$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8a6b9bd2-f6b6-3519-aa90-16816b9c7028.roa File: 8a6b9bd2-f6b6-3519-aa90-16816b9c7028.roa (raw, json) Hash identifier: yf0c9qB8Xj5MImiF2EeZY9qMUZUP6mT8f406pW1WjoQ= Subject key identifier: 38:7E:6A:87:F7:12:C8:BC:88:FE:1D:3B:A8:23:46:41:2F:67:3A:D5 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848A99636B68EBDB2F547BCEE80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8a6b9bd2-f6b6-3519-aa90-16816b9c7028.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 20940 IP address blocks: 2600:1488:6140::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:36:b6:8e:bd:b2:f5:47:bc:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=57b45b49-fc6c-4537-ac47-540ec001d90b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:fa:25:45:12:32:c5:90:8b:f4:a0:70:e6:38: 80:38:fe:85:63:62:e9:d1:cd:3a:c0:0d:cf:b5:bb: f9:c9:5c:f8:0f:f4:4e:69:ff:b4:6f:bf:db:27:36: 32:af:ea:ea:29:f6:e9:aa:7f:e9:dd:df:fb:55:d2: b4:57:0b:d0:c4:0e:a6:54:04:4f:c1:59:4b:73:bc: a1:1d:b6:7f:db:57:28:13:26:3b:b8:cb:b9:1f:ae: e0:f6:7c:da:e6:06:c3:f2:4b:9b:4f:d3:ba:11:e8: a1:61:97:cc:2f:7f:18:63:e6:52:9a:ac:ab:ba:b3: a2:75:f3:89:90:94:13:63:bb:be:27:38:1b:ba:eb: 8f:4d:d0:2e:87:67:11:82:59:06:13:cf:78:60:59: e6:d2:e2:83:11:f1:69:f6:f7:40:f6:e7:93:e5:20: 45:16:0e:fd:a1:18:51:27:84:74:3e:c1:ea:32:68: e6:9d:e6:3d:ae:58:0c:6d:04:be:7c:eb:a0:f6:84: c2:82:17:aa:ab:40:bb:c1:2e:2f:ad:b5:1c:d6:ee: e3:43:d5:b4:38:15:fe:77:bb:45:0b:9f:e0:fa:0a: 61:2c:c6:63:5f:49:9e:01:21:3f:b2:28:3c:95:83: ad:b8:99:cd:d0:66:9e:16:07:66:f1:4f:6c:87:05: 8d:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:7E:6A:87:F7:12:C8:BC:88:FE:1D:3B:A8:23:46:41:2F:67:3A:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8a6b9bd2-f6b6-3519-aa90-16816b9c7028.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1488:6140::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:29:85:b5:fb:38:8d:29:d4:2b:89:d0:80:6a:2c:f1:c7:86: 40:e2:da:4c:9f:75:49:59:63:fa:2d:47:6d:09:14:6d:05:a0: 4b:1c:a0:64:40:ad:aa:08:cf:ec:50:a5:2d:c6:3e:a3:12:8a: e4:4a:f7:e0:04:d6:73:63:f7:fe:19:ab:46:ea:fb:d6:f7:e6: 0f:49:d3:dd:e7:aa:16:bb:04:9f:6d:90:08:70:17:2c:a4:71: f8:2a:85:68:27:6d:60:7b:0c:1d:8e:fe:7f:64:12:e9:41:78: f2:65:a3:11:fe:50:f0:b0:2e:ca:1c:d3:90:2b:6f:c6:8b:1b: f7:e8:1a:7c:1c:d2:9f:0c:d2:6a:24:d2:43:bd:73:13:f6:2d: ec:34:57:91:bb:15:fa:7c:20:6f:7b:22:11:3c:56:cc:50:7f: cd:45:59:71:9d:8a:c4:d9:81:8d:2a:c9:3f:69:a4:1f:7c:b4: 2b:d9:3d:8e:2d:e9:3e:6d:81:20:ba:d9:0e:3d:7a:bc:d6:9b: 68:2f:9a:c6:8d:2b:fb:78:3b:6f:1d:7f:7e:fa:e3:a3:48:54: 9f:20:a4:c9:ac:43:a2:40:07:48:8c:df:db:7e:ce:34:46:03: 46:b1:e1:96:9d:5c:f2:88:f3:a2:86:49:84:53:23:4e:84:39: b9:d5:6c:49 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiplja2jr2y9Ue87oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk NTdiNDViNDktZmM2Yy00NTM3LWFjNDctNTQwZWMwMDFkOTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfolRRIyxZCL9KBw5jiAOP6FY2Lp0c06wA3P tbv5yVz4D/ROaf+0b7/bJzYyr+rqKfbpqn/p3d/7VdK0VwvQxA6mVARPwVlLc7yh HbZ/21coEyY7uMu5H67g9nza5gbD8kubT9O6EeihYZfML38YY+ZSmqyrurOidfOJ kJQTY7u+JzgbuuuPTdAuh2cRglkGE894YFnm0uKDEfFp9vdA9ueT5SBFFg79oRhR J4R0PsHqMmjmneY9rlgMbQS+fOug9oTCgheqq0C7wS4vrbUc1u7jQ9W0OBX+d7tF C5/g+gphLMZjX0meASE/sig8lYOtuJnN0GaeFgdm8U9shwWNhQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDh+aof3Esi8iP4dO6gjRkEvZzrVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGE2YjliZDItZjZiNi0z NTE5LWFhOTAtMTY4MTZiOWM3MDI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUiGFA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIQphbX7OI0p1CuJ0IBqLPHHhkDi2kyfdUlZY/otR20JFG0FoEsc oGRAraoIz+xQpS3GPqMSiuRK9+AE1nNj9/4Zq0bq+9b35g9J093nqha7BJ9tkAhw FyykcfgqhWgnbWB7DB2O/n9kEulBePJloxH+UPCwLsoc05Arb8aLG/foGnwc0p8M 0mok0kO9cxP2Lew0V5G7Ffp8IG97IhE8VsxQf81FWXGdisTZgY0qyT9ppB98tCvZ PY4t6T5tgSC62Q49erzWm2gvmsaNK/t4O28df37646NIVJ8gpMmsQ6JAB0iM39t+ zjRGA0ax4ZadXPKI86KGSYRTI06EObnVbEk= -----END CERTIFICATE-----Generated at Sat Apr 5 11:03:47 2025 by rpki-client