$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9f2f8c7e-4d7b-3f82-a9c3-f3ca75bd5cde.roa File: 9f2f8c7e-4d7b-3f82-a9c3-f3ca75bd5cde.roa (raw, json) Hash identifier: XntpCbxpKH/QPavfoj4xes0euC2XnJHNwsfw2mFFxMM= Subject key identifier: 20:E1:EB:B6:9A:0A:60:54:96:FF:D0:3D:18:A6:52:AC:3A:1F:6D:1D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584898D612BB65EB49253F620A20 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9f2f8c7e-4d7b-3f82-a9c3-f3ca75bd5cde.roa Signing time: Sun 19 Jan 2025 14:00:52 +0000 ROA not before: Sun 19 Jan 2025 14:00:52 +0000 ROA not after: Sat 19 Apr 2025 13:00:52 +0000 asID: 20940 IP address blocks: 2600:141b:5000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:98:d6:12:bb:65:eb:49:25:3f:62:0a:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 19 14:00:52 2025 GMT Not After : Apr 19 13:00:52 2025 GMT Subject: CN=0537e40f-6391-44f3-aa3a-628657e5972b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:1c:0c:fa:48:d8:ce:bc:c3:09:b9:bc:1a:e5: 1e:3c:f6:23:43:a8:af:46:2b:8b:c7:79:8a:06:bd: 0a:04:4a:a8:5d:7b:81:7e:99:81:b1:d7:71:43:f4: 70:cd:5c:ca:82:2a:e5:bd:d9:d0:b4:6c:25:1d:32: 3b:84:93:16:2a:1f:e6:ec:07:04:0b:39:8d:c9:9c: 6a:4d:f9:4e:b2:8d:75:20:f8:b4:1d:99:f8:50:8a: 9e:70:99:5f:f6:60:b4:b5:45:d3:42:0c:84:c9:49: f1:e4:6f:b8:f6:18:e2:04:4f:51:79:73:bf:9d:4f: f5:75:ca:3c:d1:93:e0:ea:55:ed:be:2e:5f:15:c8: 51:27:b8:fe:df:e2:e9:76:07:e0:c4:55:84:21:54: 40:56:32:b2:49:03:2b:6b:f1:55:20:0d:a2:3a:1b: 0d:a9:f7:8b:5f:59:60:da:b2:3a:0e:cc:c5:2a:48: cf:ca:fa:a4:8c:c4:b1:93:22:36:02:dd:09:2c:cb: aa:fc:b0:06:bc:36:76:26:35:ea:98:f7:44:4f:a7: a9:59:9f:7d:f0:26:f5:de:63:1f:3d:4c:b1:17:5d: b6:40:9e:ae:8f:5f:d5:13:6b:18:b6:a8:77:77:a4: 86:9a:e3:ab:5f:85:6d:e0:eb:43:e8:ba:68:43:01: 38:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:E1:EB:B6:9A:0A:60:54:96:FF:D0:3D:18:A6:52:AC:3A:1F:6D:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9f2f8c7e-4d7b-3f82-a9c3-f3ca75bd5cde.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:141b:5000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:54:4d:f7:f0:c2:3e:d3:17:fe:5a:8b:a8:41:f4:76:60:60: d3:8e:13:24:5e:40:95:f3:ba:22:ab:81:36:f0:9a:cb:92:a8: b6:38:e8:38:2d:37:71:c6:d8:8a:33:09:69:c3:76:7a:55:bb: 73:9a:73:fd:f6:da:f0:f1:dc:b9:a4:19:98:9e:51:ca:02:6e: 5b:f1:7c:c7:f5:6a:6c:84:cd:d8:53:ab:fd:2e:97:04:81:24: 91:b8:3d:ef:1a:f0:2a:0b:08:ed:70:1b:06:b9:53:8e:51:87: e0:7d:64:52:b4:3d:a1:08:ee:10:48:cd:94:ae:01:dc:0e:99: 01:bd:86:4c:1c:3c:30:cb:d8:74:de:3c:28:7e:79:d1:d9:5d: 3b:4e:ec:9f:4e:06:19:8e:ea:34:51:62:e9:34:00:5c:ff:9c: 5b:80:b6:82:09:3b:32:5c:02:a9:80:67:0c:d0:34:db:d8:34: 5e:85:28:43:9a:c0:d5:f8:e8:8e:c0:49:51:e8:3c:f5:06:3d: 87:f0:15:59:5b:87:d8:91:0f:e1:f7:9d:eb:89:a1:eb:a8:0e: fe:a6:46:b6:6a:d5:a9:1d:87:bd:34:84:62:63:4b:05:ab:8a: 77:0e:b1:df:2d:a9:5a:5e:4d:f6:90:34:80:a0:c4:a6:26:9a: 19:e2:eb:a8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiY1hK7ZetJJT9iCiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDExOTE0MDA1MloXDTI1MDQxOTEzMDA1MlowLzEtMCsGA1UEAxMk MDUzN2U0MGYtNjM5MS00NGYzLWFhM2EtNjI4NjU3ZTU5NzJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihwM+kjYzrzDCbm8GuUePPYjQ6ivRiuLx3mK Br0KBEqoXXuBfpmBsddxQ/RwzVzKgirlvdnQtGwlHTI7hJMWKh/m7AcECzmNyZxq TflOso11IPi0HZn4UIqecJlf9mC0tUXTQgyEyUnx5G+49hjiBE9ReXO/nU/1dco8 0ZPg6lXtvi5fFchRJ7j+3+LpdgfgxFWEIVRAVjKySQMra/FVIA2iOhsNqfeLX1lg 2rI6DszFKkjPyvqkjMSxkyI2At0JLMuq/LAGvDZ2JjXqmPdET6epWZ998Cb13mMf PUyxF122QJ6uj1/VE2sYtqh3d6SGmuOrX4Vt4OtD6LpoQwE4TQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCDh67aaCmBUlv/QPRimUqw6H20dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOWYyZjhjN2UtNGQ3Yi0z ZjgyLWE5YzMtZjNjYTc1YmQ1Y2RlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUG1AA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHtUTffwwj7TF/5ai6hB9HZgYNOOEyReQJXzuiKrgTbwmsuSqLY4 6DgtN3HG2IozCWnDdnpVu3Oac/322vDx3LmkGZieUcoCblvxfMf1amyEzdhTq/0u lwSBJJG4Pe8a8CoLCO1wGwa5U45Rh+B9ZFK0PaEI7hBIzZSuAdwOmQG9hkwcPDDL 2HTePCh+edHZXTtO7J9OBhmO6jRRYuk0AFz/nFuAtoIJOzJcAqmAZwzQNNvYNF6F KEOawNX46I7ASVHoPPUGPYfwFVlbh9iRD+H3neuJoeuoDv6mRrZq1akdh700hGJj SwWrincOsd8tqVpeTfaQNICgxKYmmhni66g= -----END CERTIFICATE-----Generated at Sat Apr 5 12:12:54 2025 by rpki-client