$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9d110f90-28be-3457-8e60-9861123cb715.roa File: 9d110f90-28be-3457-8e60-9861123cb715.roa (raw, json) Hash identifier: YkAeXJFf4h9zofOU+Y4AIyJ6clHxkzRPEfgMOU54VSg= Subject key identifier: 3D:00:31:8D:52:44:4E:2F:FE:49:CB:26:D7:34:41:5B:33:F4:06:2E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848A99639622340452B5291D700 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9d110f90-28be-3457-8e60-9861123cb715.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 35994 IP address blocks: 2600:1406:f000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:39:62:23:40:45:2b:52:91:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=245c2002-27f8-4016-8084-0ab99ae00b06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:44:48:95:a1:d8:fa:5a:df:1e:eb:01:f4:65: b5:3a:8a:07:9a:5b:86:7b:a9:6f:23:10:d9:a9:fe: 16:83:96:cf:f8:91:25:99:bf:2b:3f:34:9a:d2:b9: a7:c4:42:dc:1f:63:c5:4e:80:ef:0d:66:25:c5:09: d0:a2:38:05:1e:20:ee:99:22:b0:ce:e6:24:ea:a8: d5:64:08:c6:56:1e:29:d2:27:c5:af:68:1b:eb:6d: af:20:d6:3f:95:75:27:83:0d:bf:ca:a6:dc:b3:db: 65:10:ff:3b:b8:90:f0:e9:c3:43:1c:63:87:e0:8c: 28:64:00:c8:a0:e1:f6:2c:8d:da:64:16:02:87:6f: f2:d2:a3:80:a0:27:af:64:d2:d5:f8:0e:8e:f3:b2: 4e:4e:00:28:25:01:7a:7f:9a:d0:31:ae:a3:1f:ba: 6c:d0:f7:43:c4:f5:77:62:b0:93:f1:b4:04:e3:a1: 2a:61:f4:b9:dd:64:df:36:7d:66:ec:ee:3d:e0:db: 4f:23:e2:4f:a2:c4:f9:b0:ed:94:17:cc:13:56:e8: 81:b7:e5:b0:c3:04:c9:e7:07:15:02:6a:1b:ac:da: 6d:9d:26:58:57:d5:f1:6b:3a:59:60:70:9f:b4:1e: 66:cd:d3:12:44:67:37:dc:29:43:cb:65:86:16:89: 0a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:00:31:8D:52:44:4E:2F:FE:49:CB:26:D7:34:41:5B:33:F4:06:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9d110f90-28be-3457-8e60-9861123cb715.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1406:f000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:61:d6:59:4a:34:c0:1f:8e:3b:1a:1b:60:4d:f1:0f:13:aa: 18:7f:55:4c:9c:45:68:1f:86:7f:eb:6e:01:f1:ae:86:59:f6: a2:5b:ad:73:4d:70:46:f3:32:85:23:9e:a1:12:26:19:95:df: 8e:e5:fb:9d:a1:86:61:ff:a0:84:a8:a8:09:84:dc:a1:80:76: db:3e:33:a8:07:55:b2:d5:fa:35:b9:71:8d:03:95:fc:a7:88: 9f:5d:40:d9:e7:06:de:4d:9c:50:ec:9e:40:87:43:4d:07:b0: ad:24:fb:fa:b4:75:06:ec:01:23:92:56:3c:f8:0c:71:13:90: 86:6b:18:17:0f:aa:c7:09:dd:d6:fd:5e:05:29:b9:47:ae:fc: 4c:e4:1d:59:c5:7c:de:f6:6b:ee:cb:ef:c9:dd:45:11:f8:ff: 00:14:5c:3d:4f:e9:08:ca:48:c9:10:96:be:02:1f:b7:f5:26: 90:68:a5:89:54:f1:f4:0c:17:35:c5:6a:1c:7a:8b:df:9b:a9: ca:86:49:01:22:2c:56:e4:db:cb:57:85:fb:3a:05:8f:cb:17: b9:8f:1f:a1:c9:9e:ef:a0:c2:28:0c:21:e9:61:15:c8:15:b0: 23:ed:77:c1:52:f9:19:f7:b2:f9:e3:79:bd:dc:9c:92:1c:d6: a2:24:8c:2c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEipljliI0BFK1KR1wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk MjQ1YzIwMDItMjdmOC00MDE2LTgwODQtMGFiOTlhZTAwYjA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0RIlaHY+lrfHusB9GW1OooHmluGe6lvIxDZ qf4Wg5bP+JElmb8rPzSa0rmnxELcH2PFToDvDWYlxQnQojgFHiDumSKwzuYk6qjV ZAjGVh4p0ifFr2gb622vINY/lXUngw2/yqbcs9tlEP87uJDw6cNDHGOH4IwoZADI oOH2LI3aZBYCh2/y0qOAoCevZNLV+A6O87JOTgAoJQF6f5rQMa6jH7ps0PdDxPV3 YrCT8bQE46EqYfS53WTfNn1m7O494NtPI+JPosT5sO2UF8wTVuiBt+WwwwTJ5wcV AmobrNptnSZYV9XxazpZYHCftB5mzdMSRGc33ClDy2WGFokKyQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFD0AMY1SRE4v/knLJtc0QVsz9AYuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOWQxMTBmOTAtMjhiZS0z NDU3LThlNjAtOTg2MTEyM2NiNzE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUBvAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHxh1llKNMAfjjsaG2BN8Q8Tqhh/VUycRWgfhn/rbgHxroZZ9qJb rXNNcEbzMoUjnqESJhmV347l+52hhmH/oISoqAmE3KGAdts+M6gHVbLV+jW5cY0D lfyniJ9dQNnnBt5NnFDsnkCHQ00HsK0k+/q0dQbsASOSVjz4DHETkIZrGBcPqscJ 3db9XgUpuUeu/EzkHVnFfN72a+7L78ndRRH4/wAUXD1P6QjKSMkQlr4CH7f1JpBo pYlU8fQMFzXFahx6i9+bqcqGSQEiLFbk28tXhfs6BY/LF7mPH6HJnu+gwigMIelh FcgVsCPtd8FS+Rn3svnjeb3cnJIc1qIkjCw= -----END CERTIFICATE-----Generated at Sat Apr 5 11:10:17 2025 by rpki-client