$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/da22166d-5f76-3f56-ae9a-b13eddbc5c6a.roa File: da22166d-5f76-3f56-ae9a-b13eddbc5c6a.roa (raw, json) Hash identifier: +tPQ2olyabqtFdveR/kRpXJdPqrYzhZtZMeLkuKgJsk= Subject key identifier: 24:2F:1D:15:53:BF:B7:D9:72:AA:3A:47:9B:B6:CC:15:BE:91:1B:48 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848A136226D9B1A6FA18F56C0A0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/da22166d-5f76-3f56-ae9a-b13eddbc5c6a.roa Signing time: Wed 22 Jan 2025 14:00:52 +0000 ROA not before: Wed 22 Jan 2025 14:00:52 +0000 ROA not after: Tue 22 Apr 2025 13:00:52 +0000 asID: 20940 IP address blocks: 2600:1404:6000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a1:36:22:6d:9b:1a:6f:a1:8f:56:c0:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 22 14:00:52 2025 GMT Not After : Apr 22 13:00:52 2025 GMT Subject: CN=4a5f88ae-7b20-4c9a-b42d-4df6c3cc592e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:02:02:38:f3:4f:da:1e:b0:e6:c7:14:83:93: 4b:23:61:79:c5:d4:ae:a3:03:45:79:61:f9:fa:91: e2:03:0c:41:e9:ad:1b:13:54:d6:dd:c5:e2:9a:e9: 15:42:73:ef:bf:db:dd:1c:2b:82:3e:62:e3:5e:5b: 10:5b:f2:47:8f:66:8d:63:f9:6f:93:47:a5:40:cc: 76:a7:36:99:ed:e3:23:c5:f7:62:3f:48:6a:86:ca: 65:2a:e8:6e:e0:5c:cb:5b:1e:cf:c1:f4:4d:f1:95: c2:c0:6f:c7:7b:9a:b3:65:a5:bf:67:e7:22:f3:18: 34:23:d2:02:c9:dd:1d:fe:15:44:9c:cf:f1:9c:79: 2f:c3:ca:be:a2:89:1c:ae:db:6a:05:95:e7:d0:64: 62:da:c2:b3:57:ac:30:90:e1:58:cf:f8:69:8a:9c: 2a:af:77:c1:f8:42:e2:cd:d2:70:1b:7d:87:8e:83: ba:5c:39:03:ca:5d:4f:62:dd:63:d3:ea:f4:6c:d0: 5a:3d:dd:08:a1:4c:91:66:e9:40:7d:b1:66:1e:fa: a2:b8:86:76:60:9a:bd:8e:af:67:17:c2:10:41:8d: 6c:84:9f:c8:3d:14:1e:ae:c3:89:a3:1b:b8:7b:6a: 3f:b7:e0:cf:b2:69:3d:b6:a7:d7:5e:42:58:62:19: 93:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:2F:1D:15:53:BF:B7:D9:72:AA:3A:47:9B:B6:CC:15:BE:91:1B:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/da22166d-5f76-3f56-ae9a-b13eddbc5c6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1404:6000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:88:c6:52:da:03:9c:5f:7d:f6:fe:37:b4:1f:a9:24:4a:18: f1:69:d6:90:bd:04:d5:0e:57:f3:bf:de:40:ec:7c:8b:12:70: b1:ef:44:f0:48:0e:53:7d:7a:18:5b:03:67:7e:48:5c:3f:41: 25:a7:cf:4e:77:df:93:3b:8b:a0:3b:ed:aa:49:0e:87:6c:b0: 54:64:81:39:9a:80:37:11:8e:3d:f0:ce:59:71:e0:93:69:25: 52:d0:f5:70:fe:32:53:85:04:af:2f:d2:95:64:96:42:f3:19: f4:70:a8:3a:6a:0b:cf:16:90:a5:eb:1a:ca:64:37:b0:4c:18: 35:50:3b:b8:e1:c0:55:49:cc:55:ba:e3:63:45:4d:8b:91:e7: 8d:37:75:f8:9d:81:9a:e3:b1:3b:af:d0:4f:41:29:5b:41:f4: b3:f2:59:e8:e8:97:47:55:6d:00:10:4d:27:8c:e1:49:ee:78: d0:eb:e9:55:2e:c9:f2:9d:65:0f:54:8c:68:34:e9:ed:9d:76: ef:bc:92:c1:7c:13:ce:8a:c7:08:39:58:e7:0e:ea:0d:14:e9: fa:b5:3d:3f:58:93:c5:94:fe:a9:3b:52:f3:bf:69:74:f1:b5: 91:9e:21:54:f8:b0:0d:70:c0:34:bc:14:9f:4f:5c:11:a7:fc: 4b:ec:ec:9d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEihNiJtmxpvoY9WwKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyMjE0MDA1MloXDTI1MDQyMjEzMDA1MlowLzEtMCsGA1UEAxMk NGE1Zjg4YWUtN2IyMC00YzlhLWI0MmQtNGRmNmMzY2M1OTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwICOPNP2h6w5scUg5NLI2F5xdSuowNFeWH5 +pHiAwxB6a0bE1TW3cXimukVQnPvv9vdHCuCPmLjXlsQW/JHj2aNY/lvk0elQMx2 pzaZ7eMjxfdiP0hqhsplKuhu4FzLWx7PwfRN8ZXCwG/He5qzZaW/Z+ci8xg0I9IC yd0d/hVEnM/xnHkvw8q+ookcrttqBZXn0GRi2sKzV6wwkOFYz/hpipwqr3fB+ELi zdJwG32HjoO6XDkDyl1PYt1j0+r0bNBaPd0IoUyRZulAfbFmHvqiuIZ2YJq9jq9n F8IQQY1shJ/IPRQersOJoxu4e2o/t+DPsmk9tqfXXkJYYhmTOwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCQvHRVTv7fZcqo6R5u2zBW+kRtIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGEyMjE2NmQtNWY3Ni0z ZjU2LWFlOWEtYjEzZWRkYmM1YzZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUBGAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHeIxlLaA5xfffb+N7QfqSRKGPFp1pC9BNUOV/O/3kDsfIsScLHv RPBIDlN9ehhbA2d+SFw/QSWnz05335M7i6A77apJDodssFRkgTmagDcRjj3wzllx 4JNpJVLQ9XD+MlOFBK8v0pVklkLzGfRwqDpqC88WkKXrGspkN7BMGDVQO7jhwFVJ zFW642NFTYuR5403dfidgZrjsTuv0E9BKVtB9LPyWejol0dVbQAQTSeM4UnueNDr 6VUuyfKdZQ9UjGg06e2ddu+8ksF8E86Kxwg5WOcO6g0U6fq1PT9Yk8WU/qk7UvO/ aXTxtZGeIVT4sA1wwDS8FJ9PXBGn/Evs7J0= -----END CERTIFICATE-----Generated at Sat Apr 5 11:07:24 2025 by rpki-client