$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d5dcaebd-be43-3551-a803-ba1ce1891e3f.roa File: d5dcaebd-be43-3551-a803-ba1ce1891e3f.roa (raw, json) Hash identifier: /kDzLZ2YsBYeAMDQ8Gy57V6OPLy6HuuI4I1YL7lw/v4= Subject key identifier: AA:E0:45:B0:28:C5:63:DD:BD:49:55:6A:B7:69:F1:5B:3E:7F:FE:2A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848960B61069762216D0088FF80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d5dcaebd-be43-3551-a803-ba1ce1891e3f.roa Signing time: Sat 18 Jan 2025 14:00:52 +0000 ROA not before: Sat 18 Jan 2025 14:00:52 +0000 ROA not after: Fri 18 Apr 2025 13:00:52 +0000 asID: 20940 IP address blocks: 2600:140f:1e00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:96:0b:61:06:97:62:21:6d:00:88:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 18 14:00:52 2025 GMT Not After : Apr 18 13:00:52 2025 GMT Subject: CN=f556d5e6-a65b-4c93-a97e-4bfef360742e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:9e:d6:f9:63:44:1a:98:88:8d:2b:dd:8c:63: 11:b1:9d:74:9c:56:6a:61:f2:1f:f2:2c:43:76:7d: 97:b7:cd:72:23:fe:04:86:13:95:0c:60:6d:be:f9: 40:4c:69:ca:01:3a:3f:8a:f6:ac:0b:56:60:33:a8: b9:50:6e:f8:2c:b9:30:e7:32:82:d9:e7:7c:69:14: d9:22:07:34:8f:f2:65:5d:b0:de:85:29:ec:71:c3: 1d:d6:30:b0:52:8d:c1:06:d2:c5:66:1c:b2:42:00: 85:14:ea:7f:13:93:82:ca:61:d7:67:2f:75:02:fb: 83:0b:11:45:ad:be:e9:49:1e:60:c1:c2:b0:77:f7: 54:28:08:d1:3e:c5:b0:42:9f:94:b3:79:49:c1:a2: 19:4b:70:bb:3f:44:eb:8c:90:03:c5:43:52:35:0c: 72:9d:f4:e9:ee:52:bd:81:ea:3c:d4:02:e8:19:b0: 59:5d:ed:e6:35:e3:26:b9:f8:65:8a:e1:59:f2:bd: e3:95:e5:67:dc:54:0b:0b:ed:fb:6d:d8:87:76:78: 31:6d:63:e8:3e:83:22:2c:6f:42:59:74:5d:68:b9: d2:a1:8a:b0:69:c0:0f:25:6e:ce:e4:3a:a7:7d:c4: 4b:9f:ac:dc:16:a6:f1:4e:f0:a7:c6:2c:74:bb:30: 85:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:E0:45:B0:28:C5:63:DD:BD:49:55:6A:B7:69:F1:5B:3E:7F:FE:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d5dcaebd-be43-3551-a803-ba1ce1891e3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:140f:1e00::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:0c:45:29:df:98:24:46:9f:f0:b0:b6:7b:da:05:8f:0c:58: d9:f4:8b:99:5c:a9:e6:2d:38:6f:ff:c7:b9:cd:0c:8e:f5:73: 8d:4a:30:cd:17:1d:6e:45:30:9a:5e:9c:8a:08:76:73:8b:a6: 52:70:55:19:a6:a1:b0:f7:f9:75:37:78:75:a9:d4:ea:6f:00: 2e:86:29:b1:4a:45:2b:0d:b5:58:14:8f:36:ac:e9:6a:5a:a4: 7f:78:d9:e8:3c:e4:42:96:95:cc:64:45:49:75:53:5f:8e:f5: 81:71:fa:80:55:f3:d5:ac:fa:ce:86:9e:92:6b:c7:3d:e0:08: 74:71:61:59:a2:27:68:9c:13:f7:9d:57:ed:9c:01:5a:be:56: 39:7e:d0:9f:e6:08:02:e4:28:fa:9e:a5:66:5c:8e:99:67:3a: f2:4f:bf:0a:bc:64:f7:9d:ef:21:e8:b1:6c:72:cf:45:de:a9: e6:34:5e:c2:f6:8a:04:ef:8d:a2:e4:b2:02:1a:2e:dc:b1:09: f0:9e:6a:2d:f4:db:d3:81:06:60:f9:a5:83:d2:09:1a:d3:78: a0:14:4e:48:ef:26:c3:67:76:55:48:1b:65:98:29:9c:ad:f3: 0e:5a:d0:8d:9d:01:1b:a3:9e:dc:b2:07:d9:1f:0f:db:a6:37: 88:e2:31:d9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiWC2EGl2IhbQCI/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDExODE0MDA1MloXDTI1MDQxODEzMDA1MlowLzEtMCsGA1UEAxMk ZjU1NmQ1ZTYtYTY1Yi00YzkzLWE5N2UtNGJmZWYzNjA3NDJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZ7W+WNEGpiIjSvdjGMRsZ10nFZqYfIf8ixD dn2Xt81yI/4EhhOVDGBtvvlATGnKATo/ivasC1ZgM6i5UG74LLkw5zKC2ed8aRTZ Igc0j/JlXbDehSnsccMd1jCwUo3BBtLFZhyyQgCFFOp/E5OCymHXZy91AvuDCxFF rb7pSR5gwcKwd/dUKAjRPsWwQp+Us3lJwaIZS3C7P0TrjJADxUNSNQxynfTp7lK9 geo81ALoGbBZXe3mNeMmufhliuFZ8r3jleVn3FQLC+37bdiHdngxbWPoPoMiLG9C WXRdaLnSoYqwacAPJW7O5DqnfcRLn6zcFqbxTvCnxix0uzCFAwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKrgRbAoxWPdvUlVardp8Vs+f/4qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDVkY2FlYmQtYmU0My0z NTUxLWE4MDMtYmExY2UxODkxZTNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUDx4A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF4MRSnfmCRGn/CwtnvaBY8MWNn0i5lcqeYtOG//x7nNDI71c41K MM0XHW5FMJpenIoIdnOLplJwVRmmobD3+XU3eHWp1OpvAC6GKbFKRSsNtVgUjzas 6WpapH942eg85EKWlcxkRUl1U1+O9YFx+oBV89Ws+s6GnpJrxz3gCHRxYVmiJ2ic E/edV+2cAVq+Vjl+0J/mCALkKPqepWZcjplnOvJPvwq8ZPed7yHosWxyz0XeqeY0 XsL2igTvjaLksgIaLtyxCfCeai3029OBBmD5pYPSCRrTeKAUTkjvJsNndlVIG2WY KZyt8w5a0I2dARujntyyB9kfD9umN4jiMdk= -----END CERTIFICATE-----Generated at Sat Apr 5 11:10:34 2025 by rpki-client