$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/17cb8211-26bc-3364-9e10-6881f39b4e6d.roa File: 17cb8211-26bc-3364-9e10-6881f39b4e6d.roa (raw, json) Hash identifier: qWMbi1HbMcfCq0K8ZRMt3/xaE6Z6UnfBIkoYBMQ1P30= Subject key identifier: 48:AF:B6:0D:48:E2:6C:B4:57:1E:E8:FB:9D:16:F6:3D:14:4A:78:72 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848A13630BAF76657523ADCC640 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/17cb8211-26bc-3364-9e10-6881f39b4e6d.roa Signing time: Wed 22 Jan 2025 14:00:52 +0000 ROA not before: Wed 22 Jan 2025 14:00:52 +0000 ROA not after: Tue 22 Apr 2025 13:00:52 +0000 asID: 20940 IP address blocks: 2600:1414::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a1:36:30:ba:f7:66:57:52:3a:dc:c6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 22 14:00:52 2025 GMT Not After : Apr 22 13:00:52 2025 GMT Subject: CN=871d7563-661e-430e-b7e5-2c7cdba766eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ce:92:0b:b7:87:8b:69:0a:8f:37:ae:ef:1a: a0:62:07:75:ea:86:28:ec:b3:bc:ba:8c:ac:29:bb: 15:1c:58:c9:c1:f5:69:ed:6a:46:38:ba:5d:f6:50: 2c:f3:37:43:88:da:7f:f1:b4:09:8f:d6:83:fd:b7: 5c:9f:ec:82:c5:50:ba:b7:58:98:b3:89:22:21:04: ed:3b:06:e5:37:87:7b:e2:2d:da:2a:5e:d9:96:b8: 92:e2:3b:e0:20:c1:81:00:77:4f:6d:77:ef:5c:85: ce:c1:88:84:00:16:af:60:d4:ce:38:be:66:40:d8: 88:75:3a:cf:8d:42:30:2c:ca:9e:b5:35:e0:2f:11: 24:c4:68:9a:cf:98:73:82:f3:96:2c:13:df:8f:60: 9e:ba:6a:a4:c5:35:d9:4f:ed:5f:24:b2:ad:cc:2c: 12:7c:ca:55:1e:43:39:3b:a4:7f:49:fc:31:5f:d5: 4a:f7:1e:bf:3c:a2:e8:90:4e:79:fa:bc:b5:95:77: f5:1e:19:03:ab:3f:7f:ef:f5:f7:7f:a6:eb:29:07: da:be:d1:33:fb:31:ab:6f:d9:74:18:28:ff:21:dd: 89:18:22:0e:88:61:9c:73:e8:ae:35:5b:39:63:07: 8d:c8:83:a7:7f:b8:69:e6:54:4b:49:b7:27:ec:c8: 5c:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:AF:B6:0D:48:E2:6C:B4:57:1E:E8:FB:9D:16:F6:3D:14:4A:78:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/17cb8211-26bc-3364-9e10-6881f39b4e6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1414::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:bd:10:81:1c:48:8b:80:32:96:40:92:f7:d1:43:25:75:6d: d8:8f:96:e7:51:ed:83:e8:eb:39:fd:18:32:3c:00:54:25:60: 30:a7:09:45:ce:d2:99:01:e2:37:74:db:57:93:2b:18:de:73: 74:d0:94:71:33:96:5c:a8:e3:e5:bd:51:45:11:aa:38:83:24: d4:b9:1a:40:34:77:b2:e8:77:72:4d:98:44:67:e8:74:7a:52: 12:7d:0a:ed:e0:1f:8a:10:84:b5:29:a9:08:ef:d0:ca:eb:a8: d0:6a:1d:af:35:59:da:2e:08:14:5a:e7:29:57:ed:47:52:e1: 0b:ee:a2:eb:78:16:ba:ed:35:38:e7:94:ab:7f:d2:8d:25:6f: 01:4a:ba:1e:72:09:5e:9c:f5:98:4e:12:43:aa:1c:d0:49:68: df:dd:36:f6:15:88:14:15:33:db:0c:58:ed:d0:ab:74:0d:cf: 00:b1:bf:ec:22:2f:21:73:ca:9f:a0:64:d3:95:50:7e:2b:46: 3e:29:cb:5a:11:cb:32:8e:db:b6:d9:a3:ba:15:9c:66:a5:bc: cc:d7:bc:22:2d:94:6b:e0:69:aa:8a:06:8c:df:07:01:01:0a: 1d:47:f2:89:0b:d8:19:37:e9:48:ab:ca:81:51:33:67:c4:ae: 78:e1:fd:d2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEihNjC692ZXUjrcxkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyMjE0MDA1MloXDTI1MDQyMjEzMDA1MlowLzEtMCsGA1UEAxMk ODcxZDc1NjMtNjYxZS00MzBlLWI3ZTUtMmM3Y2RiYTc2NmViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhM6SC7eHi2kKjzeu7xqgYgd16oYo7LO8uoys KbsVHFjJwfVp7WpGOLpd9lAs8zdDiNp/8bQJj9aD/bdcn+yCxVC6t1iYs4kiIQTt OwblN4d74i3aKl7ZlriS4jvgIMGBAHdPbXfvXIXOwYiEABavYNTOOL5mQNiIdTrP jUIwLMqetTXgLxEkxGiaz5hzgvOWLBPfj2CeumqkxTXZT+1fJLKtzCwSfMpVHkM5 O6R/SfwxX9VK9x6/PKLokE55+ry1lXf1HhkDqz9/7/X3f6brKQfavtEz+zGrb9l0 GCj/Id2JGCIOiGGcc+iuNVs5YweNyIOnf7hp5lRLSbcn7Mhc1wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEivtg1I4my0Vx7o+50W9j0USnhyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTdjYjgyMTEtMjZiYy0z MzY0LTllMTAtNjg4MWYzOWI0ZTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUFAAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAu9EIEcSIuAMpZAkvfRQyV1bdiPludR7YPo6zn9GDI8AFQlYDCn CUXO0pkB4jd021eTKxjec3TQlHEzllyo4+W9UUURqjiDJNS5GkA0d7Lod3JNmERn 6HR6UhJ9Cu3gH4oQhLUpqQjv0MrrqNBqHa81WdouCBRa5ylX7UdS4Qvuout4Frrt NTjnlKt/0o0lbwFKuh5yCV6c9ZhOEkOqHNBJaN/dNvYViBQVM9sMWO3Qq3QNzwCx v+wiLyFzyp+gZNOVUH4rRj4py1oRyzKO27bZo7oVnGalvMzXvCItlGvgaaqKBozf BwEBCh1H8okL2Bk36UiryoFRM2fErnjh/dI= -----END CERTIFICATE-----Generated at Sat Apr 5 11:10:26 2025 by rpki-client