$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/477d2a48-4a3b-30e1-8c43-3f74ef4b93e7.roa File: 477d2a48-4a3b-30e1-8c43-3f74ef4b93e7.roa (raw, json) Hash identifier: 1swYmZR3+ddbeFRIOGBSvCchTwXOXYXfYsXHaT+dppE= Subject key identifier: B8:60:F2:AC:87:88:A5:45:F1:16:9C:8D:D4:85:99:D2:BC:B6:F3:96 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858488DAB5580D78B89E970AC0200 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/477d2a48-4a3b-30e1-8c43-3f74ef4b93e7.roa Signing time: Wed 15 Jan 2025 14:00:51 +0000 ROA not before: Wed 15 Jan 2025 14:00:51 +0000 ROA not after: Tue 15 Apr 2025 13:00:51 +0000 asID: 20940 IP address blocks: 2600:140b:400::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:8d:ab:55:80:d7:8b:89:e9:70:ac:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 15 14:00:51 2025 GMT Not After : Apr 15 13:00:51 2025 GMT Subject: CN=f7b2f1b3-7c12-4c1a-8b37-94fbf8ab1adc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:99:ca:7d:02:f9:02:79:74:7e:09:25:2c:08: a3:73:37:48:80:6b:39:e9:60:d4:35:47:65:b7:69: a8:c9:37:61:9d:6a:e5:f0:06:f7:6a:ea:4e:01:cf: 62:3e:a3:0a:80:d0:1f:fd:b0:96:e5:08:5c:62:00: 17:56:9c:22:88:c1:90:39:bf:76:88:aa:11:94:20: 6d:f7:d9:08:d9:f8:0a:f8:f5:09:65:4e:22:f6:a4: 3e:42:a4:65:d9:19:6e:a3:ea:6f:19:bf:75:1c:96: 4e:e6:89:42:23:a6:c9:f8:1f:5f:ca:10:40:1b:3f: 2f:5f:71:22:14:3b:35:ec:52:74:5d:7d:b9:93:59: 37:72:bc:85:ea:1a:77:bc:45:c2:c4:68:30:67:9c: ef:6f:b7:68:29:d5:63:bf:95:c2:24:af:11:eb:9a: 4f:7b:e6:06:74:b8:a8:f4:65:20:85:52:2c:61:48: 3c:8e:a3:bb:b5:cb:87:b5:68:bd:9f:86:56:bc:01: 1f:d7:56:03:fb:0c:97:29:c0:32:62:7d:88:c8:39: 34:a2:cc:13:52:e0:d1:26:82:63:c9:4e:43:b6:01: ea:5e:df:6f:c7:83:5d:5a:23:b2:f6:d1:5a:c5:18: 7d:8b:b5:d4:4d:6e:2d:a4:9f:cf:64:cd:56:be:7e: 6f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:60:F2:AC:87:88:A5:45:F1:16:9C:8D:D4:85:99:D2:BC:B6:F3:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/477d2a48-4a3b-30e1-8c43-3f74ef4b93e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:140b:400::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:a0:38:d4:fd:12:67:9a:a7:ae:b3:f5:2a:b4:f3:32:46:13: 1b:a9:ac:e0:f4:94:4b:15:c2:22:48:0e:67:5a:d8:b3:e0:ab: 99:55:8d:05:b1:fa:a7:fa:6e:47:68:e5:93:ce:87:86:cd:1b: 27:0a:c7:4e:cb:f6:20:07:b4:0f:49:e4:96:36:91:2e:56:30: 02:2a:25:29:13:01:2c:33:ba:69:66:b5:44:e1:cf:bd:a9:e0: 40:3e:6b:f5:d0:36:88:19:59:08:bd:00:33:d3:5d:cb:34:1e: 75:55:a5:30:87:81:1b:60:07:05:70:79:3d:bd:6b:3b:75:09: 0b:b2:47:22:23:ed:93:20:b7:31:6f:0a:6b:e9:20:e8:1a:99: e6:81:31:69:da:f8:a5:48:30:f7:a2:b5:fa:91:ef:c8:18:8b: 24:64:c7:72:a7:7b:40:3a:51:b7:67:52:f5:12:a3:2b:e6:19: bf:e9:1e:a9:fe:6f:67:94:8a:8a:01:2f:21:30:70:bd:52:e2: 5e:19:d2:be:09:f4:db:3a:fc:53:ff:e8:2a:52:8e:72:9e:42: 8f:03:3a:0d:0d:e7:66:e0:e1:3a:11:c1:ad:55:0f:84:17:e3: a6:1f:5b:3a:ba:9a:86:a2:77:b8:4e:4c:0b:a3:69:78:aa:e6: b4:8a:d0:5e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiNq1WA14uJ6XCsAgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDExNTE0MDA1MVoXDTI1MDQxNTEzMDA1MVowLzEtMCsGA1UEAxMk ZjdiMmYxYjMtN2MxMi00YzFhLThiMzctOTRmYmY4YWIxYWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ZnKfQL5Anl0fgklLAijczdIgGs56WDUNUdl t2moyTdhnWrl8Ab3aupOAc9iPqMKgNAf/bCW5QhcYgAXVpwiiMGQOb92iKoRlCBt 99kI2fgK+PUJZU4i9qQ+QqRl2Rluo+pvGb91HJZO5olCI6bJ+B9fyhBAGz8vX3Ei FDs17FJ0XX25k1k3cryF6hp3vEXCxGgwZ5zvb7doKdVjv5XCJK8R65pPe+YGdLio 9GUghVIsYUg8jqO7tcuHtWi9n4ZWvAEf11YD+wyXKcAyYn2IyDk0oswTUuDRJoJj yU5DtgHqXt9vx4NdWiOy9tFaxRh9i7XUTW4tpJ/PZM1Wvn5v1QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLhg8qyHiKVF8RacjdSFmdK8tvOWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDc3ZDJhNDgtNGEzYi0z MGUxLThjNDMtM2Y3NGVmNGI5M2U3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUCwQA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA2gONT9Emeap66z9Sq08zJGExuprOD0lEsVwiJIDmda2LPgq5lV jQWx+qf6bkdo5ZPOh4bNGycKx07L9iAHtA9J5JY2kS5WMAIqJSkTASwzumlmtUTh z72p4EA+a/XQNogZWQi9ADPTXcs0HnVVpTCHgRtgBwVweT29azt1CQuyRyIj7ZMg tzFvCmvpIOgameaBMWna+KVIMPeitfqR78gYiyRkx3Kne0A6UbdnUvUSoyvmGb/p Hqn+b2eUiooBLyEwcL1S4l4Z0r4J9Ns6/FP/6CpSjnKeQo8DOg0N52bg4ToRwa1V D4QX46YfWzq6moaid7hOTAujaXiq5rSK0F4= -----END CERTIFICATE-----Generated at Sat Apr 5 10:57:36 2025 by rpki-client