$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5bad5abb-384d-31ac-bc1f-6a74f43ed429.roa File: 5bad5abb-384d-31ac-bc1f-6a74f43ed429.roa (raw, json) Hash identifier: 38SzpKidMhCYQfEPCoEqNXzNZsEtlKOJlAkTcdx70EU= Subject key identifier: 31:AE:2C:9D:BF:19:AB:04:3A:68:09:7B:1E:41:12:D8:BE:13:F7:71 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848A9963657B08BBE2C50C26F00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5bad5abb-384d-31ac-bc1f-6a74f43ed429.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 20940 IP address blocks: 2600:1488:4040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:36:57:b0:8b:be:2c:50:c2:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=ac8b458d-7255-4bda-8119-defea01c946e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:72:ac:a9:57:4b:c3:cf:a4:d4:2b:73:73:10: 86:d9:dd:ca:55:ea:86:d6:8e:34:be:3a:c7:7b:fa: 48:bb:ba:02:c4:7f:cf:b5:3f:c4:c8:4d:e2:cc:b4: 1e:eb:ec:58:a0:6c:d4:42:de:ef:16:22:0c:24:c0: a7:8e:c5:fa:1c:80:95:67:c9:92:26:c8:7d:87:01: 49:4f:a1:c8:ed:5d:4f:91:1f:cb:7d:98:69:7f:84: 45:0b:1e:e8:cb:d6:73:c6:ed:44:bf:24:9c:f3:b3: f4:b4:2a:f6:2d:24:2c:c5:a8:cc:4d:65:a7:53:d8: 81:f6:3e:09:2e:bd:6d:6f:67:27:a5:6a:e4:53:07: ed:7f:92:02:f9:4a:56:bf:ce:03:c5:5b:f1:6f:2f: 30:67:d8:ef:5a:7a:78:fb:60:d8:53:16:8a:9d:6a: 59:76:c3:46:63:75:0c:06:0c:e3:09:c2:77:47:76: 14:3e:ec:1f:04:e4:e8:d4:49:59:32:d3:d2:5c:bf: f4:cd:99:12:81:ee:d7:12:4f:41:35:d6:95:b2:7c: a0:e1:ea:2b:17:b4:a2:e1:72:c4:bc:65:57:75:2b: d4:68:83:3d:cb:7e:06:87:7b:e9:c2:70:e2:d7:1c: 7d:b6:ac:c6:f6:1b:63:af:88:fd:9b:81:ce:77:b9: 88:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:AE:2C:9D:BF:19:AB:04:3A:68:09:7B:1E:41:12:D8:BE:13:F7:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5bad5abb-384d-31ac-bc1f-6a74f43ed429.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1488:4040::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:b6:66:14:63:0d:91:e8:75:44:51:21:13:07:cb:c8:ba:6c: 50:9c:0d:c2:fe:2d:5f:7a:2c:6f:26:ea:86:22:ed:b6:da:be: 4d:90:8e:47:dc:00:70:38:63:fe:cf:e4:57:89:38:62:70:8e: 7b:38:7d:57:aa:e1:9a:e9:57:7c:18:34:f0:82:9b:6f:62:ea: 80:0c:8c:ac:bf:eb:07:d0:df:f3:b2:65:a1:96:0b:92:4b:01: 12:8c:cd:83:12:e9:cf:d5:40:c0:55:87:4f:f0:89:bd:94:a6: 50:06:8c:90:94:81:39:d9:48:af:80:92:cc:31:10:cf:66:76: 82:f7:a3:86:5c:f4:65:e0:70:89:ee:ae:0f:7a:a0:38:bf:f5: f5:64:75:5f:b4:eb:27:a4:ee:64:3c:38:2d:19:87:aa:f1:c7: 4a:a8:d7:d4:ed:a4:44:16:64:15:f9:1d:b5:47:9a:61:b0:cc: bc:7f:fb:5f:08:b2:3b:21:b0:83:93:54:60:52:f6:5f:ab:10: bf:b0:5d:93:bf:6c:84:4a:1e:c6:68:8d:ba:01:f5:5d:cf:b7: ee:16:4f:ba:1e:b5:75:d4:a6:bf:bc:66:f8:7f:6b:75:00:bc: 01:87:81:b3:9e:fc:65:fd:dc:0f:01:44:8f:da:0b:f5:e6:55: 00:96:56:60 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEipljZXsIu+LFDCbwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk YWM4YjQ1OGQtNzI1NS00YmRhLTgxMTktZGVmZWEwMWM5NDZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3KsqVdLw8+k1CtzcxCG2d3KVeqG1o40vjrH e/pIu7oCxH/PtT/EyE3izLQe6+xYoGzUQt7vFiIMJMCnjsX6HICVZ8mSJsh9hwFJ T6HI7V1PkR/LfZhpf4RFCx7oy9Zzxu1EvySc87P0tCr2LSQsxajMTWWnU9iB9j4J Lr1tb2cnpWrkUwftf5IC+UpWv84DxVvxby8wZ9jvWnp4+2DYUxaKnWpZdsNGY3UM BgzjCcJ3R3YUPuwfBOTo1ElZMtPSXL/0zZkSge7XEk9BNdaVsnyg4eorF7Si4XLE vGVXdSvUaIM9y34Gh3vpwnDi1xx9tqzG9htjr4j9m4HOd7mIGQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDGuLJ2/GasEOmgJex5BEti+E/dxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWJhZDVhYmItMzg0ZC0z MWFjLWJjMWYtNmE3NGY0M2VkNDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUiEBA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIO2ZhRjDZHodURRIRMHy8i6bFCcDcL+LV96LG8m6oYi7bbavk2Q jkfcAHA4Y/7P5FeJOGJwjns4fVeq4ZrpV3wYNPCCm29i6oAMjKy/6wfQ3/OyZaGW C5JLARKMzYMS6c/VQMBVh0/wib2UplAGjJCUgTnZSK+AkswxEM9mdoL3o4Zc9GXg cInurg96oDi/9fVkdV+06yek7mQ8OC0Zh6rxx0qo19TtpEQWZBX5HbVHmmGwzLx/ +18IsjshsIOTVGBS9l+rEL+wXZO/bIRKHsZojboB9V3Pt+4WT7oetXXUpr+8Zvh/ a3UAvAGHgbOe/GX93A8BRI/aC/XmVQCWVmA= -----END CERTIFICATE-----Generated at Sat Apr 5 11:10:32 2025 by rpki-client