$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fb3efa20-f19c-32c0-9b1a-381e23c8e4a4.roa File: fb3efa20-f19c-32c0-9b1a-381e23c8e4a4.roa (raw, json) Hash identifier: Rs85B+MddL9ezm/VIgSULZJz2MeFhME8GxJ+gX3txhQ= Subject key identifier: 69:2F:4A:CC:1E:C5:BB:C2:A5:51:41:EE:2B:DA:52:65:96:25:CD:17 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848A9966635DD03EABB46844B80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fb3efa20-f19c-32c0-9b1a-381e23c8e4a4.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 35994 IP address blocks: 2600:1403:6c00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:66:35:dd:03:ea:bb:46:84:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=c56e1af4-4edd-4d6e-b28f-ee244f0e7086 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:59:f2:3c:0e:7d:f3:c7:56:ea:1c:3b:df:f7: 4e:0d:c1:22:b3:da:fc:a4:ae:db:76:71:c6:3e:69: 82:20:6f:ec:81:37:05:88:e3:78:09:6e:1d:b4:50: c3:2a:27:67:6b:c5:10:a1:d6:e9:86:b9:46:a1:9e: ec:17:43:70:2c:6c:5f:c3:d5:e0:96:d9:b8:30:af: 27:24:8e:9d:be:91:25:ba:21:f0:b8:1e:bf:d1:07: ae:51:82:bc:fa:88:b9:be:c3:0c:f8:68:5d:00:d7: 33:36:01:7a:90:fb:02:ae:51:e1:44:ae:83:a9:9f: 71:72:c4:27:6a:fa:84:82:f0:aa:f4:ad:88:45:96: a1:d1:8e:63:e6:c9:d7:69:49:7b:b1:f3:05:d9:73: de:38:b2:f3:c5:7d:b9:c6:43:db:11:bf:9a:b7:4f: 2d:f7:1f:12:0a:cf:eb:d3:cb:0f:c4:6d:0a:9f:fa: 53:d5:77:b3:5f:1c:61:1a:97:a9:31:7d:b1:54:2c: 96:3f:34:10:ff:bb:95:31:67:47:f1:d7:87:c4:5a: 78:92:55:3c:f3:b3:bf:42:a2:3d:b9:81:3d:d4:b1: 9b:69:f1:56:d7:35:0f:44:d0:3d:63:a6:f3:24:b7: 1e:b0:0b:59:53:0e:07:6c:47:63:82:5b:fc:50:0c: 06:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:2F:4A:CC:1E:C5:BB:C2:A5:51:41:EE:2B:DA:52:65:96:25:CD:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fb3efa20-f19c-32c0-9b1a-381e23c8e4a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1403:6c00::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:03:97:aa:67:18:c9:33:69:f3:2f:1c:aa:03:4f:b1:b0:eb: 8c:94:04:dc:b7:b1:9f:d4:30:13:42:88:3e:3d:97:b2:e6:f3: 5a:06:38:7d:7c:15:6f:f3:01:c9:6b:0d:37:55:47:d2:88:f1: bd:67:bd:c1:1e:51:46:50:98:4d:0f:f9:bb:ec:70:8b:5c:98: 19:2c:fc:0b:cc:df:ae:70:8e:90:4b:62:ad:d2:82:64:9c:9f: d1:4b:61:b1:a5:37:60:6b:64:05:9d:11:19:e3:a9:8b:79:45: 9b:c4:46:c8:91:8a:e0:02:8d:b0:0c:d8:8b:5d:6c:85:1d:5e: c5:e8:e1:dc:26:fd:e3:53:d0:22:28:0f:2c:6d:00:13:e4:4f: 23:1f:46:0f:f4:e5:99:c4:cf:5c:fe:d7:35:b2:a4:21:bb:07: fe:b3:11:9d:c4:62:dd:31:6a:96:61:47:62:e1:64:ad:87:fd: 0e:2b:c0:17:d7:04:d5:08:87:43:d4:c3:3e:6d:15:cd:12:cb: 76:61:89:03:dd:8e:99:73:b2:64:cf:0d:7e:bf:1f:e9:6f:fa: b0:36:58:8a:de:4c:2a:8d:70:d6:12:86:a5:97:35:38:64:b6: 35:9b:2f:12:2d:1e:8b:7a:df:fe:cb:3f:be:19:e9:fa:21:b8: 9b:b5:c6:38 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiplmY13QPqu0aES4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk YzU2ZTFhZjQtNGVkZC00ZDZlLWIyOGYtZWUyNDRmMGU3MDg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlnyPA5988dW6hw73/dODcEis9r8pK7bdnHG PmmCIG/sgTcFiON4CW4dtFDDKidna8UQodbphrlGoZ7sF0NwLGxfw9Xgltm4MK8n JI6dvpEluiHwuB6/0QeuUYK8+oi5vsMM+GhdANczNgF6kPsCrlHhRK6DqZ9xcsQn avqEgvCq9K2IRZah0Y5j5snXaUl7sfMF2XPeOLLzxX25xkPbEb+at08t9x8SCs/r 08sPxG0Kn/pT1XezXxxhGpepMX2xVCyWPzQQ/7uVMWdH8deHxFp4klU887O/QqI9 uYE91LGbafFW1zUPRNA9Y6bzJLcesAtZUw4HbEdjglv8UAwG9wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGkvSswexbvCpVFB7ivaUmWWJc0XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZmIzZWZhMjAtZjE5Yy0z MmMwLTliMWEtMzgxZTIzYzhlNGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUA2wA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJYDl6pnGMkzafMvHKoDT7Gw64yUBNy3sZ/UMBNCiD49l7Lm81oG OH18FW/zAclrDTdVR9KI8b1nvcEeUUZQmE0P+bvscItcmBks/AvM365wjpBLYq3S gmScn9FLYbGlN2BrZAWdERnjqYt5RZvERsiRiuACjbAM2ItdbIUdXsXo4dwm/eNT 0CIoDyxtABPkTyMfRg/05ZnEz1z+1zWypCG7B/6zEZ3EYt0xapZhR2LhZK2H/Q4r wBfXBNUIh0PUwz5tFc0Sy3ZhiQPdjplzsmTPDX6/H+lv+rA2WIreTCqNcNYShqWX NThktjWbLxItHot63/7LP74Z6fohuJu1xjg= -----END CERTIFICATE-----Generated at Sat Apr 5 10:57:26 2025 by rpki-client