$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/eef76797-5ae5-3b05-9a6d-e8743b5c0fb7.roa File: eef76797-5ae5-3b05-9a6d-e8743b5c0fb7.roa (raw, json) Hash identifier: p9aVEHbOPc/eU0GDjfuLMM1htzfAtg0p1XqR0sEf8o0= Subject key identifier: 03:21:BD:45:12:91:B0:59:3E:9C:FD:7C:E9:C4:C9:45:DF:A9:4D:A5 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848A1362B386EC9F037C3BFBF00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/eef76797-5ae5-3b05-9a6d-e8743b5c0fb7.roa Signing time: Wed 22 Jan 2025 14:00:52 +0000 ROA not before: Wed 22 Jan 2025 14:00:52 +0000 ROA not after: Tue 22 Apr 2025 13:00:52 +0000 asID: 20940 IP address blocks: 2600:1406:3a00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a1:36:2b:38:6e:c9:f0:37:c3:bf:bf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 22 14:00:52 2025 GMT Not After : Apr 22 13:00:52 2025 GMT Subject: CN=497c4ee3-7155-4e63-907e-83faa2e3d335 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ca:ab:bf:26:58:1e:90:90:63:0b:78:62:9c: f4:67:9f:d7:00:48:95:7a:69:84:df:6c:11:e4:0c: 3d:12:24:e5:2a:6d:d5:4d:0b:e4:c9:8a:0b:3a:46: 7a:7b:2a:50:33:7a:8f:93:84:94:e7:b4:6e:80:57: fe:56:d1:15:19:44:6f:50:69:7b:fc:44:10:5c:b2: df:70:66:d3:f4:68:35:fb:48:a8:82:a5:e2:ed:bc: e4:8d:67:e9:41:ab:72:8d:2a:8b:f9:da:1f:82:1c: cf:c2:4f:fb:1e:38:24:96:50:1b:ed:98:a7:a1:06: 60:81:2c:a7:1f:cf:65:51:57:2c:68:20:07:5d:75: 1d:1c:25:5f:78:0b:8e:d1:c2:c8:60:0c:08:3a:1a: 02:b9:1a:2e:47:e8:f1:27:c5:60:a9:06:3a:75:11: 36:52:58:00:98:cf:2d:58:e7:00:73:ea:97:86:29: 6a:9f:23:d3:07:87:22:29:9c:8a:0d:c0:38:04:a3: 4b:0c:2a:3a:e3:f5:81:ab:be:0c:a7:57:b2:87:51: d2:4b:e6:df:c7:1b:da:5d:67:9e:38:50:aa:9b:73: e4:95:df:eb:ce:3a:6b:0f:3e:74:95:ef:88:d9:7d: 38:12:9c:45:57:8a:fc:b4:01:c1:1f:50:67:7b:2d: ae:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:21:BD:45:12:91:B0:59:3E:9C:FD:7C:E9:C4:C9:45:DF:A9:4D:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/eef76797-5ae5-3b05-9a6d-e8743b5c0fb7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1406:3a00::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:11:cb:82:cc:b8:6b:16:d9:5a:8e:62:5b:82:eb:0f:5d:8b: 3c:e2:33:99:fb:e4:8f:2b:5c:84:e5:f2:7b:9a:a8:33:de:f2: 05:fe:91:eb:f8:82:5d:a4:f0:0e:1b:ef:c9:16:a2:71:80:d5: 96:7c:45:37:43:77:85:56:4b:33:7c:d9:e2:ba:56:32:72:e7: 17:09:1f:ae:87:77:b6:5e:f5:9b:81:9f:bd:88:81:87:50:3e: 0e:5e:ec:8a:a6:2f:37:33:6a:9b:68:ff:fd:34:24:98:50:af: f0:f5:53:e7:6c:e5:c7:a3:66:31:62:1e:00:3f:28:1a:c2:4e: 61:7f:aa:36:9d:fb:33:98:01:9d:dc:35:8c:af:08:0c:c0:35: 93:96:84:c0:23:18:99:cd:d2:b3:d4:38:ff:4f:95:16:03:75: d3:25:f7:da:0d:7e:39:0b:38:f6:b3:41:8a:14:be:72:45:54: 9b:6f:3b:b7:eb:47:b6:12:18:d5:f1:be:00:91:68:9c:c4:79: e3:55:7f:d6:e8:30:83:93:47:47:b8:34:74:cd:38:10:23:bd: e2:ea:9e:77:7c:40:d8:2e:78:d4:6f:17:7e:cd:e9:8c:0c:20: 61:ae:0f:38:02:66:8a:f4:df:49:9c:bc:c5:2a:41:72:c6:1a: f3:9b:6d:21 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEihNis4bsnwN8O/vwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyMjE0MDA1MloXDTI1MDQyMjEzMDA1MlowLzEtMCsGA1UEAxMk NDk3YzRlZTMtNzE1NS00ZTYzLTkwN2UtODNmYWEyZTNkMzM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncqrvyZYHpCQYwt4Ypz0Z5/XAEiVemmE32wR 5Aw9EiTlKm3VTQvkyYoLOkZ6eypQM3qPk4SU57RugFf+VtEVGURvUGl7/EQQXLLf cGbT9Gg1+0iogqXi7bzkjWfpQatyjSqL+dofghzPwk/7HjgkllAb7ZinoQZggSyn H89lUVcsaCAHXXUdHCVfeAuO0cLIYAwIOhoCuRouR+jxJ8VgqQY6dRE2UlgAmM8t WOcAc+qXhilqnyPTB4ciKZyKDcA4BKNLDCo64/WBq74Mp1eyh1HSS+bfxxvaXWee OFCqm3Pkld/rzjprDz50le+I2X04EpxFV4r8tAHBH1Bney2uTQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAMhvUUSkbBZPpz9fOnEyUXfqU2lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZWVmNzY3OTctNWFlNS0z YjA1LTlhNmQtZTg3NDNiNWMwZmI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUBjoA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHkRy4LMuGsW2VqOYluC6w9dizziM5n75I8rXITl8nuaqDPe8gX+ kev4gl2k8A4b78kWonGA1ZZ8RTdDd4VWSzN82eK6VjJy5xcJH66Hd7Ze9ZuBn72I gYdQPg5e7IqmLzczapto//00JJhQr/D1U+ds5cejZjFiHgA/KBrCTmF/qjad+zOY AZ3cNYyvCAzANZOWhMAjGJnN0rPUOP9PlRYDddMl99oNfjkLOPazQYoUvnJFVJtv O7frR7YSGNXxvgCRaJzEeeNVf9boMIOTR0e4NHTNOBAjveLqnnd8QNgueNRvF37N 6YwMIGGuDzgCZor030mcvMUqQXLGGvObbSE= -----END CERTIFICATE-----Generated at Sat Apr 5 10:58:57 2025 by rpki-client