$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/36cd7eb5-a8b8-39d5-8c15-792d095e13f7.roa File: 36cd7eb5-a8b8-39d5-8c15-792d095e13f7.roa (raw, json) Hash identifier: U1M1LTmy7A4ccNNdPb5Chyik9ekJG4A7eu0c/b9iEL4= Subject key identifier: 9F:E7:67:38:58:94:6F:83:0E:1C:B8:6D:8E:28:53:91:3A:2F:0B:61 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848A13627351F9AF6D68CA66D20 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/36cd7eb5-a8b8-39d5-8c15-792d095e13f7.roa Signing time: Wed 22 Jan 2025 14:00:52 +0000 ROA not before: Wed 22 Jan 2025 14:00:52 +0000 ROA not after: Tue 22 Apr 2025 13:00:52 +0000 asID: 20940 IP address blocks: 2600:1415:1c00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a1:36:27:35:1f:9a:f6:d6:8c:a6:6d:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 22 14:00:52 2025 GMT Not After : Apr 22 13:00:52 2025 GMT Subject: CN=6709c803-e120-4a16-a0d0-0e7d706421bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:18:35:a2:e0:25:1f:e5:30:ef:c5:cc:ad:08: 3f:c9:8c:38:c6:b6:a7:d8:7d:19:7b:f8:dc:f2:1f: f7:a8:69:c5:8f:b7:7a:ea:82:46:81:f6:5d:36:90: 4b:70:1c:c0:d2:b3:10:e3:85:63:d5:5e:88:f9:b1: ea:3b:04:3c:85:5d:54:a0:b5:38:75:9f:f0:7e:47: d6:d0:ed:06:6e:1f:d7:79:43:87:2a:d4:3d:02:7b: a9:13:bf:4e:2f:17:85:c3:c7:4c:98:0d:f3:d9:7f: 69:74:3f:4d:8f:57:19:a3:15:27:7c:d9:11:7a:ee: d0:a1:8e:95:45:b3:bc:6b:55:34:61:78:50:a6:da: b0:9d:31:e7:12:6a:b8:94:fc:d6:62:f8:39:88:18: d5:0a:85:de:d2:28:08:49:f8:f9:2e:4f:0a:66:96: 3b:3b:32:89:10:2b:a7:23:56:17:da:93:64:64:f4: fd:1b:f0:2b:b8:6e:97:d5:ac:0f:97:8f:9c:74:67: db:4a:83:bb:04:b0:b9:50:92:76:68:0d:50:43:0a: 85:60:e7:b3:a7:f3:72:a8:c0:d5:f2:f3:69:4a:1a: 4a:63:7e:f7:59:11:33:97:dc:e8:12:c7:af:1f:9b: 64:6a:75:21:fa:ee:e1:13:33:4e:85:fb:6d:f0:e8: 3b:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:E7:67:38:58:94:6F:83:0E:1C:B8:6D:8E:28:53:91:3A:2F:0B:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/36cd7eb5-a8b8-39d5-8c15-792d095e13f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1415:1c00::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:1f:5d:48:a6:3a:b9:c1:d7:87:51:f2:65:21:4a:21:41:1f: 2f:05:2b:77:33:ac:7d:60:30:a6:73:d8:80:22:7e:c7:de:8d: df:aa:95:5f:78:a5:ca:ba:31:03:6e:51:38:b6:6b:21:53:85: 2b:0c:1b:93:1b:66:a2:11:d4:fc:50:e1:f6:3b:6e:a0:a6:b7: a0:64:db:80:fb:36:2b:df:c6:ee:87:01:f6:81:d4:5c:0b:1a: 78:db:88:11:b4:34:8f:98:f2:b5:e3:12:55:55:fa:81:70:07: 63:86:23:4a:77:28:c8:b6:07:38:7f:c4:84:f1:56:7a:f3:ce: 67:10:2d:91:1a:93:f1:a7:d0:64:55:c7:6f:c1:0d:a1:af:7a: 1a:3e:d8:b4:73:b9:62:34:2d:52:88:e9:1a:72:c4:c4:e2:80: 6b:01:54:e1:f2:63:1f:e4:68:62:61:c4:fd:9e:ad:87:ec:b9: af:c0:51:5c:4c:7f:d6:4d:f4:c2:4f:27:e5:37:35:74:af:8c: 3d:1e:e8:e9:bc:93:c3:11:60:da:d3:22:4f:c9:4a:41:7a:63: ad:a8:8c:a1:54:17:7a:e7:c0:ef:a1:c1:1e:3b:79:8f:c9:60: 04:dd:3a:50:42:22:01:88:7b:25:53:b2:70:f3:e3:45:3e:94: ed:e4:0e:57 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEihNic1H5r21oymbSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyMjE0MDA1MloXDTI1MDQyMjEzMDA1MlowLzEtMCsGA1UEAxMk NjcwOWM4MDMtZTEyMC00YTE2LWEwZDAtMGU3ZDcwNjQyMWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBg1ouAlH+Uw78XMrQg/yYw4xran2H0Ze/jc 8h/3qGnFj7d66oJGgfZdNpBLcBzA0rMQ44Vj1V6I+bHqOwQ8hV1UoLU4dZ/wfkfW 0O0Gbh/XeUOHKtQ9AnupE79OLxeFw8dMmA3z2X9pdD9Nj1cZoxUnfNkReu7QoY6V RbO8a1U0YXhQptqwnTHnEmq4lPzWYvg5iBjVCoXe0igISfj5Lk8KZpY7OzKJECun I1YX2pNkZPT9G/AruG6X1awPl4+cdGfbSoO7BLC5UJJ2aA1QQwqFYOezp/NyqMDV 8vNpShpKY373WREzl9zoEsevH5tkanUh+u7hEzNOhftt8Og7dQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJ/nZzhYlG+DDhy4bY4oU5E6LwthMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzZjZDdlYjUtYThiOC0z OWQ1LThjMTUtNzkyZDA5NWUxM2Y3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUFRwA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHkfXUimOrnB14dR8mUhSiFBHy8FK3czrH1gMKZz2IAifsfejd+q lV94pcq6MQNuUTi2ayFThSsMG5MbZqIR1PxQ4fY7bqCmt6Bk24D7Nivfxu6HAfaB 1FwLGnjbiBG0NI+Y8rXjElVV+oFwB2OGI0p3KMi2Bzh/xITxVnrzzmcQLZEak/Gn 0GRVx2/BDaGveho+2LRzuWI0LVKI6RpyxMTigGsBVOHyYx/kaGJhxP2erYfsua/A UVxMf9ZN9MJPJ+U3NXSvjD0e6Om8k8MRYNrTIk/JSkF6Y62ojKFUF3rnwO+hwR47 eY/JYATdOlBCIgGIeyVTsnDz40U+lO3kDlc= -----END CERTIFICATE-----Generated at Sat Apr 5 10:52:18 2025 by rpki-client