$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1f81c87a-3dcf-3303-9af3-a97848bf2647.roa File: 1f81c87a-3dcf-3303-9af3-a97848bf2647.roa (raw, json) Hash identifier: E323cMvZFF/CYhIQ1Fs9VDPunBA4OLJOHpLSWVY/yn0= Subject key identifier: 81:F5:FC:E8:1E:57:F7:D5:BA:9E:7B:52:FA:C8:35:50:79:0D:6F:BF Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849754467EA75AA38B11B2219C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1f81c87a-3dcf-3303-9af3-a97848bf2647.roa Signing time: Tue 08 Apr 2025 13:00:59 +0000 ROA not before: Tue 08 Apr 2025 13:00:59 +0000 ROA not after: Mon 07 Jul 2025 13:00:59 +0000 asID: 20940 IP address blocks: 2600:1417:4000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:75:44:67:ea:75:aa:38:b1:1b:22:19:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 8 13:00:59 2025 GMT Not After : Jul 7 13:00:59 2025 GMT Subject: CN=9482e73f-cd83-4200-9769-2edfd2dda00d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:37:71:c9:dd:0a:ee:a7:80:88:4c:76:5c:18: 32:bf:86:5a:eb:27:ba:70:13:54:b1:18:ad:f1:b7: 33:b3:51:c1:6c:d3:58:46:dd:30:07:9a:a1:15:34: 87:dd:59:a2:0b:c8:e2:55:8e:74:d9:18:c6:2d:52: 70:fe:c2:ff:6f:fa:02:60:c9:d3:0d:b9:4e:f1:8a: 8b:93:e7:82:dd:5b:d9:1e:7a:2d:2a:41:c2:d6:ac: 0e:99:14:67:3c:d8:0f:df:b1:fb:40:1b:24:45:b4: a9:af:2a:6b:6a:53:e7:27:c3:09:0a:95:6f:0a:64: 29:d5:0f:1e:68:1f:4e:c0:4d:6d:cd:0d:a9:af:12: d8:40:85:36:cc:80:5a:89:2f:26:73:9c:dd:8e:b4: dd:20:1e:22:51:54:9c:9a:c7:83:18:e9:0c:07:9e: 63:40:1c:fd:6a:12:55:f2:b8:45:e9:d6:a0:d8:ff: 2e:8e:0f:d4:b1:61:16:4a:71:d9:64:52:11:27:a7: 81:b6:b1:08:33:a3:46:75:14:43:09:2b:b8:c2:05: 14:60:28:ec:ed:6c:77:f2:66:da:9f:c9:5b:9b:eb: 75:fc:10:86:01:a4:16:02:2c:f9:2d:ce:de:1e:cc: 91:f6:15:c8:4a:d5:e6:88:41:33:f9:55:99:00:ae: 4b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:F5:FC:E8:1E:57:F7:D5:BA:9E:7B:52:FA:C8:35:50:79:0D:6F:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1f81c87a-3dcf-3303-9af3-a97848bf2647.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1417:4000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:5b:7e:ca:05:75:aa:4f:ba:93:a5:c0:0f:be:2c:42:7a:b8: 99:5e:ee:6e:52:ee:ef:da:c5:00:b9:17:1f:ed:07:ed:6c:15: 04:71:aa:d5:82:df:bd:52:71:31:85:59:3b:7b:93:91:2e:86: d8:ad:1c:79:2b:86:20:c5:16:43:03:b4:05:8a:95:71:31:65: af:4c:ac:dc:4b:81:c6:95:d8:80:d3:ae:48:1d:61:4b:52:3b: c2:8e:ef:ac:9e:02:e1:cf:80:e5:db:30:98:53:fb:40:f2:3d: 66:6f:41:a2:5c:5d:d5:9c:6b:40:21:3f:d7:ed:91:91:a3:fb: 2b:af:89:99:9a:de:b7:97:fe:c1:16:15:5f:b5:4d:c0:bb:bc: 99:14:7e:9c:28:a7:97:3f:69:ca:5d:e6:16:b7:c7:4e:94:8a: b4:db:2d:ff:6d:59:af:97:33:4d:70:2d:ca:a2:6f:a8:0e:be: ad:6a:40:51:89:5d:49:5e:86:03:71:ff:bc:0b:c3:5a:c0:78: ad:af:c5:34:e0:33:a6:03:b8:b1:91:00:c9:cb:19:6d:1c:6f: b6:13:24:4f:9b:a4:bc:50:80:ec:73:b3:df:bc:16:ab:8a:cf: 06:52:88:87:66:f3:ce:16:fb:41:50:aa:4f:42:95:e5:3b:90: 70:b1:33:e5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEl1RGfqdao4sRsiGcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQwODEzMDA1OVoXDTI1MDcwNzEzMDA1OVowLzEtMCsGA1UEAxMk OTQ4MmU3M2YtY2Q4My00MjAwLTk3NjktMmVkZmQyZGRhMDBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTdxyd0K7qeAiEx2XBgyv4Za6ye6cBNUsRit 8bczs1HBbNNYRt0wB5qhFTSH3VmiC8jiVY502RjGLVJw/sL/b/oCYMnTDblO8YqL k+eC3VvZHnotKkHC1qwOmRRnPNgP37H7QBskRbSprypralPnJ8MJCpVvCmQp1Q8e aB9OwE1tzQ2prxLYQIU2zIBaiS8mc5zdjrTdIB4iUVScmseDGOkMB55jQBz9ahJV 8rhF6dag2P8ujg/UsWEWSnHZZFIRJ6eBtrEIM6NGdRRDCSu4wgUUYCjs7Wx38mba n8lbm+t1/BCGAaQWAiz5Lc7eHsyR9hXIStXmiEEz+VWZAK5LSQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIH1/OgeV/fVup57UvrINVB5DW+/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWY4MWM4N2EtM2RjZi0z MzAzLTlhZjMtYTk3ODQ4YmYyNjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUF0AA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIhbfsoFdapPupOlwA++LEJ6uJle7m5S7u/axQC5Fx/tB+1sFQRx qtWC371ScTGFWTt7k5EuhtitHHkrhiDFFkMDtAWKlXExZa9MrNxLgcaV2IDTrkgd YUtSO8KO76yeAuHPgOXbMJhT+0DyPWZvQaJcXdWca0AhP9ftkZGj+yuviZma3reX /sEWFV+1TcC7vJkUfpwop5c/acpd5ha3x06UirTbLf9tWa+XM01wLcqib6gOvq1q QFGJXUlehgNx/7wLw1rAeK2vxTTgM6YDuLGRAMnLGW0cb7YTJE+bpLxQgOxzs9+8 FquKzwZSiIdm884W+0FQqk9CleU7kHCxM+U= -----END CERTIFICATE-----Generated at Sun Apr 27 03:03:29 2025 by rpki-client