$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/689b1f82-c2e0-37ad-a894-b8b3337a4f2b.roa File: 689b1f82-c2e0-37ad-a894-b8b3337a4f2b.roa (raw, json) Hash identifier: UybPi1bF1gtErFN2EknSFkJQni2Y0iDcqtvBj7KflOc= Subject key identifier: 9D:F3:02:1A:2A:94:B6:A7:58:23:44:3F:24:B0:A3:33:9C:EE:59:6F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848A996656E60B4F834CD574180 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/689b1f82-c2e0-37ad-a894-b8b3337a4f2b.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 20940 IP address blocks: 2600:1488:a140::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:65:6e:60:b4:f8:34:cd:57:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=a9b14366-93db-453b-b810-4a2e7fdd6361 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:97:ad:de:2e:8a:c6:07:4e:1f:ba:63:ed:ec: 55:d3:1e:82:50:ed:81:0f:b7:b8:7a:cb:9d:5b:bc: e8:f5:e7:2b:bb:6a:5b:79:87:23:63:8b:b1:d3:09: 68:86:ed:37:84:2d:ff:b7:b1:90:3c:82:20:27:f5: 82:88:7c:73:e9:85:1c:7c:06:70:ca:05:e7:f0:c8: 6e:d2:a2:43:8d:a4:6a:48:3a:bf:8f:61:ab:e7:2d: 37:83:47:33:c2:5c:02:ff:e6:46:b1:e9:dc:6d:ec: f0:19:34:ff:7d:08:4b:8f:2e:e5:7f:19:d1:de:60: b6:06:b4:40:ff:48:55:ac:8b:5b:73:22:93:e1:4d: dc:d4:06:22:2c:68:98:b4:65:65:6f:4d:f4:71:25: 87:1c:8c:6e:c7:62:56:a4:ab:45:66:69:f8:bc:7d: 17:76:06:31:6a:9f:cf:7f:7e:2f:11:d7:98:a3:50: 36:6c:e3:fa:1e:36:f8:22:e7:48:42:a9:89:02:b8: 85:94:bf:5b:e1:bc:f2:f4:5a:cb:7d:3d:93:fd:97: 0f:f2:17:5f:16:c0:e7:f7:30:a7:11:60:35:5c:bf: dd:59:ba:b6:ee:a4:e0:5d:ea:52:e6:62:e9:a9:81: db:e3:d0:e9:7f:cb:ea:b1:aa:7b:b0:6f:50:5a:24: b8:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:F3:02:1A:2A:94:B6:A7:58:23:44:3F:24:B0:A3:33:9C:EE:59:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/689b1f82-c2e0-37ad-a894-b8b3337a4f2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1488:a140::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:c6:6d:fb:52:c6:a4:62:d0:5c:7a:9a:1b:7d:2b:da:52:56: 50:40:2a:b5:c9:2d:87:b8:c7:1e:09:2b:b4:34:97:db:08:04: d3:fe:09:a8:6d:75:42:2a:21:f7:69:a5:ac:86:f9:4e:04:b6: 60:70:82:27:08:d6:0c:78:08:62:ac:d2:d6:c1:4b:21:4b:9c: 83:93:14:81:7d:2c:cb:0f:a2:67:31:5d:db:2b:ab:89:ff:ca: 6e:d0:77:f3:9e:93:d4:0d:ea:4c:5f:98:22:66:75:11:bb:22: 72:e7:cb:40:63:5c:37:d7:6c:32:14:22:d4:32:1e:90:dd:e0: 84:f0:86:1c:af:1c:5d:7d:41:74:ed:84:82:40:72:c4:5b:5c: 87:2b:c5:29:e9:82:11:25:e7:9e:10:08:55:b8:ed:13:ae:5b: e3:f0:e3:e2:5e:86:28:77:53:51:46:94:97:59:d8:9e:6e:10: 65:7a:3e:6f:be:57:fb:2f:01:5c:af:9a:23:46:3f:55:81:a5: b1:29:26:d9:1d:21:2c:d4:a8:f7:7f:47:db:a2:8e:d0:b9:c6: 72:b2:bc:4b:ee:85:4c:0f:c4:a8:ac:4c:1d:e1:fe:08:59:3a: 0a:04:09:c5:57:07:e1:ef:50:03:c4:f0:78:aa:5e:fc:01:ab: e4:07:26:b8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiplmVuYLT4NM1XQYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk YTliMTQzNjYtOTNkYi00NTNiLWI4MTAtNGEyZTdmZGQ2MzYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpet3i6KxgdOH7pj7exV0x6CUO2BD7e4esud W7zo9ecru2pbeYcjY4ux0wlohu03hC3/t7GQPIIgJ/WCiHxz6YUcfAZwygXn8Mhu 0qJDjaRqSDq/j2Gr5y03g0czwlwC/+ZGsencbezwGTT/fQhLjy7lfxnR3mC2BrRA /0hVrItbcyKT4U3c1AYiLGiYtGVlb030cSWHHIxux2JWpKtFZmn4vH0XdgYxap/P f34vEdeYo1A2bOP6Hjb4IudIQqmJAriFlL9b4bzy9FrLfT2T/ZcP8hdfFsDn9zCn EWA1XL/dWbq27qTgXepS5mLpqYHb49Dpf8vqsap7sG9QWiS4LwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJ3zAhoqlLanWCNEPySwozOc7llvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjg5YjFmODItYzJlMC0z N2FkLWE4OTQtYjhiMzMzN2E0ZjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUiKFA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFzGbftSxqRi0Fx6mht9K9pSVlBAKrXJLYe4xx4JK7Q0l9sIBNP+ CahtdUIqIfdppayG+U4EtmBwgicI1gx4CGKs0tbBSyFLnIOTFIF9LMsPomcxXdsr q4n/ym7Qd/Oek9QN6kxfmCJmdRG7InLny0BjXDfXbDIUItQyHpDd4ITwhhyvHF19 QXTthIJAcsRbXIcrxSnpghEl554QCFW47ROuW+Pw4+Jehih3U1FGlJdZ2J5uEGV6 Pm++V/svAVyvmiNGP1WBpbEpJtkdISzUqPd/R9uijtC5xnKyvEvuhUwPxKisTB3h /ghZOgoECcVXB+HvUAPE8HiqXvwBq+QHJrg= -----END CERTIFICATE-----Generated at Sat Apr 5 11:03:28 2025 by rpki-client