$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bc3c0ab2-1db6-39ee-bad5-6a9327e21cf9.roa File: bc3c0ab2-1db6-39ee-bad5-6a9327e21cf9.roa (raw, json) Hash identifier: N+RoCTMDZ0JsDScIQxIE72cJWCbw3JVf1PNrMfrvpog= Subject key identifier: C1:28:C6:80:5F:DB:60:2E:E3:BC:06:4F:2D:D3:99:B7:C1:A3:F2:3D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848A99639549312C879B96855E0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bc3c0ab2-1db6-39ee-bad5-6a9327e21cf9.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 35994 IP address blocks: 2600:1406:e000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:39:54:93:12:c8:79:b9:68:55:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=82626344-b9a6-44f0-8b4f-f87b49851083 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4b:17:f7:99:80:9d:6c:a3:58:ed:6e:64:29: 38:dc:4e:ba:1a:e7:d4:80:30:2e:1e:90:54:65:9d: ab:26:9b:f2:f9:71:92:b7:41:62:f5:35:c4:2c:cd: c1:73:91:5a:d6:a1:f0:7a:eb:11:f0:5d:9c:6a:1d: 4a:64:0b:08:51:08:a3:b1:51:37:a0:5f:ee:ed:16: 3a:f3:c2:24:25:16:a5:9c:69:c0:4a:1c:18:5d:1b: 48:34:a8:14:21:07:39:76:ad:f8:a1:08:b5:17:47: 18:cb:1b:f0:00:4d:2e:c5:0c:15:ad:10:fc:de:31: 81:64:2c:62:d7:a0:15:85:14:7d:e9:25:a8:c5:9c: f7:84:37:75:73:e1:e6:48:d9:c8:9f:05:ec:a2:d6: 15:bc:7d:a1:2c:ff:d0:09:ca:83:98:33:5e:cb:32: 5d:f8:f3:5e:dc:af:44:4b:24:fe:74:74:0c:45:cb: 48:ea:7b:e6:37:5c:fa:e4:46:e6:20:be:a7:44:4c: 93:0c:23:0e:45:73:2d:1e:21:17:14:b2:e9:2d:8c: 1f:05:ec:0e:ac:38:b6:62:14:01:86:51:f4:d2:11: 59:c2:84:76:7f:60:fd:f1:2e:53:79:e8:af:b4:18: 68:91:ef:2e:75:34:66:c8:f4:90:a8:dd:d0:99:35: 09:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:28:C6:80:5F:DB:60:2E:E3:BC:06:4F:2D:D3:99:B7:C1:A3:F2:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bc3c0ab2-1db6-39ee-bad5-6a9327e21cf9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1406:e000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:bd:a1:d2:b9:86:36:0a:aa:08:cf:5b:7d:e5:bd:3c:a8:89: 83:74:73:12:af:fe:f0:a9:20:37:e8:3f:c1:44:2d:48:a6:d8: f8:c9:42:4e:43:e1:3a:32:84:56:c3:b4:f8:f6:ef:63:b0:8a: 45:86:c4:5a:bd:9d:02:21:85:e1:97:b7:b9:c6:5c:cf:4d:d5: 30:e3:69:7a:d9:9a:96:fd:26:47:b1:e3:e6:1a:1f:d6:34:f6: bc:ee:5e:4c:63:ea:4a:47:32:a5:28:cf:bc:72:50:9a:b3:c7: 3e:f9:1b:58:a6:dd:92:f9:ed:5e:19:e8:51:64:e9:3b:3f:2b: 71:e6:27:fe:da:12:9d:1b:30:9b:b5:57:f7:07:21:45:06:92: 32:b0:b1:76:c7:03:af:c9:7f:de:9f:62:5e:b5:3a:e4:f2:71: cb:a2:67:c3:55:dd:ef:00:16:87:0d:9e:30:6d:5a:58:0b:ea: 43:cd:c9:a4:85:2d:e4:6e:67:46:49:8e:44:7f:7b:b9:d6:a4: 8b:82:b2:d1:78:11:57:63:3b:c7:55:b0:0e:39:b0:6c:f1:fc: b5:8f:5a:52:0c:2f:48:dd:9a:46:ce:f0:ce:e4:93:c5:fc:ca: 20:ce:2f:f6:52:55:26:e8:99:de:34:3f:31:c2:e2:83:4c:f8: 03:5f:0c:8b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEipljlUkxLIebloVeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk ODI2MjYzNDQtYjlhNi00NGYwLThiNGYtZjg3YjQ5ODUxMDgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUsX95mAnWyjWO1uZCk43E66GufUgDAuHpBU ZZ2rJpvy+XGSt0Fi9TXELM3Bc5Fa1qHweusR8F2cah1KZAsIUQijsVE3oF/u7RY6 88IkJRalnGnAShwYXRtINKgUIQc5dq34oQi1F0cYyxvwAE0uxQwVrRD83jGBZCxi 16AVhRR96SWoxZz3hDd1c+HmSNnInwXsotYVvH2hLP/QCcqDmDNeyzJd+PNe3K9E SyT+dHQMRctI6nvmN1z65EbmIL6nREyTDCMORXMtHiEXFLLpLYwfBewOrDi2YhQB hlH00hFZwoR2f2D98S5TeeivtBhoke8udTRmyPSQqN3QmTUJxQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMEoxoBf22Au47wGTy3TmbfBo/I9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmMzYzBhYjItMWRiNi0z OWVlLWJhZDUtNmE5MzI3ZTIxY2Y5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUBuAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFW9odK5hjYKqgjPW33lvTyoiYN0cxKv/vCpIDfoP8FELUim2PjJ Qk5D4ToyhFbDtPj272OwikWGxFq9nQIhheGXt7nGXM9N1TDjaXrZmpb9Jkex4+Ya H9Y09rzuXkxj6kpHMqUoz7xyUJqzxz75G1im3ZL57V4Z6FFk6Ts/K3HmJ/7aEp0b MJu1V/cHIUUGkjKwsXbHA6/Jf96fYl61OuTyccuiZ8NV3e8AFocNnjBtWlgL6kPN yaSFLeRuZ0ZJjkR/e7nWpIuCstF4EVdjO8dVsA45sGzx/LWPWlIML0jdmkbO8M7k k8X8yiDOL/ZSVSbomd40PzHC4oNM+ANfDIs= -----END CERTIFICATE-----Generated at Sat Apr 5 10:56:02 2025 by rpki-client