$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/13351fad-98ac-3944-b4d5-134e787f1755.roa File: 13351fad-98ac-3944-b4d5-134e787f1755.roa (raw, json) Hash identifier: hFnJ3Hrj//O2zQDSVUzRusyQ2UcXodmtQSY5O8CCHRc= Subject key identifier: B1:F5:1A:DF:A5:89:E2:B6:4F:7E:D3:D3:EB:C0:5D:A1:53:4E:86:2D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858490021543770779716DE10BFA0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/13351fad-98ac-3944-b4d5-134e787f1755.roa Signing time: Tue 25 Feb 2025 14:00:52 +0000 ROA not before: Tue 25 Feb 2025 14:00:52 +0000 ROA not after: Mon 26 May 2025 13:00:52 +0000 asID: 12222 IP address blocks: 2001:4878:a215::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:00:21:54:37:70:77:97:16:de:10:bf:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 25 14:00:52 2025 GMT Not After : May 26 13:00:52 2025 GMT Subject: CN=dfc7e594-2ca0-4d82-9ca2-468ed3aa5254 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:50:60:d8:b0:fc:9e:9c:79:5e:6a:0d:ab:56: c5:21:3c:04:99:58:ec:d8:b1:ab:98:76:42:bd:6a: e7:6a:e3:4d:f6:2d:97:e2:6b:1e:ba:a6:c6:cc:5a: 65:51:17:d9:2d:1f:a4:61:ca:7e:34:e4:8b:fb:f7: 49:e0:c6:c8:21:5d:ff:92:06:ad:bf:6c:00:25:11: c5:68:16:5d:f1:84:fa:b9:03:5f:e1:72:fb:22:3b: 2b:5d:9a:90:fc:cd:84:80:1f:94:23:9c:45:83:b7: d0:bf:7f:a0:bc:67:06:36:fc:6f:79:6b:9c:8e:5c: 2a:b8:ab:dd:aa:9b:d6:91:4d:a9:98:92:47:42:ad: a3:d6:22:ec:40:6f:b5:c3:eb:8b:8b:b5:eb:36:0f: 75:b8:9d:20:b1:e8:3f:1c:78:ad:6e:a9:5d:93:14: 5c:31:07:a3:07:1b:f3:93:ff:59:83:87:e3:be:f6: 91:0e:bf:6c:dd:9e:6b:00:03:09:34:8f:0a:4f:4c: 22:b1:dd:b5:b3:36:b5:37:a9:87:41:67:5d:fa:77: 4e:8e:9d:d5:33:18:d3:4e:0a:df:c9:8b:26:30:8b: 17:7b:34:47:22:d5:d9:ca:e0:3a:a9:6d:d3:83:b4: c3:63:c7:4a:b9:ce:aa:e8:95:aa:3e:e3:71:98:cf: ca:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:F5:1A:DF:A5:89:E2:B6:4F:7E:D3:D3:EB:C0:5D:A1:53:4E:86:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/13351fad-98ac-3944-b4d5-134e787f1755.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2001:4878:a215::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:57:94:41:cf:1f:dd:8a:d1:1f:89:43:6b:bc:86:79:88:9f: 5b:64:2e:1c:7d:a8:37:02:e1:84:8c:6d:67:e6:23:7c:0a:c0: 2a:7b:91:3b:64:9b:41:69:ef:de:2c:d4:21:27:76:b7:3d:d5: ab:c9:c5:e8:7c:3f:5d:d3:ba:06:42:98:c3:93:57:75:10:f7: 90:6d:14:6f:86:25:a6:77:ef:b5:c1:a8:59:c2:5e:01:89:d4: ca:26:38:7b:ec:dd:83:73:2d:7a:cf:61:42:71:a9:58:5d:5b: e7:e4:ac:c8:19:e9:39:da:e5:3a:f7:64:17:e3:fb:81:b8:36: 54:6c:15:0f:50:69:64:1c:a9:9f:13:af:16:cc:ab:d6:ea:4b: 0d:aa:4e:b7:5d:8c:18:3e:6e:12:1b:42:82:d2:32:d4:aa:88: d0:16:fc:0b:b8:fd:3f:ae:d2:a9:58:ec:48:8f:77:7c:23:dd: d1:5c:92:2d:26:98:54:ce:3e:a0:79:6e:d3:aa:e8:e7:54:23: 73:30:ec:bc:c8:52:54:80:e1:7b:01:71:10:26:7c:dc:34:c2: c3:1d:42:f0:d9:d1:e0:b6:8b:6f:f9:ce:ea:10:1a:8f:52:76: 49:77:b4:ff:61:d9:f9:fa:9f:69:53:48:e5:b9:3c:ca:dd:80: a7:f1:1c:07 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkAIVQ3cHeXFt4Qv6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIyNTE0MDA1MloXDTI1MDUyNjEzMDA1MlowLzEtMCsGA1UEAxMk ZGZjN2U1OTQtMmNhMC00ZDgyLTljYTItNDY4ZWQzYWE1MjU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVBg2LD8npx5XmoNq1bFITwEmVjs2LGrmHZC vWrnauNN9i2X4mseuqbGzFplURfZLR+kYcp+NOSL+/dJ4MbIIV3/kgatv2wAJRHF aBZd8YT6uQNf4XL7IjsrXZqQ/M2EgB+UI5xFg7fQv3+gvGcGNvxveWucjlwquKvd qpvWkU2pmJJHQq2j1iLsQG+1w+uLi7XrNg91uJ0gseg/HHitbqldkxRcMQejBxvz k/9Zg4fjvvaRDr9s3Z5rAAMJNI8KT0wisd21sza1N6mHQWdd+ndOjp3VMxjTTgrf yYsmMIsXezRHItXZyuA6qW3Tg7TDY8dKuc6q6JWqPuNxmM/KFwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLH1Gt+lieK2T37T0+vAXaFTToYtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTMzNTFmYWQtOThhYy0z OTQ0LWI0ZDUtMTM0ZTc4N2YxNzU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIeKIV MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAARXlEHPH92K0R+JQ2u8hnmIn1tkLhx9qDcC4YSMbWfmI3wKwCp7 kTtkm0Fp794s1CEndrc91avJxeh8P13TugZCmMOTV3UQ95BtFG+GJaZ377XBqFnC XgGJ1MomOHvs3YNzLXrPYUJxqVhdW+fkrMgZ6Tna5Tr3ZBfj+4G4NlRsFQ9QaWQc qZ8TrxbMq9bqSw2qTrddjBg+bhIbQoLSMtSqiNAW/Au4/T+u0qlY7EiPd3wj3dFc ki0mmFTOPqB5btOq6OdUI3Mw7LzIUlSA4XsBcRAmfNw0wsMdQvDZ0eC2i2/5zuoQ Go9Sdkl3tP9h2fn6n2lTSOW5PMrdgKfxHAc= -----END CERTIFICATE-----Generated at Sat Apr 5 11:18:27 2025 by rpki-client