$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/77ef8925-e2a0-329c-94cb-319987dc7e51.roa File: 77ef8925-e2a0-329c-94cb-319987dc7e51.roa (raw, json) Hash identifier: qpo6jmde6ufHrsfR0mFS4zoEU79ZoVlW05Vd1DZk5qU= Subject key identifier: 22:44:F6:5B:43:E1:8D:7A:7C:79:F8:95:95:9D:84:C6:6D:65:04:9F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858488DAB6503C08B285341CC6680 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/77ef8925-e2a0-329c-94cb-319987dc7e51.roa Signing time: Wed 15 Jan 2025 14:00:51 +0000 ROA not before: Wed 15 Jan 2025 14:00:51 +0000 ROA not after: Tue 15 Apr 2025 13:00:51 +0000 asID: 20940 IP address blocks: 2600:1409:d000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:8d:ab:65:03:c0:8b:28:53:41:cc:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 15 14:00:51 2025 GMT Not After : Apr 15 13:00:51 2025 GMT Subject: CN=562df70b-ddc7-44e7-b391-4b3bbb54e541 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:1d:3c:eb:e0:3d:39:19:72:c4:33:9b:ed:50: ad:e7:7f:c3:2c:ff:ed:fb:e4:09:8a:0f:00:0b:dd: 1c:1c:c2:08:b8:55:b1:a1:e3:a8:cf:18:7f:ba:83: d9:4e:02:cd:55:42:1e:18:73:b3:1b:cc:1c:e1:62: f2:ce:65:6c:67:ba:17:f1:bb:83:bf:ad:20:38:f4: 42:34:e5:d0:ac:66:5f:02:4b:05:e3:7b:5b:3a:c8: bc:0a:03:4a:c9:74:f3:1a:77:45:7e:e4:71:af:4c: 2d:0a:7f:82:73:c4:d6:da:b7:f2:2f:77:5a:26:7c: 69:9c:aa:6c:ed:e2:1e:56:75:17:70:c8:a2:0a:ee: 9d:28:76:5a:da:5d:2f:eb:6c:03:30:58:fc:6d:bf: ac:76:d1:c2:6a:1e:78:7f:af:26:72:47:83:9f:4c: bc:da:73:60:e0:46:16:0a:bc:3d:87:e6:92:37:4a: c2:99:df:06:59:ce:fa:00:1e:db:a1:b6:47:0e:f5: e5:52:46:ab:3e:96:a3:bd:94:98:2e:4b:51:51:d3: a5:bf:f2:46:b9:31:7c:58:11:cb:ae:b6:d5:80:7a: ed:2a:1e:ec:3c:fa:27:d5:69:98:f4:29:5e:5f:85: 6b:7e:9a:6b:9f:44:e2:10:94:ee:f7:13:18:0a:13: 3c:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:44:F6:5B:43:E1:8D:7A:7C:79:F8:95:95:9D:84:C6:6D:65:04:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/77ef8925-e2a0-329c-94cb-319987dc7e51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1409:d000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:db:b0:f9:3e:65:3e:0d:03:c5:45:a5:7b:07:59:1f:7c:94: 19:e1:dd:1d:41:31:a2:d2:cb:0e:fc:7d:bc:93:52:51:6d:2b: ee:60:ac:c9:74:4a:63:38:fa:84:95:d8:08:03:13:3d:f6:32: ed:1c:7d:c5:4d:9a:e4:6b:6f:ab:af:b6:2e:38:49:f6:26:e8: f4:4e:68:44:70:8a:fe:46:04:f3:2e:94:e4:89:e2:95:09:5d: 71:7d:7a:71:2b:c4:75:8a:15:a0:b7:49:5c:ff:c1:99:ea:e5: 09:c6:7e:ef:06:bf:6f:a7:ef:8c:3d:7d:dd:e5:3b:24:59:dc: 2e:6d:c8:8c:77:7f:84:1e:0b:ce:fa:79:c1:7f:be:34:90:eb: a3:40:9e:cc:2f:ba:2a:ca:0e:65:1e:03:2a:ac:e2:ed:ae:ea: b3:c9:18:56:48:73:1a:0a:18:f0:79:15:49:ae:78:ea:1d:d3: d5:f2:d1:2f:47:ee:8a:89:fc:71:10:bf:d5:3f:19:73:c6:e8: d3:2f:ee:56:fe:6d:f9:88:b2:14:4c:69:5a:a7:43:55:1c:41: bf:74:d7:1c:c1:50:62:9d:f5:a7:df:20:ee:97:5b:93:bd:aa: 51:4a:10:a7:d2:88:c8:ef:4b:e2:66:d3:0a:4e:a1:b9:ba:3f: 91:54:55:43 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiNq2UDwIsoU0HMZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDExNTE0MDA1MVoXDTI1MDQxNTEzMDA1MVowLzEtMCsGA1UEAxMk NTYyZGY3MGItZGRjNy00NGU3LWIzOTEtNGIzYmJiNTRlNTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoB086+A9ORlyxDOb7VCt53/DLP/t++QJig8A C90cHMIIuFWxoeOozxh/uoPZTgLNVUIeGHOzG8wc4WLyzmVsZ7oX8buDv60gOPRC NOXQrGZfAksF43tbOsi8CgNKyXTzGndFfuRxr0wtCn+Cc8TW2rfyL3daJnxpnKps 7eIeVnUXcMiiCu6dKHZa2l0v62wDMFj8bb+sdtHCah54f68mckeDn0y82nNg4EYW Crw9h+aSN0rCmd8GWc76AB7bobZHDvXlUkarPpajvZSYLktRUdOlv/JGuTF8WBHL rrbVgHrtKh7sPPon1WmY9CleX4Vrfpprn0TiEJTu9xMYChM8mQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCJE9ltD4Y16fHn4lZWdhMZtZQSfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzdlZjg5MjUtZTJhMC0z MjljLTk0Y2ItMzE5OTg3ZGM3ZTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUCdAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAILbsPk+ZT4NA8VFpXsHWR98lBnh3R1BMaLSyw78fbyTUlFtK+5g rMl0SmM4+oSV2AgDEz32Mu0cfcVNmuRrb6uvti44SfYm6PROaERwiv5GBPMulOSJ 4pUJXXF9enErxHWKFaC3SVz/wZnq5QnGfu8Gv2+n74w9fd3lOyRZ3C5tyIx3f4Qe C876ecF/vjSQ66NAnswvuirKDmUeAyqs4u2u6rPJGFZIcxoKGPB5FUmueOod09Xy 0S9H7oqJ/HEQv9U/GXPG6NMv7lb+bfmIshRMaVqnQ1UcQb901xzBUGKd9affIO6X W5O9qlFKEKfSiMjvS+Jm0wpOobm6P5FUVUM= -----END CERTIFICATE-----Generated at Sat Apr 5 11:08:46 2025 by rpki-client