$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/74eb65e8-b230-3c25-a79c-65f79b1118ed.roa File: 74eb65e8-b230-3c25-a79c-65f79b1118ed.roa (raw, json) Hash identifier: yHmNQXBVtLYU6HFS0rAaKHXt2b7xrgUDTi7d4SU73Jo= Subject key identifier: 01:5A:6D:08:A0:1A:B7:67:DD:F4:37:5A:87:38:E9:F6:83:46:1D:F1 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849002150D4A6B0B361C9736780 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/74eb65e8-b230-3c25-a79c-65f79b1118ed.roa Signing time: Tue 25 Feb 2025 14:00:52 +0000 ROA not before: Tue 25 Feb 2025 14:00:52 +0000 ROA not after: Mon 26 May 2025 13:00:52 +0000 asID: 35994 IP address blocks: 2600:1404:ac00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:00:21:50:d4:a6:b0:b3:61:c9:73:67:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 25 14:00:52 2025 GMT Not After : May 26 13:00:52 2025 GMT Subject: CN=b36f5580-d794-407f-ae4c-9967c6030473 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:e2:c3:be:5e:9e:bb:f2:2e:7c:24:ef:14:49: b8:b5:8b:1c:46:d1:1d:d4:7f:1f:fd:61:65:0d:d2: 2f:4a:25:59:36:d5:ec:63:9b:83:84:97:89:bc:e8: 8d:fa:c7:04:5b:1e:af:78:04:b7:0d:5f:ac:ae:bf: b8:5b:39:dc:3c:53:6c:ce:d3:b8:ef:40:c0:7d:70: 91:ee:58:4e:94:23:77:bf:34:45:b4:b2:69:fd:2d: f8:a0:d1:35:6b:20:c9:61:0a:13:17:81:d1:37:3b: e2:d8:25:2a:47:d5:82:19:a0:58:c2:4b:80:5c:31: 1d:58:cb:83:48:61:e7:4b:0f:e5:7a:8b:8d:05:f8: bb:d3:c5:2c:e2:11:69:92:e3:1a:b5:03:68:bd:5b: 09:46:bc:cf:25:36:30:f0:48:e4:71:15:97:30:b7: 42:4f:06:f5:9b:98:e4:6d:08:ed:21:0a:61:9b:e0: 9e:d8:75:8b:d4:f7:36:bd:15:cb:50:a6:cc:2c:fa: 33:14:51:ea:b6:4b:3b:34:a3:88:2b:57:9a:b2:c2: 39:63:66:60:98:76:54:97:fc:ce:99:fe:48:f9:1c: 27:b5:dd:32:ed:08:70:73:0e:0d:86:97:7a:5a:c7: 42:2d:25:04:7f:16:2c:67:04:5c:10:1b:5c:f3:11: f4:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:5A:6D:08:A0:1A:B7:67:DD:F4:37:5A:87:38:E9:F6:83:46:1D:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/74eb65e8-b230-3c25-a79c-65f79b1118ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1404:ac00::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:66:24:83:b3:35:90:7d:dc:32:b3:4d:33:0a:77:4c:86:a2: 1f:16:ee:26:7c:17:c0:49:8f:4c:3b:80:ad:15:c4:75:db:42: 1e:db:12:83:00:91:d1:cc:0c:ae:d4:26:26:9b:c1:61:16:ca: c1:d8:b7:87:91:6a:51:ab:93:d2:a5:6f:3b:91:9c:60:99:81: 8e:02:25:29:a6:95:2f:7b:8b:a6:d5:17:9a:9c:91:5c:ae:c2: 5d:c6:b2:f7:b5:a6:07:ab:b8:6d:5a:77:62:15:16:7b:5c:4a: b0:b0:11:eb:26:ef:bb:f8:54:60:5c:c7:35:0b:12:b9:04:6a: e9:7b:e1:45:ec:9f:ad:e7:6d:fa:9a:d4:f9:0c:22:41:01:c9: 7f:f4:76:d4:65:ed:5c:12:71:08:fd:83:51:da:fa:c9:73:a9: bc:ca:6f:53:0c:cf:b2:8f:4a:c0:31:c6:ae:a9:87:24:a6:9f: a6:c7:ef:2f:81:bd:08:b0:9c:8d:5f:43:2a:ab:dd:1a:d3:5d: 66:fb:96:a0:19:9b:c4:c8:8a:13:7d:89:a2:f4:e6:b5:94:c3: 5f:f9:34:7e:ec:43:b9:bf:aa:20:97:b5:d3:da:5a:08:69:59: 1e:55:be:f5:24:ec:4f:8d:d3:9e:6f:d2:27:a7:83:51:32:ea: d5:71:1d:9a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkAIVDUprCzYclzZ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIyNTE0MDA1MloXDTI1MDUyNjEzMDA1MlowLzEtMCsGA1UEAxMk YjM2ZjU1ODAtZDc5NC00MDdmLWFlNGMtOTk2N2M2MDMwNDczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOLDvl6eu/IufCTvFEm4tYscRtEd1H8f/WFl DdIvSiVZNtXsY5uDhJeJvOiN+scEWx6veAS3DV+srr+4WzncPFNsztO470DAfXCR 7lhOlCN3vzRFtLJp/S34oNE1ayDJYQoTF4HRNzvi2CUqR9WCGaBYwkuAXDEdWMuD SGHnSw/leouNBfi708Us4hFpkuMatQNovVsJRrzPJTYw8EjkcRWXMLdCTwb1m5jk bQjtIQphm+Ce2HWL1Pc2vRXLUKbMLPozFFHqtks7NKOIK1eassI5Y2ZgmHZUl/zO mf5I+Rwntd0y7Qhwcw4Nhpd6WsdCLSUEfxYsZwRcEBtc8xH0ZwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAFabQigGrdn3fQ3Woc46faDRh3xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzRlYjY1ZTgtYjIzMC0z YzI1LWE3OWMtNjVmNzliMTExOGVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUBKwA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC5mJIOzNZB93DKzTTMKd0yGoh8W7iZ8F8BJj0w7gK0VxHXbQh7b EoMAkdHMDK7UJiabwWEWysHYt4eRalGrk9KlbzuRnGCZgY4CJSmmlS97i6bVF5qc kVyuwl3Gsve1pgeruG1ad2IVFntcSrCwEesm77v4VGBcxzULErkEaul74UXsn63n bfqa1PkMIkEByX/0dtRl7VwScQj9g1Ha+slzqbzKb1MMz7KPSsAxxq6phySmn6bH 7y+BvQiwnI1fQyqr3RrTXWb7lqAZm8TIihN9iaL05rWUw1/5NH7sQ7m/qiCXtdPa WghpWR5VvvUk7E+N055v0ieng1Ey6tVxHZo= -----END CERTIFICATE-----Generated at Sat Apr 5 10:54:57 2025 by rpki-client