$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/359be0a6-df37-3b7f-955e-bf7fa5fd86f4.roa File: 359be0a6-df37-3b7f-955e-bf7fa5fd86f4.roa (raw, json) Hash identifier: ZUrgJrfX6gsqx7WM5OeIOJQJTdTfDnxWN5PoIfW1c4I= Subject key identifier: C8:E9:6B:1B:FD:93:BF:DF:06:83:2E:E8:81:3B:5E:7D:45:51:45:0E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848FD56A915D5B3BE55C9C68900 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/359be0a6-df37-3b7f-955e-bf7fa5fd86f4.roa Signing time: Mon 24 Feb 2025 14:00:52 +0000 ROA not before: Mon 24 Feb 2025 14:00:52 +0000 ROA not after: Sun 25 May 2025 13:00:52 +0000 asID: 12222 IP address blocks: 2001:4878:4321::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:56:a9:15:d5:b3:be:55:c9:c6:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 24 14:00:52 2025 GMT Not After : May 25 13:00:52 2025 GMT Subject: CN=aa09b5e1-f1c7-40c6-b0bd-41d273651791 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:1b:9a:4f:e6:00:d5:1d:86:47:43:1e:a6:2d: 2e:eb:9c:ea:c3:01:7e:a1:5c:ab:bd:e6:cc:63:c5: 0d:f6:6d:f3:e7:76:57:72:5f:10:9b:2c:e7:42:09: 82:63:7b:38:0f:ae:e1:96:79:18:32:9b:22:2e:f2: 60:c0:03:39:1a:62:80:ff:23:72:50:46:b8:11:da: 20:53:1b:26:92:4d:a8:a7:d7:b9:47:03:e7:bf:ca: b5:c0:7b:d4:32:82:4a:8c:28:9c:2f:ce:e6:1c:eb: 80:04:b6:e5:a9:f3:d6:66:53:62:c2:25:09:87:28: 15:46:d4:16:7b:14:93:17:b6:6d:44:72:24:c5:6c: 14:53:e0:20:62:03:a0:7e:5b:f2:0a:14:2f:62:64: 18:15:65:63:9c:c3:8b:ad:d2:52:55:5c:96:94:21: e4:b8:64:dd:a1:62:fd:9c:8a:7c:9b:f4:d5:2f:50: 05:ae:64:c0:c5:c7:3d:82:6a:aa:cb:94:37:b9:f0: bf:3e:31:8c:81:7b:eb:bd:56:be:91:8d:a3:d4:f3: a3:41:83:f0:21:6b:7e:42:33:b8:d8:b6:12:46:5c: 54:e3:a8:e8:be:1c:a5:15:49:64:93:6c:27:af:6c: 86:3e:65:8e:d5:e8:86:56:f0:98:7e:c9:15:da:e9: a3:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:E9:6B:1B:FD:93:BF:DF:06:83:2E:E8:81:3B:5E:7D:45:51:45:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/359be0a6-df37-3b7f-955e-bf7fa5fd86f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2001:4878:4321::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:b3:24:fb:f1:31:f5:e9:b6:d9:20:d7:e4:78:9d:f9:2e:58: 30:33:8c:f6:2b:da:79:d2:6c:2f:06:e6:2d:40:94:a2:67:b0: d4:a2:5f:ee:6e:4c:d0:a2:4b:0b:b6:08:04:ec:49:a6:ad:98: 95:34:5d:8d:c9:1c:67:c1:12:e6:64:92:f5:20:8d:ad:81:65: 19:27:d7:ad:97:e9:31:18:85:81:09:6d:dc:d5:32:10:a0:aa: 74:c5:b0:96:41:59:f1:c3:3e:e2:3c:89:d3:1b:9e:e4:95:f2: 9e:17:b1:a8:d1:d0:0a:f6:19:d0:a1:65:9d:3f:46:7c:74:cb: ff:60:69:1e:51:03:b5:6c:a9:11:b2:0a:b3:54:9d:7a:8c:3f: e7:88:a4:b5:82:58:ad:ad:8c:8e:ab:e0:e7:b6:be:8e:dc:3e: c4:b4:6c:8c:26:f2:69:24:51:da:bb:d0:82:5a:58:6e:30:41: b6:01:7d:1a:41:fb:63:ea:44:4f:1c:01:eb:76:ba:e3:2c:01: 53:a2:0f:cc:f9:b2:f4:eb:e1:b0:95:a2:a0:bb:fb:50:78:f0: 16:86:dc:b8:40:02:f8:b2:ee:76:0f:4d:a7:ea:87:70:b5:77: c3:fc:77:4c:e8:10:3b:0b:77:b3:06:27:84:7c:42:c5:35:18: f7:e5:24:4a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj9VqkV1bO+VcnGiQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk YWEwOWI1ZTEtZjFjNy00MGM2LWIwYmQtNDFkMjczNjUxNzkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRuaT+YA1R2GR0Mepi0u65zqwwF+oVyrvebM Y8UN9m3z53ZXcl8QmyznQgmCY3s4D67hlnkYMpsiLvJgwAM5GmKA/yNyUEa4Edog Uxsmkk2op9e5RwPnv8q1wHvUMoJKjCicL87mHOuABLblqfPWZlNiwiUJhygVRtQW exSTF7ZtRHIkxWwUU+AgYgOgflvyChQvYmQYFWVjnMOLrdJSVVyWlCHkuGTdoWL9 nIp8m/TVL1AFrmTAxcc9gmqqy5Q3ufC/PjGMgXvrvVa+kY2j1POjQYPwIWt+QjO4 2LYSRlxU46jovhylFUlkk2wnr2yGPmWO1eiGVvCYfskV2umj3QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMjpaxv9k7/fBoMu6IE7Xn1FUUUOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzU5YmUwYTYtZGYzNy0z YjdmLTk1NWUtYmY3ZmE1ZmQ4NmY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIeEMh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACmzJPvxMfXpttkg1+R4nfkuWDAzjPYr2nnSbC8G5i1AlKJnsNSi X+5uTNCiSwu2CATsSaatmJU0XY3JHGfBEuZkkvUgja2BZRkn162X6TEYhYEJbdzV MhCgqnTFsJZBWfHDPuI8idMbnuSV8p4XsajR0Ar2GdChZZ0/Rnx0y/9gaR5RA7Vs qRGyCrNUnXqMP+eIpLWCWK2tjI6r4Oe2vo7cPsS0bIwm8mkkUdq70IJaWG4wQbYB fRpB+2PqRE8cAet2uuMsAVOiD8z5svTr4bCVoqC7+1B48BaG3LhAAviy7nYPTafq h3C1d8P8d0zoEDsLd7MGJ4R8QsU1GPflJEo= -----END CERTIFICATE-----Generated at Sat Apr 5 10:52:41 2025 by rpki-client