$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5a1ccf24-4cca-37d9-a721-d5af22df8ec8.roa File: 5a1ccf24-4cca-37d9-a721-d5af22df8ec8.roa (raw, json) Hash identifier: lg24YOAmbr0SIl4TV2WJ0xyS8vaa9O2nYnCLfeCHHUk= Subject key identifier: E0:9D:8F:96:AB:1A:7F:40:8C:8F:76:68:19:75:38:70:2E:46:9A:E1 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848A1362E5E0052267AE0438C80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5a1ccf24-4cca-37d9-a721-d5af22df8ec8.roa Signing time: Wed 22 Jan 2025 14:00:52 +0000 ROA not before: Wed 22 Jan 2025 14:00:52 +0000 ROA not after: Tue 22 Apr 2025 13:00:52 +0000 asID: 20940 IP address blocks: 2600:1406:2800::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a1:36:2e:5e:00:52:26:7a:e0:43:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 22 14:00:52 2025 GMT Not After : Apr 22 13:00:52 2025 GMT Subject: CN=7f97fe89-ec36-44fe-ab5e-13176860f97b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ea:80:b5:08:b5:fc:9c:c9:91:f8:42:f7:7e: a7:ca:bc:cb:65:db:25:96:b3:b9:ec:f5:82:5e:de: 4e:8e:15:f7:be:00:50:6d:90:cc:40:94:31:48:14: 86:ac:87:ae:b6:9f:16:ec:59:f8:78:79:cd:5e:57: 14:17:42:22:ea:17:4b:87:11:a4:cb:c7:82:aa:bd: 60:6f:d2:0d:5d:ed:55:99:ed:6e:be:76:e0:b8:22: cc:ec:92:75:d0:ad:8d:63:31:65:41:33:f2:c6:be: ab:76:1b:09:53:9e:43:79:8e:2a:c7:17:bf:28:3b: 69:b9:6f:7b:76:56:45:38:9b:cd:29:6a:1d:72:bf: 04:a8:89:47:36:f7:74:c2:b0:1e:87:c2:13:95:47: 7b:e7:2c:f0:ee:3e:ab:d1:2f:28:b5:66:91:91:8e: 0e:13:93:f3:e2:89:ac:38:c0:fb:58:7a:0f:66:32: 72:e1:54:19:cb:d6:53:50:a5:c7:c4:22:03:da:3c: 1b:6e:4b:c8:64:63:91:2a:01:38:19:64:2b:c0:65: 5a:40:ab:4f:b0:bc:06:7f:4d:2f:a1:7f:c3:9e:08: 1d:06:c3:ce:f3:6f:fd:60:b8:fc:0e:96:f7:d5:89: e4:2f:f2:d9:18:1c:48:36:59:15:40:86:95:ec:e1: 92:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:9D:8F:96:AB:1A:7F:40:8C:8F:76:68:19:75:38:70:2E:46:9A:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5a1ccf24-4cca-37d9-a721-d5af22df8ec8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1406:2800::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:bc:47:b4:8e:91:24:f5:b6:54:57:0e:80:83:89:bd:92:4c: 1a:60:99:48:42:df:79:ec:e0:9d:16:b6:73:12:08:18:46:3d: 38:de:19:ab:e3:1c:37:51:b6:2e:55:8a:9b:b7:09:9a:09:5b: 3b:fe:64:25:64:b2:37:f3:d3:62:18:68:c3:7c:77:48:8e:66: b5:dc:c2:47:68:17:83:bf:9a:44:73:48:a1:b8:6d:60:03:eb: c1:d4:17:ce:2c:18:77:82:a8:60:e3:53:cc:15:cd:ed:fe:d1: f3:19:76:85:fa:fa:00:07:6a:49:d0:27:b7:52:d4:81:9f:7e: 89:47:13:8a:db:40:68:a7:f1:e6:0e:12:77:09:2e:d4:85:cf: 7c:4a:a5:2b:d0:a3:d3:02:16:4a:a5:7e:d8:e4:b2:69:8f:59: f0:30:53:c5:1b:48:4f:31:29:ec:1c:08:bb:4b:61:f6:f3:05: fd:7f:c4:22:c0:c6:9e:97:7e:87:44:5a:82:f8:88:02:ad:95: 47:9c:28:e5:e4:bd:a4:c7:c4:f7:e6:1f:9e:b5:c1:2d:56:ac: 9a:0e:87:a2:60:dd:b2:cb:2e:65:a7:ef:e7:9f:b9:7a:b2:16: ab:d8:a7:47:33:16:10:77:da:ad:5e:b7:17:7b:9c:b1:ce:b3: 03:fb:d2:00 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEihNi5eAFImeuBDjIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyMjE0MDA1MloXDTI1MDQyMjEzMDA1MlowLzEtMCsGA1UEAxMk N2Y5N2ZlODktZWMzNi00NGZlLWFiNWUtMTMxNzY4NjBmOTdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+qAtQi1/JzJkfhC936nyrzLZdsllrO57PWC Xt5OjhX3vgBQbZDMQJQxSBSGrIeutp8W7Fn4eHnNXlcUF0Ii6hdLhxGky8eCqr1g b9INXe1Vme1uvnbguCLM7JJ10K2NYzFlQTPyxr6rdhsJU55DeY4qxxe/KDtpuW97 dlZFOJvNKWodcr8EqIlHNvd0wrAeh8ITlUd75yzw7j6r0S8otWaRkY4OE5Pz4oms OMD7WHoPZjJy4VQZy9ZTUKXHxCID2jwbbkvIZGORKgE4GWQrwGVaQKtPsLwGf00v oX/DnggdBsPO82/9YLj8Dpb31YnkL/LZGBxINlkVQIaV7OGS7QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOCdj5arGn9AjI92aBl1OHAuRprhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWExY2NmMjQtNGNjYS0z N2Q5LWE3MjEtZDVhZjIyZGY4ZWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUBigA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACW8R7SOkST1tlRXDoCDib2STBpgmUhC33ns4J0WtnMSCBhGPTje GavjHDdRti5Vipu3CZoJWzv+ZCVksjfz02IYaMN8d0iOZrXcwkdoF4O/mkRzSKG4 bWAD68HUF84sGHeCqGDjU8wVze3+0fMZdoX6+gAHaknQJ7dS1IGffolHE4rbQGin 8eYOEncJLtSFz3xKpSvQo9MCFkqlftjksmmPWfAwU8UbSE8xKewcCLtLYfbzBf1/ xCLAxp6XfodEWoL4iAKtlUecKOXkvaTHxPfmH561wS1WrJoOh6Jg3bLLLmWn7+ef uXqyFqvYp0czFhB32q1etxd7nLHOswP70gA= -----END CERTIFICATE-----Generated at Sat Apr 5 11:07:20 2025 by rpki-client