$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/539c1f4f-79c0-3b03-9df6-afbfccc99c95.roa File: 539c1f4f-79c0-3b03-9df6-afbfccc99c95.roa (raw, json) Hash identifier: mIcwn/SM3poer9oaB8c7Yqmc/B59O8dNsDRygJ6fBoo= Subject key identifier: C1:D3:03:2A:3B:22:CF:9A:65:0E:22:0D:2A:69:66:43:CB:71:CE:92 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848A9963748E91F232EAB0AC3C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/539c1f4f-79c0-3b03-9df6-afbfccc99c95.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 20940 IP address blocks: 2600:1488:8002::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:37:48:e9:1f:23:2e:ab:0a:c3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=826a1051-654e-4b54-a2ba-402ddc699a08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:fc:fa:e0:ef:4a:3b:86:14:c5:1d:6f:5e:99: 07:fa:f4:2c:2c:c6:99:4b:00:43:43:45:8d:4a:6f: 1a:3a:e0:33:01:90:d9:9d:81:a6:d9:b8:1e:92:ce: 78:e3:21:1e:b2:a1:56:1b:b1:2d:3d:45:d1:db:85: 0a:34:08:85:95:83:60:a5:39:a2:b9:72:7e:dc:1a: 1c:b1:e8:6a:c1:d9:97:1b:60:c3:c3:9b:bb:3c:07: 50:92:31:92:f2:d8:48:d9:40:e3:0a:63:c4:91:43: 2d:73:78:33:50:8e:dc:e2:0a:98:1c:f1:86:25:f1: 49:0d:a5:e9:13:66:7f:f8:9f:be:bf:dc:8a:d2:09: 2f:35:56:2d:59:a2:8c:bc:d5:61:08:59:37:61:b7: 5d:cd:22:93:56:c0:0e:57:5b:c9:01:06:91:7a:70: bf:52:9a:47:e1:df:e9:e0:8e:79:1a:ec:e1:86:67: b0:71:91:fd:7b:cc:dc:ad:e3:20:34:70:ca:a3:83: d0:dc:53:4d:2e:6e:91:cd:ea:99:fa:76:22:59:ad: a6:79:2d:72:83:b3:5c:0c:f9:f3:10:fd:1b:ad:78: 4b:47:ab:b4:68:1b:bc:be:6c:1c:19:90:30:d6:d5: 41:f0:be:87:72:7a:6d:ed:15:d2:c1:d8:59:3f:47: 70:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:D3:03:2A:3B:22:CF:9A:65:0E:22:0D:2A:69:66:43:CB:71:CE:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/539c1f4f-79c0-3b03-9df6-afbfccc99c95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1488:8002::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:3b:12:7c:e5:86:40:ce:bb:65:d7:1b:2b:14:2a:66:1b:ce: fb:dd:6b:e3:5b:98:e5:56:ea:31:e5:f0:03:1b:f5:50:78:89: c8:9f:5f:5e:00:c2:78:88:2d:22:84:ac:fe:26:ce:fd:d9:ec: 90:a8:d4:69:aa:68:ab:6d:37:23:23:06:1a:5d:a5:46:ae:17: db:b3:5e:d1:b2:6f:60:06:f4:38:dc:9b:31:7b:4f:a5:17:99: 27:f5:56:bb:e1:52:e6:f0:22:ba:71:56:21:5b:c9:65:1c:21: 97:46:a2:47:61:ef:74:e9:1d:f8:34:fa:78:a2:1f:39:a2:9d: 39:df:e1:16:61:9e:12:0f:49:37:5d:1b:ba:a0:40:e5:7e:4e: 56:29:75:f9:5c:2f:93:25:68:6f:2b:d0:eb:d9:51:73:ce:99: 2c:1f:15:5f:fe:80:ce:0a:41:e6:79:c9:fd:43:5a:e0:4f:38: 92:b4:5a:96:9b:5d:ee:59:7e:b4:a9:8b:99:83:92:53:c2:0b: 51:7a:e2:5b:53:5f:32:f6:b8:9c:2c:38:8d:63:7a:84:14:0f: dd:58:0c:f5:8c:06:44:f1:89:32:d1:51:9f:13:49:74:10:4d: 06:cf:69:ce:7c:fc:02:1b:8a:dc:5a:96:23:74:6a:e4:22:3b: 79:1e:e0:1b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEipljdI6R8jLqsKw8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk ODI2YTEwNTEtNjU0ZS00YjU0LWEyYmEtNDAyZGRjNjk5YTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPz64O9KO4YUxR1vXpkH+vQsLMaZSwBDQ0WN Sm8aOuAzAZDZnYGm2bgeks544yEesqFWG7EtPUXR24UKNAiFlYNgpTmiuXJ+3Boc sehqwdmXG2DDw5u7PAdQkjGS8thI2UDjCmPEkUMtc3gzUI7c4gqYHPGGJfFJDaXp E2Z/+J++v9yK0gkvNVYtWaKMvNVhCFk3YbddzSKTVsAOV1vJAQaRenC/UppH4d/p 4I55GuzhhmewcZH9e8zcreMgNHDKo4PQ3FNNLm6RzeqZ+nYiWa2meS1yg7NcDPnz EP0brXhLR6u0aBu8vmwcGZAw1tVB8L6Hcnpt7RXSwdhZP0dwdwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMHTAyo7Is+aZQ4iDSppZkPLcc6SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTM5YzFmNGYtNzljMC0z YjAzLTlkZjYtYWZiZmNjYzk5Yzk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUiIAC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABM7EnzlhkDOu2XXGysUKmYbzvvda+NbmOVW6jHl8AMb9VB4icif X14AwniILSKErP4mzv3Z7JCo1GmqaKttNyMjBhpdpUauF9uzXtGyb2AG9DjcmzF7 T6UXmSf1VrvhUubwIrpxViFbyWUcIZdGokdh73TpHfg0+niiHzminTnf4RZhnhIP STddG7qgQOV+TlYpdflcL5MlaG8r0OvZUXPOmSwfFV/+gM4KQeZ5yf1DWuBPOJK0 WpabXe5ZfrSpi5mDklPCC1F64ltTXzL2uJwsOI1jeoQUD91YDPWMBkTxiTLRUZ8T SXQQTQbPac58/AIbitxaliN0auQiO3ke4Bs= -----END CERTIFICATE-----Generated at Sat Apr 5 12:14:44 2025 by rpki-client