$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8be0b04f-9463-370b-8d93-9d314ada547c.roa File: 8be0b04f-9463-370b-8d93-9d314ada547c.roa (raw, json) Hash identifier: 52SaqAHdwRsz25d2uCaHpBc+w2zLutkV2mspCfpeuMU= Subject key identifier: A3:71:54:E2:62:A1:19:67:2D:DB:4F:74:0B:81:BF:4D:B7:63:F0:8D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848FD56A2CF93A7D6A4B39ED420 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8be0b04f-9463-370b-8d93-9d314ada547c.roa Signing time: Mon 24 Feb 2025 14:00:52 +0000 ROA not before: Mon 24 Feb 2025 14:00:52 +0000 ROA not after: Sun 25 May 2025 13:00:52 +0000 asID: 12222 IP address blocks: 2001:4878:136::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:56:a2:cf:93:a7:d6:a4:b3:9e:d4:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 24 14:00:52 2025 GMT Not After : May 25 13:00:52 2025 GMT Subject: CN=6328a92e-f735-448a-ad7d-e2dba0a8e6e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:20:5d:5e:69:e5:56:6f:cd:bb:e4:28:99:e6: c5:a9:6e:28:0a:16:8c:45:52:a0:95:bb:d8:7c:e9: 31:b8:6b:bc:9b:5f:be:98:b8:9e:a7:8c:4c:05:90: 55:99:b7:d5:aa:91:34:68:76:30:09:72:0b:8f:06: b6:9e:69:cd:3b:e5:1d:c4:12:29:c9:dd:4a:a5:67: 21:77:dc:78:cf:67:57:e6:92:19:45:d8:f9:06:3a: 8d:91:d9:19:49:a2:3a:be:2c:82:08:80:58:ea:a2: b0:ed:d9:ac:d0:f5:fb:4b:52:ed:88:c8:86:43:7b: c2:c0:70:d7:32:a0:8a:71:8f:0f:a5:87:27:79:c5: a3:77:a5:c7:42:84:71:ae:a6:5f:5f:50:47:e7:c7: e5:4c:1e:1c:4c:05:0d:97:f1:77:5b:b3:26:1f:a5: d1:c3:47:1d:d5:7f:c5:e6:0e:c2:ac:d6:34:55:0d: af:27:3d:e8:98:c7:f8:8c:6f:1d:03:18:ae:4f:42: e7:ef:c8:15:c1:2b:4f:08:db:97:4a:cc:ec:6e:d8: aa:93:d7:73:2c:ab:b0:6e:2a:2f:e8:bb:24:c5:ec: a5:7d:80:c4:04:c3:32:16:8c:c8:15:1d:a9:78:6b: 0d:bc:61:00:6a:30:22:c6:db:0f:5e:90:88:dd:b1: 5a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:71:54:E2:62:A1:19:67:2D:DB:4F:74:0B:81:BF:4D:B7:63:F0:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8be0b04f-9463-370b-8d93-9d314ada547c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2001:4878:136::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:8b:14:1f:fa:5d:cb:a7:37:a0:f0:d3:b6:5a:6b:34:13:6b: 0e:67:06:df:4a:30:9b:1a:75:0b:c1:13:ac:7a:ed:90:57:71: 13:2a:32:41:0b:e7:91:a3:88:73:09:93:e6:79:62:18:0c:93: d7:97:03:1c:06:af:d3:ff:36:5e:92:f0:f6:de:eb:0f:18:4a: ab:ae:30:86:ed:23:b6:53:18:02:15:80:b5:fd:16:04:99:77: 6e:80:31:cf:aa:dd:00:ab:9d:82:90:80:33:b8:57:fe:61:aa: 13:e8:d7:9a:56:4d:84:23:c4:1c:e8:c4:3c:3d:2c:80:9b:00: ef:8e:85:16:35:91:94:05:68:ef:ab:5f:58:0a:5f:77:3e:13: 5c:5f:1b:32:0c:fe:e1:9a:ad:2a:ce:3b:df:08:68:ae:dc:90: 68:52:52:c8:ce:80:e1:31:09:a8:43:49:3f:50:c6:55:bc:52: 95:04:11:ed:bb:ed:c6:5c:5c:56:3c:87:8f:91:66:1e:26:cd: 0c:4a:b8:72:12:cf:53:0e:0c:c0:c2:ed:51:d6:58:c4:9a:6f: 72:23:ae:26:27:5b:51:87:38:ea:b4:bc:e9:03:66:c9:7f:ca: 4a:76:61:f2:b8:16:d3:57:b9:f4:03:12:e3:61:c9:98:3c:49: bb:b5:79:70 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj9VqLPk6fWpLOe1CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk NjMyOGE5MmUtZjczNS00NDhhLWFkN2QtZTJkYmEwYThlNmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9CBdXmnlVm/Nu+QomebFqW4oChaMRVKglbvY fOkxuGu8m1++mLiep4xMBZBVmbfVqpE0aHYwCXILjwa2nmnNO+UdxBIpyd1KpWch d9x4z2dX5pIZRdj5BjqNkdkZSaI6viyCCIBY6qKw7dms0PX7S1LtiMiGQ3vCwHDX MqCKcY8PpYcnecWjd6XHQoRxrqZfX1BH58flTB4cTAUNl/F3W7MmH6XRw0cd1X/F 5g7CrNY0VQ2vJz3omMf4jG8dAxiuT0Ln78gVwStPCNuXSszsbtiqk9dzLKuwbiov 6LskxeylfYDEBMMyFozIFR2peGsNvGEAajAixtsPXpCI3bFa+wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKNxVOJioRlnLdtPdAuBv023Y/CNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGJlMGIwNGYtOTQ2My0z NzBiLThkOTMtOWQzMTRhZGE1NDdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIeAE2 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGuLFB/6XcunN6Dw07ZaazQTaw5nBt9KMJsadQvBE6x67ZBXcRMq MkEL55GjiHMJk+Z5YhgMk9eXAxwGr9P/Nl6S8Pbe6w8YSquuMIbtI7ZTGAIVgLX9 FgSZd26AMc+q3QCrnYKQgDO4V/5hqhPo15pWTYQjxBzoxDw9LICbAO+OhRY1kZQF aO+rX1gKX3c+E1xfGzIM/uGarSrOO98IaK7ckGhSUsjOgOExCahDST9QxlW8UpUE Ee277cZcXFY8h4+RZh4mzQxKuHISz1MODMDC7VHWWMSab3IjriYnW1GHOOq0vOkD Zsl/ykp2YfK4FtNXufQDEuNhyZg8Sbu1eXA= -----END CERTIFICATE-----Generated at Sat Apr 5 12:26:35 2025 by rpki-client