$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/91ae5514-c839-3de6-9850-9135ee89f745.roa File: 91ae5514-c839-3de6-9850-9135ee89f745.roa (raw, json) Hash identifier: L/wVPkF7lJpi0y0HJgFxyC8vdU+K/SM9seTs+XbG9nk= Subject key identifier: F8:96:F2:74:F4:43:9B:64:75:34:C3:8B:4F:1A:10:A9:B3:31:B0:56 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848FD56A2AB4CA427CA16759C00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/91ae5514-c839-3de6-9850-9135ee89f745.roa Signing time: Mon 24 Feb 2025 14:00:52 +0000 ROA not before: Mon 24 Feb 2025 14:00:52 +0000 ROA not after: Sun 25 May 2025 13:00:52 +0000 asID: 12222 IP address blocks: 2001:4878:102::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:56:a2:ab:4c:a4:27:ca:16:75:9c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 24 14:00:52 2025 GMT Not After : May 25 13:00:52 2025 GMT Subject: CN=4c08a850-b92d-4c45-b4bc-79c135e4cb21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:8a:88:bf:54:72:1e:d8:13:f1:4f:4c:b9:c4: 76:b0:38:d8:55:19:23:78:96:5d:e1:46:a5:06:c4: 26:b4:d1:5b:78:05:5b:b2:90:b6:b9:5c:66:f8:a6: 66:bb:96:a8:a9:77:aa:45:89:c5:f7:52:00:a8:10: e0:2c:bf:cc:fb:c5:99:04:48:66:13:d6:bd:63:7e: 64:c7:0f:b4:55:d1:66:6d:b9:58:dc:27:e9:cd:13: 08:b7:ad:ae:28:7a:80:2e:cf:47:ea:29:95:02:0c: d4:b3:3b:92:c4:ff:61:e2:a1:78:91:d9:93:1b:c6: 4f:88:ce:98:6e:9f:42:c0:3b:38:8a:51:99:75:8c: 00:62:01:d4:3f:34:ba:98:18:97:a1:1c:ba:aa:76: e2:d1:1d:61:db:b2:b2:ae:54:ab:5f:75:36:75:f9: d5:d6:8c:9e:b6:c2:c0:43:3d:37:72:90:7c:b6:c4: b8:35:f3:5f:b4:db:c0:09:e0:fd:26:53:e3:87:85: 8e:5b:c8:c9:df:83:96:4a:9d:47:15:ac:90:cd:62: 8b:03:71:26:5e:de:e4:fb:90:0b:96:b8:b3:25:bf: 59:a1:9b:54:a5:30:eb:32:af:81:b3:aa:d2:48:3c: 68:33:e0:ba:29:14:52:a0:24:98:86:e6:fb:10:09: bc:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:96:F2:74:F4:43:9B:64:75:34:C3:8B:4F:1A:10:A9:B3:31:B0:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/91ae5514-c839-3de6-9850-9135ee89f745.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2001:4878:102::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:e8:00:66:b3:c8:c9:2e:df:d7:f2:6a:52:2a:4d:8a:ec:77: 78:32:28:6f:eb:7f:75:b6:08:9d:73:91:4a:d4:70:1d:4e:7e: 75:80:cf:50:81:ac:48:d0:f2:ad:54:51:eb:99:1f:7c:be:c2: bf:25:0f:1a:6e:88:46:21:d7:0f:4c:98:91:d5:bf:90:25:59: ca:2b:64:87:37:79:19:7f:db:0f:17:fa:bd:1e:80:41:39:43: 27:b3:17:95:1d:ae:d3:d7:96:b8:a1:89:70:7a:5e:eb:de:bb: 0f:10:62:f4:7b:f7:08:00:54:c3:67:61:d7:12:03:8c:2c:40: 19:f6:74:a0:db:6a:88:a1:e7:e7:f0:0d:66:7f:1f:dd:0f:5c: 9d:90:7a:32:b5:10:e6:25:32:19:12:8c:8d:58:06:39:c5:d8: a6:a5:dd:ec:9c:6d:82:85:ca:e7:b3:96:2d:68:12:a7:ad:91: d6:ee:aa:d4:7d:65:c7:fe:a8:e9:7e:80:99:a9:fd:47:29:c2: b1:8d:24:61:8e:a3:43:31:1c:03:18:bf:8a:d0:c2:4e:cd:3d: 84:d6:77:d1:30:e3:89:c4:f8:8d:ac:f0:79:39:4f:a0:cb:ff: 59:3d:1d:ca:61:9e:ac:bc:28:00:f1:9d:20:64:1b:14:53:9b: ca:e8:a0:61 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj9VqKrTKQnyhZ1nAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk NGMwOGE4NTAtYjkyZC00YzQ1LWI0YmMtNzljMTM1ZTRjYjIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhoqIv1RyHtgT8U9MucR2sDjYVRkjeJZd4Ual BsQmtNFbeAVbspC2uVxm+KZmu5aoqXeqRYnF91IAqBDgLL/M+8WZBEhmE9a9Y35k xw+0VdFmbblY3CfpzRMIt62uKHqALs9H6imVAgzUszuSxP9h4qF4kdmTG8ZPiM6Y bp9CwDs4ilGZdYwAYgHUPzS6mBiXoRy6qnbi0R1h27KyrlSrX3U2dfnV1oyetsLA Qz03cpB8tsS4NfNftNvACeD9JlPjh4WOW8jJ34OWSp1HFayQzWKLA3EmXt7k+5AL lrizJb9ZoZtUpTDrMq+Bs6rSSDxoM+C6KRRSoCSYhub7EAm8pwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPiW8nT0Q5tkdTTDi08aEKmzMbBWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTFhZTU1MTQtYzgzOS0z ZGU2LTk4NTAtOTEzNWVlODlmNzQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIeAEC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFXoAGazyMku39fyalIqTYrsd3gyKG/rf3W2CJ1zkUrUcB1OfnWA z1CBrEjQ8q1UUeuZH3y+wr8lDxpuiEYh1w9MmJHVv5AlWcorZIc3eRl/2w8X+r0e gEE5QyezF5UdrtPXlrihiXB6Xuveuw8QYvR79wgAVMNnYdcSA4wsQBn2dKDbaoih 5+fwDWZ/H90PXJ2QejK1EOYlMhkSjI1YBjnF2Kal3eycbYKFyuezli1oEqetkdbu qtR9Zcf+qOl+gJmp/UcpwrGNJGGOo0MxHAMYv4rQwk7NPYTWd9Ew44nE+I2s8Hk5 T6DL/1k9Hcphnqy8KADxnSBkGxRTm8rooGE= -----END CERTIFICATE-----Generated at Mon May 5 02:42:33 2025 by rpki-client