$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1dd57f63-4dd8-37c7-a673-4f1887b0f75e.roa File: 1dd57f63-4dd8-37c7-a673-4f1887b0f75e.roa (raw, json) Hash identifier: Hu0cleB/K5JnGOnoLEUQh4KIEEoVSMQDiTfBaglw8MI= Subject key identifier: 70:97:9D:69:AE:84:B4:B7:07:F4:A1:17:7A:1F:13:25:87:79:D2:05 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849806F30CA0E3FC6965F1A0980 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1dd57f63-4dd8-37c7-a673-4f1887b0f75e.roa Signing time: Sat 12 Apr 2025 13:01:01 +0000 ROA not before: Sat 12 Apr 2025 13:01:01 +0000 ROA not after: Fri 11 Jul 2025 13:01:01 +0000 asID: 20940 IP address blocks: 2600:140b:2200::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:80:6f:30:ca:0e:3f:c6:96:5f:1a:09:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 12 13:01:01 2025 GMT Not After : Jul 11 13:01:01 2025 GMT Subject: CN=d9786bb2-d088-446d-af68-52a12c6084b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:bb:b4:22:1c:dc:fe:ff:2f:70:2f:27:a2:9e: d7:db:60:e0:2b:cd:0b:5a:32:3f:b4:fd:f7:fd:cc: 2b:28:d7:22:04:6a:ac:a1:e7:c5:a8:a4:0c:53:25: 83:08:ec:e1:3c:64:9e:79:76:b3:2c:fb:9e:da:37: 73:96:a6:06:72:f5:3f:8d:62:ab:64:e7:3f:0d:e3: 52:a7:b1:b0:ba:21:ce:9e:3a:34:67:5d:bd:93:4b: 08:2d:70:9c:85:8c:a8:51:99:2a:77:ea:66:ed:72: f8:f6:8e:63:03:8c:a8:12:e1:ca:06:54:98:87:a3: 2a:65:36:94:b0:de:00:ee:f1:95:c4:13:e8:aa:4d: da:57:b9:4b:7f:3b:e1:fa:f3:5d:6f:fd:ec:6f:06: 0c:bd:2c:c3:74:33:16:f5:e1:be:2f:13:0d:43:c2: 55:66:05:8b:dc:36:f1:bd:4f:b4:b2:81:70:e9:c6: 57:c2:f8:48:96:c7:e1:d8:c6:f6:da:25:bb:3d:39: 8a:2a:bc:86:b5:3a:7b:79:a4:43:8c:25:a4:d8:6c: f6:a3:9f:d9:fb:17:fe:f6:cf:45:54:aa:87:ed:fc: 79:74:1f:fd:03:3a:7b:47:aa:a9:28:2b:f5:9d:7d: 21:28:95:41:8f:fb:df:45:0d:d1:75:3e:d1:b0:2e: aa:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:97:9D:69:AE:84:B4:B7:07:F4:A1:17:7A:1F:13:25:87:79:D2:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1dd57f63-4dd8-37c7-a673-4f1887b0f75e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:140b:2200::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:4b:f6:a5:64:d1:d7:61:53:86:c4:9d:8c:68:ef:ec:65:10: 39:25:1e:0c:c3:41:a6:86:aa:30:9a:81:37:60:a0:79:7c:1c: 07:fa:df:c6:70:e2:8f:35:33:66:21:2e:61:8a:cd:32:fa:48: 45:b6:50:89:10:32:5f:1b:20:cc:9a:14:9f:1a:26:02:20:37: 14:34:c8:cb:33:0a:87:cb:04:3b:63:1b:f0:8f:da:b3:80:45: 4d:e9:af:a0:6d:40:d5:b6:48:ed:69:1a:9f:c3:4a:6c:88:9f: 70:18:32:63:f0:9f:63:0e:43:c7:37:aa:76:b0:b5:1f:c6:c3: 8b:2c:ca:cc:1c:fc:11:32:9d:30:77:1c:c3:9d:94:95:1b:5a: 92:5a:d6:de:03:51:29:46:94:f1:58:bf:94:eb:64:8b:e3:97: 82:5d:b2:3b:0a:fe:fc:fb:f4:7c:8a:ad:cd:1e:34:e8:eb:45: 90:4a:35:4b:34:f4:5b:cd:9c:91:96:37:6b:e1:60:ff:73:50: 73:93:95:33:17:c2:0c:f6:11:ec:5f:1e:68:ee:36:fd:1f:66: 8a:21:80:1a:39:54:89:44:60:b9:a3:51:80:c2:af:a1:86:07: 43:43:8a:47:2f:ce:11:67:bf:65:bb:44:d9:31:fe:ae:65:a7: 4c:6f:b8:32 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmAbzDKDj/Gll8aCYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQxMjEzMDEwMVoXDTI1MDcxMTEzMDEwMVowLzEtMCsGA1UEAxMk ZDk3ODZiYjItZDA4OC00NDZkLWFmNjgtNTJhMTJjNjA4NGI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7u0Ihzc/v8vcC8nop7X22DgK80LWjI/tP33 /cwrKNciBGqsoefFqKQMUyWDCOzhPGSeeXazLPue2jdzlqYGcvU/jWKrZOc/DeNS p7GwuiHOnjo0Z129k0sILXCchYyoUZkqd+pm7XL49o5jA4yoEuHKBlSYh6MqZTaU sN4A7vGVxBPoqk3aV7lLfzvh+vNdb/3sbwYMvSzDdDMW9eG+LxMNQ8JVZgWL3Dbx vU+0soFw6cZXwvhIlsfh2Mb22iW7PTmKKryGtTp7eaRDjCWk2Gz2o5/Z+xf+9s9F VKqH7fx5dB/9Azp7R6qpKCv1nX0hKJVBj/vfRQ3RdT7RsC6qWwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHCXnWmuhLS3B/ShF3ofEyWHedIFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWRkNTdmNjMtNGRkOC0z N2M3LWE2NzMtNGYxODg3YjBmNzVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUCyIA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACNL9qVk0ddhU4bEnYxo7+xlEDklHgzDQaaGqjCagTdgoHl8HAf6 38Zw4o81M2YhLmGKzTL6SEW2UIkQMl8bIMyaFJ8aJgIgNxQ0yMszCofLBDtjG/CP 2rOARU3pr6BtQNW2SO1pGp/DSmyIn3AYMmPwn2MOQ8c3qnawtR/Gw4ssyswc/BEy nTB3HMOdlJUbWpJa1t4DUSlGlPFYv5TrZIvjl4JdsjsK/vz79HyKrc0eNOjrRZBK NUs09FvNnJGWN2vhYP9zUHOTlTMXwgz2EexfHmjuNv0fZoohgBo5VIlEYLmjUYDC r6GGB0NDikcvzhFnv2W7RNkx/q5lp0xvuDI= -----END CERTIFICATE-----Generated at Sat Apr 26 16:00:09 2025 by rpki-client