$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c58e8d7b-a305-313b-b4cc-297f1831546b.roa File: c58e8d7b-a305-313b-b4cc-297f1831546b.roa (raw, json) Hash identifier: hqjTTdvBtAXZJAodeB1KrWFZHZK+ngQXf4NFIC3fimQ= Subject key identifier: ED:74:54:EA:4E:BA:95:94:50:C9:41:A4:5B:0B:18:52:3C:F2:F6:0F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858489FD0A118B10742EA87BE8F80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c58e8d7b-a305-313b-b4cc-297f1831546b.roa Signing time: Wed 22 Jan 2025 02:00:39 +0000 ROA not before: Wed 22 Jan 2025 02:00:39 +0000 ROA not after: Tue 22 Apr 2025 01:00:39 +0000 asID: 20940 IP address blocks: 2600:141b:1c00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9f:d0:a1:18:b1:07:42:ea:87:be:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 22 02:00:39 2025 GMT Not After : Apr 22 01:00:39 2025 GMT Subject: CN=54bc7fa5-d445-4efa-91d3-478f261971cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:6c:8f:35:56:12:66:77:c7:28:76:e2:fa:1a: ab:b0:49:52:ce:9e:f3:a8:03:65:f9:83:71:e1:82: d5:a4:a9:d2:62:5c:6f:49:cc:86:f3:df:e7:bc:82: bb:b4:35:60:fe:11:e2:27:38:c7:31:35:33:7b:76: 5c:aa:48:44:03:32:96:29:05:20:3c:8a:db:d6:6d: 80:7e:25:db:a8:7f:61:34:40:a9:47:13:79:60:84: b4:4c:30:d7:da:0a:72:27:5f:89:e8:c5:7e:26:b8: 93:77:bb:50:a2:fe:e0:5c:c1:17:4e:cd:19:4a:7c: f9:f5:c4:5f:05:39:38:18:5d:d7:0f:67:60:45:9d: 43:83:1a:1e:e0:0f:79:9d:fa:ec:70:06:d4:ee:8f: 71:eb:ad:e2:f4:48:bb:59:35:95:f8:ad:21:22:48: 9e:87:bb:0a:f7:eb:60:82:00:d2:26:c3:73:b1:dc: 97:ad:66:ba:fc:f9:c5:c0:c7:11:34:2c:fb:b2:e3: d1:ae:7f:81:ce:04:f9:06:1f:e2:3f:ab:ff:f5:b0: e2:29:28:97:e9:c5:9a:15:15:4b:86:62:21:aa:84: 56:b6:39:13:6b:d2:05:ab:38:1e:bb:72:5c:47:59: ec:c2:09:af:27:d4:72:a4:4a:b7:4e:5d:51:03:5b: 19:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:74:54:EA:4E:BA:95:94:50:C9:41:A4:5B:0B:18:52:3C:F2:F6:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c58e8d7b-a305-313b-b4cc-297f1831546b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:141b:1c00::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:98:68:44:a4:39:46:e3:54:b4:a7:8c:96:58:15:7b:85:46: 48:4c:0d:07:ea:19:49:e1:cc:bf:80:a9:09:7a:af:54:e4:bd: 81:f2:51:60:8c:49:5f:15:68:41:fc:32:07:13:63:8c:18:d2: fc:2b:0e:8a:78:18:e2:f0:fa:f4:17:23:d1:2e:41:f3:6d:7b: b2:0f:90:93:ca:52:37:40:82:d3:ac:28:99:27:8f:c3:c2:da: 43:84:eb:50:a6:0b:a5:08:34:b0:94:8a:a7:ff:57:bb:c1:31: 05:f2:bf:73:06:42:c9:ea:54:2c:67:c4:da:56:4c:eb:16:90: 55:03:97:84:68:32:25:8a:b3:d8:01:75:5e:9e:b9:d1:0b:fb: 14:86:5a:80:fa:2e:31:f5:89:3e:a1:bf:ff:f3:b6:06:3a:08: 66:67:dd:40:52:74:80:44:63:d0:07:08:e0:fe:d1:c0:63:a5: 68:3f:37:8f:c0:4b:7b:d0:cc:f6:00:e6:6c:0c:32:48:a2:19: 92:79:a8:be:9b:13:11:7a:b5:e3:68:8a:99:d9:2e:b3:2e:26: 6b:a0:16:63:97:42:53:2e:a5:a8:3a:4c:72:e0:e9:bf:b2:43: 7e:76:eb:78:4b:01:f7:d3:76:a3:83:b9:5b:cb:45:f1:ac:0b: 5b:b7:45:f6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEif0KEYsQdC6oe+j4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyMjAyMDAzOVoXDTI1MDQyMjAxMDAzOVowLzEtMCsGA1UEAxMk NTRiYzdmYTUtZDQ0NS00ZWZhLTkxZDMtNDc4ZjI2MTk3MWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGyPNVYSZnfHKHbi+hqrsElSzp7zqANl+YNx 4YLVpKnSYlxvScyG89/nvIK7tDVg/hHiJzjHMTUze3ZcqkhEAzKWKQUgPIrb1m2A fiXbqH9hNECpRxN5YIS0TDDX2gpyJ1+J6MV+JriTd7tQov7gXMEXTs0ZSnz59cRf BTk4GF3XD2dgRZ1Dgxoe4A95nfrscAbU7o9x663i9Ei7WTWV+K0hIkieh7sK9+tg ggDSJsNzsdyXrWa6/PnFwMcRNCz7suPRrn+BzgT5Bh/iP6v/9bDiKSiX6cWaFRVL hmIhqoRWtjkTa9IFqzgeu3JcR1nswgmvJ9RypEq3Tl1RA1sZGwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFO10VOpOupWUUMlBpFsLGFI88vYPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzU4ZThkN2ItYTMwNS0z MTNiLWI0Y2MtMjk3ZjE4MzE1NDZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUGxwA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEaYaESkOUbjVLSnjJZYFXuFRkhMDQfqGUnhzL+AqQl6r1TkvYHy UWCMSV8VaEH8MgcTY4wY0vwrDop4GOLw+vQXI9EuQfNte7IPkJPKUjdAgtOsKJkn j8PC2kOE61CmC6UINLCUiqf/V7vBMQXyv3MGQsnqVCxnxNpWTOsWkFUDl4RoMiWK s9gBdV6eudEL+xSGWoD6LjH1iT6hv//ztgY6CGZn3UBSdIBEY9AHCOD+0cBjpWg/ N4/AS3vQzPYA5mwMMkiiGZJ5qL6bExF6teNoipnZLrMuJmugFmOXQlMupag6THLg 6b+yQ35263hLAffTdqODuVvLRfGsC1u3RfY= -----END CERTIFICATE-----Generated at Sat Apr 5 11:03:55 2025 by rpki-client