$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/954c3732-e312-3cdc-af0c-fd0854ad4583.roa File: 954c3732-e312-3cdc-af0c-fd0854ad4583.roa (raw, json) Hash identifier: 3kWkcM7FkWgayXn5P1Z5GB4W7uQltxRd3Hc1xGKxwhw= Subject key identifier: 7F:24:38:21:F0:40:D9:3B:AA:EE:D5:98:1D:6D:52:6A:F6:A8:4E:69 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848E59BB7D99579F48F18EFB740 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/954c3732-e312-3cdc-af0c-fd0854ad4583.roa Signing time: Sun 16 Feb 2025 02:00:40 +0000 ROA not before: Sun 16 Feb 2025 02:00:40 +0000 ROA not after: Sat 17 May 2025 01:00:40 +0000 asID: 20940 IP address blocks: 2600:1401:d000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:9b:b7:d9:95:79:f4:8f:18:ef:b7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 16 02:00:40 2025 GMT Not After : May 17 01:00:40 2025 GMT Subject: CN=8fed573d-aabc-4adf-a93a-2a6810b57286 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4b:f1:fb:77:0c:51:c4:d5:9e:dd:42:9e:f3: fd:58:64:94:17:be:fa:ba:3c:b2:61:c9:b2:1e:f2: 92:0e:83:c1:ca:ec:9e:46:eb:ce:c7:02:81:98:23: 13:ad:5f:91:8c:d8:b5:1b:1b:8c:5c:19:a7:43:48: 43:48:20:a0:b1:cb:7a:95:6d:8e:c7:56:8c:40:2b: 40:79:fc:07:21:67:e8:b9:e6:0f:0a:e1:be:5b:89: 03:f1:a2:c0:34:5f:d5:74:4d:b2:5b:8d:f7:dc:79: 84:ca:c8:8a:bc:58:72:9e:d8:5f:2a:d7:ba:1d:55: 9d:4f:92:93:1b:ac:3e:7e:58:37:df:59:fc:a9:9c: 5c:73:45:8c:54:a3:33:67:46:33:81:aa:72:af:2b: 6a:cb:74:84:42:17:01:80:5b:2d:0d:f0:73:05:4b: 19:6c:20:fa:a7:e3:72:45:4c:e2:d8:3e:ff:b5:d8: 89:ab:0d:ff:69:4c:26:5b:f0:cf:d3:ef:5a:bb:38: 74:b8:c1:cb:c7:95:d5:fa:9e:8f:20:ac:53:00:f3: c8:3f:7a:62:ea:b6:51:7d:85:a1:18:8a:94:2f:f6: d4:8d:a3:83:28:4d:37:15:51:f1:db:83:0d:f1:29: b4:14:73:9d:8a:68:e3:9e:2c:55:3c:72:34:76:23: f2:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:24:38:21:F0:40:D9:3B:AA:EE:D5:98:1D:6D:52:6A:F6:A8:4E:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/954c3732-e312-3cdc-af0c-fd0854ad4583.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1401:d000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:44:de:c0:f6:68:07:fe:b9:38:42:9f:e3:31:6c:55:7e:81: b3:cc:30:df:3b:65:70:28:7b:b4:f1:10:a1:bb:87:a0:5a:13: 04:5c:df:7f:57:7e:d1:29:4f:61:25:62:69:01:bc:3a:95:1e: 83:1c:8b:ea:07:41:ac:17:b7:46:45:30:f7:b1:48:30:11:92: 28:a1:7d:9f:49:0f:3e:19:57:64:63:87:93:70:34:b4:19:ac: b9:7f:b8:c4:9c:c0:9f:13:3f:41:fd:30:a9:67:3d:c6:1e:25: f5:50:70:8d:cd:26:32:0c:94:0e:76:9f:1a:f8:47:90:c9:00: 09:ac:89:14:97:d4:9a:72:76:3c:e9:ae:1c:7e:57:8c:0e:83: e4:13:ea:d1:32:80:c0:77:11:31:20:fa:94:5b:92:7a:94:07: cd:b8:13:28:fc:66:bc:c2:a0:bb:dd:c0:69:6e:68:6d:5d:22: 60:cb:11:85:b2:ad:0e:54:ba:9a:c2:29:0d:fc:22:4a:a8:62: 2e:76:0a:74:53:3a:87:58:4a:aa:f0:c8:58:78:ad:d6:1e:3c: 28:6b:d3:00:ba:c7:fd:ad:d1:0c:ff:db:32:4a:ce:bf:db:44: d3:a1:6f:5b:81:2d:4a:c8:32:10:7d:24:cc:4f:dd:e4:6e:4e: b6:5d:2b:41 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjlm7fZlXn0jxjvt0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk OGZlZDU3M2QtYWFiYy00YWRmLWE5M2EtMmE2ODEwYjU3Mjg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0vx+3cMUcTVnt1CnvP9WGSUF776ujyyYcmy HvKSDoPByuyeRuvOxwKBmCMTrV+RjNi1GxuMXBmnQ0hDSCCgsct6lW2Ox1aMQCtA efwHIWfoueYPCuG+W4kD8aLANF/VdE2yW4333HmEysiKvFhynthfKte6HVWdT5KT G6w+flg331n8qZxcc0WMVKMzZ0Yzgapyrytqy3SEQhcBgFstDfBzBUsZbCD6p+Ny RUzi2D7/tdiJqw3/aUwmW/DP0+9auzh0uMHLx5XV+p6PIKxTAPPIP3pi6rZRfYWh GIqUL/bUjaODKE03FVHx24MN8Sm0FHOdimjjnixVPHI0diPyXwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFH8kOCHwQNk7qu7VmB1tUmr2qE5pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTU0YzM3MzItZTMxMi0z Y2RjLWFmMGMtZmQwODU0YWQ0NTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUAdAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB1E3sD2aAf+uThCn+MxbFV+gbPMMN87ZXAoe7TxEKG7h6BaEwRc 339XftEpT2ElYmkBvDqVHoMci+oHQawXt0ZFMPexSDARkiihfZ9JDz4ZV2Rjh5Nw NLQZrLl/uMScwJ8TP0H9MKlnPcYeJfVQcI3NJjIMlA52nxr4R5DJAAmsiRSX1Jpy djzprhx+V4wOg+QT6tEygMB3ETEg+pRbknqUB824Eyj8ZrzCoLvdwGluaG1dImDL EYWyrQ5UuprCKQ38IkqoYi52CnRTOodYSqrwyFh4rdYePChr0wC6x/2t0Qz/2zJK zr/bRNOhb1uBLUrIMhB9JMxP3eRuTrZdK0E= -----END CERTIFICATE-----Generated at Sat Apr 5 10:57:30 2025 by rpki-client