$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/21f6748d-eade-3264-ae61-62ea7b2ef882.roa File: 21f6748d-eade-3264-ae61-62ea7b2ef882.roa (raw, json) Hash identifier: LQ90vUl6mkwSr9q6qutIfrzAxRdyV/szu4ekHX64bcc= Subject key identifier: C1:ED:5D:E1:83:B3:DE:EC:52:18:D1:74:B8:9A:F8:13:2E:0D:34:65 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849806F376C7446FBEE61548A80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/21f6748d-eade-3264-ae61-62ea7b2ef882.roa Signing time: Sat 12 Apr 2025 13:01:01 +0000 ROA not before: Sat 12 Apr 2025 13:01:01 +0000 ROA not after: Fri 11 Jul 2025 13:01:01 +0000 asID: 20940 IP address blocks: 2600:1400:f000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:80:6f:37:6c:74:46:fb:ee:61:54:8a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 12 13:01:01 2025 GMT Not After : Jul 11 13:01:01 2025 GMT Subject: CN=6afe3382-04ff-4c11-9124-f30c7e06af15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:64:b8:58:85:10:6b:71:62:1e:3b:2f:4d:45: 39:d1:e7:37:c5:ee:fe:0b:16:2e:15:eb:5d:fa:b9: 06:f5:d2:fb:77:d1:0d:de:9e:d6:79:b4:b6:d8:08: e9:f2:7a:4b:36:8e:64:04:7d:8f:0f:e5:8b:fd:34: ac:53:ac:fe:8f:58:39:c0:6d:1e:3e:47:bb:b8:a3: 20:03:3e:25:bf:5e:d2:54:9b:0b:d7:6c:48:ac:30: 4a:28:a5:26:94:9f:5c:60:0f:2a:af:fb:8a:87:fa: 6a:ab:31:76:46:76:5c:04:ed:df:34:ae:55:8f:35: 5e:63:fc:a5:ec:f7:1d:1b:93:29:9b:c7:ae:5a:7b: 8e:ca:65:b6:69:20:ee:5f:d4:29:40:3d:38:f4:c0: 10:71:5b:72:36:f7:80:21:61:86:64:b4:d8:35:4d: ae:9b:3c:cb:7f:dc:2e:a8:ef:0f:e6:af:33:63:30: 47:77:3c:f6:a5:a1:ba:09:3a:d9:95:80:7a:07:a7: f9:7b:55:f9:2b:46:c3:39:69:6d:2b:d1:68:9d:6c: 6e:b0:24:76:59:5e:8b:1b:3e:db:5a:ec:58:f2:85: e5:33:19:be:22:5b:26:52:60:c8:ec:b4:e2:13:c2: fe:30:76:80:77:96:fc:1f:9c:cf:8c:4a:b0:fd:3b: 73:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:ED:5D:E1:83:B3:DE:EC:52:18:D1:74:B8:9A:F8:13:2E:0D:34:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/21f6748d-eade-3264-ae61-62ea7b2ef882.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1400:f000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:28:57:62:75:50:5c:91:95:8e:49:42:4b:7f:a7:4c:11:a3: 17:a7:74:4b:6c:47:31:08:df:7c:be:15:93:09:4b:9d:48:6e: cb:e1:3c:64:97:d9:1f:38:4f:e8:6f:21:6b:22:61:8e:eb:06: cd:63:57:fd:ef:1b:34:61:a7:cf:e2:af:b5:cb:ee:01:ce:36: 0e:37:3b:06:13:7e:e8:ec:8e:07:0e:6e:3e:a7:2b:ec:08:15: 6a:85:58:04:fc:0d:c1:1b:dc:be:55:71:67:c3:31:7e:4a:b3: 15:dc:9f:7f:04:fd:10:ce:53:c2:00:58:92:8f:06:ea:a5:ca: ba:fd:48:62:ac:6c:76:e7:31:47:38:a0:fe:f9:40:f8:86:88: 94:19:32:6a:28:ac:cf:e9:76:60:d3:98:27:cb:7c:b9:5a:6b: 67:18:5e:f7:4d:f4:9f:1e:b8:7a:88:33:4b:43:25:75:7f:aa: e2:6f:b7:31:5d:ad:6a:d8:7a:0a:ed:c1:bd:33:ee:90:b0:9e: 04:f8:ee:5a:87:d8:f9:31:45:3b:cd:2e:6a:d2:5e:2f:18:3d: 06:0f:20:c6:af:e3:12:88:ea:a5:37:b0:83:cd:2c:b4:a4:c8: fc:6a:ad:d7:29:df:4b:b9:7a:69:07:db:f1:f2:45:a1:34:47: 96:11:56:62 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmAbzdsdEb77mFUioAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQxMjEzMDEwMVoXDTI1MDcxMTEzMDEwMVowLzEtMCsGA1UEAxMk NmFmZTMzODItMDRmZi00YzExLTkxMjQtZjMwYzdlMDZhZjE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgGS4WIUQa3FiHjsvTUU50ec3xe7+CxYuFetd +rkG9dL7d9EN3p7WebS22Ajp8npLNo5kBH2PD+WL/TSsU6z+j1g5wG0ePke7uKMg Az4lv17SVJsL12xIrDBKKKUmlJ9cYA8qr/uKh/pqqzF2RnZcBO3fNK5VjzVeY/yl 7PcdG5Mpm8euWnuOymW2aSDuX9QpQD049MAQcVtyNveAIWGGZLTYNU2umzzLf9wu qO8P5q8zYzBHdzz2paG6CTrZlYB6B6f5e1X5K0bDOWltK9FonWxusCR2WV6LGz7b WuxY8oXlMxm+IlsmUmDI7LTiE8L+MHaAd5b8H5zPjEqw/TtzjwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMHtXeGDs97sUhjRdLia+BMuDTRlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjFmNjc0OGQtZWFkZS0z MjY0LWFlNjEtNjJlYTdiMmVmODgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUAPAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAwoV2J1UFyRlY5JQkt/p0wRoxendEtsRzEI33y+FZMJS51Ibsvh PGSX2R84T+hvIWsiYY7rBs1jV/3vGzRhp8/ir7XL7gHONg43OwYTfujsjgcObj6n K+wIFWqFWAT8DcEb3L5VcWfDMX5KsxXcn38E/RDOU8IAWJKPBuqlyrr9SGKsbHbn MUc4oP75QPiGiJQZMmoorM/pdmDTmCfLfLlaa2cYXvdN9J8euHqIM0tDJXV/quJv tzFdrWrYegrtwb0z7pCwngT47lqH2PkxRTvNLmrSXi8YPQYPIMav4xKI6qU3sIPN LLSkyPxqrdcp30u5emkH2/HyRaE0R5YRVmI= -----END CERTIFICATE-----Generated at Sat Apr 26 19:22:50 2025 by rpki-client