$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/47d3e362-406b-3bfe-9abb-b7a001396310.roa File: 47d3e362-406b-3bfe-9abb-b7a001396310.roa (raw, json) Hash identifier: ccQKtLbWvIPkKH9sEaV2en77XQPw5wO3QF6/N0l+aFQ= Subject key identifier: F1:89:0C:EF:CF:46:CD:0D:97:34:76:52:8E:E5:36:4E:BE:5E:C3:48 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848F92699F584FA716F2B2BE5C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/47d3e362-406b-3bfe-9abb-b7a001396310.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 35994 IP address blocks: 2600:141b:3000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:99:f5:84:fa:71:6f:2b:2b:e5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=953af82c-7ba0-42f4-a7a8-56da8c7307d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:64:1f:a2:84:99:05:4b:b6:b7:0b:e7:f8:87: 45:05:f5:eb:72:5d:9b:77:fe:c9:db:55:80:8e:5f: c8:19:fa:34:26:a0:8b:54:86:08:cf:df:25:20:1f: 21:4c:29:28:0a:35:26:52:c9:49:6e:bd:7d:06:7d: 1e:dd:d3:09:a3:2c:fa:9f:b7:40:44:62:39:14:a5: 11:8b:d7:f9:7c:42:a4:f6:36:ef:a2:e6:e5:fb:31: 0c:f1:4d:d4:34:b8:9e:93:3b:fa:ef:a7:6a:1d:29: b2:35:6e:7e:a3:99:ab:0a:e8:f6:a9:ec:4a:f4:03: ea:ea:9f:14:7d:b8:72:52:5f:0c:91:cc:1b:44:98: 86:e7:a2:e4:01:27:73:58:05:6c:20:67:fe:77:ee: e2:39:b1:7e:19:ec:e5:d8:76:d7:3c:a6:72:86:a5: cf:2a:5d:d5:e4:ee:a1:de:f6:86:18:20:87:74:fc: dc:af:c0:4a:de:5f:74:e6:0f:d2:1b:8f:41:09:26: 70:61:eb:7a:cc:3d:6b:7f:ec:b4:bf:58:16:0e:36: 8d:6a:72:9e:e0:de:97:ad:d3:a9:3f:19:7a:c0:e3: d4:bd:5f:3e:ad:12:a0:30:d9:f4:fa:35:88:79:4f: 2a:46:4e:a2:4b:9f:2d:b0:09:a2:5e:9c:ef:29:a4: 4c:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:89:0C:EF:CF:46:CD:0D:97:34:76:52:8E:E5:36:4E:BE:5E:C3:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/47d3e362-406b-3bfe-9abb-b7a001396310.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:141b:3000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:e1:d1:73:a5:e6:24:29:8a:e7:2c:88:a0:fd:ee:7b:47:7c: 9f:2c:d1:a5:51:1f:8f:b6:7d:79:64:52:8c:9b:7b:9d:e2:3a: 6d:9b:12:91:e5:89:e4:a3:be:4d:b8:6a:b8:ad:bc:85:f3:62: 32:07:7d:8f:46:6e:e1:ef:af:a8:2c:10:a7:a3:7e:c4:fd:f0: be:0e:44:a4:3f:5a:5e:09:df:74:d6:e3:52:0e:3c:55:6c:68: bb:ea:02:4f:ae:0f:7d:1e:cd:28:02:ee:4c:fb:7a:2e:01:10: cc:1d:5f:4c:b2:ab:97:91:d9:6b:d0:ca:0e:85:96:66:63:30: 4e:25:af:0d:7b:15:f3:be:19:d3:79:88:1a:b2:c1:e6:35:a1: 56:08:b5:da:72:75:18:75:30:8a:72:36:6d:ba:c9:d8:a1:08: cb:76:e0:ef:b2:39:6c:5e:6e:f4:da:8a:ec:a4:f0:7f:f1:24: a6:da:5b:07:69:34:13:12:b3:52:5d:3f:39:15:ab:38:4e:33: 65:c5:0b:c2:cf:ae:98:30:91:8f:40:6a:43:b3:c3:0f:c5:13: ad:d2:c4:80:99:75:c0:bc:2e:f2:b1:c7:a8:76:86:1f:2a:aa: d9:b4:94:c3:be:52:d8:36:a0:3b:79:73:10:46:91:36:d1:79: 58:55:70:a1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj5Jpn1hPpxbysr5cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk OTUzYWY4MmMtN2JhMC00MmY0LWE3YTgtNTZkYThjNzMwN2QzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA62QfooSZBUu2twvn+IdFBfXrcl2bd/7J21WA jl/IGfo0JqCLVIYIz98lIB8hTCkoCjUmUslJbr19Bn0e3dMJoyz6n7dARGI5FKUR i9f5fEKk9jbvoubl+zEM8U3UNLiekzv676dqHSmyNW5+o5mrCuj2qexK9APq6p8U fbhyUl8MkcwbRJiG56LkASdzWAVsIGf+d+7iObF+Gezl2HbXPKZyhqXPKl3V5O6h 3vaGGCCHdPzcr8BK3l905g/SG49BCSZwYet6zD1rf+y0v1gWDjaNanKe4N6XrdOp Pxl6wOPUvV8+rRKgMNn0+jWIeU8qRk6iS58tsAmiXpzvKaRMCwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPGJDO/PRs0NlzR2Uo7lNk6+XsNIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDdkM2UzNjItNDA2Yi0z YmZlLTlhYmItYjdhMDAxMzk2MzEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUGzAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACHh0XOl5iQpiucsiKD97ntHfJ8s0aVRH4+2fXlkUoybe53iOm2b EpHlieSjvk24aritvIXzYjIHfY9GbuHvr6gsEKejfsT98L4ORKQ/Wl4J33TW41IO PFVsaLvqAk+uD30ezSgC7kz7ei4BEMwdX0yyq5eR2WvQyg6FlmZjME4lrw17FfO+ GdN5iBqyweY1oVYItdpydRh1MIpyNm26ydihCMt24O+yOWxebvTaiuyk8H/xJKba WwdpNBMSs1JdPzkVqzhOM2XFC8LPrpgwkY9AakOzww/FE63SxICZdcC8LvKxx6h2 hh8qqtm0lMO+Utg2oDt5cxBGkTbReVhVcKE= -----END CERTIFICATE-----Generated at Sat Apr 5 11:02:27 2025 by rpki-client