$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/90c948d9-3508-3abe-818c-2b7955048d55.roa File: 90c948d9-3508-3abe-818c-2b7955048d55.roa (raw, json) Hash identifier: Y7jndLBWsb7rhuHUq6BfBL/Ck9a4sq0vDMjEze4PreY= Subject key identifier: 3E:B6:5F:24:52:58:D9:DE:45:EB:34:39:52:E8:26:20:91:52:27:36 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848ADC6214CE9650B462F7C4200 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/90c948d9-3508-3abe-818c-2b7955048d55.roa Signing time: Mon 27 Jan 2025 02:00:39 +0000 ROA not before: Mon 27 Jan 2025 02:00:39 +0000 ROA not after: Sun 27 Apr 2025 01:00:39 +0000 asID: 9829 IP address blocks: 2600:1417:51::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ad:c6:21:4c:e9:65:0b:46:2f:7c:42:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 27 02:00:39 2025 GMT Not After : Apr 27 01:00:39 2025 GMT Subject: CN=14a8d726-ec2e-4a16-ab68-937e8d61bf92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:3f:0b:36:dc:57:39:c0:9b:47:2e:f3:3b:1b: d7:4f:c5:af:39:18:ad:92:da:f2:9b:ef:1e:1f:26: b7:20:81:97:d4:47:f8:5b:63:8a:d4:97:ee:cd:cd: cf:f0:81:b6:25:99:9d:81:c7:4b:c8:ab:bd:ac:07: 24:98:1f:78:a2:ee:05:28:bd:0c:3d:0f:91:5b:05: e7:9c:81:d2:76:9e:49:15:3d:90:ac:b4:ca:0d:98: b4:c6:ad:24:4c:7c:ec:c5:e8:0d:57:88:d0:c9:f2: 13:4d:cd:c0:90:0b:f5:b1:03:ca:16:dc:9e:60:95: 28:59:3d:07:dc:12:bd:65:f3:a3:79:48:f6:cb:2d: 95:25:9c:87:6c:9f:e5:4a:83:38:bc:50:e7:30:de: a9:8b:43:de:4e:ce:0c:ae:79:88:77:9b:2b:8f:7f: 20:34:2f:74:e3:5a:9e:93:70:75:1d:bb:42:bb:6f: e6:76:7d:47:9e:4d:be:a3:04:9f:5c:89:1e:91:b9: 44:72:81:85:ed:13:ef:9d:36:be:11:d0:59:29:06: db:68:90:16:c9:5a:b5:53:0e:de:f9:be:9e:31:1a: fe:22:12:d3:1f:f8:94:53:16:97:25:77:aa:80:5b: 3d:b8:9c:7d:50:35:c4:bd:a6:a9:43:53:4a:23:aa: d5:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:B6:5F:24:52:58:D9:DE:45:EB:34:39:52:E8:26:20:91:52:27:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/90c948d9-3508-3abe-818c-2b7955048d55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1417:51::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:5d:6a:64:5c:b7:e7:0a:d9:28:92:7f:58:57:b0:6b:3c:b5: f6:9b:8d:77:ce:12:89:44:71:d2:7c:93:72:db:75:69:4e:a5: 90:77:f9:ea:ab:70:46:37:ba:88:4a:fe:13:b7:07:65:ba:11: f1:43:59:13:ab:49:8a:87:fb:8e:c7:a0:3f:95:4d:38:82:c1: a8:7d:8e:ed:dd:4d:bb:86:5a:cb:a5:3b:23:1c:75:1f:1b:1d: bb:54:dc:8b:34:d4:85:4f:83:43:e9:05:64:56:48:5c:f3:45: 3d:21:b2:00:bd:93:39:e6:2a:26:96:c1:99:fc:80:1a:96:04: c1:2c:81:11:b7:6c:d8:83:50:b6:63:f8:75:79:ac:ee:35:99: e0:ca:21:b9:00:5a:68:2b:42:67:b3:7b:71:50:1c:65:27:76: 53:83:76:02:59:f3:01:ed:bc:c8:e0:4d:a0:78:51:77:67:14: 6a:44:92:fd:81:ee:da:7c:12:67:ca:c8:0d:59:c7:29:d0:9c: 7a:51:93:a1:4a:19:7f:dd:c6:d0:f1:a4:f8:21:d1:05:74:19: cc:d3:1f:1e:e4:7c:1d:43:86:24:67:90:39:0a:cb:6e:9e:49: e0:15:ab:41:d8:fc:02:b9:07:af:05:31:69:6e:be:17:e9:b3: c0:3e:34:3a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEitxiFM6WULRi98QgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyNzAyMDAzOVoXDTI1MDQyNzAxMDAzOVowLzEtMCsGA1UEAxMk MTRhOGQ3MjYtZWMyZS00YTE2LWFiNjgtOTM3ZThkNjFiZjkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuz8LNtxXOcCbRy7zOxvXT8WvORitktrym+8e Hya3IIGX1Ef4W2OK1Jfuzc3P8IG2JZmdgcdLyKu9rAckmB94ou4FKL0MPQ+RWwXn nIHSdp5JFT2QrLTKDZi0xq0kTHzsxegNV4jQyfITTc3AkAv1sQPKFtyeYJUoWT0H 3BK9ZfOjeUj2yy2VJZyHbJ/lSoM4vFDnMN6pi0PeTs4MrnmId5srj38gNC9041qe k3B1HbtCu2/mdn1Hnk2+owSfXIkekblEcoGF7RPvnTa+EdBZKQbbaJAWyVq1Uw7e +b6eMRr+IhLTH/iUUxaXJXeqgFs9uJx9UDXEvaapQ1NKI6rVIwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFD62XyRSWNneRes0OVLoJiCRUic2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTBjOTQ4ZDktMzUwOC0z YWJlLTgxOGMtMmI3OTU1MDQ4ZDU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUFwBR MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGpdamRct+cK2SiSf1hXsGs8tfabjXfOEolEcdJ8k3LbdWlOpZB3 +eqrcEY3uohK/hO3B2W6EfFDWROrSYqH+47HoD+VTTiCwah9ju3dTbuGWsulOyMc dR8bHbtU3Is01IVPg0PpBWRWSFzzRT0hsgC9kznmKiaWwZn8gBqWBMEsgRG3bNiD ULZj+HV5rO41meDKIbkAWmgrQmeze3FQHGUndlODdgJZ8wHtvMjgTaB4UXdnFGpE kv2B7tp8EmfKyA1ZxynQnHpRk6FKGX/dxtDxpPgh0QV0GczTHx7kfB1DhiRnkDkK y26eSeAVq0HY/AK5B68FMWluvhfps8A+NDo= -----END CERTIFICATE-----Generated at Sat Apr 5 11:06:51 2025 by rpki-client