$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a12547cb-0662-3ad9-bb64-9833bd7de3c0.roa File: a12547cb-0662-3ad9-bb64-9833bd7de3c0.roa (raw, json) Hash identifier: eLPaGfhkDFIxd5JxxfkaDM0Zh84q/nmpHfVHKb0rvYg= Subject key identifier: 5C:A4:D6:23:B3:E3:50:9B:22:A5:AC:A0:E9:F3:F3:F4:ED:32:95:82 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848A1362D5935AA7AFF07C49638 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a12547cb-0662-3ad9-bb64-9833bd7de3c0.roa Signing time: Wed 22 Jan 2025 14:00:52 +0000 ROA not before: Wed 22 Jan 2025 14:00:52 +0000 ROA not after: Tue 22 Apr 2025 13:00:52 +0000 asID: 20940 IP address blocks: 2600:1403:4400::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a1:36:2d:59:35:aa:7a:ff:07:c4:96:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 22 14:00:52 2025 GMT Not After : Apr 22 13:00:52 2025 GMT Subject: CN=cb34804a-5bd4-4230-84b3-98c17c0b5ae5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:44:81:88:8d:e2:02:0d:63:6b:aa:42:00:3c: 0c:1d:99:3a:10:ee:de:69:64:54:21:d1:fe:28:3d: 56:db:06:e8:d9:e8:c6:9e:28:5f:f4:fc:64:91:66: e5:af:c3:e2:eb:95:a8:13:ca:cd:ed:8e:40:f2:76: 82:b3:19:a6:d1:82:71:e8:a2:3e:8d:18:6f:2f:b4: ec:f0:22:c7:b5:32:db:11:aa:b1:99:0f:35:ff:19: f0:35:c6:b5:f4:67:91:0c:a1:c2:e3:a9:72:78:7f: 76:b9:a2:44:94:05:4c:48:99:e1:1e:b2:03:fc:e6: d5:f7:96:67:bc:6b:28:d3:8e:1b:2b:f4:44:65:41: 58:b9:0b:bf:4e:02:a2:84:df:41:6b:e3:5a:bb:89: 62:9d:af:a3:1e:aa:c5:ae:2e:1c:1a:4a:45:3c:8f: 37:00:f7:94:60:37:86:8d:b2:a9:9d:80:d7:49:99: 8d:c5:94:92:e4:1b:16:33:c3:1e:a1:80:42:df:84: fc:f0:60:60:d9:f3:ec:ed:bf:f2:57:4a:b3:76:de: 0a:2c:ff:10:5a:cc:de:6c:67:c0:bd:ec:21:71:59: b2:15:08:a6:eb:e0:34:43:fe:dc:7d:99:a6:d0:01: 40:92:ee:34:a8:7c:fc:e8:7f:76:21:60:38:40:19: e9:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:A4:D6:23:B3:E3:50:9B:22:A5:AC:A0:E9:F3:F3:F4:ED:32:95:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a12547cb-0662-3ad9-bb64-9833bd7de3c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1403:4400::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:64:c8:fd:9c:0a:64:00:7c:94:fb:f0:b8:fa:2c:0c:5b:c3: 5f:47:98:e6:d1:31:9d:45:e2:fc:33:73:27:63:51:c3:6f:d9: c2:fc:5c:07:34:88:c3:b6:18:ec:73:f4:df:1f:f8:97:cd:1a: dd:67:42:d1:7c:6b:00:fe:c8:b8:53:60:9b:b1:c9:2b:8f:7d: 66:54:95:91:dd:8b:24:dc:40:d4:ee:04:d1:3c:09:60:6a:17: 0a:07:2a:e8:c1:31:3d:36:5c:49:3c:d5:fa:84:9d:24:21:d6: 6f:c7:2f:a4:ec:ad:fd:1f:53:07:a1:90:b0:d6:4c:6a:e5:8e: 65:5c:4d:8f:b8:bf:16:ab:40:aa:62:64:0c:26:02:5e:91:f6: 47:1d:b0:27:9a:03:89:7b:af:67:f9:dc:af:11:f8:95:1d:c1: 09:bf:78:07:c9:a0:27:ef:59:6b:96:fe:a6:ca:fe:9f:65:1c: 23:32:d4:93:df:91:5e:fd:51:e9:1d:2e:d0:a6:b6:f3:43:6c: b7:2f:09:77:54:67:c1:0a:0a:4f:e4:56:48:aa:08:ae:cb:0a: 81:e3:cc:46:b9:29:a7:5f:e4:c2:38:31:45:bc:ff:1b:99:4e: 0a:6e:d2:1e:2f:b5:f0:9e:35:c1:75:88:b6:fd:c8:ea:66:24: 70:a0:5b:6b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEihNi1ZNap6/wfEljgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyMjE0MDA1MloXDTI1MDQyMjEzMDA1MlowLzEtMCsGA1UEAxMk Y2IzNDgwNGEtNWJkNC00MjMwLTg0YjMtOThjMTdjMGI1YWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkSBiI3iAg1ja6pCADwMHZk6EO7eaWRUIdH+ KD1W2wbo2ejGnihf9PxkkWblr8Pi65WoE8rN7Y5A8naCsxmm0YJx6KI+jRhvL7Ts 8CLHtTLbEaqxmQ81/xnwNca19GeRDKHC46lyeH92uaJElAVMSJnhHrID/ObV95Zn vGso044bK/REZUFYuQu/TgKihN9Ba+Nau4lina+jHqrFri4cGkpFPI83APeUYDeG jbKpnYDXSZmNxZSS5BsWM8MeoYBC34T88GBg2fPs7b/yV0qzdt4KLP8QWszebGfA vewhcVmyFQim6+A0Q/7cfZmm0AFAku40qHz86H92IWA4QBnpRwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFyk1iOz41CbIqWsoOnz8/TtMpWCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTEyNTQ3Y2ItMDY2Mi0z YWQ5LWJiNjQtOTgzM2JkN2RlM2MwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUA0QA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGhkyP2cCmQAfJT78Lj6LAxbw19HmObRMZ1F4vwzcydjUcNv2cL8 XAc0iMO2GOxz9N8f+JfNGt1nQtF8awD+yLhTYJuxySuPfWZUlZHdiyTcQNTuBNE8 CWBqFwoHKujBMT02XEk81fqEnSQh1m/HL6Tsrf0fUwehkLDWTGrljmVcTY+4vxar QKpiZAwmAl6R9kcdsCeaA4l7r2f53K8R+JUdwQm/eAfJoCfvWWuW/qbK/p9lHCMy 1JPfkV79UekdLtCmtvNDbLcvCXdUZ8EKCk/kVkiqCK7LCoHjzEa5Kadf5MI4MUW8 /xuZTgpu0h4vtfCeNcF1iLb9yOpmJHCgW2s= -----END CERTIFICATE-----Generated at Sat Apr 5 11:03:59 2025 by rpki-client