$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1f60bbd7-b0ef-3f41-838f-0e52d08fc4c7.roa File: 1f60bbd7-b0ef-3f41-838f-0e52d08fc4c7.roa (raw, json) Hash identifier: 5UElaQ0n5m+m6ee7BLrIujQmhmKu3NtvoKE/xBgh3fE= Subject key identifier: 88:24:79:A0:16:0E:29:0B:BD:DB:8D:8E:A0:75:B7:FB:6C:8C:28:5E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848AC60D911267440CC26A2BA80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1f60bbd7-b0ef-3f41-838f-0e52d08fc4c7.roa Signing time: Sun 26 Jan 2025 14:00:52 +0000 ROA not before: Sun 26 Jan 2025 14:00:52 +0000 ROA not after: Sat 26 Apr 2025 13:00:52 +0000 asID: 35994 IP address blocks: 2600:141b:b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ac:60:d9:11:26:74:40:cc:26:a2:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 26 14:00:52 2025 GMT Not After : Apr 26 13:00:52 2025 GMT Subject: CN=20d6be43-c6e9-4443-8479-2b37eaa64c4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:ee:21:fb:16:44:d5:14:34:9b:3c:30:cf:64: d7:88:e7:12:16:3c:aa:7e:00:dd:c8:c1:5d:fc:f6: 69:cb:bd:d8:0d:42:9b:a9:05:49:55:2f:47:c2:2e: 4e:cd:fb:fe:b9:25:f3:e5:00:99:8f:e9:bb:ea:9a: fd:cc:28:73:f4:2a:98:39:ff:9e:65:fd:51:57:4b: 33:7c:4f:2e:98:87:e4:8b:5a:39:81:02:25:d5:7b: 8e:7c:e7:db:36:3b:0d:00:c5:37:7d:1b:dc:2a:ad: 26:76:a4:6f:bc:c9:65:b2:84:2d:e2:9f:5a:e2:76: e8:82:42:79:ba:a5:43:c8:9f:64:87:88:e9:4a:e4: 7e:c0:6c:20:63:3c:37:48:96:4c:83:82:39:84:d7: b4:f7:70:36:e1:33:a3:39:6a:9d:1e:14:6b:da:e0: a7:f9:6f:7a:59:3b:37:62:33:25:3e:3d:39:06:5d: 08:a6:5f:a3:ba:f6:52:86:97:59:a9:13:2b:d9:fc: 22:9f:03:66:1a:c4:a8:60:c0:c7:8e:b3:bf:a8:fd: 43:74:75:43:e2:d0:c1:7a:70:47:67:a8:5c:81:06: 07:76:01:b2:af:e8:cb:09:de:f8:a7:58:d3:2d:1e: 54:76:5c:5a:4e:3c:fb:36:58:71:82:3a:58:04:4f: 04:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:24:79:A0:16:0E:29:0B:BD:DB:8D:8E:A0:75:B7:FB:6C:8C:28:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1f60bbd7-b0ef-3f41-838f-0e52d08fc4c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:141b:b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:58:f5:1b:53:26:4c:22:c5:ee:5e:c9:c0:38:4b:2d:0f:6d: 72:fa:ed:1f:bd:b1:f6:00:70:90:06:0c:4b:6b:89:e6:b2:3d: 95:31:db:e2:b3:6b:8f:79:bd:d2:ec:15:92:fc:90:b7:43:97: d1:a1:8a:93:82:38:2c:34:05:ff:0a:1b:d5:d1:19:b8:7e:e4: 64:98:7f:b6:31:e1:7c:4f:fd:79:e6:5f:30:a0:6e:97:bb:b2: ca:47:1c:5b:37:8e:8e:90:2f:2c:ed:b6:0f:75:b9:67:e6:a6: 61:6b:9d:fd:43:c3:84:4c:39:68:18:e4:53:9d:b7:93:83:f4: af:e3:f3:a6:91:c7:10:6b:93:b8:5c:2b:29:f5:1f:ea:da:af: 02:6e:91:9c:f6:2a:49:7f:f4:63:a1:37:c2:21:12:9f:b6:82: 21:93:50:9e:93:c4:c4:77:fd:79:f9:5a:d8:70:4e:52:13:d2: 22:0e:3c:a8:af:60:70:bf:b1:b9:3e:2b:fa:1d:e5:3c:87:18: 4d:7a:27:a5:e8:b9:a1:b6:dd:89:ce:c4:0d:23:72:74:e2:de: 52:e1:2f:0d:0a:37:7b:5e:bc:c0:07:f2:a4:29:05:29:6b:12: 42:15:a9:ef:1d:bd:57:f8:7b:ea:7a:59:e4:c7:75:b2:b4:a8: 68:8a:e6:ca -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEisYNkRJnRAzCaiuoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyNjE0MDA1MloXDTI1MDQyNjEzMDA1MlowLzEtMCsGA1UEAxMk MjBkNmJlNDMtYzZlOS00NDQzLTg0NzktMmIzN2VhYTY0YzRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+4h+xZE1RQ0mzwwz2TXiOcSFjyqfgDdyMFd /PZpy73YDUKbqQVJVS9Hwi5Ozfv+uSXz5QCZj+m76pr9zChz9CqYOf+eZf1RV0sz fE8umIfki1o5gQIl1XuOfOfbNjsNAMU3fRvcKq0mdqRvvMllsoQt4p9a4nbogkJ5 uqVDyJ9kh4jpSuR+wGwgYzw3SJZMg4I5hNe093A24TOjOWqdHhRr2uCn+W96WTs3 YjMlPj05Bl0Ipl+juvZShpdZqRMr2fwinwNmGsSoYMDHjrO/qP1DdHVD4tDBenBH Z6hcgQYHdgGyr+jLCd74p1jTLR5UdlxaTjz7NlhxgjpYBE8EhQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIgkeaAWDikLvduNjqB1t/tsjCheMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWY2MGJiZDctYjBlZi0z ZjQxLTgzOGYtMGU1MmQwOGZjNGM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUGwAL MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJNY9RtTJkwixe5eycA4Sy0PbXL67R+9sfYAcJAGDEtrieayPZUx 2+Kza495vdLsFZL8kLdDl9GhipOCOCw0Bf8KG9XRGbh+5GSYf7Yx4XxP/XnmXzCg bpe7sspHHFs3jo6QLyzttg91uWfmpmFrnf1Dw4RMOWgY5FOdt5OD9K/j86aRxxBr k7hcKyn1H+rarwJukZz2Kkl/9GOhN8IhEp+2giGTUJ6TxMR3/Xn5WthwTlIT0iIO PKivYHC/sbk+K/od5TyHGE16J6XouaG23YnOxA0jcnTi3lLhLw0KN3tevMAH8qQp BSlrEkIVqe8dvVf4e+p6WeTHdbK0qGiK5so= -----END CERTIFICATE-----Generated at Sat Apr 5 10:53:35 2025 by rpki-client