$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0c91a280-2eb2-39f7-800f-906890d600ea.roa File: 0c91a280-2eb2-39f7-800f-906890d600ea.roa (raw, json) Hash identifier: luJzTrg+oOGQqah2h5VBD+jDUhFXumZNL4wREvqCStI= Subject key identifier: 73:11:13:48:73:46:D7:4F:DC:D9:EE:82:75:9B:2B:C9:DD:92:32:12 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858496CE45F7CC03954EF8C8BA6C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0c91a280-2eb2-39f7-800f-906890d600ea.roa Signing time: Sat 05 Apr 2025 13:01:01 +0000 ROA not before: Sat 05 Apr 2025 13:01:01 +0000 ROA not after: Fri 04 Jul 2025 13:01:01 +0000 asID: 20940 IP address blocks: 2600:1408:7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6c:e4:5f:7c:c0:39:54:ef:8c:8b:a6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 5 13:01:01 2025 GMT Not After : Jul 4 13:01:01 2025 GMT Subject: CN=4e6d2bd2-3738-49a0-b4d0-62d55c536185 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:91:b4:00:cc:65:8e:45:b4:cc:78:2a:23:33: 95:81:ff:46:0f:7b:e6:82:49:c9:e4:19:f8:97:47: 74:bf:08:70:34:b4:0e:69:8a:fc:e3:be:e4:59:f0: 2f:d3:4f:28:22:38:fd:5a:8c:ce:27:fb:53:79:a3: 22:31:d5:86:67:11:33:d2:ba:0f:9f:fd:69:be:88: d5:03:03:c9:a2:b7:99:35:aa:ca:cc:c4:92:87:cd: ce:56:2b:0b:7b:3f:c1:70:0f:52:e7:25:31:c1:d0: ee:10:d7:55:4d:37:dc:6e:3c:08:70:4f:f9:8a:f2: 5a:55:ae:9a:43:96:46:6c:82:6d:25:4a:15:c2:c3: 09:c7:33:27:fb:21:d3:6d:86:e6:6a:8e:a8:a7:c3: 07:cf:f7:f4:4d:93:11:d2:9a:d1:4c:0f:3c:03:9a: 4c:12:d1:4f:ef:18:29:24:42:65:25:3d:e5:f3:e3: c1:a6:69:e6:ac:af:ac:2e:37:da:d3:79:1c:f3:0b: a6:ff:80:07:3d:1b:54:18:d5:9e:c6:c6:07:73:65: 5f:58:e9:c1:47:85:95:5d:c9:d4:84:c2:ee:7d:a5: 61:b1:3f:03:51:2f:a7:a7:4f:6b:a0:8f:f0:06:30: 3f:c1:df:46:49:c3:52:3c:20:94:e2:46:ea:3b:be: 08:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:11:13:48:73:46:D7:4F:DC:D9:EE:82:75:9B:2B:C9:DD:92:32:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0c91a280-2eb2-39f7-800f-906890d600ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1408:7::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:57:e2:86:bb:d7:b7:32:a4:a9:b4:9f:8a:d6:c9:ac:8d:43: 82:28:2f:f6:aa:ed:a5:12:19:5f:15:be:86:95:51:ce:ad:b7: 4e:22:93:95:51:2e:e7:0d:3f:23:03:d5:2f:a8:27:51:e2:bb: 85:25:a9:3e:d8:1a:14:09:eb:05:c5:24:38:60:cf:af:2d:ce: c0:95:14:3d:0a:b9:fa:f6:d3:bb:05:5f:04:47:c3:a0:eb:54: 65:ae:8a:d9:ac:7c:85:52:ad:6f:bb:78:64:b1:12:0c:e4:89: e3:10:40:63:fb:e9:68:c0:ff:75:77:9f:33:68:ac:40:5f:d0: f0:26:29:c0:f5:0d:68:70:9b:73:1f:23:0d:21:63:3d:c5:ae: 95:0e:6c:45:77:b6:ad:35:90:2c:9a:f8:16:ba:79:b2:07:4d: f8:cc:e7:ea:64:fe:22:71:24:61:b9:ff:5d:49:fd:b6:52:1e: b1:98:07:11:f0:f4:00:f2:39:d0:44:83:3b:48:f3:af:78:25: 4c:a8:78:fb:4a:4a:8e:ea:ac:e5:ac:65:99:66:74:9b:77:82: 8c:a1:8b:25:eb:4a:23:a5:b0:4b:de:c4:e1:49:0a:26:6c:ad: be:16:20:0d:83:d9:95:3b:79:5e:b6:6a:13:90:87:8a:53:6c: 84:ae:5a:24 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEls5F98wDlU74yLpsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQwNTEzMDEwMVoXDTI1MDcwNDEzMDEwMVowLzEtMCsGA1UEAxMk NGU2ZDJiZDItMzczOC00OWEwLWI0ZDAtNjJkNTVjNTM2MTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJG0AMxljkW0zHgqIzOVgf9GD3vmgknJ5Bn4 l0d0vwhwNLQOaYr8477kWfAv008oIjj9WozOJ/tTeaMiMdWGZxEz0roPn/1pvojV AwPJoreZNarKzMSSh83OVisLez/BcA9S5yUxwdDuENdVTTfcbjwIcE/5ivJaVa6a Q5ZGbIJtJUoVwsMJxzMn+yHTbYbmao6op8MHz/f0TZMR0prRTA88A5pMEtFP7xgp JEJlJT3l8+PBpmnmrK+sLjfa03kc8wum/4AHPRtUGNWexsYHc2VfWOnBR4WVXcnU hMLufaVhsT8DUS+np09roI/wBjA/wd9GScNSPCCU4kbqO74IDwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHMRE0hzRtdP3NnugnWbK8ndkjISMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGM5MWEyODAtMmViMi0z OWY3LTgwMGYtOTA2ODkwZDYwMGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUCAAH MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG1X4oa717cypKm0n4rWyayNQ4IoL/aq7aUSGV8VvoaVUc6tt04i k5VRLucNPyMD1S+oJ1Hiu4UlqT7YGhQJ6wXFJDhgz68tzsCVFD0Kufr207sFXwRH w6DrVGWuitmsfIVSrW+7eGSxEgzkieMQQGP76WjA/3V3nzNorEBf0PAmKcD1DWhw m3MfIw0hYz3FrpUObEV3tq01kCya+Ba6ebIHTfjM5+pk/iJxJGG5/11J/bZSHrGY BxHw9ADyOdBEgztI8694JUyoePtKSo7qrOWsZZlmdJt3goyhiyXrSiOlsEvexOFJ CiZsrb4WIA2D2ZU7eV62ahOQh4pTbISuWiQ= -----END CERTIFICATE-----Generated at Sat Apr 26 19:54:11 2025 by rpki-client