$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c34f991-7840-309e-9834-33c9066aa331.roa File: 3c34f991-7840-309e-9834-33c9066aa331.roa (raw, json) Hash identifier: ssWADpM6h6RaVDqbMu/ZEZNaAoxxYKtP8irmSsgoxXw= Subject key identifier: 00:5C:56:98:5B:93:A8:7F:19:30:66:34:56:0E:A7:47:01:FE:60:D0 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584902EC0165CD0ED5FD39FBC4B0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c34f991-7840-309e-9834-33c9066aa331.roa Signing time: Wed 26 Feb 2025 14:00:51 +0000 ROA not before: Wed 26 Feb 2025 14:00:51 +0000 ROA not after: Tue 27 May 2025 13:00:51 +0000 asID: 12222 IP address blocks: 2001:4878:c217::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:ec:01:65:cd:0e:d5:fd:39:fb:c4:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 26 14:00:51 2025 GMT Not After : May 27 13:00:51 2025 GMT Subject: CN=a9fd0ac2-5b44-4264-81fc-02a4f9603478 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:f7:15:a0:0d:ee:b1:d8:63:1a:1d:18:cd:e1: f5:0c:2d:26:0d:db:09:c1:f5:6b:7c:c6:85:95:b8: af:6d:66:a4:45:46:59:cf:7e:4a:95:a9:8f:d8:a7: fd:63:2f:eb:b4:6d:08:91:31:4e:a1:6c:c3:6c:8e: 38:54:30:59:f6:c9:25:b7:d7:05:27:86:a7:9a:f6: 7c:7a:ff:68:ca:c5:dc:4e:88:cf:60:f7:84:7e:31: 9a:08:05:b1:32:d0:64:06:02:60:a1:3d:d5:09:c2: f6:ba:49:9c:9e:e6:b1:86:bd:d4:d9:85:e0:e3:ab: 7c:31:04:0a:b9:07:25:a4:1b:69:ff:9f:5e:95:7d: 72:c3:af:ef:32:a1:03:80:98:7b:fc:d7:32:02:c7: c9:75:3f:85:f0:80:43:67:e3:7b:23:65:30:74:87: 48:70:5c:4b:3c:74:13:00:09:f3:f2:e3:c4:ae:01: 75:16:bf:df:12:99:90:93:2d:76:d0:fe:f6:05:c2: f2:e0:8d:02:c3:85:a4:a2:db:b5:70:71:b5:8c:f9: 15:90:c6:ae:2c:17:0e:b8:69:19:b1:6f:d2:82:db: cf:ef:15:3e:fb:94:53:49:7c:4b:0d:34:57:bc:fd: 26:15:6f:49:33:54:b5:a3:2c:15:4a:bf:47:ba:0f: b4:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:5C:56:98:5B:93:A8:7F:19:30:66:34:56:0E:A7:47:01:FE:60:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c34f991-7840-309e-9834-33c9066aa331.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2001:4878:c217::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:1b:c2:34:39:e5:26:3e:64:eb:20:22:49:ad:06:95:e9:42: e9:86:63:f8:60:d5:e3:b6:b4:7e:7d:a0:85:5c:e9:84:ca:9f: 2f:21:09:5f:c7:68:8c:ee:58:5a:97:69:aa:86:60:4a:dd:9f: 96:9e:76:f4:d0:1d:c7:30:e6:bb:4f:d4:26:49:4e:e1:d7:b5: 86:c7:b2:52:bd:aa:b7:c8:7d:b2:71:6c:71:31:0b:68:e7:4e: e9:3d:f8:8a:5b:d6:75:f0:3a:41:5f:77:37:12:a7:49:7d:f5: 55:8f:73:39:ff:5b:23:09:ad:99:f2:4d:41:d2:2e:81:3e:c4: cf:f4:38:59:3f:0d:80:1a:5c:12:66:54:71:b9:bb:1d:b1:2c: 84:6f:8e:6c:1a:0c:c2:13:56:5c:4b:d7:30:9a:55:6f:cf:6e: 9a:86:35:d2:9d:d9:14:2d:08:1f:a7:55:00:06:3e:41:88:c4: d2:5d:34:30:7a:79:6a:33:56:98:e2:ad:33:66:49:56:de:97: f3:b1:3e:56:ec:4c:9e:47:4b:32:d9:52:b0:17:d9:db:84:76: 99:98:a0:c8:b1:4a:4a:81:34:d4:98:da:0a:50:3b:ee:ac:cb: 5b:91:35:ba:df:de:96:5c:ec:5f:4b:42:4e:70:97:4d:2b:ba: ca:0b:fe:01 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkC7AFlzQ7V/Tn7xLAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk YTlmZDBhYzItNWI0NC00MjY0LTgxZmMtMDJhNGY5NjAzNDc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfcVoA3usdhjGh0YzeH1DC0mDdsJwfVrfMaF lbivbWakRUZZz35KlamP2Kf9Yy/rtG0IkTFOoWzDbI44VDBZ9sklt9cFJ4anmvZ8 ev9oysXcTojPYPeEfjGaCAWxMtBkBgJgoT3VCcL2ukmcnuaxhr3U2YXg46t8MQQK uQclpBtp/59elX1yw6/vMqEDgJh7/NcyAsfJdT+F8IBDZ+N7I2UwdIdIcFxLPHQT AAnz8uPErgF1Fr/fEpmQky120P72BcLy4I0Cw4Wkotu1cHG1jPkVkMauLBcOuGkZ sW/SgtvP7xU++5RTSXxLDTRXvP0mFW9JM1S1oywVSr9Hug+0wQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFABcVphbk6h/GTBmNFYOp0cB/mDQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2MzNGY5OTEtNzg0MC0z MDllLTk4MzQtMzNjOTA2NmFhMzMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIeMIX MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACkbwjQ55SY+ZOsgIkmtBpXpQumGY/hg1eO2tH59oIVc6YTKny8h CV/HaIzuWFqXaaqGYErdn5aedvTQHccw5rtP1CZJTuHXtYbHslK9qrfIfbJxbHEx C2jnTuk9+Ipb1nXwOkFfdzcSp0l99VWPczn/WyMJrZnyTUHSLoE+xM/0OFk/DYAa XBJmVHG5ux2xLIRvjmwaDMITVlxL1zCaVW/PbpqGNdKd2RQtCB+nVQAGPkGIxNJd NDB6eWozVpjirTNmSVbel/OxPlbsTJ5HSzLZUrAX2duEdpmYoMixSkqBNNSY2gpQ O+6sy1uRNbrf3pZc7F9LQk5wl00rusoL/gE= -----END CERTIFICATE-----Generated at Sun Apr 6 03:28:39 2025 by rpki-client