$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a37d3462-f756-3b6b-a807-22c3f937f7a5.roa File: a37d3462-f756-3b6b-a807-22c3f937f7a5.roa (raw, json) Hash identifier: N6f1d61j7l9fSC9P0Rgj2DITMJEowVN4QbA47u54F+A= Subject key identifier: 14:7A:03:4C:14:2C:F6:C1:8C:BA:DC:A5:00:F5:F6:DD:62:04:92:BD Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848A13625D320AE9578C97B82A0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a37d3462-f756-3b6b-a807-22c3f937f7a5.roa Signing time: Wed 22 Jan 2025 14:00:52 +0000 ROA not before: Wed 22 Jan 2025 14:00:52 +0000 ROA not after: Tue 22 Apr 2025 13:00:52 +0000 asID: 20940 IP address blocks: 2600:140b:c00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a1:36:25:d3:20:ae:95:78:c9:7b:82:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 22 14:00:52 2025 GMT Not After : Apr 22 13:00:52 2025 GMT Subject: CN=a1a0cc64-064d-41bc-91d0-42499f4727e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:75:62:b5:1e:91:a8:b2:45:50:de:1d:e9:4a: 38:74:06:2e:b4:d6:68:3a:c6:91:56:c7:7a:f3:75: 65:55:a0:67:de:6c:a1:00:ba:84:a9:58:81:7f:c9: 82:6d:23:96:19:88:54:75:ec:ff:f5:37:28:2e:ae: 58:70:11:5d:a2:5d:6c:16:92:1e:94:95:29:9a:c6: 1b:37:43:56:b6:98:e5:2b:02:e1:50:37:99:d7:bb: 5d:ac:ec:57:c9:86:f0:0f:b5:31:a6:28:dc:4a:58: c0:58:2d:6f:99:0a:50:09:60:a7:8b:94:93:9f:0c: 9f:8e:26:21:45:14:9c:10:09:0e:d7:f3:0c:a7:88: bf:d2:70:94:64:3f:e9:32:ec:a4:9c:45:f9:e5:31: bf:e4:f4:c4:b2:6e:52:98:ed:48:18:07:31:60:b8: 8d:fe:cf:e3:e8:ee:b6:26:21:33:2c:92:6b:9a:b1: e0:4e:c5:20:b7:58:a4:d9:5c:35:72:dc:58:35:b2: d5:c6:b1:be:54:a2:36:cb:f1:04:0c:2c:02:3d:ad: d7:17:3d:24:6a:ad:18:c8:46:3a:cb:5d:ae:fb:06: 4c:a3:3f:f3:f5:00:a3:18:84:be:4e:e1:53:7f:58: 2b:c7:00:92:47:64:94:39:d5:4e:38:f4:ff:ef:85: 2b:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:7A:03:4C:14:2C:F6:C1:8C:BA:DC:A5:00:F5:F6:DD:62:04:92:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a37d3462-f756-3b6b-a807-22c3f937f7a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:140b:c00::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:3d:56:c0:62:50:62:d1:8a:86:e3:e4:e2:ba:67:f3:d4:9d: da:f1:b3:a0:45:7c:b1:0e:7e:06:8c:73:6a:4b:c9:dd:a8:ae: 37:bc:0f:fe:f6:53:7c:c7:0e:df:75:1b:9c:2c:02:c9:25:6e: f2:36:f1:11:65:59:62:e0:4b:a7:49:eb:40:0c:e1:d5:8b:cf: 3f:74:8f:60:65:74:c8:c9:ea:ad:7e:11:14:9a:b2:cf:93:8c: 1d:0b:b9:f3:8f:0f:77:25:4c:ed:41:8c:81:93:c7:6b:c4:d4: 83:b9:86:13:d5:94:80:5a:bb:87:3e:31:bf:66:fc:46:ef:32: bb:e8:23:ae:7d:4d:bf:f4:76:2d:ec:cf:02:94:17:87:99:ac: 99:41:02:87:db:9e:50:b9:1b:1a:e8:9e:51:b6:67:1a:ba:3b: 18:bf:e2:0b:de:d5:e4:c0:0d:d2:3a:cc:f4:1b:a8:dd:04:c8: 47:a5:d8:b2:a3:2f:e5:78:1c:08:81:04:68:b9:19:70:a9:f6: 0d:49:7e:e6:75:a9:a8:7d:d1:61:2d:7b:a4:35:92:1f:2b:76: 89:2c:1a:c8:26:45:d0:ce:c9:fe:a6:1d:64:4b:5a:82:3a:43: c8:18:4b:07:b3:1b:9a:80:ad:e5:d3:97:57:05:e5:5c:ce:61: d3:9e:fc:73 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEihNiXTIK6VeMl7gqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyMjE0MDA1MloXDTI1MDQyMjEzMDA1MlowLzEtMCsGA1UEAxMk YTFhMGNjNjQtMDY0ZC00MWJjLTkxZDAtNDI0OTlmNDcyN2UyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHVitR6RqLJFUN4d6Uo4dAYutNZoOsaRVsd6 83VlVaBn3myhALqEqViBf8mCbSOWGYhUdez/9TcoLq5YcBFdol1sFpIelJUpmsYb N0NWtpjlKwLhUDeZ17tdrOxXyYbwD7UxpijcSljAWC1vmQpQCWCni5STnwyfjiYh RRScEAkO1/MMp4i/0nCUZD/pMuyknEX55TG/5PTEsm5SmO1IGAcxYLiN/s/j6O62 JiEzLJJrmrHgTsUgt1ik2Vw1ctxYNbLVxrG+VKI2y/EEDCwCPa3XFz0kaq0YyEY6 y12u+wZMoz/z9QCjGIS+TuFTf1grxwCSR2SUOdVOOPT/74UrIwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBR6A0wULPbBjLrcpQD19t1iBJK9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTM3ZDM0NjItZjc1Ni0z YjZiLWE4MDctMjJjM2Y5MzdmN2E1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUCwwA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHE9VsBiUGLRiobj5OK6Z/PUndrxs6BFfLEOfgaMc2pLyd2orje8 D/72U3zHDt91G5wsAsklbvI28RFlWWLgS6dJ60AM4dWLzz90j2BldMjJ6q1+ERSa ss+TjB0LufOPD3clTO1BjIGTx2vE1IO5hhPVlIBau4c+Mb9m/EbvMrvoI659Tb/0 di3szwKUF4eZrJlBAofbnlC5GxronlG2Zxq6Oxi/4gve1eTADdI6zPQbqN0EyEel 2LKjL+V4HAiBBGi5GXCp9g1JfuZ1qah90WEte6Q1kh8rdoksGsgmRdDOyf6mHWRL WoI6Q8gYSwezG5qAreXTl1cF5VzOYdOe/HM= -----END CERTIFICATE-----Generated at Sat Apr 5 10:59:57 2025 by rpki-client