$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/123f88fd-1f50-3570-b4f9-8373d76b60fe.roa File: 123f88fd-1f50-3570-b4f9-8373d76b60fe.roa (raw, json) Hash identifier: lRL/a+KAV0zbjPsB07PGtkV3KL91RFEf934uFYIESVk= Subject key identifier: DE:20:B8:09:1D:98:64:A6:B3:7F:73:B8:1E:5A:57:DF:D8:0A:EE:F8 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849806F326946C4FDE80C5FE0F0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/123f88fd-1f50-3570-b4f9-8373d76b60fe.roa Signing time: Sat 12 Apr 2025 13:01:01 +0000 ROA not before: Sat 12 Apr 2025 13:01:01 +0000 ROA not after: Fri 11 Jul 2025 13:01:01 +0000 asID: 20940 IP address blocks: 2600:1417:6800::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:80:6f:32:69:46:c4:fd:e8:0c:5f:e0:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 12 13:01:01 2025 GMT Not After : Jul 11 13:01:01 2025 GMT Subject: CN=c981444c-6416-4705-86e3-da01a790bd19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:8b:68:ee:69:12:2c:ff:5e:fc:eb:d9:42:43: 51:ee:0a:30:97:1e:ee:bb:29:81:08:59:eb:aa:9c: db:b2:3b:9f:2f:d2:0e:64:30:cd:f5:9e:c3:47:da: 5e:77:64:f2:89:de:c9:1b:33:07:dd:15:31:68:7d: af:c2:e2:da:1e:bf:ae:ea:63:ee:b3:82:42:e1:11: 66:5a:6c:ce:43:e4:cb:66:e7:6e:7a:b5:67:c4:9d: 49:85:a9:6e:11:81:18:91:26:df:09:e1:f0:f6:c7: 85:7f:2a:07:8f:8c:67:40:83:13:b5:59:34:50:3b: c5:c4:fe:d8:f0:f1:9a:d3:e9:a6:ed:42:57:f5:22: a5:c0:23:12:25:52:f4:58:c5:d6:af:58:fa:a6:b5: 43:18:ef:98:28:70:8c:0d:76:85:8e:fe:c1:ce:51: cf:04:4e:7f:a1:15:c1:e5:f7:d3:28:60:48:97:42: c1:3c:9e:07:54:7e:70:e2:55:26:e1:60:45:e8:f7: e5:dd:3a:6b:ff:f0:34:41:8b:47:b3:ec:cf:4f:b0: b5:98:9a:22:57:80:eb:a5:1c:26:58:79:65:31:80: 14:f8:26:7a:68:de:bd:b2:78:c2:96:de:1e:89:55: bf:a1:8c:66:6e:58:22:28:0b:68:cb:86:ea:49:ba: 55:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:20:B8:09:1D:98:64:A6:B3:7F:73:B8:1E:5A:57:DF:D8:0A:EE:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/123f88fd-1f50-3570-b4f9-8373d76b60fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1417:6800::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:29:12:08:42:9a:6d:96:d0:f0:62:7d:f4:4a:32:4b:94:ba: 9f:a8:51:02:69:e4:8f:b5:7e:10:48:a2:15:59:d8:6a:6d:d8: a3:a3:05:66:a7:17:8b:c4:30:73:66:e5:f2:48:c5:26:17:b7: 77:ff:ba:83:fe:ef:30:ad:a9:18:57:9c:c2:8e:47:97:3d:95: 8c:99:cc:2d:49:1f:00:23:6a:fa:fb:15:19:30:d9:d2:6b:31: da:a3:50:f0:b2:2f:54:3b:3a:bd:1d:06:dc:bd:86:d8:b7:9a: 74:18:96:f7:e6:05:13:6e:c9:44:5a:88:1e:01:d5:1e:00:c6: 3b:dd:af:1d:75:77:04:29:7d:12:9f:66:06:96:e0:90:90:c8: 86:d3:df:82:95:57:5d:39:2f:16:c2:e9:49:c4:95:eb:b8:c2: ed:25:4c:c4:f7:80:d3:75:2c:bb:c1:3f:7d:d0:9c:1c:0d:74: e6:9a:eb:22:b1:3e:1c:dd:8e:13:55:e5:90:f4:2c:0b:18:73: 5f:2d:f0:18:c1:42:82:8b:d1:28:e7:54:d1:d2:2d:37:e4:b5: a9:41:5f:54:37:f1:14:2d:78:bc:e0:a6:02:94:db:c8:8a:55: e9:1d:52:ba:cf:4a:fe:10:dd:c1:bb:76:b0:ba:df:76:39:7e: e7:90:70:b9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmAbzJpRsT96Axf4PAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQxMjEzMDEwMVoXDTI1MDcxMTEzMDEwMVowLzEtMCsGA1UEAxMk Yzk4MTQ0NGMtNjQxNi00NzA1LTg2ZTMtZGEwMWE3OTBiZDE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Ito7mkSLP9e/OvZQkNR7gowlx7uuymBCFnr qpzbsjufL9IOZDDN9Z7DR9ped2Tyid7JGzMH3RUxaH2vwuLaHr+u6mPus4JC4RFm WmzOQ+TLZuduerVnxJ1JhaluEYEYkSbfCeHw9seFfyoHj4xnQIMTtVk0UDvFxP7Y 8PGa0+mm7UJX9SKlwCMSJVL0WMXWr1j6prVDGO+YKHCMDXaFjv7BzlHPBE5/oRXB 5ffTKGBIl0LBPJ4HVH5w4lUm4WBF6Pfl3Tpr//A0QYtHs+zPT7C1mJoiV4DrpRwm WHllMYAU+CZ6aN69snjClt4eiVW/oYxmblgiKAtoy4bqSbpVFQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFN4guAkdmGSms39zuB5aV9/YCu74MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTIzZjg4ZmQtMWY1MC0z NTcwLWI0ZjktODM3M2Q3NmI2MGZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUF2gA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFQpEghCmm2W0PBiffRKMkuUup+oUQJp5I+1fhBIohVZ2Gpt2KOj BWanF4vEMHNm5fJIxSYXt3f/uoP+7zCtqRhXnMKOR5c9lYyZzC1JHwAjavr7FRkw 2dJrMdqjUPCyL1Q7Or0dBty9hti3mnQYlvfmBRNuyURaiB4B1R4Axjvdrx11dwQp fRKfZgaW4JCQyIbT34KVV105LxbC6UnEleu4wu0lTMT3gNN1LLvBP33QnBwNdOaa 6yKxPhzdjhNV5ZD0LAsYc18t8BjBQoKL0SjnVNHSLTfktalBX1Q38RQteLzgpgKU 28iKVekdUrrPSv4Q3cG7drC633Y5fueQcLk= -----END CERTIFICATE-----Generated at Sat Apr 26 17:47:30 2025 by rpki-client