$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/34415e7b-14dd-3fe8-b0a8-bb1c8d134d91.roa File: 34415e7b-14dd-3fe8-b0a8-bb1c8d134d91.roa (raw, json) Hash identifier: PJzVi7Am9PfVk9P2LtKYYd1x1FhH2kDMg5t0SA2Kw5k= Subject key identifier: 65:2E:FC:68:C5:22:C7:41:A9:BB:2F:25:16:E6:ED:AD:68:7E:ED:36 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848AC60D9382F0D0DB5BB48F000 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/34415e7b-14dd-3fe8-b0a8-bb1c8d134d91.roa Signing time: Sun 26 Jan 2025 14:00:52 +0000 ROA not before: Sun 26 Jan 2025 14:00:52 +0000 ROA not after: Sat 26 Apr 2025 13:00:52 +0000 asID: 17511 IP address blocks: 2600:140b:1000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ac:60:d9:38:2f:0d:0d:b5:bb:48:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 26 14:00:52 2025 GMT Not After : Apr 26 13:00:52 2025 GMT Subject: CN=f5690db7-c6b1-4980-ae7d-f09c36dd5aa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:7c:cf:c4:27:1e:99:6f:22:9d:b2:50:4e:6b: 36:96:f0:a8:f5:be:71:f2:fe:63:36:be:c9:2f:9f: d2:40:03:93:ad:15:71:02:d9:7d:1e:47:3c:9c:a8: 1f:5a:65:1a:ec:0b:49:9b:01:66:ec:3f:5e:42:31: ce:0b:cd:00:fd:b4:86:d1:40:00:86:1e:57:aa:8f: 72:78:a0:28:78:85:da:ef:9e:85:f7:ec:4d:dd:e3: ce:dc:cb:36:30:ae:b5:9d:33:28:92:e7:4c:ff:8a: e8:20:30:b5:25:73:e2:0f:e0:b3:e8:93:2e:e3:7e: 90:29:c0:3b:17:81:fa:32:7f:fc:f2:95:92:2c:e0: 92:15:43:f5:9f:7f:74:40:82:67:21:e6:bd:01:fc: 80:e4:af:43:36:76:d8:01:d4:da:2a:e4:52:4e:8f: c6:34:fb:01:75:f3:5f:ea:86:12:2f:20:fb:cb:b3: 22:06:59:68:4c:25:db:a1:a8:75:50:ad:e2:bb:9b: db:a6:92:04:b4:78:5d:9d:90:dc:8a:76:40:7f:5f: d7:0d:c3:31:f4:a2:6c:1c:92:e6:ce:9c:f2:6d:e4: bb:04:50:8f:cb:49:3b:84:44:96:9e:46:65:5a:5a: 9f:51:6e:10:97:f3:71:1d:e6:bd:37:45:4b:64:46: 70:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:2E:FC:68:C5:22:C7:41:A9:BB:2F:25:16:E6:ED:AD:68:7E:ED:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/34415e7b-14dd-3fe8-b0a8-bb1c8d134d91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:140b:1000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:24:1c:43:21:d5:3b:ca:dd:75:9c:16:2e:fe:22:1f:78:2f: 86:9d:22:cb:dd:e6:1b:d4:42:be:ae:ff:d6:e3:b0:0a:e8:3d: e0:65:ca:40:df:b9:80:2a:72:1b:61:a3:44:f1:f4:d0:4e:a5: 0a:27:87:8a:b7:da:30:24:8f:11:b0:cf:d5:bd:d7:f6:09:14: 14:2f:1b:01:29:b9:a6:8a:84:16:bb:89:37:6c:cc:77:93:f4: 02:8d:7d:f2:bb:8f:d8:5b:4e:16:2c:55:ce:06:77:ff:b7:e6: 6a:27:d7:25:fe:ba:71:c2:a4:11:93:60:b4:3d:e3:12:46:b6: da:d7:95:72:c3:a3:7a:e5:cb:d6:67:f5:2c:64:d5:d3:f0:fd: a8:ec:f6:e1:6a:dc:6c:21:c6:42:e7:a4:fe:e2:75:32:eb:21: 81:fc:6f:fe:9c:a3:16:29:ec:ef:7a:52:4a:b8:3c:79:c2:60: 39:3b:f9:23:e4:aa:5c:6f:b6:96:b9:bb:db:5f:cc:b5:83:2d: 52:21:db:5a:d8:a0:88:b8:f1:6f:d5:3e:59:05:be:df:01:66: 21:a8:dd:5b:e9:5a:ec:27:f5:66:31:fa:15:e1:63:5d:0b:15: 05:e8:8c:f9:5e:24:3f:b3:04:4f:78:0e:48:f0:ea:1c:8f:f4: fb:bd:93:83 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEisYNk4Lw0NtbtI8AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyNjE0MDA1MloXDTI1MDQyNjEzMDA1MlowLzEtMCsGA1UEAxMk ZjU2OTBkYjctYzZiMS00OTgwLWFlN2QtZjA5YzM2ZGQ1YWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXzPxCcemW8inbJQTms2lvCo9b5x8v5jNr7J L5/SQAOTrRVxAtl9Hkc8nKgfWmUa7AtJmwFm7D9eQjHOC80A/bSG0UAAhh5Xqo9y eKAoeIXa756F9+xN3ePO3Ms2MK61nTMokudM/4roIDC1JXPiD+Cz6JMu436QKcA7 F4H6Mn/88pWSLOCSFUP1n390QIJnIea9AfyA5K9DNnbYAdTaKuRSTo/GNPsBdfNf 6oYSLyD7y7MiBlloTCXboah1UK3iu5vbppIEtHhdnZDcinZAf1/XDcMx9KJsHJLm zpzybeS7BFCPy0k7hESWnkZlWlqfUW4Ql/NxHea9N0VLZEZwlQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGUu/GjFIsdBqbsvJRbm7a1ofu02MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzQ0MTVlN2ItMTRkZC0z ZmU4LWIwYTgtYmIxYzhkMTM0ZDkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUCxAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFQkHEMh1TvK3XWcFi7+Ih94L4adIsvd5hvUQr6u/9bjsAroPeBl ykDfuYAqchtho0Tx9NBOpQonh4q32jAkjxGwz9W91/YJFBQvGwEpuaaKhBa7iTds zHeT9AKNffK7j9hbThYsVc4Gd/+35mon1yX+unHCpBGTYLQ94xJGttrXlXLDo3rl y9Zn9Sxk1dPw/ajs9uFq3GwhxkLnpP7idTLrIYH8b/6coxYp7O96Ukq4PHnCYDk7 +SPkqlxvtpa5u9tfzLWDLVIh21rYoIi48W/VPlkFvt8BZiGo3VvpWuwn9WYx+hXh Y10LFQXojPleJD+zBE94Dkjw6hyP9Pu9k4M= -----END CERTIFICATE-----Generated at Fri Mar 14 15:03:25 2025 by rpki-client