$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/051b5fda-e1b3-3b60-b781-7400ba8f82fa.roa File: 051b5fda-e1b3-3b60-b781-7400ba8f82fa.roa (raw, json) Hash identifier: nmPrqc0dG8nS0WuKVhoV1nobG5isXJW4fGwrAsiHkJ4= Subject key identifier: 42:B3:4B:B7:83:67:8B:41:92:DE:3D:DD:27:59:48:3C:2F:E1:99:0A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858498CFF202220D69C8B0B7CFE00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/051b5fda-e1b3-3b60-b781-7400ba8f82fa.roa Signing time: Thu 17 Apr 2025 01:00:45 +0000 ROA not before: Thu 17 Apr 2025 01:00:45 +0000 ROA not after: Wed 16 Jul 2025 01:00:45 +0000 asID: 9498 IP address blocks: 2600:1417:1e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8c:ff:20:22:20:d6:9c:8b:0b:7c:fe:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 17 01:00:45 2025 GMT Not After : Jul 16 01:00:45 2025 GMT Subject: CN=a8f833ff-9c92-4762-87b6-d4f53714fc35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:b9:1f:7e:33:e9:b9:b8:20:b5:09:3d:df:9a: b7:5a:3d:cf:24:e5:b5:0e:e3:36:f5:af:43:51:82: b3:da:2e:f8:c0:67:42:d0:f5:92:b9:16:b2:36:1a: d3:ea:c2:04:79:61:62:a1:5e:eb:32:dd:61:6b:49: 66:58:16:d9:06:de:d1:47:e8:ba:aa:7c:19:0b:fe: 84:48:cf:5b:e0:e4:74:0f:f7:88:84:ca:c1:4e:2e: 65:c5:5e:d6:f8:c9:d2:13:6e:11:de:8a:fc:8a:8e: e9:ed:1c:e1:5a:2e:7b:9e:5d:8a:9a:5f:e4:6b:64: d6:dc:a8:03:f7:d5:b4:e0:31:70:45:03:08:2e:55: 8f:e7:63:01:fa:36:1d:60:ed:9e:06:56:39:f3:9e: 80:84:ab:8a:ec:b7:41:10:e7:e4:6a:48:51:d8:01: a1:b7:ef:a4:78:c9:60:a1:de:93:9a:b9:e4:8f:96: 10:42:3d:d4:53:88:10:0f:9f:80:28:3f:a8:53:98: 16:7c:71:44:f0:9a:e3:97:99:7f:98:1e:64:f8:76: 33:fb:14:80:ab:72:5e:7f:6c:e1:70:3c:0e:11:9f: 0d:54:f7:a0:47:a7:0c:86:ce:46:06:f3:8b:4e:8c: 5a:4e:e4:ea:0d:df:4d:39:1c:69:94:90:17:c1:57: 6c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:B3:4B:B7:83:67:8B:41:92:DE:3D:DD:27:59:48:3C:2F:E1:99:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/051b5fda-e1b3-3b60-b781-7400ba8f82fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1417:1e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:21:2c:88:ee:18:c6:fa:bb:c8:57:fc:0b:94:99:5c:96:4b: fa:1b:36:03:83:9a:0f:eb:7a:15:ac:57:88:46:ec:af:f2:17: 4b:88:a7:99:81:5d:a1:ff:ae:df:10:85:5d:82:6f:e2:50:64: 28:41:47:99:66:70:25:80:e4:b5:9d:f6:d2:29:18:64:76:22: 50:77:98:4d:e1:2c:ce:a6:40:b0:dd:6b:66:f5:b9:fe:78:2b: 8c:80:24:09:41:88:39:1c:57:f6:b4:f2:e1:3d:3a:82:c7:5d: 36:06:e4:53:6b:e2:b4:11:23:08:5a:8b:2f:12:94:07:a6:77: c4:f9:e4:82:73:45:57:ad:f5:1d:11:6e:ef:20:66:01:52:a7: c1:22:6d:c4:aa:2c:4c:95:0c:9c:11:a9:6e:08:a1:8a:5e:2d: 9a:c7:48:b1:71:1d:d9:d8:e7:ba:95:25:b3:d2:03:88:24:ee: 7e:8b:6d:62:ce:01:7d:2c:d7:c8:28:28:0f:44:23:60:27:1a: 81:82:c4:89:e0:3b:81:4c:8e:30:12:ff:7e:70:0b:e2:91:74: f8:a7:5c:40:2c:27:47:10:d4:57:3b:00:6c:5b:aa:3e:10:13: 0a:33:54:44:9c:0f:96:35:40:e2:a4:c5:aa:25:9e:29:4a:93: 6d:ba:2c:dd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmM/yAiINaciwt8/gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQxNzAxMDA0NVoXDTI1MDcxNjAxMDA0NVowLzEtMCsGA1UEAxMk YThmODMzZmYtOWM5Mi00NzYyLTg3YjYtZDRmNTM3MTRmYzM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbkffjPpubggtQk935q3Wj3PJOW1DuM29a9D UYKz2i74wGdC0PWSuRayNhrT6sIEeWFioV7rMt1ha0lmWBbZBt7RR+i6qnwZC/6E SM9b4OR0D/eIhMrBTi5lxV7W+MnSE24R3or8io7p7RzhWi57nl2Kml/ka2TW3KgD 99W04DFwRQMILlWP52MB+jYdYO2eBlY5856AhKuK7LdBEOfkakhR2AGht++keMlg od6Tmrnkj5YQQj3UU4gQD5+AKD+oU5gWfHFE8Jrjl5l/mB5k+HYz+xSAq3Jef2zh cDwOEZ8NVPegR6cMhs5GBvOLToxaTuTqDd9NORxplJAXwVdsqwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEKzS7eDZ4tBkt493SdZSDwv4ZkKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDUxYjVmZGEtZTFiMy0z YjYwLWI3ODEtNzQwMGJhOGY4MmZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUFwAe MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACchLIjuGMb6u8hX/AuUmVyWS/obNgODmg/rehWsV4hG7K/yF0uI p5mBXaH/rt8QhV2Cb+JQZChBR5lmcCWA5LWd9tIpGGR2IlB3mE3hLM6mQLDda2b1 uf54K4yAJAlBiDkcV/a08uE9OoLHXTYG5FNr4rQRIwhaiy8SlAemd8T55IJzRVet 9R0Rbu8gZgFSp8EibcSqLEyVDJwRqW4IoYpeLZrHSLFxHdnY57qVJbPSA4gk7n6L bWLOAX0s18goKA9EI2AnGoGCxIngO4FMjjAS/35wC+KRdPinXEAsJ0cQ1Fc7AGxb qj4QEwozVEScD5Y1QOKkxaolnilKk226LN0= -----END CERTIFICATE-----Generated at Sun Apr 27 13:22:45 2025 by rpki-client