$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c945cc51-eb5e-3978-9fb1-4cadc88100aa.roa File: c945cc51-eb5e-3978-9fb1-4cadc88100aa.roa (raw, json) Hash identifier: jYRSHLwHLx6rdgZdWnt2UYtSJwRnBcWjIUSVlsuVFTA= Subject key identifier: AF:22:29:D1:66:E0:49:C6:92:51:56:4F:B1:F0:B0:9A:2B:D2:99:75 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848B4C50C07DC369EB672A691B0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c945cc51-eb5e-3978-9fb1-4cadc88100aa.roa Signing time: Wed 29 Jan 2025 14:09:25 +0000 ROA not before: Wed 29 Jan 2025 14:09:25 +0000 ROA not after: Tue 29 Apr 2025 13:09:25 +0000 asID: 20940 IP address blocks: 2600:1402:8000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b4:c5:0c:07:dc:36:9e:b6:72:a6:91:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 29 14:09:25 2025 GMT Not After : Apr 29 13:09:25 2025 GMT Subject: CN=ae1452f1-db8d-4f32-9837-ef357e38aebc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:97:98:c4:d9:e0:d6:7c:5a:bb:32:83:5b:59: 68:ac:da:6c:1e:72:77:dd:a0:b0:1a:64:44:57:ac: 53:5f:ff:25:be:69:04:bf:85:af:6a:36:41:4a:36: c9:78:e0:54:11:a7:72:85:b0:f1:05:2a:60:aa:a0: e5:37:9f:d7:19:9f:fc:d0:2f:5c:2c:ae:04:37:33: 03:31:7a:79:40:65:bb:a9:4e:88:59:34:be:f1:85: 2f:a7:e0:44:ae:37:e2:62:1b:b1:59:94:d3:b4:0f: 7a:12:ef:93:ad:a3:22:ac:be:d5:2d:40:58:b8:a5: ad:e0:57:f0:04:a6:f1:8b:ad:8e:a0:c5:eb:28:f6: 36:e1:2a:55:70:c4:b4:c5:30:dc:9f:5b:91:fc:70: d7:3d:1b:c2:b3:18:de:7d:0b:67:6f:f0:4b:67:ba: 18:bf:64:62:b4:ce:3e:8b:4f:17:03:fc:9a:da:13: 74:f3:da:b5:3a:5f:10:ef:6e:4e:47:78:7a:32:0f: 18:0e:8d:9a:90:c3:89:0d:2c:92:0a:61:1a:b5:fa: 6e:cc:29:6b:97:27:05:b0:2f:8a:51:30:96:b4:97: de:30:52:d0:dc:3a:ec:72:14:75:d7:08:46:c6:91: 98:83:e5:14:8f:95:6b:09:4a:e9:1a:92:9b:3d:ad: 7b:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:22:29:D1:66:E0:49:C6:92:51:56:4F:B1:F0:B0:9A:2B:D2:99:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c945cc51-eb5e-3978-9fb1-4cadc88100aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1402:8000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:e1:c8:ce:0c:d6:85:72:04:4f:2a:2b:e5:06:e9:7b:8d:ff: 9e:27:38:ee:f8:8d:8d:79:a7:e4:9e:72:7e:2e:08:59:cc:86: b2:7e:02:54:e7:a7:0d:0b:5d:fb:b5:e8:c8:16:af:5a:48:81: ee:78:a1:aa:78:67:c8:50:03:aa:26:7a:0a:af:3e:65:49:34: db:a4:40:3c:7b:f8:33:99:ea:93:ee:f7:a7:90:ff:69:5f:a2: d9:d6:4d:35:ec:52:d9:07:07:ab:1c:20:44:46:91:a2:c1:23: 1d:62:4d:14:46:d3:fd:08:f9:dd:3d:d7:45:8c:92:e2:5d:93: 6b:e1:7f:90:68:fb:f6:e0:46:fa:c9:c1:53:7c:40:56:71:28: 89:33:6e:d9:4e:f9:13:0e:08:c2:d4:6d:b9:7a:81:3c:94:09: 24:40:fc:c3:7f:c4:aa:15:06:27:a6:99:c8:38:7e:83:60:f9: 9b:c9:dc:a4:c4:f7:8f:7f:87:18:a2:4a:c0:76:a6:14:9f:7e: 03:5f:c9:d5:bb:aa:1d:17:8c:a3:bc:db:ad:b9:76:c7:58:69: 14:a8:d2:c2:5c:89:39:bf:0a:06:57:0c:6a:89:11:29:b4:6c: f0:0e:27:44:36:d5:6b:6f:88:2b:71:5e:d6:a7:67:51:52:92: 1e:3d:9f:4d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEi0xQwH3DaetnKmkbAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyOTE0MDkyNVoXDTI1MDQyOTEzMDkyNVowLzEtMCsGA1UEAxMk YWUxNDUyZjEtZGI4ZC00ZjMyLTk4MzctZWYzNTdlMzhhZWJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA25eYxNng1nxauzKDW1lorNpsHnJ33aCwGmRE V6xTX/8lvmkEv4WvajZBSjbJeOBUEadyhbDxBSpgqqDlN5/XGZ/80C9cLK4ENzMD MXp5QGW7qU6IWTS+8YUvp+BErjfiYhuxWZTTtA96Eu+TraMirL7VLUBYuKWt4Ffw BKbxi62OoMXrKPY24SpVcMS0xTDcn1uR/HDXPRvCsxjefQtnb/BLZ7oYv2RitM4+ i08XA/ya2hN089q1Ol8Q725OR3h6Mg8YDo2akMOJDSySCmEatfpuzClrlycFsC+K UTCWtJfeMFLQ3DrschR11whGxpGYg+UUj5VrCUrpGpKbPa17twIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFK8iKdFm4EnGklFWT7HwsJor0pl1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzk0NWNjNTEtZWI1ZS0z OTc4LTlmYjEtNGNhZGM4ODEwMGFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUAoAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIjhyM4M1oVyBE8qK+UG6XuN/54nOO74jY15p+Secn4uCFnMhrJ+ AlTnpw0LXfu16MgWr1pIge54oap4Z8hQA6omegqvPmVJNNukQDx7+DOZ6pPu96eQ /2lfotnWTTXsUtkHB6scIERGkaLBIx1iTRRG0/0I+d0910WMkuJdk2vhf5Bo+/bg RvrJwVN8QFZxKIkzbtlO+RMOCMLUbbl6gTyUCSRA/MN/xKoVBiemmcg4foNg+ZvJ 3KTE949/hxiiSsB2phSffgNfydW7qh0XjKO82625dsdYaRSo0sJciTm/CgZXDGqJ ESm0bPAOJ0Q21WtviCtxXtanZ1FSkh49n00= -----END CERTIFICATE-----Generated at Fri Mar 14 15:03:55 2025 by rpki-client