$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/105f30ec-fbca-3e2b-abf0-aeed4904eef2.roa File: 105f30ec-fbca-3e2b-abf0-aeed4904eef2.roa (raw, json) Hash identifier: 9Qq7cab0osrt1YGl2Cr08pov6oX+lEBASiv4FftLDCg= Subject key identifier: D7:98:EA:49:CA:32:87:75:AC:4E:FD:D1:07:2E:FB:36:88:82:EA:7F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849806F3B10E31912AC297E3000 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/105f30ec-fbca-3e2b-abf0-aeed4904eef2.roa Signing time: Sat 12 Apr 2025 13:01:01 +0000 ROA not before: Sat 12 Apr 2025 13:01:01 +0000 ROA not after: Fri 11 Jul 2025 13:01:01 +0000 asID: 20940 IP address blocks: 2600:1413:9000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:80:6f:3b:10:e3:19:12:ac:29:7e:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 12 13:01:01 2025 GMT Not After : Jul 11 13:01:01 2025 GMT Subject: CN=53291a4f-c3ac-42bb-a746-228e26c7670a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:9a:6d:47:d6:28:a1:70:d3:68:f4:80:08:aa: 9e:bb:88:a9:db:f9:91:99:2f:42:ec:c5:ad:78:46: a4:26:ee:36:da:c8:79:1a:bf:e4:93:cc:9d:1a:46: 18:b6:8c:0c:7b:f1:75:e2:f3:47:f2:aa:6a:8a:e2: a8:59:21:fb:98:df:35:4b:b7:f1:03:a8:28:e4:50: 76:9c:cc:ef:45:ad:65:2d:bc:f7:8f:c7:cf:22:8f: 5d:8c:fe:22:2f:79:19:75:e9:62:a6:05:d7:ef:f7: 98:85:27:47:42:2f:1d:9f:0c:db:cd:0b:7e:ae:4d: 2f:17:3f:10:89:e6:7a:ad:5d:48:40:68:67:5f:1e: 23:a5:d8:1f:71:0a:3d:49:0e:1d:62:c4:67:53:e4: 63:56:8a:36:37:62:94:cd:bb:5d:56:7e:00:da:31: 3f:b8:7a:8d:76:32:f1:5c:19:bc:bb:b6:48:6b:df: b9:bc:da:1f:87:98:5e:2f:7c:8b:13:83:30:a0:70: 03:8a:25:2a:2c:3f:82:f1:48:3b:55:26:dc:72:cb: 3d:97:e8:7e:cf:db:f8:ce:2f:4c:17:df:58:05:5c: ed:c7:5d:e0:d3:a5:c7:4b:fc:f9:b4:c8:81:83:b9: c6:58:4c:a3:3d:a6:28:da:01:c3:76:ec:a7:79:06: 17:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:98:EA:49:CA:32:87:75:AC:4E:FD:D1:07:2E:FB:36:88:82:EA:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/105f30ec-fbca-3e2b-abf0-aeed4904eef2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1413:9000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:9e:22:2c:14:09:9e:b2:cf:f0:44:af:d5:85:23:56:4f:19: 9d:72:72:c6:0d:0f:f7:f0:39:fd:e3:f5:78:79:a5:0b:be:01: 76:69:08:b6:3c:08:8d:9e:e0:02:3e:1f:cf:16:96:b7:be:8f: be:9e:c8:4c:f2:d1:53:10:b5:5d:88:c8:77:01:8f:d2:1e:76: 5c:27:68:6e:89:f2:27:5a:1a:75:d4:fa:d4:ca:58:6d:01:6d: de:a4:ee:d6:8b:52:cd:76:d8:2a:3d:f4:36:d8:53:7c:66:b7: 6e:76:72:1a:bf:a5:80:5d:77:47:78:1b:71:3a:98:5e:03:96: 7f:ff:30:a9:4b:d3:e0:03:91:45:be:1e:cc:db:64:d9:13:e9: 90:57:0f:9f:6b:f6:c8:b2:a5:ed:bd:fc:6e:51:f8:c8:bf:88: 6a:33:06:ed:9d:59:e7:5f:b3:6e:b2:59:15:60:f9:bd:78:3a: ec:b6:ad:f9:b7:c3:ee:04:8a:81:cb:94:96:cf:c9:3b:7f:f8: ab:41:7e:cf:37:7e:05:de:0e:37:c9:1e:c1:93:5e:51:5c:08: d5:cb:bd:33:3c:18:5f:a2:fa:50:5e:ad:b2:43:1b:d8:e1:8b: e3:49:54:e0:46:1e:de:44:30:fb:94:dd:2e:16:d9:e8:fb:9c: 21:22:d3:9d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmAbzsQ4xkSrCl+MAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQxMjEzMDEwMVoXDTI1MDcxMTEzMDEwMVowLzEtMCsGA1UEAxMk NTMyOTFhNGYtYzNhYy00MmJiLWE3NDYtMjI4ZTI2Yzc2NzBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpptR9YooXDTaPSACKqeu4ip2/mRmS9C7MWt eEakJu422sh5Gr/kk8ydGkYYtowMe/F14vNH8qpqiuKoWSH7mN81S7fxA6go5FB2 nMzvRa1lLbz3j8fPIo9djP4iL3kZdelipgXX7/eYhSdHQi8dnwzbzQt+rk0vFz8Q ieZ6rV1IQGhnXx4jpdgfcQo9SQ4dYsRnU+RjVoo2N2KUzbtdVn4A2jE/uHqNdjLx XBm8u7ZIa9+5vNofh5heL3yLE4MwoHADiiUqLD+C8Ug7VSbccss9l+h+z9v4zi9M F99YBVztx13g06XHS/z5tMiBg7nGWEyjPaYo2gHDduyneQYXIQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNeY6knKMod1rE790Qcu+zaIgup/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTA1ZjMwZWMtZmJjYS0z ZTJiLWFiZjAtYWVlZDQ5MDRlZWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUE5AA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADaeIiwUCZ6yz/BEr9WFI1ZPGZ1ycsYND/fwOf3j9Xh5pQu+AXZp CLY8CI2e4AI+H88Wlre+j76eyEzy0VMQtV2IyHcBj9IedlwnaG6J8idaGnXU+tTK WG0Bbd6k7taLUs122Co99DbYU3xmt252chq/pYBdd0d4G3E6mF4Dln//MKlL0+AD kUW+HszbZNkT6ZBXD59r9siype29/G5R+Mi/iGozBu2dWedfs26yWRVg+b14Ouy2 rfm3w+4EioHLlJbPyTt/+KtBfs83fgXeDjfJHsGTXlFcCNXLvTM8GF+i+lBerbJD G9jhi+NJVOBGHt5EMPuU3S4W2ej7nCEi050= -----END CERTIFICATE-----Generated at Sat Apr 26 19:07:24 2025 by rpki-client