$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/99b5cc08-06d4-353d-a718-989f6dcee309.roa File: 99b5cc08-06d4-353d-a718-989f6dcee309.roa (raw, json) Hash identifier: uBVYLFmzZUmxvIv94QJJ0V4glp6Ivcn09JXXJa9pTns= Subject key identifier: E7:0B:22:72:9A:38:F0:62:69:0B:76:D4:A6:C9:92:1F:37:96:FF:60 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848A996660744316533EEADA800 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/99b5cc08-06d4-353d-a718-989f6dcee309.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 35994 IP address blocks: 2600:1400:2000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:66:07:44:31:65:33:ee:ad:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=db4f45b6-6696-4011-bc5e-6e3039b0d510 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:1c:6e:59:24:14:83:ce:48:c5:32:92:32:45: d9:06:ce:1e:ec:c5:30:ea:32:0d:15:0a:59:99:2f: 96:45:ca:f4:fc:81:a4:b4:a6:52:fa:ea:12:c7:60: 9b:b6:39:c1:fe:27:47:e7:7a:9e:87:f1:b4:e6:61: 78:70:de:a3:fa:4e:cb:cf:b2:d7:f9:8b:84:31:15: 87:0a:dd:48:8e:09:b0:4d:4f:4e:4c:7d:8b:00:8c: e7:4c:f5:da:2e:38:02:7d:d1:4d:40:3e:71:b4:d8: a6:84:c4:80:30:8e:40:b0:c3:e5:2d:87:24:d8:e6: 97:7d:02:55:eb:a5:7b:3b:2f:be:1e:d9:4e:eb:b8: b7:dd:a5:21:69:a5:90:7a:96:e5:83:40:08:5f:e3: 04:a0:9d:77:d2:48:79:f4:7a:79:75:15:9e:87:8c: 8d:78:c7:5d:a0:ee:41:f7:a4:0d:df:04:6a:72:d0: 73:c1:cd:56:8b:41:9c:1a:9c:a8:fb:25:30:99:df: 14:03:26:7d:3c:d3:b0:b9:e2:11:a7:ee:c4:b8:d5: 0b:dd:c1:53:e0:2a:54:5d:d6:c9:fc:da:2c:d9:ef: 83:89:bb:02:66:7f:bb:df:29:d1:fc:cc:30:ed:bc: c4:b4:da:55:22:ba:f2:a0:18:e5:3f:e6:b0:e6:8d: ea:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:0B:22:72:9A:38:F0:62:69:0B:76:D4:A6:C9:92:1F:37:96:FF:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/99b5cc08-06d4-353d-a718-989f6dcee309.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1400:2000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:50:7c:07:8f:0a:8c:1b:84:8c:c0:61:a5:0b:6f:c3:3f:07: f1:c7:b5:6f:17:a5:72:c7:f7:2d:96:81:15:3d:7b:e6:9e:38: 1b:a4:76:78:ba:b6:1d:20:5b:a4:2f:b8:3e:0f:b2:ea:2a:24: 85:a5:36:b6:14:e7:75:99:3a:34:35:eb:21:0c:dd:a4:40:cc: 08:24:27:ac:5a:7d:4c:96:bb:3a:a2:33:04:3f:f4:bd:8e:79: fe:e6:59:08:f8:cb:24:ea:b8:34:55:cf:62:4b:7a:ec:47:70: d7:53:89:25:2d:56:e3:be:63:2d:fd:6b:19:2a:23:14:14:82: 90:e9:be:d8:01:43:26:c2:d3:b7:a1:2f:f8:44:75:2e:e3:33: e9:d7:6b:c8:ee:98:40:02:67:7e:54:d2:07:ec:15:44:68:20: 5b:20:14:ec:aa:ee:9e:b8:a6:a2:ca:ba:fc:51:1f:38:63:d9: 8f:b8:2a:7c:75:0a:64:cb:23:ed:ee:c1:ac:25:5d:47:65:a7: 66:6c:8e:4b:b2:07:9c:14:78:0e:0a:86:5c:50:6e:e5:4d:d6: bb:92:a9:dd:c5:ac:00:dd:ed:64:ec:6b:13:d9:72:43:f9:d8: b5:09:14:23:2c:5d:9d:c6:bc:94:4b:68:86:ec:ef:73:75:71: aa:51:0c:a6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiplmYHRDFlM+6tqAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk ZGI0ZjQ1YjYtNjY5Ni00MDExLWJjNWUtNmUzMDM5YjBkNTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBxuWSQUg85IxTKSMkXZBs4e7MUw6jINFQpZ mS+WRcr0/IGktKZS+uoSx2CbtjnB/idH53qeh/G05mF4cN6j+k7Lz7LX+YuEMRWH Ct1IjgmwTU9OTH2LAIznTPXaLjgCfdFNQD5xtNimhMSAMI5AsMPlLYck2OaXfQJV 66V7Oy++HtlO67i33aUhaaWQepblg0AIX+MEoJ130kh59Hp5dRWeh4yNeMddoO5B 96QN3wRqctBzwc1Wi0GcGpyo+yUwmd8UAyZ9PNOwueIRp+7EuNUL3cFT4CpUXdbJ /Nos2e+DibsCZn+73ynR/Mww7bzEtNpVIrryoBjlP+aw5o3qbQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOcLInKaOPBiaQt21KbJkh83lv9gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTliNWNjMDgtMDZkNC0z NTNkLWE3MTgtOTg5ZjZkY2VlMzA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUACAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFtQfAePCowbhIzAYaULb8M/B/HHtW8XpXLH9y2WgRU9e+aeOBuk dni6th0gW6QvuD4PsuoqJIWlNrYU53WZOjQ16yEM3aRAzAgkJ6xafUyWuzqiMwQ/ 9L2Oef7mWQj4yyTquDRVz2JLeuxHcNdTiSUtVuO+Yy39axkqIxQUgpDpvtgBQybC 07ehL/hEdS7jM+nXa8jumEACZ35U0gfsFURoIFsgFOyq7p64pqLKuvxRHzhj2Y+4 Knx1CmTLI+3uwawlXUdlp2ZsjkuyB5wUeA4KhlxQbuVN1ruSqd3FrADd7WTsaxPZ ckP52LUJFCMsXZ3GvJRLaIbs73N1capRDKY= -----END CERTIFICATE-----Generated at Sat Apr 5 12:27:52 2025 by rpki-client