$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bfd9f5c9-035d-3e75-9541-3d9259a23f2c.roa File: bfd9f5c9-035d-3e75-9541-3d9259a23f2c.roa (raw, json) Hash identifier: 2wy1o0JyQ40N04x8KysxnXa4/HpCBnle0757yrTdCic= Subject key identifier: BC:41:DF:EB:C9:75:20:E6:5E:C7:E5:82:C0:E4:01:25:8C:D0:66:60 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848901355CBEEA6D872A48F6240 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bfd9f5c9-035d-3e75-9541-3d9259a23f2c.roa Signing time: Thu 16 Jan 2025 10:42:15 +0000 ROA not before: Thu 16 Jan 2025 10:42:15 +0000 ROA not after: Wed 16 Apr 2025 09:42:15 +0000 asID: 20940 IP address blocks: 2600:141c:1c00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:90:13:55:cb:ee:a6:d8:72:a4:8f:62:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 16 10:42:15 2025 GMT Not After : Apr 16 09:42:15 2025 GMT Subject: CN=bbfcc9b9-2c7d-4eff-a568-350d17c0a6b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:dc:00:6f:1d:fe:16:94:fc:7d:a7:cd:1b:fd: b6:ab:30:d2:37:c3:ee:a4:3a:7e:2c:e3:bb:78:1f: 9a:23:dc:c5:22:ba:f3:e3:07:89:cd:44:67:7b:89: 4c:18:af:65:d6:17:e5:8e:1d:e0:81:3e:e2:ad:1c: 58:51:0b:cf:0d:be:62:10:ad:ec:70:33:24:fd:b1: 13:50:f4:ec:98:cd:95:85:ab:cf:a5:f7:f2:96:5d: 8c:20:a9:2f:63:55:34:52:0a:5b:c3:68:5d:19:ef: fe:36:0f:25:58:d7:02:8b:05:d1:97:db:75:7e:51: 06:01:a1:e5:c8:0e:41:e3:a0:78:ed:82:6c:46:c6: 33:99:5e:f4:ea:7e:fd:a8:e6:41:86:6c:32:29:5b: cd:7f:3a:72:d5:3b:55:8f:23:e6:a6:da:bc:6d:86: 94:d3:4c:b6:33:ed:37:d0:06:e9:0a:2d:08:6c:24: 46:42:b1:93:d4:5b:87:e4:09:e7:0a:70:7f:3d:2a: 51:43:a1:4a:9d:d0:01:c2:43:55:95:3c:03:a8:01: bb:c3:33:b1:65:55:a8:20:18:c9:ef:4e:eb:6d:a1: 64:8b:53:6c:37:7f:c6:ee:b5:12:11:f5:e2:4d:ed: 90:83:35:ef:9f:8d:a1:37:85:f4:6c:bb:e3:bb:2d: 27:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:41:DF:EB:C9:75:20:E6:5E:C7:E5:82:C0:E4:01:25:8C:D0:66:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bfd9f5c9-035d-3e75-9541-3d9259a23f2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:141c:1c00::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:23:b7:05:d2:6a:b6:99:dd:3b:60:56:a1:d6:f4:d4:aa:6e: c2:85:31:51:39:c4:51:fe:28:8a:b9:ae:cc:63:4c:dc:e5:a2: e3:34:6e:af:4a:19:6d:83:63:91:91:4c:de:fc:97:9c:87:c2: e7:a9:12:de:ad:7a:23:e5:72:c1:60:f9:dc:8e:da:fe:ad:16: e8:79:7a:f9:bf:b1:0f:95:2d:87:8c:09:8e:87:5e:5d:b0:c5: 53:c5:a4:e0:a1:8a:26:65:b7:99:f1:9f:83:3c:e3:9b:81:e8: 27:fc:d7:16:65:28:55:75:5d:d8:25:f3:ab:59:97:c7:76:ee: 70:50:1b:68:41:45:1c:a6:9c:c5:bd:ef:8e:7b:f1:69:2c:29: 5e:a9:a7:1e:f4:98:3f:12:ef:3a:11:ee:c5:ca:65:18:99:bf: 27:08:db:f5:15:09:7e:ca:68:81:d2:f3:19:6a:ef:b8:3c:43: b1:45:a2:50:7f:76:65:59:b3:4b:db:38:40:98:a6:86:e2:1e: d4:34:12:8e:8e:4b:a8:98:cf:d6:92:d6:f3:c6:88:44:39:3a: 50:86:d8:8e:95:3e:cf:fe:fb:4b:c3:b4:53:56:02:d3:2e:aa: 6f:72:62:22:88:24:09:3d:16:29:b9:1f:03:48:4a:aa:ab:58: a1:01:a2:55 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiQE1XL7qbYcqSPYkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDExNjEwNDIxNVoXDTI1MDQxNjA5NDIxNVowLzEtMCsGA1UEAxMk YmJmY2M5YjktMmM3ZC00ZWZmLWE1NjgtMzUwZDE3YzBhNmI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNwAbx3+FpT8fafNG/22qzDSN8PupDp+LOO7 eB+aI9zFIrrz4weJzURne4lMGK9l1hfljh3ggT7irRxYUQvPDb5iEK3scDMk/bET UPTsmM2VhavPpffyll2MIKkvY1U0Ugpbw2hdGe/+Ng8lWNcCiwXRl9t1flEGAaHl yA5B46B47YJsRsYzmV706n79qOZBhmwyKVvNfzpy1TtVjyPmptq8bYaU00y2M+03 0AbpCi0IbCRGQrGT1FuH5AnnCnB/PSpRQ6FKndABwkNVlTwDqAG7wzOxZVWoIBjJ 707rbaFki1NsN3/G7rUSEfXiTe2QgzXvn42hN4X0bLvjuy0nBwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLxB3+vJdSDmXsflgsDkASWM0GZgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmZkOWY1YzktMDM1ZC0z ZTc1LTk1NDEtM2Q5MjU5YTIzZjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUHBwA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEojtwXSaraZ3TtgVqHW9NSqbsKFMVE5xFH+KIq5rsxjTNzlouM0 bq9KGW2DY5GRTN78l5yHwuepEt6teiPlcsFg+dyO2v6tFuh5evm/sQ+VLYeMCY6H Xl2wxVPFpOChiiZlt5nxn4M845uB6Cf81xZlKFV1Xdgl86tZl8d27nBQG2hBRRym nMW974578WksKV6ppx70mD8S7zoR7sXKZRiZvycI2/UVCX7KaIHS8xlq77g8Q7FF olB/dmVZs0vbOECYpobiHtQ0Eo6OS6iYz9aS1vPGiEQ5OlCG2I6VPs/++0vDtFNW AtMuqm9yYiKIJAk9Fim5HwNISqqrWKEBolU= -----END CERTIFICATE-----Generated at Fri Mar 14 15:03:39 2025 by rpki-client