$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6fe33eed-824f-3a05-ac4c-2c52641a0cc8.roa File: 6fe33eed-824f-3a05-ac4c-2c52641a0cc8.roa (raw, json) Hash identifier: 49v0GgvhICRHuZxL/jMaV/B3sw25M8D9WpH0fT3VQnQ= Subject key identifier: FC:29:80:A2:18:D1:F3:7D:4E:C5:2B:3C:B2:67:EE:2E:78:79:67:7B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848A13631FBE6AE8E5E1EA05C00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6fe33eed-824f-3a05-ac4c-2c52641a0cc8.roa Signing time: Wed 22 Jan 2025 14:00:52 +0000 ROA not before: Wed 22 Jan 2025 14:00:52 +0000 ROA not after: Tue 22 Apr 2025 13:00:52 +0000 asID: 20940 IP address blocks: 2600:1417:9000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a1:36:31:fb:e6:ae:8e:5e:1e:a0:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 22 14:00:52 2025 GMT Not After : Apr 22 13:00:52 2025 GMT Subject: CN=73c5c5fd-da7e-4c8f-9a05-e2ded9162870 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:ac:25:ce:69:0e:4e:a6:6d:71:21:65:07:03: 83:f9:d8:3c:7e:ed:8a:24:94:60:5e:6e:d0:00:a7: 6b:37:5e:f1:85:76:f2:a7:8c:1f:66:59:80:38:8d: 3d:97:a0:93:ea:de:cd:fc:bc:df:bc:09:6a:4a:74: d5:49:69:6a:db:48:13:f0:5b:eb:5a:4f:fd:e9:8d: 45:04:0d:d0:aa:ee:4a:74:2c:e3:67:bd:d4:0d:28: 3a:17:6d:f6:f6:51:ec:b3:a2:5c:df:90:82:e2:2e: 4e:85:db:1a:33:3f:c7:f8:5e:69:06:76:2e:2a:35: 09:66:50:bc:43:84:4e:82:ae:92:e7:b6:86:76:0a: bf:bb:bc:a4:b8:9f:2d:3f:ac:a9:7e:0e:cc:72:79: 55:36:9a:d2:4f:0c:08:36:d3:0f:79:ab:f0:e1:b4: d7:da:13:1c:fc:02:fa:da:4c:26:b9:e5:43:ba:04: e1:da:cd:de:7a:62:67:b7:a3:83:55:fb:76:f1:16: a4:bd:3c:f9:e0:6f:0a:18:cf:d9:92:22:94:58:d1: a1:e8:ad:8c:2d:01:d2:88:2f:18:b2:27:da:ff:2c: 2a:f8:29:49:f1:47:f2:f9:b6:0e:ee:6d:22:2e:11: c2:97:2a:7c:02:0f:a0:b7:73:ed:d6:59:dc:2a:f5: db:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:29:80:A2:18:D1:F3:7D:4E:C5:2B:3C:B2:67:EE:2E:78:79:67:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6fe33eed-824f-3a05-ac4c-2c52641a0cc8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1417:9000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:74:97:60:ef:0c:9f:8d:fd:4d:b3:26:44:fb:5a:19:ce:47: 68:60:75:9a:ca:b3:ee:93:09:27:38:1b:44:26:69:1c:ee:c1: 8b:b2:a7:2f:c5:76:d5:83:e2:1a:4d:84:9d:19:f2:b0:2f:d6: 1a:d8:54:a7:0c:99:19:99:aa:ca:8b:94:70:8e:5b:ac:65:39: c8:75:92:0e:36:2e:bc:f2:39:cf:bc:8f:79:53:d7:a4:7c:3b: 15:0e:da:5d:22:d3:df:04:9e:84:60:08:dd:71:e2:9c:10:cd: 1b:d3:00:a4:6e:35:f4:a0:e0:56:39:00:65:82:b0:71:11:3b: 71:de:13:70:93:7b:4e:33:c8:36:4d:a0:12:b4:23:6e:83:3b: 04:d5:d7:20:87:3c:c5:88:8f:2d:8f:75:41:32:6d:0b:33:d9: 7a:7f:c4:e2:f5:6f:46:9b:8e:d4:1c:fc:29:75:c5:7e:dd:be: a0:fa:73:7a:6b:3e:a1:06:23:88:5c:9f:11:87:ce:43:5f:dc: 39:ba:62:7c:c9:6b:8a:df:a7:fb:10:d1:56:98:69:b0:a6:67: 1f:b6:4a:d2:83:cb:7a:1b:42:53:9f:a5:c8:f7:79:67:6c:db: 07:0c:64:7f:9b:88:50:a8:ca:7e:8a:3e:11:25:4c:76:4f:bd: b2:66:77:2f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEihNjH75q6OXh6gXAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyMjE0MDA1MloXDTI1MDQyMjEzMDA1MlowLzEtMCsGA1UEAxMk NzNjNWM1ZmQtZGE3ZS00YzhmLTlhMDUtZTJkZWQ5MTYyODcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA36wlzmkOTqZtcSFlBwOD+dg8fu2KJJRgXm7Q AKdrN17xhXbyp4wfZlmAOI09l6CT6t7N/LzfvAlqSnTVSWlq20gT8FvrWk/96Y1F BA3Qqu5KdCzjZ73UDSg6F2329lHss6Jc35CC4i5OhdsaMz/H+F5pBnYuKjUJZlC8 Q4ROgq6S57aGdgq/u7ykuJ8tP6ypfg7McnlVNprSTwwINtMPeavw4bTX2hMc/AL6 2kwmueVDugTh2s3eemJnt6ODVft28RakvTz54G8KGM/ZkiKUWNGh6K2MLQHSiC8Y sifa/ywq+ClJ8Ufy+bYO7m0iLhHClyp8Ag+gt3Pt1lncKvXbuwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPwpgKIY0fN9TsUrPLJn7i54eWd7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNmZlMzNlZWQtODI0Zi0z YTA1LWFjNGMtMmM1MjY0MWEwY2M4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUF5AA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADN0l2DvDJ+N/U2zJkT7WhnOR2hgdZrKs+6TCSc4G0QmaRzuwYuy py/FdtWD4hpNhJ0Z8rAv1hrYVKcMmRmZqsqLlHCOW6xlOch1kg42LrzyOc+8j3lT 16R8OxUO2l0i098EnoRgCN1x4pwQzRvTAKRuNfSg4FY5AGWCsHERO3HeE3CTe04z yDZNoBK0I26DOwTV1yCHPMWIjy2PdUEybQsz2Xp/xOL1b0abjtQc/Cl1xX7dvqD6 c3prPqEGI4hcnxGHzkNf3Dm6YnzJa4rfp/sQ0VaYabCmZx+2StKDy3obQlOfpcj3 eWds2wcMZH+biFCoyn6KPhElTHZPvbJmdy8= -----END CERTIFICATE-----Generated at Sat Apr 5 10:56:04 2025 by rpki-client