$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5dba420f-9cf2-3712-a603-ddcda508b950.roa File: 5dba420f-9cf2-3712-a603-ddcda508b950.roa (raw, json) Hash identifier: UIWznD6wwDXTXW/WxvO74u5YcnKK0zdKmVbDPe3k/74= Subject key identifier: AB:8B:22:5D:98:D7:49:11:22:45:C4:83:6C:CC:95:C4:F9:93:93:42 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848FD56A8119B6FBA80F40DC920 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5dba420f-9cf2-3712-a603-ddcda508b950.roa Signing time: Mon 24 Feb 2025 14:00:52 +0000 ROA not before: Mon 24 Feb 2025 14:00:52 +0000 ROA not after: Sun 25 May 2025 13:00:52 +0000 asID: 12222 IP address blocks: 2001:4878:2215::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:56:a8:11:9b:6f:ba:80:f4:0d:c9:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 24 14:00:52 2025 GMT Not After : May 25 13:00:52 2025 GMT Subject: CN=6c14d4a2-a2af-4494-a52c-9064f5b1abf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:16:25:43:58:b6:d7:f2:c3:c2:7d:d2:58:ef: 6e:99:ab:80:a2:e7:2c:1a:66:8a:b0:ff:44:a2:0b: 7e:50:92:55:c7:f7:58:6e:ac:30:17:0c:95:70:93: f9:65:82:9c:62:a8:34:cd:6c:94:b0:49:ad:01:61: 17:ec:46:d0:94:34:6d:0b:99:fc:e3:b9:69:41:3b: a9:29:8d:d1:80:d4:f7:de:09:3b:2e:ba:cd:b8:92: b2:cc:d8:50:a7:fa:30:87:f5:80:41:55:ed:68:d3: 2b:71:e1:82:3e:29:59:fd:3a:c3:26:70:2a:c5:fa: 10:f7:26:c7:98:f3:80:4a:05:bd:9a:77:82:9e:fa: 42:0f:96:f0:9b:c6:96:f5:46:88:dd:27:60:b8:f6: b7:27:25:54:f5:fa:b0:9c:6d:f0:f8:b9:08:15:1f: c1:22:e8:b0:65:0d:38:0c:ec:28:cc:12:fa:b0:36: 87:a5:8c:78:66:c7:db:58:cc:a3:28:db:23:00:c5: f9:75:00:22:66:6f:da:6b:9f:f9:6e:c8:a9:62:7e: 2e:77:7b:79:1d:c4:5c:92:6e:43:79:78:fd:0b:f0: 6f:fc:f6:29:29:12:bc:20:91:94:a7:3c:08:3b:6d: 1e:f5:ab:9d:05:e2:b4:d9:8f:33:bf:29:3f:ac:67: fe:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:8B:22:5D:98:D7:49:11:22:45:C4:83:6C:CC:95:C4:F9:93:93:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5dba420f-9cf2-3712-a603-ddcda508b950.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2001:4878:2215::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:79:b9:1c:66:ef:57:15:a5:12:af:7b:9e:7b:91:02:cd:ea: 75:b9:cd:38:2a:0e:58:fc:b1:40:15:5d:8e:7b:cb:a7:7e:84: 08:83:86:09:9c:17:3a:32:58:45:cb:94:a4:af:0c:a0:13:8a: a1:ca:a7:02:23:b0:80:3f:1e:fa:af:a8:b3:fd:00:f6:15:20: a6:81:df:30:5b:33:66:9b:f6:03:ff:57:63:6b:45:12:56:35: a2:84:4a:ca:3c:de:81:e8:7a:74:0d:39:92:d6:20:1f:58:29: 3e:fe:e7:8b:e9:a5:cd:d8:83:64:46:d0:64:07:23:f7:4c:ce: 22:b3:a3:6a:2f:27:3b:04:2b:98:a1:63:96:b8:04:7a:f0:53: a7:61:65:d1:e9:43:0d:2c:dd:e6:ed:00:01:d0:f2:88:03:aa: 93:3b:e3:70:7e:30:c9:57:63:35:fd:fb:bf:93:a5:e8:71:4c: 5a:85:a1:18:fc:46:bb:b0:fb:e6:aa:83:29:c6:f2:88:f7:00: 9f:7c:98:ec:63:65:9d:58:fa:44:c3:04:ef:d1:82:36:20:3c: b6:96:0a:9d:26:14:99:c7:2c:49:18:fd:7f:3f:8e:4d:12:96: 60:1d:dc:74:59:ed:f7:03:4a:4b:b2:9e:fb:5a:6a:8f:4b:11: 98:86:49:05 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj9VqgRm2+6gPQNySAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk NmMxNGQ0YTItYTJhZi00NDk0LWE1MmMtOTA2NGY1YjFhYmYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBYlQ1i21/LDwn3SWO9umauAoucsGmaKsP9E ogt+UJJVx/dYbqwwFwyVcJP5ZYKcYqg0zWyUsEmtAWEX7EbQlDRtC5n847lpQTup KY3RgNT33gk7LrrNuJKyzNhQp/owh/WAQVXtaNMrceGCPilZ/TrDJnAqxfoQ9ybH mPOASgW9mneCnvpCD5bwm8aW9UaI3SdguPa3JyVU9fqwnG3w+LkIFR/BIuiwZQ04 DOwozBL6sDaHpYx4ZsfbWMyjKNsjAMX5dQAiZm/aa5/5bsipYn4ud3t5HcRckm5D eXj9C/Bv/PYpKRK8IJGUpzwIO20e9audBeK02Y8zvyk/rGf+kwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKuLIl2Y10kRIkXEg2zMlcT5k5NCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWRiYTQyMGYtOWNmMi0z NzEyLWE2MDMtZGRjZGE1MDhiOTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIeCIV MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADh5uRxm71cVpRKve557kQLN6nW5zTgqDlj8sUAVXY57y6d+hAiD hgmcFzoyWEXLlKSvDKATiqHKpwIjsIA/HvqvqLP9APYVIKaB3zBbM2ab9gP/V2Nr RRJWNaKESso83oHoenQNOZLWIB9YKT7+54vppc3Yg2RG0GQHI/dMziKzo2ovJzsE K5ihY5a4BHrwU6dhZdHpQw0s3ebtAAHQ8ogDqpM743B+MMlXYzX9+7+TpehxTFqF oRj8Rruw++aqgynG8oj3AJ98mOxjZZ1Y+kTDBO/RgjYgPLaWCp0mFJnHLEkY/X8/ jk0SlmAd3HRZ7fcDSkuynvtaao9LEZiGSQU= -----END CERTIFICATE-----Generated at Sat Apr 5 10:59:29 2025 by rpki-client