$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b7fbf155-86ef-344a-a744-a1b335719c37.roa File: b7fbf155-86ef-344a-a744-a1b335719c37.roa (raw, json) Hash identifier: QFWg2yz6s4KYauKKakWgXB56qgDuPSQZUfoRIqM746o= Subject key identifier: 58:04:93:6B:B7:F8:74:35:15:1F:03:85:82:6D:98:F9:3D:8E:6C:00 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848A1362E90ECEACB7F5157DFA0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b7fbf155-86ef-344a-a744-a1b335719c37.roa Signing time: Wed 22 Jan 2025 14:00:52 +0000 ROA not before: Wed 22 Jan 2025 14:00:52 +0000 ROA not after: Tue 22 Apr 2025 13:00:52 +0000 asID: 20940 IP address blocks: 2600:1406:b400::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a1:36:2e:90:ec:ea:cb:7f:51:57:df:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 22 14:00:52 2025 GMT Not After : Apr 22 13:00:52 2025 GMT Subject: CN=8e6ba01e-a5a7-40ac-b408-abef47d33c3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:f5:e0:be:24:28:fa:a6:cf:2e:45:5b:40:28: fd:8b:7d:8a:2e:2d:46:92:95:cc:d6:af:8a:6e:89: 3c:50:b9:a3:fb:8f:af:bc:6c:03:69:1d:e2:67:5e: 0a:9e:2f:ed:fe:9a:c4:07:1b:7b:fc:b4:2a:e7:33: ec:4c:39:99:95:61:66:75:f0:95:19:dd:97:c2:c9: fa:37:cc:95:37:6b:15:99:b2:9a:ff:78:0c:1a:3c: cc:61:ff:48:c3:78:4a:a6:be:e1:a8:ab:24:8a:16: 46:1a:aa:70:84:b7:e2:ab:a7:61:39:36:c0:86:b1: a2:5e:dd:84:e5:e3:48:70:91:a6:4f:a6:ec:61:f0: 16:1c:59:59:fc:e3:39:a3:04:89:89:85:58:58:04: 35:e8:cf:93:12:42:36:aa:98:0a:c9:e7:12:8c:b2: 8c:25:ed:b8:7c:85:d1:3b:da:52:41:09:4b:1c:22: 07:f2:86:da:04:27:5b:8b:a6:e5:de:bd:d1:78:bd: c3:67:a9:2d:d5:cb:08:4d:25:75:68:6e:c7:53:74: c1:cb:38:33:cb:50:00:b3:bc:9c:92:0d:e8:ad:f8: 40:7e:8f:34:6e:0a:f8:72:aa:40:42:f4:d6:63:8d: 1c:d2:fa:9e:0d:a4:ac:34:b1:ff:c5:3f:7e:40:10: 58:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:04:93:6B:B7:F8:74:35:15:1F:03:85:82:6D:98:F9:3D:8E:6C:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b7fbf155-86ef-344a-a744-a1b335719c37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1406:b400::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:ca:27:e1:8f:ba:34:3c:27:d6:dc:51:4b:34:06:22:ca:9a: 47:b1:55:a6:d1:c4:fa:0b:5b:18:00:cb:1b:6b:5e:01:67:1f: e0:fb:83:65:e5:c0:de:39:28:07:14:ba:5e:18:01:28:11:5f: 0d:4c:f7:7b:e7:d0:88:19:bc:f2:52:4f:63:94:64:2e:14:65: 35:bc:f5:7f:f7:a3:80:1c:dd:84:09:4f:e4:55:5b:09:90:ce: 32:30:dc:6f:fd:1f:da:fa:d1:ca:22:28:01:49:98:03:e0:97: a6:e9:a1:35:f3:e0:d5:7e:50:81:a8:9a:db:d7:2d:91:8b:bf: b1:87:ce:46:14:67:78:df:01:77:d3:fc:96:da:09:b8:bf:cc: df:ae:e8:3a:14:cb:56:88:ce:5e:ae:fa:c8:3f:84:55:be:d5: 95:68:dc:0b:05:f5:a0:db:95:74:b4:92:54:8f:68:1e:ae:c8: 95:99:a0:b6:68:f6:b6:a7:b2:30:04:e3:77:6d:f4:39:82:e7: d4:a7:79:01:73:76:9f:1b:a9:45:fb:f0:a7:6a:f8:74:1f:37: a8:4a:37:ee:e7:45:92:55:b7:47:4b:20:92:88:e5:cf:c8:05: 3a:b3:79:c6:a9:43:e1:6e:82:99:ae:b3:81:84:c9:9a:e7:59: 3d:f0:98:98 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEihNi6Q7OrLf1FX36AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyMjE0MDA1MloXDTI1MDQyMjEzMDA1MlowLzEtMCsGA1UEAxMk OGU2YmEwMWUtYTVhNy00MGFjLWI0MDgtYWJlZjQ3ZDMzYzNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgPXgviQo+qbPLkVbQCj9i32KLi1GkpXM1q+K bok8ULmj+4+vvGwDaR3iZ14Kni/t/prEBxt7/LQq5zPsTDmZlWFmdfCVGd2Xwsn6 N8yVN2sVmbKa/3gMGjzMYf9Iw3hKpr7hqKskihZGGqpwhLfiq6dhOTbAhrGiXt2E 5eNIcJGmT6bsYfAWHFlZ/OM5owSJiYVYWAQ16M+TEkI2qpgKyecSjLKMJe24fIXR O9pSQQlLHCIH8obaBCdbi6bl3r3ReL3DZ6kt1csITSV1aG7HU3TByzgzy1AAs7yc kg3orfhAfo80bgr4cqpAQvTWY40c0vqeDaSsNLH/xT9+QBBYwQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFgEk2u3+HQ1FR8DhYJtmPk9jmwAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjdmYmYxNTUtODZlZi0z NDRhLWE3NDQtYTFiMzM1NzE5YzM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUBrQA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABjKJ+GPujQ8J9bcUUs0BiLKmkexVabRxPoLWxgAyxtrXgFnH+D7 g2XlwN45KAcUul4YASgRXw1M93vn0IgZvPJST2OUZC4UZTW89X/3o4Ac3YQJT+RV WwmQzjIw3G/9H9r60coiKAFJmAPgl6bpoTXz4NV+UIGomtvXLZGLv7GHzkYUZ3jf AXfT/JbaCbi/zN+u6DoUy1aIzl6u+sg/hFW+1ZVo3AsF9aDblXS0klSPaB6uyJWZ oLZo9ransjAE43dt9DmC59SneQFzdp8bqUX78Kdq+HQfN6hKN+7nRZJVt0dLIJKI 5c/IBTqzecapQ+Fugpmus4GEyZrnWT3wmJg= -----END CERTIFICATE-----Generated at Sat Apr 5 14:11:24 2025 by rpki-client