$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5a811752-3689-3963-9b75-f65715250368.roa File: 5a811752-3689-3963-9b75-f65715250368.roa (raw, json) Hash identifier: pTzxVq9eDFk/eb9NT0z7NFRjYoXJA70mNr+m7cFUIVY= Subject key identifier: 83:85:B8:3F:08:55:AE:57:52:0B:74:C0:3F:EA:B9:41:E0:AB:08:25 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848A13623F5022A4E54CD78C140 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5a811752-3689-3963-9b75-f65715250368.roa Signing time: Wed 22 Jan 2025 14:00:52 +0000 ROA not before: Wed 22 Jan 2025 14:00:52 +0000 ROA not after: Tue 22 Apr 2025 13:00:52 +0000 asID: 20940 IP address blocks: 2600:1406:6200::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a1:36:23:f5:02:2a:4e:54:cd:78:c1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 22 14:00:52 2025 GMT Not After : Apr 22 13:00:52 2025 GMT Subject: CN=c3742bc8-84af-45cc-95cd-61f27d4b6d78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d5:52:77:10:88:5f:c3:7a:c7:a1:91:fd:ee: 4a:3f:56:51:87:2c:87:6b:68:86:5d:c2:f6:47:3c: 74:05:3e:60:4f:b7:5a:be:c8:4d:6a:6f:7c:7c:fe: 62:df:d1:00:d7:08:e4:4e:26:87:0a:f7:16:5f:20: c3:6d:21:50:9a:1a:0d:28:fa:7d:f2:1b:2f:49:af: 65:f3:ba:62:69:bc:0b:2d:d5:aa:8f:31:86:d9:a9: 54:e9:9c:70:02:c6:8e:9b:85:02:5d:69:98:87:bb: b0:ec:a5:d6:46:7a:09:76:e2:49:f4:5d:38:de:cc: 3b:50:86:99:72:06:93:bb:02:92:09:29:e9:c7:60: 77:fd:2a:49:e1:50:21:6a:18:34:b8:18:fd:99:39: fd:24:ec:77:3e:ef:15:64:6a:a6:5a:76:42:88:da: 5e:a6:de:ec:8b:6f:ac:12:c1:06:b9:6c:23:e6:13: 62:bd:74:ce:3e:af:b0:3a:40:7a:5e:14:de:c8:bc: 47:83:50:c0:cf:ba:11:a7:db:01:6e:3f:c2:ef:e0: c6:fa:19:62:c8:5d:23:32:ba:11:a9:03:c3:1f:13: 58:f6:02:25:de:99:ff:c3:aa:82:2f:ce:37:9f:54: a3:a6:c6:04:15:2d:2f:fa:ac:98:6d:6a:98:ec:ec: a9:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:85:B8:3F:08:55:AE:57:52:0B:74:C0:3F:EA:B9:41:E0:AB:08:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5a811752-3689-3963-9b75-f65715250368.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1406:6200::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:cd:7d:63:3d:e6:50:fe:72:b1:18:ba:b6:11:68:e4:60:0f: 88:f5:d8:21:a3:ed:e8:1b:ba:2b:b4:5a:62:a2:9a:26:b7:d4: ef:7e:a1:33:56:2f:3c:7c:78:f3:b0:bb:c0:2f:b1:88:f2:bf: f6:f4:5f:49:a5:77:5c:fb:62:cf:a3:30:23:a3:c0:b5:69:45: 85:0f:99:23:96:9c:a1:f6:c0:33:0e:10:a5:98:48:d4:f6:cd: 64:68:85:ad:77:45:ba:68:be:47:08:60:2a:c8:d2:2e:24:8a: f3:d7:70:e9:18:74:94:9e:40:24:c8:a5:5e:44:d7:f9:00:b0: d6:12:f0:a7:75:0c:e4:ff:5d:82:a7:72:dc:63:e5:d6:21:d5: bd:b0:dc:12:1b:ed:cd:7b:4c:20:da:61:3e:75:7c:ee:bd:57: 25:c8:df:c8:ee:12:80:03:e7:04:f9:8d:89:a3:85:96:2d:a5: 6c:8a:37:d6:e0:ff:87:01:3c:d3:e6:e7:ab:4c:93:85:78:1a: 51:ca:63:a2:39:de:ce:81:e4:1d:46:d4:ce:79:4e:cd:e3:3f: a8:5f:09:71:5a:bf:05:bd:78:e8:65:52:e0:66:09:e4:8f:cc: ff:55:a5:6f:19:c8:0c:10:40:5c:0d:aa:ff:8d:8a:c2:c5:3e: 71:1c:16:f8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEihNiP1AipOVM14wUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyMjE0MDA1MloXDTI1MDQyMjEzMDA1MlowLzEtMCsGA1UEAxMk YzM3NDJiYzgtODRhZi00NWNjLTk1Y2QtNjFmMjdkNGI2ZDc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstVSdxCIX8N6x6GR/e5KP1ZRhyyHa2iGXcL2 Rzx0BT5gT7davshNam98fP5i39EA1wjkTiaHCvcWXyDDbSFQmhoNKPp98hsvSa9l 87piabwLLdWqjzGG2alU6ZxwAsaOm4UCXWmYh7uw7KXWRnoJduJJ9F043sw7UIaZ cgaTuwKSCSnpx2B3/SpJ4VAhahg0uBj9mTn9JOx3Pu8VZGqmWnZCiNpept7si2+s EsEGuWwj5hNivXTOPq+wOkB6XhTeyLxHg1DAz7oRp9sBbj/C7+DG+hliyF0jMroR qQPDHxNY9gIl3pn/w6qCL843n1SjpsYEFS0v+qyYbWqY7OypfwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIOFuD8IVa5XUgt0wD/quUHgqwglMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWE4MTE3NTItMzY4OS0z OTYzLTliNzUtZjY1NzE1MjUwMzY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUBmIA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADLNfWM95lD+crEYurYRaORgD4j12CGj7egbuiu0WmKimia31O9+ oTNWLzx8ePOwu8AvsYjyv/b0X0mld1z7Ys+jMCOjwLVpRYUPmSOWnKH2wDMOEKWY SNT2zWRoha13RbpovkcIYCrI0i4kivPXcOkYdJSeQCTIpV5E1/kAsNYS8Kd1DOT/ XYKnctxj5dYh1b2w3BIb7c17TCDaYT51fO69VyXI38juEoAD5wT5jYmjhZYtpWyK N9bg/4cBPNPm56tMk4V4GlHKY6I53s6B5B1G1M55Ts3jP6hfCXFavwW9eOhlUuBm CeSPzP9VpW8ZyAwQQFwNqv+NisLFPnEcFvg= -----END CERTIFICATE-----Generated at Sat Apr 5 13:24:54 2025 by rpki-client