-9851-1590244b2064.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:141b:f800::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:6e:c6:5d:b6:43:8c:7e:ed:a5:0e:a3:78:39:6f:1c:dc:8c: 11:6f:04:c9:c1:51:76:d2:a0:fb:d5:d9:f0:2c:ac:34:b9:92: 0f:70:2f:92:4d:f1:1b:e6:c4:12:76:b3:7b:86:05:48:13:7c: 1d:44:23:39:95:f0:25:e6:9e:7c:23:45:07:7b:82:eb:39:94: 26:6d:29:ce:15:8d:77:2d:82:75:80:45:93:a0:e6:a6:15:db: 14:a4:57:90:55:fd:df:78:ad:ba:82:3d:b2:66:af:c1:f8:e7: ed:66:d4:0d:4f:2f:2c:ec:0a:03:6e:c3:bd:00:0b:bf:37:92: 2e:65:77:58:37:a9:4c:74:38:71:c0:b4:e4:52:d1:0c:20:e5: 4d:40:c3:db:78:3a:59:a1:aa:77:c3:2c:52:52:d5:8a:75:d3: d5:b1:9f:55:18:61:e5:7b:3b:8f:08:5c:7b:66:77:c5:30:67: 9e:76:2c:1d:bf:e6:cb:e2:9c:6a:b4:b2:20:e2:46:54:6a:3a: b4:b4:5c:a9:c4:9b:84:c7:4b:46:1e:cd:ce:ae:21:bd:bb:2e: 47:6a:91:7c:ff:52:92:2a:2a:26:a9:51:c2:b1:ac:cd:dc:45: 5d:20:49:01:09:ff:ae:85:4a:4c:ee:9e:6f:18:f2:01:87:4a: d6:c8:e3:32 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEi3i37p09w5L79nZSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEzMDE0MDA1MVoXDTI1MDQzMDEzMDA1MVowLzEtMCsGA1UEAxMk NzA0ZWI1NmQtZGFiZC00YmRiLWExYWMtYTVhMTgzOThlZDQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAOnjO9HNQMrVCnSTY5NIpPx1+Z1+oY03tno iQTrQ7H05G9I0DrCfFJjPuKFVbXVWoLER/T90zcYSBR1GDhCE/DV4R4FHMsGYTn/ ouDGnUoyIWyNQImAFW5GTpqt/zhj1p/5LWJHUd00h2apy7I1oXD/pznycC9asmEo 4AbXbRkno5LtiQTEvMI2H5LUNelRoU0ilZ2GxmfuC4u//ozt2jxCB+DD1NnCoGR4 5tJ0nn5dkoy9mv3ZKT2bbrNLgk/9e4naQwDxmKUcQ2bVm505yC98Y5gYUP/6n6BR 5w5hwT79K0EMR8pWjJKnEwMUV6IcVgDhiBMvEuqopo4AY2Jz4wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNY6sQ0qdkLTMqrJfzjC6EYLunRrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDY0M2E1YjEtMTJmOC0z ODIzLTk4NTEtMTU5MDI0NGIyMDY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUG/gA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAJuxl22Q4x+7aUOo3g5bxzcjBFvBMnBUXbSoPvV2fAsrDS5kg9w L5JN8RvmxBJ2s3uGBUgTfB1EIzmV8CXmnnwjRQd7gus5lCZtKc4VjXctgnWARZOg 5qYV2xSkV5BV/d94rbqCPbJmr8H45+1m1A1PLyzsCgNuw70AC783ki5ld1g3qUx0 OHHAtORS0Qwg5U1Aw9t4OlmhqnfDLFJS1Yp109Wxn1UYYeV7O48IXHtmd8UwZ552 LB2/5svinGq0siDiRlRqOrS0XKnEm4THS0Yezc6uIb27LkdqkXz/UpIqKiapUcKx rM3cRV0gSQEJ/66FSkzunm8Y8gGHStbI4zI= -----END CERTIFICATE-----Generated at Sat Apr 5 11:18:12 2025 by rpki-client