$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5e13d905-baf1-3709-88da-a55f2b0b3761.roa File: 5e13d905-baf1-3709-88da-a55f2b0b3761.roa (raw, json) Hash identifier: BpMxcuQ2V89tmynkIe8S19VRDcZhj/giyYi1M5O/TQA= Subject key identifier: EA:4D:20:08:F2:4C:07:41:BB:2F:D4:43:39:B4:C7:34:66:D2:C1:58 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848AC60D80A4412CC0FB33E3100 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5e13d905-baf1-3709-88da-a55f2b0b3761.roa Signing time: Sun 26 Jan 2025 14:00:52 +0000 ROA not before: Sun 26 Jan 2025 14:00:52 +0000 ROA not after: Sat 26 Apr 2025 13:00:52 +0000 asID: 35994 IP address blocks: 2600:1408:2c00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ac:60:d8:0a:44:12:cc:0f:b3:3e:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 26 14:00:52 2025 GMT Not After : Apr 26 13:00:52 2025 GMT Subject: CN=e698230b-f2a4-4528-aecf-dab4e467c777 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:8b:d1:9c:5c:56:73:1e:19:48:32:2c:08:4f: 1f:08:04:08:72:ee:4b:f5:d4:d9:0c:29:ab:cc:8e: 76:90:dd:70:50:ee:ec:6a:c8:fc:65:20:f5:22:ac: 6b:c8:df:51:3a:8f:58:98:7f:42:55:d2:ab:ca:9b: 8a:e8:56:68:4c:c9:3f:b7:fb:f4:59:71:2c:51:07: 0f:87:45:45:68:52:61:0b:6d:c0:29:b6:be:24:4b: d5:2f:fd:be:c7:16:b4:35:ae:9a:92:87:a9:f4:22: 70:08:1a:5e:7c:26:9d:bd:a2:d8:fa:f0:b6:2d:85: e9:2c:00:42:f5:5f:58:af:84:5a:66:2b:0f:42:80: 51:d2:59:7f:3e:20:86:6b:09:59:ca:38:9d:f3:05: 61:c8:e9:48:40:44:51:3c:e8:97:9f:d8:6b:6d:2c: 76:e3:bd:50:62:0d:3d:a4:74:c1:60:96:0a:aa:a5: de:3a:01:89:30:79:2d:2d:dc:fd:c1:8e:51:2e:53: ab:ae:15:a7:c0:e6:40:56:a6:28:b6:b7:8b:10:a2: 2c:5d:5f:f7:13:64:b0:66:62:d7:37:cd:51:49:12: 40:81:b4:33:39:57:bc:c1:0c:eb:df:ca:2b:bc:57: f9:9b:82:e9:41:1e:57:b5:56:67:78:32:4c:05:2c: 3d:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:4D:20:08:F2:4C:07:41:BB:2F:D4:43:39:B4:C7:34:66:D2:C1:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5e13d905-baf1-3709-88da-a55f2b0b3761.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1408:2c00::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:34:04:4e:87:eb:ce:86:a5:30:20:42:87:2e:57:6d:0c:1f: 58:a3:78:12:3a:e5:fa:13:29:e1:2c:77:d0:40:20:2a:8e:ae: e7:0e:42:90:e7:ad:63:a6:df:18:db:c9:c2:ff:69:9d:ca:b1: 88:85:4d:cc:3a:ac:d5:c6:7d:2f:14:92:e7:63:ff:5d:d0:3f: ea:48:9a:b4:51:3e:27:33:b8:da:9a:66:ba:a3:ee:b8:98:98: 40:84:eb:c4:22:ea:af:44:cd:76:27:21:09:77:b7:53:44:18: 86:45:0f:10:1a:2b:4e:dc:18:73:f1:25:4c:ed:da:4d:a4:aa: c3:7b:01:19:57:17:06:22:9b:9f:f4:e4:1b:94:9b:36:48:90: 39:4c:0d:d8:c2:39:9a:13:64:d4:30:2c:27:28:82:96:95:33: 1a:39:10:e0:40:f5:c2:a4:07:70:60:7a:fd:78:c1:7c:39:1c: 04:c0:24:68:3e:c8:e9:31:aa:a0:0d:91:0a:24:2d:bb:6d:36: 54:71:75:25:86:17:81:95:64:dc:60:c7:b0:ec:03:21:87:d2: 2b:26:55:59:8e:16:54:91:f0:f5:7c:01:87:48:0e:67:d8:76: 55:33:b5:55:27:a0:2d:fd:be:a8:ab:0f:5b:81:18:d8:fd:d0: 27:a3:3a:77 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEisYNgKRBLMD7M+MQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyNjE0MDA1MloXDTI1MDQyNjEzMDA1MlowLzEtMCsGA1UEAxMk ZTY5ODIzMGItZjJhNC00NTI4LWFlY2YtZGFiNGU0NjdjNzc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4vRnFxWcx4ZSDIsCE8fCAQIcu5L9dTZDCmr zI52kN1wUO7sasj8ZSD1IqxryN9ROo9YmH9CVdKrypuK6FZoTMk/t/v0WXEsUQcP h0VFaFJhC23AKba+JEvVL/2+xxa0Na6akoep9CJwCBpefCadvaLY+vC2LYXpLABC 9V9Yr4RaZisPQoBR0ll/PiCGawlZyjid8wVhyOlIQERRPOiXn9hrbSx2471QYg09 pHTBYJYKqqXeOgGJMHktLdz9wY5RLlOrrhWnwOZAVqYotreLEKIsXV/3E2SwZmLX N81RSRJAgbQzOVe8wQzr38orvFf5m4LpQR5XtVZneDJMBSw91wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOpNIAjyTAdBuy/UQzm0xzRm0sFYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWUxM2Q5MDUtYmFmMS0z NzA5LTg4ZGEtYTU1ZjJiMGIzNzYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUCCwA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIg0BE6H686GpTAgQocuV20MH1ijeBI65foTKeEsd9BAICqOrucO QpDnrWOm3xjbycL/aZ3KsYiFTcw6rNXGfS8Ukudj/13QP+pImrRRPiczuNqaZrqj 7riYmECE68Qi6q9EzXYnIQl3t1NEGIZFDxAaK07cGHPxJUzt2k2kqsN7ARlXFwYi m5/05BuUmzZIkDlMDdjCOZoTZNQwLCcogpaVMxo5EOBA9cKkB3Bgev14wXw5HATA JGg+yOkxqqANkQokLbttNlRxdSWGF4GVZNxgx7DsAyGH0ismVVmOFlSR8PV8AYdI DmfYdlUztVUnoC39vqirD1uBGNj90CejOnc= -----END CERTIFICATE-----Generated at Sat Apr 5 11:01:38 2025 by rpki-client