$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/73e4ce41-0324-33ec-b174-42ccfbe157f2.roa File: 73e4ce41-0324-33ec-b174-42ccfbe157f2.roa (raw, json) Hash identifier: kZpd+I+v8Vi6D15310C5Fq5oK2CM87bkbHN4lK0Q0iM= Subject key identifier: 38:10:F1:5E:39:63:B6:1A:6A:A8:5B:B8:A8:30:D1:64:18:CF:A4:19 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848A1362C8B3D8BC295C9F06C80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/73e4ce41-0324-33ec-b174-42ccfbe157f2.roa Signing time: Wed 22 Jan 2025 14:00:52 +0000 ROA not before: Wed 22 Jan 2025 14:00:52 +0000 ROA not after: Tue 22 Apr 2025 13:00:52 +0000 asID: 20940 IP address blocks: 2600:1419:4e00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a1:36:2c:8b:3d:8b:c2:95:c9:f0:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 22 14:00:52 2025 GMT Not After : Apr 22 13:00:52 2025 GMT Subject: CN=67b91d67-3b4d-498e-a607-ebf1b1af45ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:75:ab:86:a3:32:32:a1:3c:e1:c5:d7:c1:23: fb:f2:de:30:5a:2f:03:3f:65:41:74:dc:5e:a7:8d: e8:0c:5d:91:4c:e0:83:38:50:e7:ed:26:22:ff:fb: cf:55:46:d9:92:72:45:f9:7d:93:9c:81:f8:21:7f: 8d:68:9b:d1:ad:f9:8f:50:1b:36:e2:d8:ec:13:1d: c6:77:da:24:7f:f8:6d:8c:e6:bd:6d:22:87:96:45: 10:df:4e:44:0e:06:3e:5e:f8:ba:e8:96:06:1f:19: ab:d0:82:d8:1b:6e:0b:56:08:e2:6c:07:5f:e1:34: 3e:79:03:60:28:bb:ac:da:8a:91:b8:86:5f:27:67: 97:3d:cb:59:b8:ca:38:ef:d7:ee:34:b8:2a:33:83: 37:cd:07:19:34:62:eb:fb:5d:0f:de:1b:10:d3:34: 35:d0:84:30:c2:22:06:ec:74:a0:81:f2:7b:95:29: 83:fc:69:7e:74:1b:a6:81:ff:2e:b0:29:cf:f3:cc: c8:24:5c:00:d9:ac:3e:70:ae:c8:fd:0e:ff:d9:80: cc:a7:a0:71:8e:2d:23:0c:54:3b:32:07:7b:20:56: d1:fb:e4:8f:ee:8d:8f:64:4c:21:08:ed:65:a1:22: 6a:37:2c:6b:9b:3b:f5:86:79:c5:42:02:60:84:f8: c6:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:10:F1:5E:39:63:B6:1A:6A:A8:5B:B8:A8:30:D1:64:18:CF:A4:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/73e4ce41-0324-33ec-b174-42ccfbe157f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1419:4e00::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:36:71:6e:93:39:82:e7:8f:df:4f:ac:ae:99:a4:8e:ba:73: c1:0f:f5:be:5c:35:23:74:22:ea:fd:3b:23:5c:be:d8:f9:6c: 19:8e:9a:f5:13:56:29:2e:1b:24:e8:8f:88:1c:a8:9a:72:32: 96:ff:99:bc:19:1b:a1:55:2a:9a:28:fc:73:9c:6a:8c:64:f8: 1f:e4:1b:f1:68:e6:af:9a:98:e6:47:29:a2:07:6e:4a:2c:7d: af:97:cf:6a:51:f6:33:f1:ac:b7:a7:0d:3b:ee:e0:2c:21:15: 77:94:a8:4d:f1:64:10:7d:87:8a:ee:56:68:3c:5f:a0:1c:41: 00:0a:ae:38:7a:a0:d7:ef:ec:5f:16:81:46:62:04:9e:e7:0e: cc:ad:8b:a4:35:66:12:86:b2:9b:4c:b4:ee:f4:a1:ef:64:e1: 79:ff:8a:81:2a:78:70:f4:6f:6c:f3:49:e3:23:9e:45:cd:01: ff:14:a3:1e:eb:40:9d:d1:98:d3:8f:9b:bf:52:2b:f3:04:64: 2b:3c:56:33:65:fb:24:f3:b4:31:eb:ce:a6:aa:70:82:ba:ee: 45:38:d5:99:0b:49:b7:5c:d1:1a:95:46:04:a5:13:33:b6:09: 39:7e:6e:4c:eb:a0:9d:81:60:65:bd:61:07:40:79:f2:cc:28: d3:f1:2d:02 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEihNiyLPYvClcnwbIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyMjE0MDA1MloXDTI1MDQyMjEzMDA1MlowLzEtMCsGA1UEAxMk NjdiOTFkNjctM2I0ZC00OThlLWE2MDctZWJmMWIxYWY0NWVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXWrhqMyMqE84cXXwSP78t4wWi8DP2VBdNxe p43oDF2RTOCDOFDn7SYi//vPVUbZknJF+X2TnIH4IX+NaJvRrfmPUBs24tjsEx3G d9okf/htjOa9bSKHlkUQ305EDgY+Xvi66JYGHxmr0ILYG24LVgjibAdf4TQ+eQNg KLus2oqRuIZfJ2eXPctZuMo479fuNLgqM4M3zQcZNGLr+10P3hsQ0zQ10IQwwiIG 7HSggfJ7lSmD/Gl+dBumgf8usCnP88zIJFwA2aw+cK7I/Q7/2YDMp6Bxji0jDFQ7 Mgd7IFbR++SP7o2PZEwhCO1loSJqNyxrmzv1hnnFQgJghPjGrwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDgQ8V45Y7YaaqhbuKgw0WQYz6QZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzNlNGNlNDEtMDMyNC0z M2VjLWIxNzQtNDJjY2ZiZTE1N2YyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUGU4A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFM2cW6TOYLnj99PrK6ZpI66c8EP9b5cNSN0Iur9OyNcvtj5bBmO mvUTVikuGyToj4gcqJpyMpb/mbwZG6FVKpoo/HOcaoxk+B/kG/Fo5q+amOZHKaIH bkosfa+Xz2pR9jPxrLenDTvu4CwhFXeUqE3xZBB9h4ruVmg8X6AcQQAKrjh6oNfv 7F8WgUZiBJ7nDsyti6Q1ZhKGsptMtO70oe9k4Xn/ioEqeHD0b2zzSeMjnkXNAf8U ox7rQJ3RmNOPm79SK/MEZCs8VjNl+yTztDHrzqaqcIK67kU41ZkLSbdc0RqVRgSl EzO2CTl+bkzroJ2BYGW9YQdAefLMKNPxLQI= -----END CERTIFICATE-----Generated at Sat Apr 5 13:11:22 2025 by rpki-client