$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1b1822b6-ad25-3e76-897c-a3789e059e27.roa File: 1b1822b6-ad25-3e76-897c-a3789e059e27.roa (raw, json) Hash identifier: HTRpAxSEI4qRnMa4SCqfODZdFV49XumJNnthgJd/Jus= Subject key identifier: 70:23:A6:1C:13:C0:EA:32:31:C2:D0:94:E7:10:D3:0C:D1:0E:88:EB Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848A1362F16D9D41D72E7974B00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1b1822b6-ad25-3e76-897c-a3789e059e27.roa Signing time: Wed 22 Jan 2025 14:00:52 +0000 ROA not before: Wed 22 Jan 2025 14:00:52 +0000 ROA not after: Tue 22 Apr 2025 13:00:52 +0000 asID: 20940 IP address blocks: 2600:1408:17::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a1:36:2f:16:d9:d4:1d:72:e7:97:4b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 22 14:00:52 2025 GMT Not After : Apr 22 13:00:52 2025 GMT Subject: CN=d4b6a48d-d9d4-47d1-bd12-b83cb6207fc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:c4:0b:0c:24:04:ee:65:f3:09:3e:51:4e:3f: 3b:f7:58:a1:97:f5:e9:88:a9:b0:95:36:ad:84:cf: 26:f2:9e:50:e6:10:7e:40:df:47:f9:bd:4f:2f:02: 8b:8b:9a:e0:fb:0d:cc:5d:24:a7:36:8a:76:23:a5: 4c:49:aa:6f:81:02:dd:5c:9d:36:73:ef:d2:bc:bc: 56:3c:ff:3c:44:0e:39:9e:54:6f:aa:54:b7:60:4c: b6:8f:b2:d4:4a:a9:56:5a:6f:7e:8a:83:62:d4:00: 87:c7:a5:fc:76:6b:32:8a:08:40:ab:c4:42:4c:cc: 55:e1:d7:2d:ff:e6:ab:39:92:43:d9:39:ee:13:96: 8f:04:b5:8a:af:49:d3:d3:22:51:d6:11:69:18:ee: 33:3c:e8:e5:ba:2a:87:4f:30:5e:7e:47:0f:8d:9d: a9:8b:c5:fe:72:7a:24:87:c5:db:7d:e1:8d:c9:0a: 84:c9:b6:27:ae:34:5a:02:bb:a9:50:5e:a5:a2:80: d5:94:2f:9d:31:d2:71:4f:69:15:31:9e:16:01:c5: f1:90:68:11:97:69:64:4a:79:2b:55:cf:c5:85:e3: 39:d7:5a:ec:9b:af:7c:55:75:a5:31:65:22:7f:16: e6:48:c8:3b:72:b8:09:8a:a3:9e:15:25:14:11:46: ab:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:23:A6:1C:13:C0:EA:32:31:C2:D0:94:E7:10:D3:0C:D1:0E:88:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1b1822b6-ad25-3e76-897c-a3789e059e27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1408:17::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:42:af:9d:b1:36:7f:39:5f:7b:9e:a3:da:69:70:08:19:24: 1c:0e:c5:80:66:cd:e7:54:4b:4f:71:eb:52:c9:9d:a3:7e:08: 2d:a3:60:2a:98:9a:d5:b6:99:f5:8c:0b:e6:0c:6d:6b:2f:54: 32:6f:6b:3a:2e:45:ed:82:e8:8b:38:ba:a4:39:a7:03:b9:3e: 65:d3:cc:2f:2d:56:db:4e:5f:bc:0c:92:80:73:3e:fe:b0:d3: cb:b0:11:bb:37:46:ca:d5:9f:2c:b8:e6:b9:87:75:b4:6f:c0: bf:85:17:90:67:5c:93:b5:e5:4d:09:53:25:f6:03:c1:ab:40: 93:95:6a:08:c5:da:46:45:14:46:f9:be:5e:68:dc:97:2b:d8: ca:96:a3:77:f2:f5:9c:2f:fb:4d:ec:e1:87:ca:24:42:c8:23: 2b:e1:63:dd:e2:ca:35:b9:31:6a:0a:8d:ef:4d:9c:fb:51:14: 8f:2a:98:04:4b:41:5a:4c:72:b9:76:a2:51:16:1a:f7:1e:db: 72:77:41:77:b9:57:93:84:10:9b:d3:0e:ad:d0:66:9a:4a:d0: 96:4f:76:64:c5:7b:57:ec:3d:fb:e7:8e:a1:d2:b0:84:82:33: 26:c0:cf:e3:24:a7:8d:7a:bb:43:6a:e2:6d:37:0d:73:df:c9: e7:81:5e:8f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEihNi8W2dQdcueXSwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyMjE0MDA1MloXDTI1MDQyMjEzMDA1MlowLzEtMCsGA1UEAxMk ZDRiNmE0OGQtZDlkNC00N2QxLWJkMTItYjgzY2I2MjA3ZmM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsQLDCQE7mXzCT5RTj8791ihl/XpiKmwlTat hM8m8p5Q5hB+QN9H+b1PLwKLi5rg+w3MXSSnNop2I6VMSapvgQLdXJ02c+/SvLxW PP88RA45nlRvqlS3YEy2j7LUSqlWWm9+ioNi1ACHx6X8dmsyighAq8RCTMxV4dct /+arOZJD2TnuE5aPBLWKr0nT0yJR1hFpGO4zPOjluiqHTzBefkcPjZ2pi8X+cnok h8XbfeGNyQqEybYnrjRaArupUF6looDVlC+dMdJxT2kVMZ4WAcXxkGgRl2lkSnkr Vc/FheM511rsm698VXWlMWUifxbmSMg7crgJiqOeFSUUEUarpwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHAjphwTwOoyMcLQlOcQ0wzRDojrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWIxODIyYjYtYWQyNS0z ZTc2LTg5N2MtYTM3ODllMDU5ZTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUCAAX MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGNCr52xNn85X3ueo9ppcAgZJBwOxYBmzedUS09x61LJnaN+CC2j YCqYmtW2mfWMC+YMbWsvVDJvazouRe2C6Is4uqQ5pwO5PmXTzC8tVttOX7wMkoBz Pv6w08uwEbs3RsrVnyy45rmHdbRvwL+FF5BnXJO15U0JUyX2A8GrQJOVagjF2kZF FEb5vl5o3Jcr2MqWo3fy9Zwv+03s4YfKJELIIyvhY93iyjW5MWoKje9NnPtRFI8q mARLQVpMcrl2olEWGvce23J3QXe5V5OEEJvTDq3QZppK0JZPdmTFe1fsPfvnjqHS sISCMybAz+Mkp416u0Nq4m03DXPfyeeBXo8= -----END CERTIFICATE-----Generated at Sat Apr 5 10:57:08 2025 by rpki-client