$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0643a5b1-12f8-3823-9851-1590244b2064.roa File: 0643a5b1-12f8-3823-9851-1590244b2064.roa (raw, json) Hash identifier: 33vp8GswsdysFdMUuN0t/hH+VOBCzwj5PCIy87qwolI= Subject key identifier: DC:3F:3A:C7:34:C0:04:EE:B8:37:9A:4A:E7:41:74:16:1C:13:46:B6 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584996C4BADFDECD6AE88CFD88C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0643a5b1-12f8-3823-9851-1590244b2064.roa Signing time: Sun 20 Apr 2025 13:01:01 +0000 ROA not before: Sun 20 Apr 2025 13:01:01 +0000 ROA not after: Sat 19 Jul 2025 13:01:01 +0000 asID: 20940 IP address blocks: 2600:141b:f800::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:96:c4:ba:df:de:cd:6a:e8:8c:fd:88:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 20 13:01:01 2025 GMT Not After : Jul 19 13:01:01 2025 GMT Subject: CN=4e729767-c673-40d1-a1b8-cb2f9b0a001c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:95:bd:09:89:3e:79:81:2f:ca:08:67:2e:3e: dd:37:e6:df:d9:e7:4b:66:a8:51:09:56:5d:c3:be: b3:19:65:31:f1:91:d8:34:43:a5:91:b5:92:0e:f3: 77:3d:fa:7f:6f:88:e5:00:07:42:13:32:d7:94:6c: 3f:51:aa:e6:2a:71:b4:ef:78:92:21:21:ba:a6:69: cb:dd:c4:e1:f0:35:88:2c:c9:6d:68:4f:89:62:0f: 58:42:39:e9:59:be:78:81:07:69:54:2a:63:26:25: 42:d9:cd:b4:cd:cb:52:c5:42:55:a9:63:4f:27:d0: 06:10:64:48:d5:c0:b1:94:42:71:ca:b6:e1:9f:45: 67:03:52:09:5e:80:3d:1a:fa:38:88:af:f6:4c:40: 94:a9:30:64:20:3c:53:8a:1a:67:0b:b7:93:3d:d7: d3:cd:bc:24:d3:41:cc:b8:9e:bb:b0:a8:94:7e:f2: e2:80:1b:da:4a:6a:54:51:24:99:62:ed:bd:9e:94: 03:cf:26:0c:70:02:de:ab:17:a3:89:ed:69:22:d7: 2f:bb:c7:f1:62:12:f0:05:bb:59:67:53:48:2d:11: 71:e1:88:8d:12:f5:51:43:f5:9b:39:8a:27:5f:44: c7:03:87:68:37:92:46:de:2f:21:25:14:bb:29:38: c7:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:3F:3A:C7:34:C0:04:EE:B8:37:9A:4A:E7:41:74:16:1C:13:46:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0643a5b1-12f8-3823-9851-1590244b2064.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:141b:f800::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:4e:bf:5a:fc:93:fc:0e:24:39:21:59:8b:5b:cc:5f:d8:91: 7e:b0:82:28:98:52:f8:db:7b:d0:ff:0f:ee:d2:55:28:f3:97: 62:30:0f:92:d5:04:c4:aa:cb:6d:47:09:8d:38:24:35:da:69: 0e:4e:b4:4d:6f:85:69:0c:f5:c9:12:5e:82:ed:de:2f:dd:4e: 10:aa:f6:ee:45:87:ef:7b:20:1e:4e:ca:0b:37:b2:c7:02:c9: 7c:41:f6:fc:48:7b:78:e8:c7:97:ee:e5:88:3b:f2:02:84:bb: 42:80:27:e7:15:b7:81:7d:ee:99:da:5c:23:75:ea:2b:9c:f7: 22:30:28:34:bf:47:e9:53:d2:f7:7a:d1:13:c1:aa:30:06:9c: 9b:bb:9a:fe:d6:8e:80:07:5d:1e:25:0a:13:23:82:a1:4a:cb: 05:f3:9b:97:8a:21:de:69:c1:d6:ea:79:5a:0b:a3:a1:2d:4d: 4e:68:1a:2a:9d:70:1f:5d:e3:d0:ed:e0:58:cd:4b:dd:0c:de: 74:46:0d:e5:e8:58:1f:3b:59:06:06:ee:dd:e4:96:b3:3f:14: ef:6f:c6:e0:23:2c:80:78:0f:6a:f6:39:c2:76:84:a5:84:52: 9a:91:7f:ed:06:d8:e2:01:d6:d2:c5:a1:2f:46:96:57:6b:c6: 20:77:6f:07 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmWxLrf3s1q6Iz9iMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyMDEzMDEwMVoXDTI1MDcxOTEzMDEwMVowLzEtMCsGA1UEAxMk NGU3Mjk3NjctYzY3My00MGQxLWExYjgtY2IyZjliMGEwMDFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZW9CYk+eYEvyghnLj7dN+bf2edLZqhRCVZd w76zGWUx8ZHYNEOlkbWSDvN3Pfp/b4jlAAdCEzLXlGw/UarmKnG073iSISG6pmnL 3cTh8DWILMltaE+JYg9YQjnpWb54gQdpVCpjJiVC2c20zctSxUJVqWNPJ9AGEGRI 1cCxlEJxyrbhn0VnA1IJXoA9Gvo4iK/2TECUqTBkIDxTihpnC7eTPdfTzbwk00HM uJ67sKiUfvLigBvaSmpUUSSZYu29npQDzyYMcALeqxejie1pItcvu8fxYhLwBbtZ Z1NILRFx4YiNEvVRQ/WbOYonX0THA4doN5JG3i8hJRS7KTjHbQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNw/Osc0wATuuDeaSudBdBYcE0a2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDY0M2E1YjEtMTJmOC0z ODIzLTk4NTEtMTU5MDI0NGIyMDY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUG/gA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEpOv1r8k/wOJDkhWYtbzF/YkX6wgiiYUvjbe9D/D+7SVSjzl2Iw D5LVBMSqy21HCY04JDXaaQ5OtE1vhWkM9ckSXoLt3i/dThCq9u5Fh+97IB5Oygs3 sscCyXxB9vxIe3jox5fu5Yg78gKEu0KAJ+cVt4F97pnaXCN16iuc9yIwKDS/R+lT 0vd60RPBqjAGnJu7mv7WjoAHXR4lChMjgqFKywXzm5eKId5pwdbqeVoLo6EtTU5o GiqdcB9d49Dt4FjNS90M3nRGDeXoWB87WQYG7t3klrM/FO9vxuAjLIB4D2r2OcJ2 hKWEUpqRf+0G2OIB1tLFoS9GlldrxiB3bwc= -----END CERTIFICATE-----Generated at Sat Apr 26 16:30:09 2025 by rpki-client