$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4c1aef9d-309f-3737-8f3a-95b3dffbe5c9.roa File: 4c1aef9d-309f-3737-8f3a-95b3dffbe5c9.roa (raw, json) Hash identifier: +dm5r2+BuoCFLNGZVUj2pw/z6QXxwJOKOkamcbxNY9w= Subject key identifier: 58:4C:8F:8E:23:60:A2:59:8A:C5:B7:1D:B2:09:DB:64:47:EC:E5:6B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848F926A36A05FC744016012500 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4c1aef9d-309f-3737-8f3a-95b3dffbe5c9.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 35994 IP address blocks: 2600:1406:43::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:a3:6a:05:fc:74:40:16:01:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=b781f841-d812-4b1f-947e-a25f853aa821 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:43:7a:3a:a3:bc:b3:8e:99:f7:0d:22:da:cd: 31:d9:37:7e:b0:b4:89:a9:85:b8:02:0e:7b:a6:69: 3b:fb:28:3d:48:6d:dd:23:30:94:45:b0:24:5e:cc: 56:a7:5e:11:ca:bb:cb:61:db:86:cd:af:da:9b:b7: 1b:8f:e7:20:ce:d4:4f:bc:4d:61:45:69:b7:97:4c: 7a:48:87:5c:21:22:bb:df:9e:b4:8d:32:d2:fd:73: ba:c1:e3:00:0a:9f:d3:53:28:24:71:20:b2:7c:eb: 59:ab:07:82:5f:d6:72:a7:30:55:42:e4:ec:fc:59: 02:df:4f:4e:e2:1a:63:77:1e:d5:fb:41:50:a6:5f: 02:80:11:43:50:b0:45:76:1c:83:f3:96:a0:04:8c: ec:bb:d2:8a:77:a5:99:41:4a:d4:0e:1c:a0:a9:94: f5:63:83:87:20:36:43:0b:e3:a3:fc:75:c1:45:07: 38:60:38:51:48:07:ad:94:ad:ac:f3:35:55:76:d2: 3e:95:6b:a3:38:9a:a7:cc:79:8d:c2:ce:de:bf:97: 76:57:3c:c8:54:e9:85:f7:b1:8f:bc:36:75:47:1a: 61:ff:de:aa:97:95:94:f9:9a:6a:4c:6a:d1:c2:12: a5:42:4e:3d:6d:d0:37:3a:f6:ab:8c:98:4e:7b:bd: 10:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:4C:8F:8E:23:60:A2:59:8A:C5:B7:1D:B2:09:DB:64:47:EC:E5:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4c1aef9d-309f-3737-8f3a-95b3dffbe5c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1406:43::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:0a:db:a4:fa:22:f0:6f:90:38:c1:29:20:e8:f5:45:3d:6c: 9e:d8:3a:23:a3:a3:e7:4b:a3:97:9e:93:98:3f:be:70:64:5d: 13:5f:5a:5e:3d:07:ff:6e:23:b0:d2:a5:12:1e:05:4f:90:ff: 83:b3:75:41:56:e2:e5:85:d7:db:fe:8d:5e:cc:9e:d6:4e:c3: 18:c7:00:88:d6:2a:02:37:c3:b7:2d:79:d2:fc:4d:0c:71:1b: 6c:a2:70:1e:67:e0:76:8d:4c:51:e2:f2:8d:2c:c6:a2:c9:3b: 00:7c:76:e7:09:b5:1d:c8:8f:09:34:86:ca:36:8c:1e:37:7b: 5c:08:7b:d9:da:c0:0e:40:38:d8:0e:e6:0a:89:e5:e4:e1:69: 00:44:41:ee:33:ae:54:7a:38:55:77:f0:fc:f2:5d:11:6e:7a: 00:25:24:75:12:19:7e:cc:80:1d:2f:c7:f8:d0:77:bb:4c:4f: ba:f6:77:9a:52:5f:90:0a:3b:af:aa:12:87:88:b7:ad:f2:a8: d9:cc:0f:90:d4:da:8f:24:22:e1:2b:ea:b0:d0:16:ba:1b:80: 83:8c:96:fd:2f:71:28:7b:1e:85:47:e3:52:32:81:a2:9b:be: 2c:b1:f2:ff:09:0b:e8:7e:70:1c:e2:34:6e:fc:75:a2:ac:f3: 91:75:36:b1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj5JqNqBfx0QBYBJQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk Yjc4MWY4NDEtZDgxMi00YjFmLTk0N2UtYTI1Zjg1M2FhODIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUN6OqO8s46Z9w0i2s0x2Td+sLSJqYW4Ag57 pmk7+yg9SG3dIzCURbAkXsxWp14RyrvLYduGza/am7cbj+cgztRPvE1hRWm3l0x6 SIdcISK73560jTLS/XO6weMACp/TUygkcSCyfOtZqweCX9ZypzBVQuTs/FkC309O 4hpjdx7V+0FQpl8CgBFDULBFdhyD85agBIzsu9KKd6WZQUrUDhygqZT1Y4OHIDZD C+Oj/HXBRQc4YDhRSAetlK2s8zVVdtI+lWujOJqnzHmNws7ev5d2VzzIVOmF97GP vDZ1Rxph/96ql5WU+ZpqTGrRwhKlQk49bdA3OvarjJhOe70QNQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFhMj44jYKJZisW3HbIJ22RH7OVrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGMxYWVmOWQtMzA5Zi0z NzM3LThmM2EtOTViM2RmZmJlNWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUBgBD MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEYK26T6IvBvkDjBKSDo9UU9bJ7YOiOjo+dLo5eek5g/vnBkXRNf Wl49B/9uI7DSpRIeBU+Q/4OzdUFW4uWF19v+jV7MntZOwxjHAIjWKgI3w7ctedL8 TQxxG2yicB5n4HaNTFHi8o0sxqLJOwB8ducJtR3Ijwk0hso2jB43e1wIe9nawA5A ONgO5gqJ5eThaQBEQe4zrlR6OFV38PzyXRFuegAlJHUSGX7MgB0vx/jQd7tMT7r2 d5pSX5AKO6+qEoeIt63yqNnMD5DU2o8kIuEr6rDQFrobgIOMlv0vcSh7HoVH41Iy gaKbviyx8v8JC+h+cBziNG78daKs85F1NrE= -----END CERTIFICATE-----Generated at Sat Apr 5 11:11:34 2025 by rpki-client