$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/38e22287-e03f-307d-bc07-65d9e6df354b.roa File: 38e22287-e03f-307d-bc07-65d9e6df354b.roa (raw, json) Hash identifier: VfvQIoLGJqjDW1Q3VHdtRF/wZ0EsJeaoOyhBYSp9vgk= Subject key identifier: C0:F9:1E:D7:7F:15:3F:F2:F7:72:2C:92:93:20:7A:0A:21:2B:9E:6F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848FD56B1F6DB8F6BA336B43800 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/38e22287-e03f-307d-bc07-65d9e6df354b.roa Signing time: Mon 24 Feb 2025 14:00:52 +0000 ROA not before: Mon 24 Feb 2025 14:00:52 +0000 ROA not after: Sun 25 May 2025 13:00:52 +0000 asID: 12222 IP address blocks: 2001:4878:2246::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:56:b1:f6:db:8f:6b:a3:36:b4:38:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 24 14:00:52 2025 GMT Not After : May 25 13:00:52 2025 GMT Subject: CN=1a32242d-70d9-4cfe-9428-736c431916ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:11:fe:b8:0f:c5:e3:bf:8c:ec:61:1d:ab:7b: 75:58:e6:76:1a:f6:5c:18:31:f7:4b:3c:35:dc:c3: e8:ee:dd:03:d3:b7:8f:4c:7e:f7:e7:14:26:26:d5: 51:a7:41:3a:ae:09:85:17:1c:eb:be:c9:bb:42:4e: c4:fd:96:f6:a5:42:e8:78:17:df:ea:2e:ab:04:a4: 1d:70:b2:3d:c1:9a:9c:be:aa:27:da:2e:86:c6:ae: 58:1b:a1:9c:80:3f:fe:89:a6:39:93:15:e0:73:cf: e1:35:c3:71:8b:b4:5a:05:92:e3:69:0a:44:da:88: 1f:b8:58:5a:31:f9:a1:fd:19:f3:17:95:0e:5a:4a: 31:dd:70:4d:20:af:b6:ca:f3:61:8c:30:fa:78:bd: 7a:22:cf:00:43:a4:f1:5d:24:0f:b0:9a:57:1e:3c: 75:1d:1c:24:cd:47:42:fb:1d:f8:82:6a:1b:89:cd: 96:82:be:3b:73:b4:ca:96:67:a0:21:ee:63:d5:b8: a8:06:e9:8b:35:15:6e:c4:1d:6a:02:c7:90:91:2d: 62:e9:2d:ad:cf:1d:bb:f0:81:d6:87:fa:57:a5:91: 60:70:6e:2c:ac:43:aa:29:fc:97:ad:30:12:f7:e7: be:75:10:a3:55:72:78:4f:26:07:61:70:04:15:88: d9:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:F9:1E:D7:7F:15:3F:F2:F7:72:2C:92:93:20:7A:0A:21:2B:9E:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/38e22287-e03f-307d-bc07-65d9e6df354b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2001:4878:2246::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:a0:b6:94:76:97:95:ca:3f:cc:d2:db:46:3a:65:83:72:7b: cb:6e:dd:90:fa:69:98:87:e7:f1:e0:99:77:c4:2d:33:cf:58: e0:9c:4a:32:f9:43:6d:99:ad:50:d1:1d:51:02:b5:cf:63:e8: cf:85:30:aa:e8:e5:fa:0b:a1:27:7c:93:55:63:d4:b3:a3:d7: e1:5d:58:99:5f:83:62:46:92:5d:17:cc:49:c2:0f:7c:87:eb: b8:2b:71:2f:13:f3:c7:1d:8e:65:b1:6f:29:3e:fa:55:39:89: 1b:d0:13:41:40:55:07:75:85:77:82:3a:42:3a:1c:8c:18:af: 6c:51:28:12:08:a4:c0:46:0d:9e:bd:1f:ee:d3:98:58:fe:28: 3c:60:21:31:82:5f:7e:3b:83:21:59:ce:bf:06:cb:17:6a:b7: 69:e5:80:10:f3:6d:1e:8c:bc:6b:36:d6:3a:33:e0:21:8d:39: 13:73:60:64:82:8e:9e:da:dc:30:4d:f1:3f:7d:d6:8e:87:a3: cc:50:16:d5:6f:dd:40:54:45:0b:37:c1:25:34:49:e6:fc:dd: a5:da:5d:10:57:48:48:51:48:6d:fb:fc:10:59:a4:26:0f:a5: 11:ad:2f:26:ef:51:b6:95:e1:a0:e3:44:d0:a1:15:cd:1e:00: 03:6c:71:82 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj9VrH2249roza0OAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk MWEzMjI0MmQtNzBkOS00Y2ZlLTk0MjgtNzM2YzQzMTkxNmVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRH+uA/F47+M7GEdq3t1WOZ2GvZcGDH3Szw1 3MPo7t0D07ePTH735xQmJtVRp0E6rgmFFxzrvsm7Qk7E/Zb2pULoeBff6i6rBKQd cLI9wZqcvqon2i6Gxq5YG6GcgD/+iaY5kxXgc8/hNcNxi7RaBZLjaQpE2ogfuFha Mfmh/RnzF5UOWkox3XBNIK+2yvNhjDD6eL16Is8AQ6TxXSQPsJpXHjx1HRwkzUdC +x34gmobic2Wgr47c7TKlmegIe5j1bioBumLNRVuxB1qAseQkS1i6S2tzx278IHW h/pXpZFgcG4srEOqKfyXrTAS9+e+dRCjVXJ4TyYHYXAEFYjZUwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMD5Htd/FT/y93IskpMgegohK55vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzhlMjIyODctZTAzZi0z MDdkLWJjMDctNjVkOWU2ZGYzNTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIeCJG MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABqgtpR2l5XKP8zS20Y6ZYNye8tu3ZD6aZiH5/HgmXfELTPPWOCc SjL5Q22ZrVDRHVECtc9j6M+FMKro5foLoSd8k1Vj1LOj1+FdWJlfg2JGkl0XzEnC D3yH67grcS8T88cdjmWxbyk++lU5iRvQE0FAVQd1hXeCOkI6HIwYr2xRKBIIpMBG DZ69H+7TmFj+KDxgITGCX347gyFZzr8Gyxdqt2nlgBDzbR6MvGs21joz4CGNORNz YGSCjp7a3DBN8T991o6Ho8xQFtVv3UBURQs3wSU0Seb83aXaXRBXSEhRSG37/BBZ pCYPpRGtLybvUbaV4aDjRNChFc0eAANscYI= -----END CERTIFICATE-----Generated at Sat Apr 5 10:58:36 2025 by rpki-client