$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/43d8e8c5-a42b-31fe-9474-62a4f9300ec9.roa File: 43d8e8c5-a42b-31fe-9474-62a4f9300ec9.roa (raw, json) Hash identifier: p+2afXeNhMk7IrdwmZv9Mo6oIFUSoAcR/sqeFSWHwPc= Subject key identifier: A5:B3:CD:1E:B5:87:7C:60:DD:8D:84:3B:62:7F:31:8D:C1:10:C0:B7 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848A99663ECEDD4E480B8F73120 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/43d8e8c5-a42b-31fe-9474-62a4f9300ec9.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 20940 IP address blocks: 2600:1488:4004::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:63:ec:ed:d4:e4:80:b8:f7:31:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=35deb6d0-d406-407e-bb8b-49f6dacc086a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:85:2a:55:46:6a:47:c3:27:34:9e:9b:8f:de: e8:be:66:3d:38:8b:ce:70:35:a9:35:01:60:35:76: 44:23:6a:49:83:13:90:13:90:c3:01:17:46:3d:2e: ef:77:36:ad:9a:14:69:f8:ad:8e:91:b7:44:fb:c2: 06:78:5b:35:db:f8:78:7c:ef:60:3b:c1:b9:f1:14: e5:c8:63:ec:3a:28:cd:6f:80:73:8b:02:94:ce:98: e7:23:0b:ce:17:57:48:c7:e5:e0:26:53:a8:34:c7: 52:1a:46:df:09:04:96:60:61:45:ea:9c:3e:41:db: d8:7b:6c:3b:dd:b0:4c:01:bd:f1:19:55:80:6c:bd: 28:b6:a7:bf:80:62:c6:33:8d:54:b8:5f:53:a9:f0: 37:16:a4:6e:d6:6a:df:fe:d6:91:09:b5:cb:18:a9: 97:b5:ef:99:6d:4c:90:e3:33:0a:b4:8e:35:03:a6: b4:db:5c:a2:21:b2:f5:5f:6c:43:06:4c:83:2b:73: 4f:2e:a9:d9:3d:79:54:88:30:08:fd:9f:3d:e8:d1: 05:81:54:bb:a3:b2:68:74:19:d6:eb:87:fd:98:8b: 73:f5:c0:cf:fe:61:44:2d:06:61:19:fa:65:12:43: bc:dc:3e:32:ec:08:fe:1a:56:eb:89:ac:8a:ff:c9: 54:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:B3:CD:1E:B5:87:7C:60:DD:8D:84:3B:62:7F:31:8D:C1:10:C0:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/43d8e8c5-a42b-31fe-9474-62a4f9300ec9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1488:4004::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:86:3e:b2:46:11:d4:3f:42:b2:a9:f3:e7:86:6c:32:e0:09: 49:ad:b6:85:be:29:3b:af:68:4d:2e:95:0d:e0:8d:f2:2b:76: 74:42:10:3a:6c:21:c1:09:b8:11:dc:87:58:e5:3e:b7:1a:d3: 88:15:bc:4a:cb:25:1e:9f:df:eb:17:39:af:44:d6:1f:8b:54: bf:16:49:49:ae:82:7e:36:f2:6e:66:e7:34:55:dd:44:f4:42: 9d:36:c4:94:e5:3f:d4:ac:ae:48:f8:53:1c:38:37:56:9f:c2: 6b:50:51:28:8f:e9:8f:45:d8:87:59:39:6f:e1:f0:f1:1a:94: f0:a4:e8:42:5f:0d:0c:a0:06:66:ee:46:1d:99:85:ef:af:e3: bf:8e:76:4f:2a:07:f1:df:e8:7d:db:91:bd:3d:12:56:14:77: da:4a:e2:55:ed:ef:ee:c0:be:d4:c1:76:ea:3f:9e:ef:16:fe: 43:99:94:93:6f:bb:f4:56:65:44:1d:c7:70:67:07:04:2c:99: 19:69:05:96:ef:b4:a7:28:df:95:66:22:fa:8d:1b:2c:6b:3d: 89:ce:fb:4c:20:c8:cc:0e:27:47:6d:c9:12:d6:14:83:22:61: 67:3d:fd:a3:e5:37:80:c0:36:d9:58:e9:dc:b2:f1:e6:da:55: 5c:92:a5:9b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiplmPs7dTkgLj3MSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk MzVkZWI2ZDAtZDQwNi00MDdlLWJiOGItNDlmNmRhY2MwODZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgIUqVUZqR8MnNJ6bj97ovmY9OIvOcDWpNQFg NXZEI2pJgxOQE5DDARdGPS7vdzatmhRp+K2OkbdE+8IGeFs12/h4fO9gO8G58RTl yGPsOijNb4BziwKUzpjnIwvOF1dIx+XgJlOoNMdSGkbfCQSWYGFF6pw+QdvYe2w7 3bBMAb3xGVWAbL0otqe/gGLGM41UuF9TqfA3FqRu1mrf/taRCbXLGKmXte+ZbUyQ 4zMKtI41A6a021yiIbL1X2xDBkyDK3NPLqnZPXlUiDAI/Z896NEFgVS7o7JodBnW 64f9mItz9cDP/mFELQZhGfplEkO83D4y7Aj+GlbriayK/8lUFwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKWzzR61h3xg3Y2EO2J/MY3BEMC3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDNkOGU4YzUtYTQyYi0z MWZlLTk0NzQtNjJhNGY5MzAwZWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUiEAE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAI+GPrJGEdQ/QrKp8+eGbDLgCUmttoW+KTuvaE0ulQ3gjfIrdnRC EDpsIcEJuBHch1jlPrca04gVvErLJR6f3+sXOa9E1h+LVL8WSUmugn428m5m5zRV 3UT0Qp02xJTlP9Ssrkj4Uxw4N1afwmtQUSiP6Y9F2IdZOW/h8PEalPCk6EJfDQyg BmbuRh2Zhe+v47+Odk8qB/Hf6H3bkb09ElYUd9pK4lXt7+7AvtTBduo/nu8W/kOZ lJNvu/RWZUQdx3BnBwQsmRlpBZbvtKco35VmIvqNGyxrPYnO+0wgyMwOJ0dtyRLW FIMiYWc9/aPlN4DANtlY6dyy8ebaVVySpZs= -----END CERTIFICATE-----Generated at Sat Apr 5 11:02:42 2025 by rpki-client