$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/36d040ee-ad5a-3a4b-afd9-81b07b8c855e.roa File: 36d040ee-ad5a-3a4b-afd9-81b07b8c855e.roa (raw, json) Hash identifier: /5G52+Ywjwv8xRJ24sDu2ertrThcEI/IBvXvxkt8Iyo= Subject key identifier: 3B:5E:B6:D8:31:A7:B5:7F:A8:7C:06:FB:8E:17:79:67:46:EC:CE:49 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848A1363062164658F67B452180 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/36d040ee-ad5a-3a4b-afd9-81b07b8c855e.roa Signing time: Wed 22 Jan 2025 14:00:52 +0000 ROA not before: Wed 22 Jan 2025 14:00:52 +0000 ROA not after: Tue 22 Apr 2025 13:00:52 +0000 asID: 20940 IP address blocks: 2600:140a:7000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a1:36:30:62:16:46:58:f6:7b:45:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 22 14:00:52 2025 GMT Not After : Apr 22 13:00:52 2025 GMT Subject: CN=4750f208-52f4-4300-ae38-8ecdec296cd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f5:e4:e7:09:b1:65:e8:85:6d:42:58:9b:be: af:99:be:25:9e:6d:09:ed:bd:77:a5:fc:2c:b9:84: 3e:01:ce:6b:ef:6b:a1:b7:2c:ae:47:e7:55:41:6f: 3c:f9:1a:4e:12:63:66:3c:23:5c:40:3e:21:7b:7f: 5c:62:10:65:aa:96:4f:d8:07:6e:2e:85:32:8a:aa: 52:41:f6:9a:4d:42:1f:fd:17:fe:30:db:5c:92:ff: 2a:b5:97:b8:0f:b8:43:89:7d:62:c3:f9:b2:27:cc: 65:6d:c7:b6:7a:89:ef:25:35:23:fe:b9:c1:de:18: 56:d2:4d:a7:7a:e6:f2:bd:ee:0c:48:8b:da:2b:cb: f0:dd:04:b7:09:38:9a:e6:ce:b5:44:30:08:87:7a: 18:2f:20:c2:7b:b6:88:b6:11:8a:8e:6a:01:b9:96: f6:82:11:2f:23:81:da:a6:43:69:57:f0:1e:fc:f6: a4:da:96:35:fb:94:95:7f:82:4c:3e:cf:04:b9:a7: 19:58:49:f0:fa:80:d9:0c:67:15:3c:28:e8:fb:d2: fa:61:86:c4:6c:6d:c7:c8:8c:59:bc:01:c3:0d:dc: c7:4c:bd:c8:aa:5e:ad:92:f9:c2:32:2e:27:7b:e8: 8d:f4:8b:32:fc:63:fe:e4:58:ca:70:21:19:5a:89: 0c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:5E:B6:D8:31:A7:B5:7F:A8:7C:06:FB:8E:17:79:67:46:EC:CE:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/36d040ee-ad5a-3a4b-afd9-81b07b8c855e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:140a:7000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:d7:f9:f9:a1:03:15:81:7e:9a:50:ea:e5:e0:c2:f4:82:93: f9:a5:83:e8:71:0f:51:39:a2:a2:7d:53:45:a2:be:55:0e:a3: d6:39:cd:43:9d:b0:c7:9a:25:2f:a7:5d:0b:02:1c:98:d3:37: f3:ca:ee:30:9a:01:c9:5c:ec:d9:e0:05:71:30:33:84:f3:1d: be:f7:28:3f:da:1b:7e:42:2c:5f:b7:9a:eb:c2:39:01:53:96: b3:8d:27:f3:b6:92:43:50:b1:79:a3:11:65:6c:9a:5d:d4:16: cb:a0:72:3f:da:5e:1a:bb:79:91:b1:47:3e:0f:5d:38:03:9f: d2:79:ef:87:d7:3b:94:de:f8:46:af:af:e8:85:47:b9:6d:1c: f7:d2:b2:28:b8:c1:70:83:0b:bd:24:80:b5:e8:c7:80:b3:56: d5:a8:fc:f0:5d:82:f4:3c:ff:9b:7b:70:fa:55:f4:46:b6:7c: f1:67:ee:4e:e7:ce:ad:b4:7d:d9:a8:8e:a1:8f:a4:d1:8b:da: dd:94:78:41:8b:ba:54:e6:aa:d2:b5:0a:9b:86:14:6e:49:b1: 79:7a:a5:d8:8c:5f:66:9c:13:b7:62:d4:a8:46:f3:7f:81:2f: ba:34:af:54:f9:0a:5f:fd:b0:3e:dc:3a:50:a6:3a:5c:00:e8: 87:4d:c5:ad -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEihNjBiFkZY9ntFIYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyMjE0MDA1MloXDTI1MDQyMjEzMDA1MlowLzEtMCsGA1UEAxMk NDc1MGYyMDgtNTJmNC00MzAwLWFlMzgtOGVjZGVjMjk2Y2QyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfXk5wmxZeiFbUJYm76vmb4lnm0J7b13pfws uYQ+Ac5r72uhtyyuR+dVQW88+RpOEmNmPCNcQD4he39cYhBlqpZP2AduLoUyiqpS QfaaTUIf/Rf+MNtckv8qtZe4D7hDiX1iw/myJ8xlbce2eonvJTUj/rnB3hhW0k2n eubyve4MSIvaK8vw3QS3CTia5s61RDAIh3oYLyDCe7aIthGKjmoBuZb2ghEvI4Ha pkNpV/Ae/Pak2pY1+5SVf4JMPs8EuacZWEnw+oDZDGcVPCjo+9L6YYbEbG3HyIxZ vAHDDdzHTL3Iql6tkvnCMi4ne+iN9Isy/GP+5FjKcCEZWokMbQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDtettgxp7V/qHwG+44XeWdG7M5JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzZkMDQwZWUtYWQ1YS0z YTRiLWFmZDktODFiMDdiOGM4NTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUCnAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD3X+fmhAxWBfppQ6uXgwvSCk/mlg+hxD1E5oqJ9U0WivlUOo9Y5 zUOdsMeaJS+nXQsCHJjTN/PK7jCaAclc7NngBXEwM4TzHb73KD/aG35CLF+3muvC OQFTlrONJ/O2kkNQsXmjEWVsml3UFsugcj/aXhq7eZGxRz4PXTgDn9J574fXO5Te +Eavr+iFR7ltHPfSsii4wXCDC70kgLXox4CzVtWo/PBdgvQ8/5t7cPpV9Ea2fPFn 7k7nzq20fdmojqGPpNGL2t2UeEGLulTmqtK1CpuGFG5JsXl6pdiMX2acE7di1KhG 83+BL7o0r1T5Cl/9sD7cOlCmOlwA6IdNxa0= -----END CERTIFICATE-----Generated at Sat Apr 5 10:54:42 2025 by rpki-client