$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/069fe677-8bec-3073-aaa7-916295acba80.roa File: 069fe677-8bec-3073-aaa7-916295acba80.roa (raw, json) Hash identifier: z5iSXJvzenix4VA1j291nVLRxOCcQrRVOXeCGUpLtrU= Subject key identifier: 0B:5C:8D:A0:0F:97:D7:FE:D6:FD:E9:F5:E5:A5:00:C0:0C:13:4B:1F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584900215D1536F52E3942010F00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/069fe677-8bec-3073-aaa7-916295acba80.roa Signing time: Tue 25 Feb 2025 14:00:52 +0000 ROA not before: Tue 25 Feb 2025 14:00:52 +0000 ROA not after: Mon 26 May 2025 13:00:52 +0000 asID: 12222 IP address blocks: 2001:4878:a000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:00:21:5d:15:36:f5:2e:39:42:01:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 25 14:00:52 2025 GMT Not After : May 26 13:00:52 2025 GMT Subject: CN=3522849c-cde7-475f-a660-33e3ea2c3524 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ae:ae:ca:a8:d3:75:8c:5b:98:a7:b1:6d:40: 45:ce:53:cf:40:94:dc:bf:60:5c:bf:4e:51:6d:f7: d0:be:95:ec:db:18:5f:43:ab:96:4b:36:40:b5:66: 80:36:62:e3:82:97:b1:5b:ee:57:01:f1:02:73:1a: fb:0b:63:5d:e0:24:43:06:05:e1:f7:ee:35:bb:4e: fa:5c:1e:ba:64:07:c7:08:8a:9e:90:26:f9:49:51: ee:36:57:51:ef:0a:7e:c3:63:7d:08:a6:cf:af:24: 93:8c:06:b5:4e:bc:e4:51:34:39:17:85:f5:1a:99: 4a:1a:b8:16:dc:8c:bc:ab:33:d0:57:eb:fb:52:7e: e1:58:63:14:07:f8:9d:2b:67:86:10:bb:d9:a1:82: 39:bf:ac:3f:bd:84:79:35:97:60:ae:bd:73:19:78: 4d:c9:c6:1b:ea:84:db:3e:fa:8c:03:28:4a:03:24: 61:ed:56:fd:85:86:5a:ef:ac:80:f5:16:5a:26:10: 2e:75:63:b2:89:b1:69:7c:39:24:70:63:7b:99:ea: 71:aa:a1:26:34:02:f3:d5:be:02:15:55:ff:bf:16: 5a:2c:07:b5:21:89:fb:7b:c2:95:dd:d8:21:4f:c9: 09:ed:cc:ef:e2:48:5b:2f:fe:e8:29:84:a8:ce:c2: 44:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:5C:8D:A0:0F:97:D7:FE:D6:FD:E9:F5:E5:A5:00:C0:0C:13:4B:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/069fe677-8bec-3073-aaa7-916295acba80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2001:4878:a000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:34:30:0f:0e:45:6e:aa:e5:87:d7:99:2b:37:45:7c:18:3d: 23:37:18:78:e2:75:0b:1c:74:3f:10:3e:00:7a:5a:52:5d:8b: 06:86:09:8a:19:82:62:51:2d:86:c6:da:d8:b8:cf:e2:38:a7: 23:ed:ef:f1:9f:d5:ab:b9:d4:76:91:dc:e3:1e:8d:00:43:01: f0:1f:58:38:32:2b:3c:3a:db:1f:df:f8:14:ea:1d:d1:a5:a5: 84:49:27:3a:de:8d:7c:34:d2:1b:29:d0:f5:74:d6:ae:3c:a4: 56:43:f7:01:41:e0:fd:4b:6f:01:1d:ba:f6:b0:9b:69:90:a9: 06:e3:55:69:28:b2:17:f3:59:60:10:94:3e:26:6d:b8:28:f9: ba:44:2e:d3:f6:be:ff:b2:0e:fa:ff:c4:1c:97:6b:40:28:1d: 3d:3d:70:63:1b:f3:07:28:bd:fb:a7:fc:1c:7d:27:95:c6:9d: d1:15:c3:06:c6:e9:b2:71:66:6d:fe:85:8a:d5:b2:b2:b3:97: dc:26:79:2e:1f:f7:3f:01:72:9a:95:18:2c:60:c4:a4:8e:af: f0:10:1e:b7:60:ca:19:1e:b8:85:2c:59:c7:42:ad:70:ea:24: a2:86:fb:9a:fd:ae:71:68:a8:d6:40:b8:4a:5a:aa:b3:55:bf: f0:2c:29:2c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkAIV0VNvUuOUIBDwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIyNTE0MDA1MloXDTI1MDUyNjEzMDA1MlowLzEtMCsGA1UEAxMk MzUyMjg0OWMtY2RlNy00NzVmLWE2NjAtMzNlM2VhMmMzNTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiq6uyqjTdYxbmKexbUBFzlPPQJTcv2Bcv05R bffQvpXs2xhfQ6uWSzZAtWaANmLjgpexW+5XAfECcxr7C2Nd4CRDBgXh9+41u076 XB66ZAfHCIqekCb5SVHuNldR7wp+w2N9CKbPrySTjAa1TrzkUTQ5F4X1GplKGrgW 3Iy8qzPQV+v7Un7hWGMUB/idK2eGELvZoYI5v6w/vYR5NZdgrr1zGXhNycYb6oTb PvqMAyhKAyRh7Vb9hYZa76yA9RZaJhAudWOyibFpfDkkcGN7mepxqqEmNALz1b4C FVX/vxZaLAe1IYn7e8KV3dghT8kJ7czv4khbL/7oKYSozsJEzwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAtcjaAPl9f+1v3p9eWlAMAME0sfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDY5ZmU2NzctOGJlYy0z MDczLWFhYTctOTE2Mjk1YWNiYTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIeKAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH00MA8ORW6q5YfXmSs3RXwYPSM3GHjidQscdD8QPgB6WlJdiwaG CYoZgmJRLYbG2ti4z+I4pyPt7/Gf1au51HaR3OMejQBDAfAfWDgyKzw62x/f+BTq HdGlpYRJJzrejXw00hsp0PV01q48pFZD9wFB4P1LbwEduvawm2mQqQbjVWkoshfz WWAQlD4mbbgo+bpELtP2vv+yDvr/xByXa0AoHT09cGMb8wcovfun/Bx9J5XGndEV wwbG6bJxZm3+hYrVsrKzl9wmeS4f9z8BcpqVGCxgxKSOr/AQHrdgyhkeuIUsWcdC rXDqJKKG+5r9rnFoqNZAuEpaqrNVv/AsKSw= -----END CERTIFICATE-----Generated at Sat Apr 5 11:14:27 2025 by rpki-client