$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cdecfb44-57a4-38d1-abaf-fbfc286ae610.roa File: cdecfb44-57a4-38d1-abaf-fbfc286ae610.roa (raw, json) Hash identifier: mR+E/wLq5wtdcnRH9seU6EWEEzbU2o1W3Hnvde1fm9Y= Subject key identifier: 9A:91:6E:19:26:A0:0A:63:B2:39:E5:C3:E3:59:37:FF:49:8A:3B:24 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848FD56A29B080BEBD7FF88B280 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cdecfb44-57a4-38d1-abaf-fbfc286ae610.roa Signing time: Mon 24 Feb 2025 14:00:52 +0000 ROA not before: Mon 24 Feb 2025 14:00:52 +0000 ROA not after: Sun 25 May 2025 13:00:52 +0000 asID: 12222 IP address blocks: 2001:4878:63::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:56:a2:9b:08:0b:eb:d7:ff:88:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 24 14:00:52 2025 GMT Not After : May 25 13:00:52 2025 GMT Subject: CN=2f0d2807-b3b8-47c5-ab4d-36c93ff75732 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:6b:c3:72:96:72:03:aa:3f:6d:ee:f9:db:e3: cf:69:3e:9c:d2:c4:f2:81:96:86:c4:93:a5:a2:c4: 87:f9:d6:98:e9:cb:01:9a:16:b7:0b:88:ed:26:fa: 6f:19:8f:13:34:48:13:e9:e3:c0:f8:1a:01:c1:6b: 9f:31:d7:b1:9d:6c:7d:2b:64:ab:fe:d3:52:51:c6: a9:dd:eb:39:9c:4a:fe:1e:ca:9e:d9:5b:6b:12:e7: d5:14:fd:0f:f8:a4:ec:5d:5a:33:0f:09:b1:ae:ab: 61:f7:72:14:86:34:04:51:6b:9f:6f:cc:2b:bf:d5: 74:b2:08:4d:6d:cc:c9:5a:ba:35:ed:26:c9:a6:77: 78:da:d3:e6:dd:fb:b3:24:7e:95:4e:1b:7c:09:82: a9:23:6b:07:2c:c0:45:bf:1a:fa:70:07:ec:82:79: 33:64:c9:e6:b4:bd:38:95:96:33:50:bc:d9:0c:71: 7e:d1:61:a3:17:30:36:0a:a8:85:a0:fc:d0:ae:7d: 15:85:13:4b:3d:be:f5:2c:67:0f:51:59:f6:3f:67: 41:8a:02:db:c5:cf:17:ed:54:a4:c5:0e:11:d2:67: 87:51:a8:70:19:55:83:4e:93:3a:9d:e1:60:25:be: 38:7d:26:6a:4c:3e:ce:d5:f2:7d:a8:3a:1e:bc:38: eb:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:91:6E:19:26:A0:0A:63:B2:39:E5:C3:E3:59:37:FF:49:8A:3B:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cdecfb44-57a4-38d1-abaf-fbfc286ae610.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2001:4878:63::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:03:45:47:52:39:b0:9d:c5:e2:69:a9:9a:7e:29:be:2a:4d: 6d:09:4b:8a:c7:5f:a2:b4:e9:b9:55:f8:13:32:dd:56:4f:d6: e2:1a:1a:b5:bd:72:a7:31:cf:b1:cb:0e:4d:b3:62:43:d7:71: c1:92:d5:8b:4f:fc:c2:8e:40:e6:a6:94:53:2c:7c:47:d1:63: 62:80:2f:d6:60:cd:ef:c8:31:66:88:72:ff:a5:3f:22:73:c8: 67:8a:04:b9:69:85:f1:7e:0c:c9:e0:68:14:e0:1c:47:c7:5b: 94:c2:eb:06:c3:7b:e2:ac:c2:7d:38:33:2c:27:69:9e:e5:52: 21:85:a1:e5:8f:41:c1:a5:5d:18:c5:49:6b:87:0a:24:97:18: f5:1d:2d:6e:6f:6a:5d:1a:68:9b:e2:63:75:92:9e:5b:21:ca: c8:64:83:d2:45:c6:78:d0:0d:de:5a:d6:d1:97:e5:f3:fe:94: b3:22:04:ce:82:e7:68:00:04:ad:71:fb:96:98:92:9f:dd:b8: 3e:2c:3c:11:93:c1:f9:a1:83:31:7b:54:71:34:08:dc:b8:55: 1e:7e:9b:05:6d:24:7c:f8:7e:00:e6:3c:65:92:12:22:91:d3: db:42:92:88:26:a1:8c:e1:6c:db:81:c1:97:3c:a1:f0:74:98: 5b:76:95:ee -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj9VqKbCAvr1/+IsoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk MmYwZDI4MDctYjNiOC00N2M1LWFiNGQtMzZjOTNmZjc1NzMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomvDcpZyA6o/be752+PPaT6c0sTygZaGxJOl osSH+daY6csBmha3C4jtJvpvGY8TNEgT6ePA+BoBwWufMdexnWx9K2Sr/tNSUcap 3es5nEr+Hsqe2VtrEufVFP0P+KTsXVozDwmxrqth93IUhjQEUWufb8wrv9V0sghN bczJWro17SbJpnd42tPm3fuzJH6VTht8CYKpI2sHLMBFvxr6cAfsgnkzZMnmtL04 lZYzULzZDHF+0WGjFzA2CqiFoPzQrn0VhRNLPb71LGcPUVn2P2dBigLbxc8X7VSk xQ4R0meHUahwGVWDTpM6neFgJb44fSZqTD7O1fJ9qDoevDjrKwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJqRbhkmoApjsjnlw+NZN/9JijskMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2RlY2ZiNDQtNTdhNC0z OGQxLWFiYWYtZmJmYzI4NmFlNjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIeABj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIEDRUdSObCdxeJpqZp+Kb4qTW0JS4rHX6K06blV+BMy3VZP1uIa GrW9cqcxz7HLDk2zYkPXccGS1YtP/MKOQOamlFMsfEfRY2KAL9Zgze/IMWaIcv+l PyJzyGeKBLlphfF+DMngaBTgHEfHW5TC6wbDe+Kswn04MywnaZ7lUiGFoeWPQcGl XRjFSWuHCiSXGPUdLW5val0aaJviY3WSnlshyshkg9JFxnjQDd5a1tGX5fP+lLMi BM6C52gABK1x+5aYkp/duD4sPBGTwfmhgzF7VHE0CNy4VR5+mwVtJHz4fgDmPGWS EiKR09tCkogmoYzhbNuBwZc8ofB0mFt2le4= -----END CERTIFICATE-----Generated at Sat Apr 5 11:04:51 2025 by rpki-client