$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9aaa7f17-dd58-3f93-9a71-fa47cf75ca2d.roa File: 9aaa7f17-dd58-3f93-9a71-fa47cf75ca2d.roa (raw, json) Hash identifier: xKox63TJy4wyKYmepGFjyYVj8ZbyogFynvOw6glDm2I= Subject key identifier: 18:D8:0B:85:01:B3:20:17:E8:6E:AF:90:43:0C:CE:50:55:C3:D0:C0 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848ADC626B824CD04FE22E94880 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9aaa7f17-dd58-3f93-9a71-fa47cf75ca2d.roa Signing time: Mon 27 Jan 2025 02:00:39 +0000 ROA not before: Mon 27 Jan 2025 02:00:39 +0000 ROA not after: Sun 27 Apr 2025 01:00:39 +0000 asID: 55836 IP address blocks: 2600:140f:600::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ad:c6:26:b8:24:cd:04:fe:22:e9:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 27 02:00:39 2025 GMT Not After : Apr 27 01:00:39 2025 GMT Subject: CN=382d64a9-6d4c-4e57-a005-5cf5fc977ed3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:0e:84:ce:40:02:6d:35:8b:73:8f:77:0c:7e: 97:5d:94:58:07:95:49:c4:00:3f:72:e1:78:40:a1: 2f:9f:fd:3f:94:94:4a:2b:58:15:dc:9f:44:a6:0e: 5b:2c:22:8f:32:b9:d7:8a:70:f2:1f:da:4b:79:8e: 5f:05:d7:25:26:6c:4f:d6:03:c3:3a:b5:8a:cb:7e: 80:6d:0a:85:52:13:6d:8d:da:62:65:db:47:85:ed: 23:e8:ee:b1:b8:29:2c:97:f5:e8:25:85:e1:d0:77: 6f:12:e1:5a:cc:47:ea:d6:d5:10:29:5b:1d:0e:9c: 17:07:f9:b0:b1:d9:fd:77:09:28:65:a9:5d:d5:34: 12:79:93:9f:37:b8:d6:17:a4:a8:53:59:0a:37:ef: 89:51:e5:1b:16:b5:f8:74:3a:70:7b:5e:33:1f:77: fe:6e:bc:95:f8:37:95:e7:29:24:45:ad:a9:67:e8: f3:c9:03:85:25:d6:f9:d8:21:b2:4e:4b:ea:3b:c7: e5:02:aa:f0:37:96:b8:13:ed:be:75:72:10:4c:e8: 4f:cd:c7:42:01:05:00:1e:03:d4:5b:c9:12:7c:e8: ae:84:0c:99:a3:6f:1b:e6:21:ff:6e:b8:aa:14:41: 08:75:3d:84:84:1a:ec:0c:8f:72:ac:97:60:43:65: db:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:D8:0B:85:01:B3:20:17:E8:6E:AF:90:43:0C:CE:50:55:C3:D0:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9aaa7f17-dd58-3f93-9a71-fa47cf75ca2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:140f:600::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:cf:ef:bc:19:c3:6e:45:fa:4f:7f:3d:82:b8:21:aa:fb:a3: 91:53:d7:6c:40:f8:a9:1a:8e:93:1c:bf:56:d0:aa:64:17:c5: 2a:95:d2:49:6e:d3:c8:9a:d8:34:b3:18:e7:ab:a3:36:df:f8: 20:1c:41:42:9f:2a:42:08:17:5e:fc:a5:5a:37:17:79:62:ff: b3:00:2b:47:d9:ae:87:74:71:a6:47:f0:74:be:57:0c:6c:75: 83:3c:79:ec:56:b1:9e:fa:3e:36:d5:a7:ab:c5:13:88:fc:92: 83:23:a5:3b:fc:8b:ec:c6:a8:0a:75:14:71:3e:3d:d9:0f:df: 54:b2:3f:35:69:a8:4f:47:3b:07:04:82:23:8b:73:7c:de:ac: e7:7d:f4:7e:43:9e:9a:65:5c:76:10:f7:de:b9:00:3b:b8:f5: 6c:a7:1d:2f:24:3c:ce:f9:d2:c6:e9:f8:43:8e:26:c1:34:94: 54:f9:4e:8e:06:d6:8c:79:b2:f1:cd:8a:81:d6:56:fd:50:57: 71:6f:9d:4d:65:62:08:6d:50:50:8d:59:bf:ec:53:c6:3f:62: 5d:a8:0e:ba:c2:92:1c:5a:7b:72:f6:84:69:86:d1:4d:10:84: 9a:df:11:f3:d1:fd:46:ed:f6:69:d8:d5:19:0b:22:e5:86:bc: b0:07:5d:4d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEitxia4JM0E/iLpSIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyNzAyMDAzOVoXDTI1MDQyNzAxMDAzOVowLzEtMCsGA1UEAxMk MzgyZDY0YTktNmQ0Yy00ZTU3LWEwMDUtNWNmNWZjOTc3ZWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmw6EzkACbTWLc493DH6XXZRYB5VJxAA/cuF4 QKEvn/0/lJRKK1gV3J9Epg5bLCKPMrnXinDyH9pLeY5fBdclJmxP1gPDOrWKy36A bQqFUhNtjdpiZdtHhe0j6O6xuCksl/XoJYXh0HdvEuFazEfq1tUQKVsdDpwXB/mw sdn9dwkoZald1TQSeZOfN7jWF6SoU1kKN++JUeUbFrX4dDpwe14zH3f+bryV+DeV 5ykkRa2pZ+jzyQOFJdb52CGyTkvqO8flAqrwN5a4E+2+dXIQTOhPzcdCAQUAHgPU W8kSfOiuhAyZo28b5iH/briqFEEIdT2EhBrsDI9yrJdgQ2XbWQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBjYC4UBsyAX6G6vkEMMzlBVw9DAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOWFhYTdmMTctZGQ1OC0z ZjkzLTlhNzEtZmE0N2NmNzVjYTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUDwYA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGLP77wZw25F+k9/PYK4Iar7o5FT12xA+KkajpMcv1bQqmQXxSqV 0klu08ia2DSzGOerozbf+CAcQUKfKkIIF178pVo3F3li/7MAK0fZrod0caZH8HS+ VwxsdYM8eexWsZ76PjbVp6vFE4j8koMjpTv8i+zGqAp1FHE+PdkP31SyPzVpqE9H OwcEgiOLc3zerOd99H5DnpplXHYQ9965ADu49WynHS8kPM750sbp+EOOJsE0lFT5 To4G1ox5svHNioHWVv1QV3FvnU1lYghtUFCNWb/sU8Y/Yl2oDrrCkhxae3L2hGmG 0U0QhJrfEfPR/Ubt9mnY1RkLIuWGvLAHXU0= -----END CERTIFICATE-----Generated at Sat Apr 5 11:04:45 2025 by rpki-client