$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aeee308b-57bb-301c-9e1b-6f27c3914edc.roa File: aeee308b-57bb-301c-9e1b-6f27c3914edc.roa (raw, json) Hash identifier: aDSqtPyK3c0zQ1o/n9C6EmyW3fDGuwwie4Chu0R9mDQ= Subject key identifier: 40:55:C1:CE:90:D6:01:23:7F:81:4C:0B:35:96:31:23:9A:5D:2E:8F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849002152DEB06D2740BC870A80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aeee308b-57bb-301c-9e1b-6f27c3914edc.roa Signing time: Tue 25 Feb 2025 14:00:52 +0000 ROA not before: Tue 25 Feb 2025 14:00:52 +0000 ROA not after: Mon 26 May 2025 13:00:52 +0000 asID: 35994 IP address blocks: 2001:4878:81e0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:00:21:52:de:b0:6d:27:40:bc:87:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 25 14:00:52 2025 GMT Not After : May 26 13:00:52 2025 GMT Subject: CN=674dc3be-ef6b-42e8-927b-8f046747dff0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c5:8a:4c:e7:fa:2a:2c:24:68:c9:67:e8:0c: a4:aa:58:c3:85:91:33:7f:a2:96:eb:49:06:39:cd: 57:38:54:98:f4:0e:d4:5c:8a:68:fd:90:a5:f3:8e: bf:1d:6b:cb:8a:71:6b:39:c9:56:a9:31:89:7b:41: d9:79:5c:cd:f8:7a:5a:b9:d4:46:ae:97:fb:7c:10: 3b:85:ea:e5:09:4e:f2:ed:3c:6e:86:47:b7:65:65: 9d:de:b4:33:db:0e:7b:64:48:50:98:c9:29:01:37: 3b:8c:a1:bb:4d:01:5c:7f:37:04:3d:3a:27:3c:57: 52:10:29:13:45:b5:30:d1:4c:c1:e3:ce:32:94:2f: 4f:95:19:3c:48:00:45:03:c2:ef:75:7d:c0:be:9d: 22:a9:67:ca:66:ff:4d:05:c3:61:e1:36:cc:57:f2: 2f:b6:08:41:15:bf:76:37:65:c8:c7:25:52:40:96: 0d:44:25:0e:b2:e7:e7:0c:18:f2:6a:44:68:67:96: 39:a4:c8:f7:83:ef:39:48:75:c7:60:87:be:d8:62: 9d:0f:d1:b0:fb:f1:77:61:2c:a5:2e:dd:60:87:6b: 3e:05:30:2c:e3:d4:88:8b:bb:31:23:c3:5c:14:27: f6:9a:b6:b9:1d:fc:0e:50:da:7d:8f:b3:e8:d6:92: 3d:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:55:C1:CE:90:D6:01:23:7F:81:4C:0B:35:96:31:23:9A:5D:2E:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aeee308b-57bb-301c-9e1b-6f27c3914edc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2001:4878:81e0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:de:d7:de:49:d6:5e:24:55:69:32:ec:09:c4:73:41:ac:f0: 17:52:3c:d3:b1:31:a5:79:88:40:83:82:68:79:e8:6c:ff:68: 69:b5:6e:24:6b:66:43:4b:5d:34:f1:a2:ce:ad:f7:c2:6d:4f: a4:fc:da:9d:f4:ad:6e:cc:00:ba:40:8d:aa:bd:9c:a7:f8:db: 94:4a:2b:f0:fe:a9:2a:77:d7:0f:0f:f8:69:d7:df:2d:9b:3d: 15:80:d8:f2:06:64:b5:f8:c5:9e:1a:38:3e:19:cf:f4:06:b7: c8:0b:ca:45:89:19:06:28:91:52:53:cd:c3:66:f3:d7:b9:5c: 21:f1:0e:08:91:4d:0d:5d:3a:2a:7b:b7:c4:f6:37:b5:2c:95: 7e:1b:e3:f0:b0:e9:ae:7c:40:05:0b:b7:66:46:55:b9:21:af: 7f:18:2d:41:40:9d:6c:2a:d5:2d:d9:26:4a:0d:81:8b:1e:fc: e2:91:93:64:e5:68:54:15:a0:51:da:e7:06:78:7b:17:dc:01: 44:17:14:c3:93:88:3a:8c:1e:72:8b:3e:ce:19:7a:0a:c3:a5: 81:36:d4:af:11:71:d6:36:c1:39:a0:71:14:08:86:6c:47:0d: 5e:df:1e:12:5e:ba:6a:6f:91:4d:83:28:22:f7:5f:23:de:e6: 76:b6:ac:fb -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkAIVLesG0nQLyHCoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIyNTE0MDA1MloXDTI1MDUyNjEzMDA1MlowLzEtMCsGA1UEAxMk Njc0ZGMzYmUtZWY2Yi00MmU4LTkyN2ItOGYwNDY3NDdkZmYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscWKTOf6KiwkaMln6AykqljDhZEzf6KW60kG Oc1XOFSY9A7UXIpo/ZCl846/HWvLinFrOclWqTGJe0HZeVzN+HpaudRGrpf7fBA7 herlCU7y7Txuhke3ZWWd3rQz2w57ZEhQmMkpATc7jKG7TQFcfzcEPTonPFdSECkT RbUw0UzB484ylC9PlRk8SABFA8LvdX3Avp0iqWfKZv9NBcNh4TbMV/IvtghBFb92 N2XIxyVSQJYNRCUOsufnDBjyakRoZ5Y5pMj3g+85SHXHYIe+2GKdD9Gw+/F3YSyl Lt1gh2s+BTAs49SIi7sxI8NcFCf2mra5HfwOUNp9j7Po1pI9dQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEBVwc6Q1gEjf4FMCzWWMSOaXS6PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWVlZTMwOGItNTdiYi0z MDFjLTllMWItNmYyN2MzOTE0ZWRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEIAFIeIHg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABPe195J1l4kVWky7AnEc0Gs8BdSPNOxMaV5iECDgmh56Gz/aGm1 biRrZkNLXTTxos6t98JtT6T82p30rW7MALpAjaq9nKf425RKK/D+qSp31w8P+GnX 3y2bPRWA2PIGZLX4xZ4aOD4Zz/QGt8gLykWJGQYokVJTzcNm89e5XCHxDgiRTQ1d Oip7t8T2N7UslX4b4/Cw6a58QAULt2ZGVbkhr38YLUFAnWwq1S3ZJkoNgYse/OKR k2TlaFQVoFHa5wZ4exfcAUQXFMOTiDqMHnKLPs4ZegrDpYE21K8RcdY2wTmgcRQI hmxHDV7fHhJeumpvkU2DKCL3XyPe5na2rPs= -----END CERTIFICATE-----Generated at Sat Apr 5 11:03:50 2025 by rpki-client