$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4f6439dc-31bc-3ca8-922c-0791c755b7e2.roa File: 4f6439dc-31bc-3ca8-922c-0791c755b7e2.roa (raw, json) Hash identifier: pY9agM3Gk5eS5319OW7gnFo6w4x/JoG0PNZ4lMFmSdo= Subject key identifier: C2:76:3A:25:7D:99:B1:2F:A1:DF:B7:62:B0:1A:06:BB:41:91:C4:2B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848FD56B1E7B4231777BF374080 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4f6439dc-31bc-3ca8-922c-0791c755b7e2.roa Signing time: Mon 24 Feb 2025 14:00:52 +0000 ROA not before: Mon 24 Feb 2025 14:00:52 +0000 ROA not after: Sun 25 May 2025 13:00:52 +0000 asID: 12222 IP address blocks: 2001:4878:2242::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:56:b1:e7:b4:23:17:77:bf:37:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 24 14:00:52 2025 GMT Not After : May 25 13:00:52 2025 GMT Subject: CN=d80ab128-3756-4257-b202-e7fd6d67b84e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:7e:53:94:6f:e1:fc:e9:0a:ae:54:ae:8a:5a: 0b:dc:9f:9e:e9:f6:7e:1e:48:f3:ca:e3:0d:b6:78: 73:66:39:3b:16:43:24:ff:34:19:db:c8:70:94:e6: 2f:1b:52:de:ae:74:83:24:6f:bc:b1:be:54:c6:f0: e3:f9:44:15:98:27:c7:f4:a8:9b:27:6d:41:a0:bd: de:06:08:29:33:cd:b6:69:a9:60:e9:5e:39:1e:fc: fc:d6:7a:b6:0f:39:03:c4:9f:57:44:d4:1e:78:d2: a5:a3:f3:56:3c:0b:99:3c:95:cc:6f:3a:aa:97:bf: bd:49:51:64:a3:4b:f8:54:ce:e1:a7:9f:5a:91:ab: 09:bd:ec:05:31:6a:1b:bc:51:1f:e7:70:89:8f:c4: 28:41:d3:58:df:f9:18:bb:1b:53:88:b7:00:09:08: 2e:3b:06:35:86:6b:d4:b9:d2:19:4e:6b:68:84:17: 73:d1:51:1e:2a:5f:5a:7f:29:42:1e:7a:ad:33:9b: 2f:ad:29:54:6e:89:a9:ce:b7:8d:07:d2:56:1d:9a: 57:06:38:a6:95:cf:5a:eb:0e:f4:ef:6b:3a:cc:5a: 11:8f:c2:12:0c:80:c4:04:7d:ed:79:0c:df:fc:2a: 46:d1:71:51:21:14:a1:79:76:35:3b:f3:38:03:54: d8:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:76:3A:25:7D:99:B1:2F:A1:DF:B7:62:B0:1A:06:BB:41:91:C4:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4f6439dc-31bc-3ca8-922c-0791c755b7e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2001:4878:2242::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:f6:3f:87:72:96:bc:44:b9:d3:f8:5e:0e:d2:ea:85:c6:8e: eb:7c:dc:37:09:dd:e6:dd:2b:a4:7d:58:b7:7b:70:12:38:dd: 60:fe:b1:66:6b:3a:2d:4c:29:77:5c:a3:be:cc:2e:92:be:eb: 17:9b:e1:cd:83:8e:64:8f:03:56:62:7e:06:f5:a7:e2:dd:ba: 6f:8e:2e:fd:5e:bb:e2:27:08:88:f2:dd:22:55:8f:7a:38:61: 30:9d:7b:91:69:d3:29:34:93:2d:ad:a3:b0:d7:03:8f:0c:2b: 03:06:9e:32:f1:0d:c6:ad:95:4b:5b:88:a4:25:8a:93:22:ce: cb:09:79:67:1a:65:27:b7:c2:20:77:97:d7:94:df:22:a8:85: de:48:52:46:04:f3:33:2c:92:92:00:ee:d4:60:f0:db:d5:0d: 15:ce:55:37:3b:5a:f5:7d:a7:1b:d0:c1:74:be:20:81:ec:6e: 71:0f:f8:aa:31:59:44:e4:2a:e2:88:07:fc:4d:66:10:c9:d9: 3c:4d:a4:fb:7c:42:bd:f1:e0:5e:c4:ec:5c:ee:05:24:51:f9: d2:5d:f8:6a:80:e2:1d:7d:9c:98:d7:87:01:5d:4b:8d:34:eb: 40:e2:48:c0:4e:3d:94:c8:69:5d:8c:4e:55:c7:90:7d:04:0f: c7:e4:86:98 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj9VrHntCMXd783QIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk ZDgwYWIxMjgtMzc1Ni00MjU3LWIyMDItZTdmZDZkNjdiODRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA135TlG/h/OkKrlSuiloL3J+e6fZ+HkjzyuMN tnhzZjk7FkMk/zQZ28hwlOYvG1LernSDJG+8sb5UxvDj+UQVmCfH9KibJ21BoL3e BggpM822aalg6V45Hvz81nq2DzkDxJ9XRNQeeNKlo/NWPAuZPJXMbzqql7+9SVFk o0v4VM7hp59akasJvewFMWobvFEf53CJj8QoQdNY3/kYuxtTiLcACQguOwY1hmvU udIZTmtohBdz0VEeKl9afylCHnqtM5svrSlUbompzreNB9JWHZpXBjimlc9a6w70 72s6zFoRj8ISDIDEBH3teQzf/CpG0XFRIRSheXY1O/M4A1TYmQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMJ2OiV9mbEvod+3YrAaBrtBkcQrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGY2NDM5ZGMtMzFiYy0z Y2E4LTkyMmMtMDc5MWM3NTViN2UyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIeCJC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFH2P4dylrxEudP4Xg7S6oXGjut83DcJ3ebdK6R9WLd7cBI43WD+ sWZrOi1MKXdco77MLpK+6xeb4c2DjmSPA1Zifgb1p+Ldum+OLv1eu+InCIjy3SJV j3o4YTCde5Fp0yk0ky2to7DXA48MKwMGnjLxDcatlUtbiKQlipMizssJeWcaZSe3 wiB3l9eU3yKohd5IUkYE8zMskpIA7tRg8NvVDRXOVTc7WvV9pxvQwXS+IIHsbnEP +KoxWUTkKuKIB/xNZhDJ2TxNpPt8Qr3x4F7E7FzuBSRR+dJd+GqA4h19nJjXhwFd S40060DiSMBOPZTIaV2MTlXHkH0ED8fkhpg= -----END CERTIFICATE-----Generated at Sat Apr 5 11:04:02 2025 by rpki-client