$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1fc59412-89a8-3102-a0b6-d71eed6728cb.roa File: 1fc59412-89a8-3102-a0b6-d71eed6728cb.roa (raw, json) Hash identifier: XNZo8tcXOBO9+qKyPZA/8Gwf4Pd1GFwJJjszFGY3Q6E= Subject key identifier: 1E:0B:20:F5:22:13:0F:76:C0:87:97:EA:E4:59:93:9D:69:E0:31:F0 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849780F17DF874810CA895FB200 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1fc59412-89a8-3102-a0b6-d71eed6728cb.roa Signing time: Wed 09 Apr 2025 13:01:01 +0000 ROA not before: Wed 09 Apr 2025 13:01:01 +0000 ROA not after: Tue 08 Jul 2025 13:01:01 +0000 asID: 20940 IP address blocks: 2600:141c:7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:78:0f:17:df:87:48:10:ca:89:5f:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 9 13:01:01 2025 GMT Not After : Jul 8 13:01:01 2025 GMT Subject: CN=c23a3a76-cab9-491a-8c05-619378f5d20b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:57:64:61:ab:46:a4:d9:e1:44:32:76:66:dc: 84:08:c0:fa:a1:f5:de:fa:cf:d4:0b:58:a1:06:02: 58:b0:11:d3:17:fc:7b:e4:bc:7d:a3:35:8f:2e:94: a4:e5:ce:c3:0a:1b:d2:ed:e8:b9:f4:b0:63:64:bc: ba:24:c7:02:a1:42:06:66:1a:a6:31:21:09:26:79: 98:c1:ff:22:0b:40:46:6b:e4:00:45:a0:7a:24:40: ca:10:6b:1b:b5:5a:ef:a5:12:30:47:68:98:ac:ab: 4c:a9:76:9a:02:c0:8a:a3:a5:39:3a:8f:d5:15:12: 74:da:46:88:bf:be:ee:17:ec:27:7c:90:42:14:20: c7:b3:b0:60:56:c1:00:4b:5c:b6:c9:c2:7c:55:99: 9f:42:e9:29:5e:1e:3e:af:66:5b:5f:83:3b:ea:7a: d4:b9:ec:33:bd:a6:dd:6a:a0:91:51:a4:01:a5:2b: 87:ed:a2:e4:cd:cd:b0:1e:4a:5c:52:d9:8a:a3:a6: 92:c2:2f:72:31:7a:1f:b1:73:ab:88:63:32:f4:2e: a9:11:47:f7:79:47:33:bb:30:49:1e:43:0c:5d:f6: 12:6f:65:15:58:62:8d:c1:49:dc:44:6d:11:10:0a: 14:57:b6:97:9d:bb:2b:b2:78:4f:da:55:6a:a0:3f: d9:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:0B:20:F5:22:13:0F:76:C0:87:97:EA:E4:59:93:9D:69:E0:31:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1fc59412-89a8-3102-a0b6-d71eed6728cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:141c:7::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:de:9e:59:73:9b:bb:e9:ca:f9:96:7d:e8:05:10:0c:41:d9: d0:64:5e:cc:9c:a3:b3:9b:27:0c:5f:0f:25:b3:45:92:90:a6: dc:42:75:87:87:bf:3d:6f:1a:8f:74:50:fe:39:b1:5d:da:d4: f7:8c:6b:c4:b5:a6:10:05:4a:02:71:d4:19:30:a9:0e:de:12: 2d:54:8c:d4:7e:3e:18:1d:bc:57:b8:5d:16:f7:d5:b8:3e:3c: 3a:f3:03:aa:8f:60:ab:70:5d:45:34:ef:dd:9c:4b:a0:09:1b: 5b:d2:d5:99:a6:06:04:d1:16:10:c6:c0:7b:39:c7:92:ac:42: 34:7e:b5:05:01:c1:1b:31:f5:d4:68:36:a0:0c:84:bd:b7:5f: 61:6f:88:af:f5:15:71:75:b4:16:13:7f:3d:6f:4a:c7:13:57: 48:d6:3b:ea:1c:68:8a:34:59:c1:e2:b3:2c:a6:b4:d9:06:fb: e9:d3:35:02:fd:e9:0d:2e:ed:79:7b:07:60:f4:a2:06:75:7f: 5c:eb:c5:fd:a1:94:c3:39:68:bf:0e:94:e7:d2:b2:a3:eb:71: 44:8b:59:f4:e7:58:49:40:e4:40:47:30:dc:26:ae:da:45:73: 5f:ab:5e:4e:26:e6:ca:8b:21:52:66:d2:fd:26:c7:4c:30:88: ad:a2:ee:5f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEl4Dxffh0gQyolfsgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQwOTEzMDEwMVoXDTI1MDcwODEzMDEwMVowLzEtMCsGA1UEAxMk YzIzYTNhNzYtY2FiOS00OTFhLThjMDUtNjE5Mzc4ZjVkMjBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwldkYatGpNnhRDJ2ZtyECMD6ofXe+s/UC1ih BgJYsBHTF/x75Lx9ozWPLpSk5c7DChvS7ei59LBjZLy6JMcCoUIGZhqmMSEJJnmY wf8iC0BGa+QARaB6JEDKEGsbtVrvpRIwR2iYrKtMqXaaAsCKo6U5Oo/VFRJ02kaI v77uF+wnfJBCFCDHs7BgVsEAS1y2ycJ8VZmfQukpXh4+r2ZbX4M76nrUuewzvabd aqCRUaQBpSuH7aLkzc2wHkpcUtmKo6aSwi9yMXofsXOriGMy9C6pEUf3eUczuzBJ HkMMXfYSb2UVWGKNwUncRG0REAoUV7aXnbsrsnhP2lVqoD/ZJwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFB4LIPUiEw92wIeX6uRZk51p4DHwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWZjNTk0MTItODlhOC0z MTAyLWEwYjYtZDcxZWVkNjcyOGNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUHAAH MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACTenllzm7vpyvmWfegFEAxB2dBkXsyco7ObJwxfDyWzRZKQptxC dYeHvz1vGo90UP45sV3a1PeMa8S1phAFSgJx1BkwqQ7eEi1UjNR+PhgdvFe4XRb3 1bg+PDrzA6qPYKtwXUU0792cS6AJG1vS1ZmmBgTRFhDGwHs5x5KsQjR+tQUBwRsx 9dRoNqAMhL23X2FviK/1FXF1tBYTfz1vSscTV0jWO+ocaIo0WcHisyymtNkG++nT NQL96Q0u7Xl7B2D0ogZ1f1zrxf2hlMM5aL8OlOfSsqPrcUSLWfTnWElA5EBHMNwm rtpFc1+rXk4m5sqLIVJm0v0mx0wwiK2i7l8= -----END CERTIFICATE-----Generated at Sat Apr 26 19:05:17 2025 by rpki-client