$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7b2dd5ee-fb03-387c-a34d-893d3d669aa8.roa File: 7b2dd5ee-fb03-387c-a34d-893d3d669aa8.roa (raw, json) Hash identifier: ncspEn/eThCnNhJnF9XAP4CZ063SjXpN4qqAi8jQ62g= Subject key identifier: 52:22:37:29:4C:7E:47:A6:B9:5A:DA:58:B7:4B:C0:09:90:FF:EB:43 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848A13627481D8C08B3CD2B9480 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7b2dd5ee-fb03-387c-a34d-893d3d669aa8.roa Signing time: Wed 22 Jan 2025 14:00:52 +0000 ROA not before: Wed 22 Jan 2025 14:00:52 +0000 ROA not after: Tue 22 Apr 2025 13:00:52 +0000 asID: 20940 IP address blocks: 2600:1415:2800::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a1:36:27:48:1d:8c:08:b3:cd:2b:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 22 14:00:52 2025 GMT Not After : Apr 22 13:00:52 2025 GMT Subject: CN=0c870833-881e-4eaf-b485-9b74f278bf5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:61:b7:61:bd:cf:64:6e:c5:f0:ec:f1:14:99: e3:d5:3e:13:50:a2:84:c9:4f:2c:25:b2:93:fe:eb: 41:5d:13:fc:5b:0c:32:9d:a3:17:cb:ca:83:2c:01: 92:f5:f3:b9:c3:2e:ac:fa:e0:4f:7a:71:38:69:2a: 03:b2:78:f0:fd:92:ec:ef:58:20:38:d2:b9:04:d8: 2b:07:c5:54:18:af:11:d7:e8:79:10:3e:41:ca:c4: 89:eb:e5:36:c8:c4:fb:78:1a:49:a3:73:11:3d:76: d6:ae:fc:b2:b7:6f:4f:91:bd:27:5b:8e:c4:3a:46: b4:9d:07:4a:1e:5f:4d:e4:f0:48:05:a6:07:1b:ae: 60:e1:d6:33:a8:29:2e:bd:9e:33:a6:06:7a:57:3f: dd:a9:be:c1:d9:fa:96:22:31:0d:b5:a7:8b:a6:c4: 14:9b:2c:5d:1f:c8:1b:15:f3:3e:8c:9f:5a:e1:91: 60:5b:3b:af:7b:2e:7e:73:8b:7e:e4:e7:f4:f0:4b: 0d:30:3e:da:a4:34:1c:2b:1f:25:9f:96:c3:0e:32: 86:1f:62:73:66:3d:5a:2e:5a:0c:5d:0b:b8:f4:f7: 1e:76:9c:17:b3:6b:e2:ce:c6:4d:82:7d:3c:8b:c3: d1:f1:33:0d:ca:16:15:37:c3:3d:bf:5e:0b:5a:0f: 2a:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:22:37:29:4C:7E:47:A6:B9:5A:DA:58:B7:4B:C0:09:90:FF:EB:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7b2dd5ee-fb03-387c-a34d-893d3d669aa8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1415:2800::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:99:22:af:d1:6c:c4:bf:46:4a:68:0a:22:69:7a:85:d0:31: ff:2f:0a:a7:97:cf:a3:ab:fb:87:4d:4b:9e:19:7c:46:79:a3: 1e:96:3e:24:a7:ac:36:6d:65:f7:0d:0f:8b:42:32:58:b4:ff: a4:6e:68:51:c9:77:fa:48:25:50:03:c1:91:88:20:72:0d:60: 59:55:f7:48:90:31:a5:49:96:54:87:c1:5a:42:07:f4:1e:9a: 49:c2:7b:b8:2c:4f:32:46:4f:9b:3a:d0:5e:40:5f:af:63:a1: 40:d1:f8:6f:41:06:f6:40:59:06:75:a5:d9:ed:9f:fc:95:3f: c7:2f:5e:71:10:8d:50:9a:4c:1b:83:e9:1e:65:83:f8:04:b3: 52:2c:ad:44:41:8d:c2:66:08:5a:de:39:84:f6:4b:81:f1:1b: 3d:c1:83:33:61:53:94:63:61:ef:47:1d:56:a1:ee:25:eb:ee: 71:7d:a1:b4:63:8d:79:9f:78:ce:08:54:46:c9:e4:2b:03:00: 78:e4:10:d4:c9:ab:1f:20:11:94:7e:aa:f2:f6:fa:07:35:7e: 4b:e4:65:cc:25:92:a4:03:24:91:e1:aa:f0:b9:0f:49:9a:6a: f8:ed:45:37:a3:9d:f3:d6:70:d9:8d:af:db:38:83:f6:f5:af: f8:6d:a9:d1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEihNidIHYwIs80rlIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyMjE0MDA1MloXDTI1MDQyMjEzMDA1MlowLzEtMCsGA1UEAxMk MGM4NzA4MzMtODgxZS00ZWFmLWI0ODUtOWI3NGYyNzhiZjVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmG3Yb3PZG7F8OzxFJnj1T4TUKKEyU8sJbKT /utBXRP8WwwynaMXy8qDLAGS9fO5wy6s+uBPenE4aSoDsnjw/ZLs71ggONK5BNgr B8VUGK8R1+h5ED5BysSJ6+U2yMT7eBpJo3MRPXbWrvyyt29Pkb0nW47EOka0nQdK Hl9N5PBIBaYHG65g4dYzqCkuvZ4zpgZ6Vz/dqb7B2fqWIjENtaeLpsQUmyxdH8gb FfM+jJ9a4ZFgWzuvey5+c4t+5Of08EsNMD7apDQcKx8ln5bDDjKGH2JzZj1aLloM XQu49PcedpwXs2vizsZNgn08i8PR8TMNyhYVN8M9v14LWg8qKwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFIiNylMfkemuVraWLdLwAmQ/+tDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvN2IyZGQ1ZWUtZmIwMy0z ODdjLWEzNGQtODkzZDNkNjY5YWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUFSgA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFmZIq/RbMS/RkpoCiJpeoXQMf8vCqeXz6Or+4dNS54ZfEZ5ox6W PiSnrDZtZfcND4tCMli0/6RuaFHJd/pIJVADwZGIIHINYFlV90iQMaVJllSHwVpC B/QemknCe7gsTzJGT5s60F5AX69joUDR+G9BBvZAWQZ1pdntn/yVP8cvXnEQjVCa TBuD6R5lg/gEs1IsrURBjcJmCFreOYT2S4HxGz3BgzNhU5RjYe9HHVah7iXr7nF9 obRjjXmfeM4IVEbJ5CsDAHjkENTJqx8gEZR+qvL2+gc1fkvkZcwlkqQDJJHhqvC5 D0maavjtRTejnfPWcNmNr9s4g/b1r/htqdE= -----END CERTIFICATE-----Generated at Sat Apr 5 10:56:55 2025 by rpki-client