$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c9515d87-0d94-3750-a3bc-b816f97c564a.roa File: c9515d87-0d94-3750-a3bc-b816f97c564a.roa (raw, json) Hash identifier: fcY1GzepyKiwvrJimrujz/ZBpdwPQ2eRF2hll+Hzvw8= Subject key identifier: C2:7C:9B:88:5B:BB:A9:2C:11:8B:BA:D9:5D:AB:37:5E:7B:5A:E3:21 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848A1362F9C2D670602D264EC20 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c9515d87-0d94-3750-a3bc-b816f97c564a.roa Signing time: Wed 22 Jan 2025 14:00:52 +0000 ROA not before: Wed 22 Jan 2025 14:00:52 +0000 ROA not after: Tue 22 Apr 2025 13:00:52 +0000 asID: 20940 IP address blocks: 2600:1408:e400::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a1:36:2f:9c:2d:67:06:02:d2:64:ec:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 22 14:00:52 2025 GMT Not After : Apr 22 13:00:52 2025 GMT Subject: CN=537c21a8-5aa0-4568-9b2b-3574429174c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c2:e2:96:22:2b:1a:e2:1c:80:8d:8b:9e:a4: d9:04:61:94:9b:da:e1:38:1d:a2:27:e6:3f:7f:7d: 9c:9d:64:56:8c:dc:f1:1b:dd:98:4d:8b:13:85:66: b8:99:12:11:9d:f6:43:dd:28:31:18:29:01:e0:d7: 53:dc:da:92:aa:ac:48:12:b1:dd:72:e6:42:1f:06: 04:7f:dc:92:ce:18:5d:b2:48:5c:64:52:ca:f5:25: 29:dd:4b:6b:0a:4f:78:4e:fc:3f:5f:70:b7:67:a9: cc:9c:45:71:c2:b0:af:2f:ec:63:f4:7d:21:a2:1e: 0e:2c:a5:78:54:de:45:7c:4f:5c:2f:11:4f:4f:05: 4f:5e:ed:1e:98:f3:9c:72:31:4d:e3:3a:46:6b:38: 52:0f:ab:3a:66:c7:85:b6:05:3e:a6:43:a2:b7:d1: b8:c7:bf:f4:9c:bc:58:7a:7c:d0:13:89:d6:8f:a2: f0:13:89:dd:51:d6:1c:e0:d9:0b:53:5a:f4:61:1d: 66:e1:06:d9:42:5d:66:29:a8:1b:be:91:29:5b:f5: 96:12:d0:55:4d:49:33:8a:01:b3:d4:e4:8b:82:74: 8b:31:ea:aa:7b:18:72:94:5e:20:60:c0:55:89:54: 00:a2:60:2f:a8:43:57:af:40:7a:4d:1d:b6:07:f7: 3c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:7C:9B:88:5B:BB:A9:2C:11:8B:BA:D9:5D:AB:37:5E:7B:5A:E3:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c9515d87-0d94-3750-a3bc-b816f97c564a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1408:e400::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:7f:f1:09:53:40:1e:c3:bb:70:17:72:e4:c1:2c:26:ed:fb: 1d:77:1c:97:81:1e:ca:99:28:5a:10:a8:94:91:63:8e:a3:26: 9c:4a:50:ac:a6:5b:ba:16:89:00:58:09:e8:90:fb:9d:59:95: 45:c5:2d:02:17:54:01:ee:2e:c4:b4:20:0b:bf:49:94:1e:1f: f7:df:84:07:4d:a0:2a:4d:3c:d9:70:0f:ef:0b:af:30:4a:af: fb:24:1e:7e:b6:68:8a:2d:5c:88:42:74:b6:0c:85:c1:d5:44: 2f:15:66:7a:36:64:76:83:37:74:14:0f:68:c3:c2:e3:da:16: 9c:79:49:70:c3:3f:f6:73:ef:0e:38:5f:8c:59:ac:97:0f:e5: 2b:68:fc:58:58:88:d2:56:e5:19:8d:45:32:db:41:67:d6:2f: 1d:6f:86:90:b4:ed:22:1f:6b:5f:8e:cc:8d:91:18:34:88:ed: 4c:99:08:1a:f3:66:78:1d:76:20:36:35:79:ee:eb:60:f1:d5: 21:d1:7c:39:54:eb:c8:6d:4e:db:6c:26:3b:a7:e6:55:0a:69: 05:4a:f7:a8:bb:72:cb:ea:07:b8:72:74:88:dd:fb:0e:8a:56: 91:99:80:58:9e:ca:dd:5d:ca:91:e0:28:03:d1:32:e3:fc:fd: 41:d4:3b:ae -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEihNi+cLWcGAtJk7CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyMjE0MDA1MloXDTI1MDQyMjEzMDA1MlowLzEtMCsGA1UEAxMk NTM3YzIxYTgtNWFhMC00NTY4LTliMmItMzU3NDQyOTE3NGM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8LiliIrGuIcgI2LnqTZBGGUm9rhOB2iJ+Y/ f32cnWRWjNzxG92YTYsThWa4mRIRnfZD3SgxGCkB4NdT3NqSqqxIErHdcuZCHwYE f9ySzhhdskhcZFLK9SUp3UtrCk94Tvw/X3C3Z6nMnEVxwrCvL+xj9H0hoh4OLKV4 VN5FfE9cLxFPTwVPXu0emPOccjFN4zpGazhSD6s6ZseFtgU+pkOit9G4x7/0nLxY enzQE4nWj6LwE4ndUdYc4NkLU1r0YR1m4QbZQl1mKagbvpEpW/WWEtBVTUkzigGz 1OSLgnSLMeqqexhylF4gYMBViVQAomAvqENXr0B6TR22B/c8uQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMJ8m4hbu6ksEYu62V2rN157WuMhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzk1MTVkODctMGQ5NC0z NzUwLWEzYmMtYjgxNmY5N2M1NjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUCOQA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHd/8QlTQB7Du3AXcuTBLCbt+x13HJeBHsqZKFoQqJSRY46jJpxK UKymW7oWiQBYCeiQ+51ZlUXFLQIXVAHuLsS0IAu/SZQeH/ffhAdNoCpNPNlwD+8L rzBKr/skHn62aIotXIhCdLYMhcHVRC8VZno2ZHaDN3QUD2jDwuPaFpx5SXDDP/Zz 7w44X4xZrJcP5Sto/FhYiNJW5RmNRTLbQWfWLx1vhpC07SIfa1+OzI2RGDSI7UyZ CBrzZngddiA2NXnu62Dx1SHRfDlU68htTttsJjun5lUKaQVK96i7csvqB7hydIjd +w6KVpGZgFieyt1dypHgKAPRMuP8/UHUO64= -----END CERTIFICATE-----Generated at Sat Apr 5 11:01:18 2025 by rpki-client