$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2039e59f-fb37-37bb-9a55-d2debfd5c615.roa File: 2039e59f-fb37-37bb-9a55-d2debfd5c615.roa (raw, json) Hash identifier: qPpZ7RdwyzSGpkgA9iYweXpGZAeKskyTUBfLlHeO7LA= Subject key identifier: 8F:1E:30:5C:16:C6:89:D1:6F:E4:5A:97:CC:F5:A2:69:94:C5:55:0C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848A9966585B0E2364F38039C40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2039e59f-fb37-37bb-9a55-d2debfd5c615.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 20940 IP address blocks: 2600:1488:a240::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:65:85:b0:e2:36:4f:38:03:9c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=70ea3920-44ff-4214-9da2-4aabdd7606ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:22:2b:48:0d:5b:1a:fa:f7:e1:de:59:bd:8e: b6:08:7f:9e:64:02:6d:15:37:aa:06:59:1c:23:81: e7:0d:8c:56:21:6d:9c:b2:5b:d0:b2:ae:9a:68:75: cf:b5:9f:64:48:e4:b4:3c:39:84:18:e5:e9:ed:16: 80:d7:ee:88:85:26:43:3e:49:4e:2e:0c:e6:82:48: 85:3d:0c:8b:99:17:d3:69:84:a3:e1:5b:7e:b2:ad: ae:e0:33:c2:c0:45:d1:6e:60:c6:ef:f7:e4:07:56: c7:2d:7b:d4:e9:7c:2a:d0:29:ab:13:52:1e:a9:fc: 07:4e:07:f6:7b:99:23:e4:b2:76:63:13:ce:d5:62: c6:93:4a:b5:50:bf:49:10:51:0c:5e:9f:8f:39:ba: b6:41:e9:fb:48:ee:93:60:c6:8b:ac:5f:6d:fa:4e: 0e:92:1d:a4:18:6e:aa:83:ec:1a:47:d8:ec:2f:ff: e7:39:56:e0:d9:a7:15:15:e9:e0:c9:00:d9:5c:95: f0:f7:25:60:76:f1:11:e0:f2:9e:be:ab:59:10:77: 89:6b:c8:d5:11:a8:f1:96:c2:2b:2b:3a:3f:f6:57: 1f:b4:8f:ea:4d:cd:8f:5f:97:fd:9f:e0:17:ee:a0: 61:56:47:bf:d0:20:80:5c:1c:f0:c3:92:ce:3d:ad: 09:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:1E:30:5C:16:C6:89:D1:6F:E4:5A:97:CC:F5:A2:69:94:C5:55:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2039e59f-fb37-37bb-9a55-d2debfd5c615.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1488:a240::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:d0:b2:d2:49:9e:ee:3a:d2:15:50:17:89:d0:f4:03:9f:02: 81:0f:58:7f:9a:67:15:61:0c:b6:de:7e:15:6d:53:e1:96:3a: 37:95:4e:f4:3a:35:e8:f8:a2:40:e7:df:52:b1:c8:af:65:24: 24:dd:67:c4:c8:ce:cc:10:7c:58:65:32:30:da:25:7e:10:0a: 7b:c8:f2:fd:e4:be:45:c5:81:49:d7:bb:d9:59:bc:96:b3:9a: e7:74:e2:57:ef:8b:73:b8:16:14:92:e7:88:2f:1c:f0:cf:f8: b2:00:11:ce:d9:72:15:61:dd:76:93:10:93:38:38:73:ff:59: 4a:84:05:48:c4:b3:01:9c:e0:dc:73:51:1e:41:3d:f8:35:6d: bf:9d:c2:88:38:83:a8:fd:28:54:33:b3:60:72:27:e6:f7:3c: bf:fc:fb:80:de:86:34:e6:87:84:24:12:0a:b7:11:1e:99:ea: 61:bb:cf:ba:51:e1:e7:e5:e7:17:9b:f6:08:a9:7b:3e:fa:7f: 9e:c0:e1:71:09:ee:97:9b:e6:f1:04:58:0f:90:5a:71:62:4a: 64:4f:fb:fe:df:ce:3b:28:ff:71:03:da:26:6d:fa:31:9c:8d: 73:29:70:23:ba:32:f8:ff:89:10:71:87:a1:83:a1:38:f4:5f: 16:94:dc:95 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiplmWFsOI2TzgDnEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk NzBlYTM5MjAtNDRmZi00MjE0LTlkYTItNGFhYmRkNzYwNmZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiIrSA1bGvr34d5ZvY62CH+eZAJtFTeqBlkc I4HnDYxWIW2cslvQsq6aaHXPtZ9kSOS0PDmEGOXp7RaA1+6IhSZDPklOLgzmgkiF PQyLmRfTaYSj4Vt+sq2u4DPCwEXRbmDG7/fkB1bHLXvU6Xwq0CmrE1IeqfwHTgf2 e5kj5LJ2YxPO1WLGk0q1UL9JEFEMXp+PObq2Qen7SO6TYMaLrF9t+k4Okh2kGG6q g+waR9jsL//nOVbg2acVFengyQDZXJXw9yVgdvER4PKevqtZEHeJa8jVEajxlsIr Kzo/9lcftI/qTc2PX5f9n+AX7qBhVke/0CCAXBzww5LOPa0JlQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFI8eMFwWxonRb+Ral8z1ommUxVUMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjAzOWU1OWYtZmIzNy0z N2JiLTlhNTUtZDJkZWJmZDVjNjE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUiKJA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACzQstJJnu460hVQF4nQ9AOfAoEPWH+aZxVhDLbefhVtU+GWOjeV TvQ6Nej4okDn31KxyK9lJCTdZ8TIzswQfFhlMjDaJX4QCnvI8v3kvkXFgUnXu9lZ vJazmud04lfvi3O4FhSS54gvHPDP+LIAEc7ZchVh3XaTEJM4OHP/WUqEBUjEswGc 4NxzUR5BPfg1bb+dwog4g6j9KFQzs2ByJ+b3PL/8+4DehjTmh4QkEgq3ER6Z6mG7 z7pR4efl5xeb9gipez76f57A4XEJ7peb5vEEWA+QWnFiSmRP+/7fzjso/3ED2iZt +jGcjXMpcCO6Mvj/iRBxh6GDoTj0XxaU3JU= -----END CERTIFICATE-----Generated at Sat Apr 5 12:33:20 2025 by rpki-client