$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/20b6cf57-bcf3-3dd6-85fe-b2aaa2a59a6e.roa File: 20b6cf57-bcf3-3dd6-85fe-b2aaa2a59a6e.roa (raw, json) Hash identifier: CLGsM/g8D8aIzZ0iFZbGuNe15gE4a9iWOU3Vxs3HRHY= Subject key identifier: D9:29:E0:87:30:8D:B3:D8:1D:B8:3C:57:AF:19:84:9C:03:A6:86:73 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848A1362B2A537A51D74FD48580 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/20b6cf57-bcf3-3dd6-85fe-b2aaa2a59a6e.roa Signing time: Wed 22 Jan 2025 14:00:52 +0000 ROA not before: Wed 22 Jan 2025 14:00:52 +0000 ROA not after: Tue 22 Apr 2025 13:00:52 +0000 asID: 20940 IP address blocks: 2600:1406:2e00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a1:36:2b:2a:53:7a:51:d7:4f:d4:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 22 14:00:52 2025 GMT Not After : Apr 22 13:00:52 2025 GMT Subject: CN=a7ac66a2-65b3-4eb2-98db-7a6c624ad6ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:10:62:e0:96:76:80:32:4a:aa:92:3b:92:28: 2f:45:95:81:9d:04:0c:b1:b3:c7:e8:ad:ab:f1:9f: 5f:e2:3c:a0:cb:1d:6a:9b:8b:90:5e:ce:01:c6:73: 61:a4:cf:bc:e2:a6:a0:7c:5d:f4:d9:09:3d:3a:62: 8f:3e:01:53:ac:4e:c7:cd:a6:0d:69:3b:39:a8:c1: ca:f6:5b:a4:b4:4a:4a:30:15:b1:9f:05:4d:ac:39: c9:92:16:ce:09:dd:26:4f:8e:ba:a1:6a:0a:dd:cb: 4c:82:28:df:36:5e:60:15:0b:c9:f1:77:03:76:50: f7:6f:17:7e:da:8f:09:3f:a6:e8:b0:fe:aa:85:38: 6c:55:14:96:e8:f5:cf:1c:54:3f:68:34:db:5b:e4: db:4f:cd:7d:dc:9a:93:47:62:c1:66:23:45:8b:21: d4:42:76:b1:e1:32:43:fa:ce:87:8a:77:09:3b:23: 05:c5:7d:64:03:c3:ad:05:da:0d:4a:90:42:2c:73: 1e:9e:8e:ef:6a:31:bf:55:c7:a0:ca:36:e9:3a:fe: 42:91:31:e0:d7:af:7c:cf:fa:3e:4e:5e:34:e4:6e: 6b:ff:cf:3d:fe:a0:e1:a0:aa:8f:e5:47:cc:56:11: d2:75:da:f8:28:6d:70:62:43:f3:9e:64:7a:20:e2: f7:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:29:E0:87:30:8D:B3:D8:1D:B8:3C:57:AF:19:84:9C:03:A6:86:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/20b6cf57-bcf3-3dd6-85fe-b2aaa2a59a6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1406:2e00::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:a4:5c:4b:56:4b:df:bd:df:f3:ce:3a:a4:3b:1b:2d:e6:df: 27:b3:30:57:d9:3c:60:c5:6c:5b:ef:c4:c4:e3:84:d5:cb:89: 81:92:19:9a:3a:e3:7c:56:ef:0b:c9:fa:04:5b:24:40:9d:2a: 4e:27:81:dc:af:fe:ff:0c:b4:52:5d:61:09:9f:de:56:42:46: dc:a7:50:6f:ff:a9:44:42:26:4f:48:da:1f:cd:74:ab:de:0b: bd:2f:5d:f0:e5:51:0c:3e:ef:2a:52:93:f3:27:1f:08:45:58: cd:4d:50:1d:44:30:10:e3:28:56:7f:91:58:65:dc:a4:49:69: 25:69:45:27:46:09:0f:90:b5:74:4d:67:31:21:7b:16:9e:07: 90:db:4c:43:c3:8e:75:57:0c:10:3c:46:57:61:f0:01:c6:6a: 40:f7:d8:3a:ea:ad:f9:98:40:7c:ae:5b:51:02:3a:0c:a7:7a: a5:ad:c2:27:0c:9d:e9:78:fa:13:8d:2d:72:27:04:4f:f4:13: b2:8c:f4:b5:90:c8:09:f1:b9:31:79:3a:d0:82:9d:32:78:4f: 9d:4e:6b:94:d9:f8:a8:f6:e5:dd:6e:cb:59:6d:52:1d:92:4c: 4c:bb:89:83:86:bb:8d:f8:36:cf:3b:a8:a9:b3:a5:3b:3a:cf: 8b:0d:39:ed -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEihNisqU3pR10/UhYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyMjE0MDA1MloXDTI1MDQyMjEzMDA1MlowLzEtMCsGA1UEAxMk YTdhYzY2YTItNjViMy00ZWIyLTk4ZGItN2E2YzYyNGFkNmVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRBi4JZ2gDJKqpI7kigvRZWBnQQMsbPH6K2r 8Z9f4jygyx1qm4uQXs4BxnNhpM+84qagfF302Qk9OmKPPgFTrE7HzaYNaTs5qMHK 9luktEpKMBWxnwVNrDnJkhbOCd0mT466oWoK3ctMgijfNl5gFQvJ8XcDdlD3bxd+ 2o8JP6bosP6qhThsVRSW6PXPHFQ/aDTbW+TbT8193JqTR2LBZiNFiyHUQnax4TJD +s6HincJOyMFxX1kA8OtBdoNSpBCLHMeno7vajG/VcegyjbpOv5CkTHg1698z/o+ Tl405G5r/889/qDhoKqP5UfMVhHSddr4KG1wYkPznmR6IOL32wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNkp4IcwjbPYHbg8V68ZhJwDpoZzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjBiNmNmNTctYmNmMy0z ZGQ2LTg1ZmUtYjJhYWEyYTU5YTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUBi4A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF2kXEtWS9+93/POOqQ7Gy3m3yezMFfZPGDFbFvvxMTjhNXLiYGS GZo643xW7wvJ+gRbJECdKk4ngdyv/v8MtFJdYQmf3lZCRtynUG//qURCJk9I2h/N dKveC70vXfDlUQw+7ypSk/MnHwhFWM1NUB1EMBDjKFZ/kVhl3KRJaSVpRSdGCQ+Q tXRNZzEhexaeB5DbTEPDjnVXDBA8Rldh8AHGakD32DrqrfmYQHyuW1ECOgyneqWt wicMnel4+hONLXInBE/0E7KM9LWQyAnxuTF5OtCCnTJ4T51Oa5TZ+Kj25d1uy1lt Uh2STEy7iYOGu434Ns87qKmzpTs6z4sNOe0= -----END CERTIFICATE-----Generated at Sat Apr 5 10:57:06 2025 by rpki-client