$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/85e9262e-8851-3501-9160-43ac09284b8b.roa File: 85e9262e-8851-3501-9160-43ac09284b8b.roa (raw, json) Hash identifier: pZZXFgMiIm9PRiNHfz7f+keXqJq5auy0xvtnNyDooW0= Subject key identifier: 9A:37:BC:01:36:96:46:1A:51:71:59:B3:E9:7E:1E:21:D0:34:22:52 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848A13621F7F729C780A3A763C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/85e9262e-8851-3501-9160-43ac09284b8b.roa Signing time: Wed 22 Jan 2025 14:00:52 +0000 ROA not before: Wed 22 Jan 2025 14:00:52 +0000 ROA not after: Tue 22 Apr 2025 13:00:52 +0000 asID: 20940 IP address blocks: 2600:1404:1200::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a1:36:21:f7:f7:29:c7:80:a3:a7:63:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 22 14:00:52 2025 GMT Not After : Apr 22 13:00:52 2025 GMT Subject: CN=fdb154ed-b468-4ccd-bd4b-08de44bd3436 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b4:48:03:2d:a0:df:79:97:25:2c:66:b7:73: 52:a0:fb:ae:41:41:99:f2:fd:6a:6b:1a:e2:84:c7: 20:74:41:ed:5e:12:5a:59:c1:af:96:be:95:45:b1: 1e:be:ca:17:ac:a1:4c:de:00:36:a7:86:71:a4:c2: 42:9b:b2:1c:f3:c4:7c:36:3a:bd:3e:61:3f:07:61: 60:85:87:66:03:7b:66:c0:66:ad:24:09:72:b2:ff: 4d:3e:2e:82:c0:71:d8:ea:88:54:db:e5:e4:72:1f: 6e:25:9b:28:1c:86:3e:18:f3:23:51:b6:8c:63:16: d5:f7:b7:66:5c:6b:3b:7d:4e:53:2e:f9:9f:28:43: 06:68:9f:8d:0e:5f:6a:ae:27:6b:79:e4:e2:ef:0c: ed:8c:88:91:2a:a2:8b:3e:18:f4:86:14:fc:6f:e6: 2d:4d:d7:dc:fb:bd:5e:3d:2f:5d:f2:58:cb:cc:d2: ca:8f:80:4f:40:4a:e1:2d:79:8f:33:93:4e:52:de: 53:1d:c4:5d:fe:43:b7:43:19:b8:87:06:20:87:85: 10:6a:ce:2a:12:e2:12:7c:2d:dd:b8:1b:08:e7:3b: 4e:54:bf:15:99:d0:04:33:6b:b3:a5:8c:71:b4:42: d0:19:72:0e:25:f4:76:d5:aa:7c:f4:c8:70:8d:40: 2c:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:37:BC:01:36:96:46:1A:51:71:59:B3:E9:7E:1E:21:D0:34:22:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/85e9262e-8851-3501-9160-43ac09284b8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1404:1200::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:9d:5c:96:96:75:b7:1b:5b:ba:32:4b:ca:bf:74:0b:ba:9d: 26:79:32:99:c3:7e:da:fa:53:c4:65:72:bc:de:04:57:90:89: 55:9d:ab:ec:58:0f:b7:83:57:5f:20:23:0c:46:01:99:94:cb: 13:a9:33:78:50:f5:31:3a:cf:6c:53:8f:83:03:20:06:57:d2: 75:91:1c:ac:e6:6c:73:4e:4c:c6:6a:ed:9f:50:a4:5c:4d:69: 1e:57:07:dc:f6:da:8d:7e:61:cb:0e:0d:e6:29:5e:f3:72:50: 9c:94:cb:09:0f:fb:0d:94:3e:59:6e:27:83:c5:85:7f:04:be: 8b:38:29:c8:fb:7e:73:52:80:c6:1c:a9:09:36:2a:ac:2e:9e: c2:c2:aa:02:56:e5:e1:aa:5a:7a:fe:b7:9c:f6:02:00:09:f2: 65:e5:1b:8f:ac:f4:6a:8e:32:82:1a:ea:cd:78:3a:2c:ad:cf: e3:52:c5:9e:bc:1e:b6:85:80:f0:2d:5d:33:13:64:89:51:73: 1d:42:df:25:bb:a4:02:ff:85:df:53:29:2c:60:9b:bd:8f:87: ed:a4:14:ae:a9:52:10:6a:22:a3:f6:bc:5c:d5:e3:60:27:b2: 2d:7e:c4:90:f4:e4:d0:ca:72:cf:8d:79:99:a2:6c:80:2d:81: 1d:eb:b3:2c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEihNiH39ynHgKOnY8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyMjE0MDA1MloXDTI1MDQyMjEzMDA1MlowLzEtMCsGA1UEAxMk ZmRiMTU0ZWQtYjQ2OC00Y2NkLWJkNGItMDhkZTQ0YmQzNDM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrRIAy2g33mXJSxmt3NSoPuuQUGZ8v1qaxri hMcgdEHtXhJaWcGvlr6VRbEevsoXrKFM3gA2p4ZxpMJCm7Ic88R8Njq9PmE/B2Fg hYdmA3tmwGatJAlysv9NPi6CwHHY6ohU2+Xkch9uJZsoHIY+GPMjUbaMYxbV97dm XGs7fU5TLvmfKEMGaJ+NDl9qridreeTi7wztjIiRKqKLPhj0hhT8b+YtTdfc+71e PS9d8ljLzNLKj4BPQErhLXmPM5NOUt5THcRd/kO3Qxm4hwYgh4UQas4qEuISfC3d uBsI5ztOVL8VmdAEM2uzpYxxtELQGXIOJfR21ap89MhwjUAsZQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJo3vAE2lkYaUXFZs+l+HiHQNCJSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODVlOTI2MmUtODg1MS0z NTAxLTkxNjAtNDNhYzA5Mjg0YjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUBBIA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEadXJaWdbcbW7oyS8q/dAu6nSZ5MpnDftr6U8RlcrzeBFeQiVWd q+xYD7eDV18gIwxGAZmUyxOpM3hQ9TE6z2xTj4MDIAZX0nWRHKzmbHNOTMZq7Z9Q pFxNaR5XB9z22o1+YcsODeYpXvNyUJyUywkP+w2UPlluJ4PFhX8Evos4Kcj7fnNS gMYcqQk2KqwunsLCqgJW5eGqWnr+t5z2AgAJ8mXlG4+s9GqOMoIa6s14Oiytz+NS xZ68HraFgPAtXTMTZIlRcx1C3yW7pAL/hd9TKSxgm72Ph+2kFK6pUhBqIqP2vFzV 42Ansi1+xJD05NDKcs+NeZmibIAtgR3rsyw= -----END CERTIFICATE-----Generated at Sat Apr 5 11:19:28 2025 by rpki-client