$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1021d972-2a13-3d81-8218-439184fc9203.roa File: 1021d972-2a13-3d81-8218-439184fc9203.roa (raw, json) Hash identifier: iAloUXU5wjRbF5F0zjRdVAIjUuOpNcSpVQYhorWlBbg= Subject key identifier: BC:D0:44:56:02:9F:DE:5C:F4:B1:20:AA:E3:31:6C:45:5C:D3:CD:29 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848A99665EED835FD3F543DA020 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1021d972-2a13-3d81-8218-439184fc9203.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 20940 IP address blocks: 2600:1488:c140::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:65:ee:d8:35:fd:3f:54:3d:a0:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=c08476b9-d255-47af-9c1a-795b7c113a41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b0:b0:01:3c:4b:96:47:8c:fc:20:38:e0:e5: 90:59:d4:09:3b:a8:af:b8:a2:e1:e9:da:59:07:27: ce:68:d5:3a:be:f9:fb:9d:bc:44:c0:cc:29:fe:51: 7d:ad:5a:b1:09:28:a0:07:7e:55:05:16:65:b9:ea: 51:ba:f9:07:89:e6:85:91:95:2f:dd:41:eb:f0:c9: b1:2e:10:ac:5f:8c:5e:e9:db:5e:b4:43:9a:81:ea: ef:59:40:f0:c4:71:37:d3:fe:2e:cf:8b:f9:b0:6c: ed:ed:c7:bb:42:93:2b:98:88:ee:af:10:4d:38:bf: d0:d7:02:cf:9d:09:12:a1:b5:5d:fd:b8:73:91:38: e1:6a:08:2a:18:82:dc:ca:e7:54:90:65:79:0c:aa: 14:84:8e:f4:82:ed:2a:45:ab:5f:a4:81:47:04:2c: 98:45:c9:0d:0a:7d:d3:5e:2a:0d:3e:e0:be:d7:7a: 50:d0:4f:2a:b9:e5:29:01:ae:ad:f7:86:21:25:6b: b4:11:de:d8:cf:4b:b8:67:1d:50:83:8f:f0:5b:30: 75:3e:22:a0:24:5d:92:52:9c:32:a9:2a:14:a0:ee: 3d:c5:60:36:69:ca:b6:fb:07:26:89:e3:7c:5c:cf: 29:c6:31:66:61:5f:0b:8a:b6:94:f8:61:96:f7:31: 65:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:D0:44:56:02:9F:DE:5C:F4:B1:20:AA:E3:31:6C:45:5C:D3:CD:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1021d972-2a13-3d81-8218-439184fc9203.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1488:c140::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:3f:a0:50:4e:4f:02:20:3e:da:eb:20:89:85:bc:2a:dc:f1: bb:bc:59:43:b9:7b:96:d2:48:ca:5f:a7:02:ff:42:de:9d:1c: 1e:5d:5a:bb:bc:cf:7f:8c:7a:97:72:a6:b1:87:7f:bc:4d:d3: 55:cb:6c:30:6a:94:56:19:fc:f0:49:f1:0c:fc:7b:7b:ce:78: f0:df:d6:54:33:a0:6a:ac:39:a8:87:71:41:7f:b7:f0:2d:e5: da:e6:7a:ee:9a:d1:86:0d:9d:7d:55:c7:2e:fb:ad:ad:30:cc: 6e:5b:9a:a5:6c:0d:d5:88:23:2d:86:58:39:9b:3e:73:c7:5a: a6:1e:d6:0e:a8:cc:f1:aa:bd:28:0f:39:bb:bd:2c:4c:09:91: f9:b1:02:2a:ad:7e:a5:77:50:7d:2b:ff:76:32:9f:52:67:a4: e6:fc:01:44:bb:b0:bc:dd:84:5c:44:b7:2d:19:12:98:33:37: 23:f3:e0:ca:27:80:7a:12:24:fd:d0:4f:81:da:4e:39:c2:8b: 42:5a:fd:f9:88:b9:6b:9e:2a:9e:27:a4:0b:e4:7f:cb:ea:2e: 13:45:62:4f:4d:44:0c:c3:8c:ca:b9:7b:35:47:50:1f:91:91: 19:f1:ac:9e:5d:9e:95:26:5c:a1:70:fc:63:03:75:81:5c:b4: 47:b0:f5:c3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiplmXu2DX9P1Q9oCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk YzA4NDc2YjktZDI1NS00N2FmLTljMWEtNzk1YjdjMTEzYTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLCwATxLlkeM/CA44OWQWdQJO6ivuKLh6dpZ ByfOaNU6vvn7nbxEwMwp/lF9rVqxCSigB35VBRZluepRuvkHieaFkZUv3UHr8Mmx LhCsX4xe6dtetEOagervWUDwxHE30/4uz4v5sGzt7ce7QpMrmIjurxBNOL/Q1wLP nQkSobVd/bhzkTjhaggqGILcyudUkGV5DKoUhI70gu0qRatfpIFHBCyYRckNCn3T XioNPuC+13pQ0E8queUpAa6t94YhJWu0Ed7Yz0u4Zx1Qg4/wWzB1PiKgJF2SUpwy qSoUoO49xWA2acq2+wcmieN8XM8pxjFmYV8LiraU+GGW9zFl5wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLzQRFYCn95c9LEgquMxbEVc080pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTAyMWQ5NzItMmExMy0z ZDgxLTgyMTgtNDM5MTg0ZmM5MjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUiMFA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADw/oFBOTwIgPtrrIImFvCrc8bu8WUO5e5bSSMpfpwL/Qt6dHB5d Wru8z3+MepdyprGHf7xN01XLbDBqlFYZ/PBJ8Qz8e3vOePDf1lQzoGqsOaiHcUF/ t/At5drmeu6a0YYNnX1Vxy77ra0wzG5bmqVsDdWIIy2GWDmbPnPHWqYe1g6ozPGq vSgPObu9LEwJkfmxAiqtfqV3UH0r/3Yyn1JnpOb8AUS7sLzdhFxEty0ZEpgzNyPz 4MongHoSJP3QT4HaTjnCi0Ja/fmIuWueKp4npAvkf8vqLhNFYk9NRAzDjMq5ezVH UB+RkRnxrJ5dnpUmXKFw/GMDdYFctEew9cM= -----END CERTIFICATE-----Generated at Sat Apr 5 11:10:44 2025 by rpki-client