$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8b0c47f8-8ce7-3810-a263-61bd3c7e3d40.roa File: 8b0c47f8-8ce7-3810-a263-61bd3c7e3d40.roa (raw, json) Hash identifier: /vOP2eU+uiGJ3hi/QhX3DhA+VfAYEO3CFctTBMz8Alk= Subject key identifier: FA:E7:5A:A6:80:9E:82:BF:4C:60:8A:EF:58:79:4B:F6:46:88:44:4E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848960B5E3C1C3B741A6825EA00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8b0c47f8-8ce7-3810-a263-61bd3c7e3d40.roa Signing time: Sat 18 Jan 2025 14:00:52 +0000 ROA not before: Sat 18 Jan 2025 14:00:52 +0000 ROA not after: Fri 18 Apr 2025 13:00:52 +0000 asID: 20940 IP address blocks: 2600:1415:12::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:96:0b:5e:3c:1c:3b:74:1a:68:25:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 18 14:00:52 2025 GMT Not After : Apr 18 13:00:52 2025 GMT Subject: CN=9308c232-703d-461f-b7a4-fc11ab529b5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:af:d0:22:f3:eb:78:8c:df:8c:96:56:7e:b7: ed:15:37:da:fd:25:ff:33:6b:af:89:34:c4:9f:c2: 90:94:1e:fd:07:59:1c:56:ad:6a:3d:74:21:b9:5d: d9:95:e1:61:d4:9b:f0:29:99:d8:1e:0d:ff:df:e4: 66:d5:a9:cf:4c:70:8f:39:f1:5d:45:96:75:25:22: e3:3c:dd:50:c3:80:2a:14:5e:be:62:41:22:9e:66: 55:ad:47:23:08:4a:8c:21:2d:a4:06:54:bb:ab:47: ab:ee:86:b2:58:8c:24:a3:d4:6f:f0:f3:00:41:10: 8b:60:53:e6:78:7f:41:4f:22:cb:32:ae:b8:40:ae: a0:a5:50:f6:62:80:b8:7c:3c:dc:1e:8f:2b:38:0b: c6:0f:2d:fc:d2:13:10:2e:5d:82:31:26:a0:9c:63: 89:9f:17:89:88:2d:2f:59:2a:8f:18:a9:44:df:b7: fa:2b:f6:9b:76:9d:9a:0f:26:8b:b8:25:19:15:42: 60:86:26:7d:bd:da:cd:97:16:b4:02:2a:f0:9d:64: 34:8d:11:89:24:ff:0a:9a:b9:0c:f5:84:47:d9:17: 5e:87:bb:18:11:17:c8:14:28:df:b7:d7:e2:16:56: 67:5d:59:d9:dc:ee:28:35:ac:82:3f:33:9d:3c:54: 0f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:E7:5A:A6:80:9E:82:BF:4C:60:8A:EF:58:79:4B:F6:46:88:44:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8b0c47f8-8ce7-3810-a263-61bd3c7e3d40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1415:12::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:0c:8c:93:99:f7:b2:c3:e9:d7:85:5b:ef:cb:2c:85:87:67: cb:ad:35:f3:da:08:d4:38:72:d0:c9:6a:86:3d:3e:81:05:10: a3:86:7a:ee:e3:a2:9d:8e:b5:e8:4e:e6:fc:3b:eb:6a:42:28: fe:35:9b:28:8c:47:f0:48:8a:fd:66:b0:04:1e:db:ae:bf:e9: 9b:42:6d:9f:d4:05:58:1f:db:8a:12:b0:18:f8:0a:88:26:7e: db:1c:bb:a2:11:18:7d:9f:3e:5d:c8:21:0c:76:f3:39:aa:24: 6f:df:52:ad:79:8a:18:6b:1b:e8:17:bc:c7:3e:b6:63:d1:c8: b8:62:0d:4e:4c:d8:98:ff:f3:37:0b:be:e4:59:cf:33:62:ba: ce:3d:e7:f8:7d:e4:35:09:8e:82:f6:11:9f:0b:fa:3b:b8:20: 00:b5:96:b0:21:3c:c3:66:2f:91:70:10:59:ea:97:bf:55:36: ed:5f:c5:c1:30:a0:7b:d2:34:40:b8:72:77:11:b9:be:cd:b6: f1:d7:6c:0c:59:9b:ad:30:85:2e:98:51:0f:82:f6:1c:47:e3: 5c:bb:23:87:0c:2e:fc:47:93:6c:1f:9a:86:3e:7f:98:61:43: 54:1b:71:e0:dc:f2:8d:6f:7f:f8:4b:38:26:e8:b2:d1:81:d0: 1d:f9:bf:6e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiWC148HDt0Gmgl6gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDExODE0MDA1MloXDTI1MDQxODEzMDA1MlowLzEtMCsGA1UEAxMk OTMwOGMyMzItNzAzZC00NjFmLWI3YTQtZmMxMWFiNTI5YjVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3q/QIvPreIzfjJZWfrftFTfa/SX/M2uviTTE n8KQlB79B1kcVq1qPXQhuV3ZleFh1JvwKZnYHg3/3+Rm1anPTHCPOfFdRZZ1JSLj PN1Qw4AqFF6+YkEinmZVrUcjCEqMIS2kBlS7q0er7oayWIwko9Rv8PMAQRCLYFPm eH9BTyLLMq64QK6gpVD2YoC4fDzcHo8rOAvGDy380hMQLl2CMSagnGOJnxeJiC0v WSqPGKlE37f6K/abdp2aDyaLuCUZFUJghiZ9vdrNlxa0AirwnWQ0jRGJJP8KmrkM 9YRH2Rdeh7sYERfIFCjft9fiFlZnXVnZ3O4oNayCPzOdPFQPlQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPrnWqaAnoK/TGCK71h5S/ZGiEROMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGIwYzQ3ZjgtOGNlNy0z ODEwLWEyNjMtNjFiZDNjN2UzZDQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUFQAS MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAkMjJOZ97LD6deFW+/LLIWHZ8utNfPaCNQ4ctDJaoY9PoEFEKOG eu7jop2OtehO5vw762pCKP41myiMR/BIiv1msAQe266/6ZtCbZ/UBVgf24oSsBj4 Cogmftscu6IRGH2fPl3IIQx28zmqJG/fUq15ihhrG+gXvMc+tmPRyLhiDU5M2Jj/ 8zcLvuRZzzNius495/h95DUJjoL2EZ8L+ju4IAC1lrAhPMNmL5FwEFnql79VNu1f xcEwoHvSNEC4cncRub7NtvHXbAxZm60whS6YUQ+C9hxH41y7I4cMLvxHk2wfmoY+ f5hhQ1QbceDc8o1vf/hLOCbostGB0B35v24= -----END CERTIFICATE-----Generated at Sat Apr 5 10:55:03 2025 by rpki-client