$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/353a0bb9-f831-3b61-a76c-945e0d03ce8e.roa File: 353a0bb9-f831-3b61-a76c-945e0d03ce8e.roa (raw, json) Hash identifier: lW3bnD41+GUam4/A0qF7FykvlzFYVPR1uZgH5BrhZqE= Subject key identifier: 04:E8:53:91:A8:DC:71:08:ED:FA:EB:89:D1:3C:B9:63:A5:0B:5C:2B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848960B616AD89EB1F162FEDD00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/353a0bb9-f831-3b61-a76c-945e0d03ce8e.roa Signing time: Sat 18 Jan 2025 14:00:52 +0000 ROA not before: Sat 18 Jan 2025 14:00:52 +0000 ROA not after: Fri 18 Apr 2025 13:00:52 +0000 asID: 20940 IP address blocks: 2600:140f:7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:96:0b:61:6a:d8:9e:b1:f1:62:fe:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 18 14:00:52 2025 GMT Not After : Apr 18 13:00:52 2025 GMT Subject: CN=33026985-0eb9-4635-8209-27fa8c76d4a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:01:ef:83:0f:05:f5:f2:69:b2:b4:23:7b:d3: e4:77:df:29:90:70:48:d3:e4:fa:8f:87:14:34:7f: c7:0a:30:44:dd:3a:ad:d5:00:b3:f3:09:be:4c:62: b2:31:64:cc:cf:94:88:76:6c:cf:64:fd:af:a3:38: 37:2f:1b:69:84:b9:a8:b1:50:02:cd:61:70:48:f1: ef:b3:99:7d:3a:89:e9:bd:0c:d2:06:0a:5f:61:da: 74:26:40:72:d0:cd:02:37:17:0d:48:af:9d:20:4c: be:02:b4:bd:9e:5a:ce:7d:b9:29:6d:d2:2f:9a:3e: 28:1f:85:06:b4:c4:99:41:87:ee:20:0e:6c:00:10: e7:89:45:7e:77:be:2d:44:4f:07:73:fe:8c:12:62: f8:c5:b1:4f:0d:bf:8e:55:59:14:43:30:98:96:00: 2b:2d:7e:b0:40:76:90:d3:fb:76:c8:53:ec:3a:0a: e7:4a:77:cf:a8:82:69:fd:66:ab:bc:3c:fb:e0:c4: 3d:78:d6:53:1b:7d:ea:7e:18:cb:21:fc:5f:3e:9d: 9e:a6:20:f1:f9:79:22:50:c0:55:85:2e:b6:72:05: 2a:ef:4b:e2:6f:b1:7f:fd:62:fa:a1:c2:10:98:35: 8b:3c:ff:21:1d:63:f0:0e:70:78:b1:28:41:8e:bf: ae:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:E8:53:91:A8:DC:71:08:ED:FA:EB:89:D1:3C:B9:63:A5:0B:5C:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/353a0bb9-f831-3b61-a76c-945e0d03ce8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:140f:7::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:d4:51:5e:58:ba:4a:46:d6:e2:ce:d8:94:34:1d:12:bf:62: 1e:5a:79:de:51:08:2c:98:6a:61:d6:f8:31:83:ec:cf:2e:97: 14:e1:1b:d4:b8:da:43:be:d2:13:68:13:36:1c:72:3f:cb:7f: 17:99:5f:28:a0:41:24:8a:52:5e:4c:17:ff:f1:29:d8:33:4d: 7b:28:a8:7a:aa:37:29:6d:e7:51:71:e1:6d:67:24:07:73:d4: f9:c7:f7:63:9b:85:56:c1:c2:26:b6:1c:70:d7:7b:53:30:85: 57:17:0d:81:0c:c0:f0:0b:f7:92:2e:fc:72:b5:94:7f:96:d7: 79:5c:a8:ac:b2:ec:08:00:5c:22:7b:e9:39:a5:e4:f6:fc:b6: 6d:04:b0:21:1d:f7:ca:8c:59:a5:af:c0:93:b1:1f:10:25:86: 02:67:dc:62:17:61:f7:8d:00:0e:5b:66:3d:42:97:36:60:05: 73:01:49:10:af:3d:0a:79:88:58:35:21:4d:08:4c:0d:2c:90: fc:d7:e9:a5:b0:7d:95:17:d3:6d:06:19:55:43:2a:dc:13:59: 62:3d:9b:24:e1:e0:05:a1:31:0a:cc:ef:bb:9d:d2:06:e1:77: 91:0c:18:f3:4f:82:48:80:b5:c5:75:fc:e0:dc:ca:6b:39:e4: f9:5d:75:82 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiWC2Fq2J6x8WL+3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDExODE0MDA1MloXDTI1MDQxODEzMDA1MlowLzEtMCsGA1UEAxMk MzMwMjY5ODUtMGViOS00NjM1LTgyMDktMjdmYThjNzZkNGE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiAHvgw8F9fJpsrQje9Pkd98pkHBI0+T6j4cU NH/HCjBE3Tqt1QCz8wm+TGKyMWTMz5SIdmzPZP2vozg3LxtphLmosVACzWFwSPHv s5l9OonpvQzSBgpfYdp0JkBy0M0CNxcNSK+dIEy+ArS9nlrOfbkpbdIvmj4oH4UG tMSZQYfuIA5sABDniUV+d74tRE8Hc/6MEmL4xbFPDb+OVVkUQzCYlgArLX6wQHaQ 0/t2yFPsOgrnSnfPqIJp/WarvDz74MQ9eNZTG33qfhjLIfxfPp2epiDx+XkiUMBV hS62cgUq70vib7F//WL6ocIQmDWLPP8hHWPwDnB4sShBjr+uywIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAToU5Go3HEI7frridE8uWOlC1wrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzUzYTBiYjktZjgzMS0z YjYxLWE3NmMtOTQ1ZTBkMDNjZThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUDwAH MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFTUUV5YukpG1uLO2JQ0HRK/Yh5aed5RCCyYamHW+DGD7M8ulxTh G9S42kO+0hNoEzYccj/LfxeZXyigQSSKUl5MF//xKdgzTXsoqHqqNylt51Fx4W1n JAdz1PnH92ObhVbBwia2HHDXe1MwhVcXDYEMwPAL95Iu/HK1lH+W13lcqKyy7AgA XCJ76Tml5Pb8tm0EsCEd98qMWaWvwJOxHxAlhgJn3GIXYfeNAA5bZj1ClzZgBXMB SRCvPQp5iFg1IU0ITA0skPzX6aWwfZUX020GGVVDKtwTWWI9myTh4AWhMQrM77ud 0gbhd5EMGPNPgkiAtcV1/ODcyms55PlddYI= -----END CERTIFICATE-----Generated at Sat Apr 5 12:13:05 2025 by rpki-client