$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/22cf4cea-4071-33f6-88f4-9702a2234fd1.roa File: 22cf4cea-4071-33f6-88f4-9702a2234fd1.roa (raw, json) Hash identifier: 8dLoCvXjRhG8zhDCZfXx5bVf8H1WaCP95miId83LHbc= Subject key identifier: 79:8D:45:41:13:2C:A0:EF:6F:36:85:37:CE:35:65:12:11:60:38:46 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584988CF6D7BEC523A1448207480 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/22cf4cea-4071-33f6-88f4-9702a2234fd1.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 35994 IP address blocks: 2600:1406:600::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:6d:7b:ec:52:3a:14:48:20:74:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=1027d8ae-2232-4351-8301-fc33005f01ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a7:21:b2:27:50:74:cd:59:c4:f2:81:8e:c7: eb:1d:ad:72:70:1a:48:dd:2f:fe:3c:49:53:0b:e2: 1a:0d:42:8a:e2:7b:aa:c7:10:cd:93:ee:d7:3a:c2: fa:8d:ca:a8:17:36:d5:9c:85:e3:75:71:48:ad:b0: 93:7d:2b:48:78:bc:91:00:c5:9a:19:f6:4b:23:5d: 48:f6:2b:80:b9:56:17:bd:d6:57:68:16:80:c1:90: 57:88:ce:92:fa:6c:53:5e:9c:06:b4:19:74:ef:67: e9:ca:dd:e9:be:04:93:18:cc:6d:60:e7:8c:23:c8: 54:4a:f8:4d:0f:47:34:4d:0d:f4:c1:68:ea:83:c7: d4:7f:b3:a3:22:8f:d8:ed:4a:a0:6f:e2:c2:80:f8: 06:08:f6:71:9d:e5:41:48:21:6e:8e:7e:30:10:63: ad:80:b8:6e:ad:83:21:4a:f2:9f:30:70:de:07:b1: a3:86:46:a5:2c:11:c1:12:ea:2b:d8:df:6e:7d:56: 88:26:1c:a6:6e:f8:11:5f:5d:d9:12:d0:d1:27:b9: 23:08:8c:2c:6d:f7:1e:1d:60:e6:4b:09:e4:23:e8: 15:cd:f6:0e:ab:db:40:15:d2:93:a3:94:d0:9d:00: 39:4b:91:ff:72:e9:33:47:44:76:fd:00:dc:df:1a: a2:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:8D:45:41:13:2C:A0:EF:6F:36:85:37:CE:35:65:12:11:60:38:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/22cf4cea-4071-33f6-88f4-9702a2234fd1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1406:600::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:04:60:1d:f6:f7:91:22:c1:b0:15:d4:00:88:68:e6:8b:ac: 06:16:e6:96:88:97:53:96:05:e9:16:81:ee:ad:43:a8:a4:67: 34:48:ec:c9:a6:d3:a7:99:1a:08:33:65:a9:2f:16:3a:7a:d2: 7c:c7:a3:d6:e9:27:63:7c:d6:b5:d0:e7:f8:b2:65:3c:fa:d5: 41:8d:9f:28:6a:6e:5b:b2:b6:ec:7e:c6:63:ae:47:02:eb:60: b5:56:f2:3a:55:c2:71:d3:38:ce:10:54:9d:27:61:1b:46:ef: 4a:97:73:56:6c:a7:5e:c6:a8:c0:e1:86:20:91:53:a7:9a:0e: d7:8e:ed:e3:6d:7c:26:bd:1b:a1:e0:b4:f1:b6:54:58:b0:e3: 7c:89:a5:7c:a7:5a:c0:c0:4c:2c:1b:65:b8:bb:4d:6e:43:85: dc:53:d2:79:5c:06:5c:97:b5:ba:7e:04:cf:d4:7f:3c:32:04: 19:b2:55:c0:ec:7e:f1:e2:86:49:42:2a:85:1e:c5:ce:f9:f5: 13:f6:3a:69:8e:61:08:42:2d:81:dd:23:5a:90:00:d5:c2:a2: 44:60:7c:28:ec:dd:1a:a0:83:5d:a3:8f:29:d8:08:ec:b3:0b: 94:8b:21:00:a2:6a:c6:8d:8f:9c:fb:59:b4:fe:e9:76:bd:56: dc:15:66:13 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmIz2177FI6FEggdIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk MTAyN2Q4YWUtMjIzMi00MzUxLTgzMDEtZmMzMzAwNWYwMWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6chsidQdM1ZxPKBjsfrHa1ycBpI3S/+PElT C+IaDUKK4nuqxxDNk+7XOsL6jcqoFzbVnIXjdXFIrbCTfStIeLyRAMWaGfZLI11I 9iuAuVYXvdZXaBaAwZBXiM6S+mxTXpwGtBl072fpyt3pvgSTGMxtYOeMI8hUSvhN D0c0TQ30wWjqg8fUf7OjIo/Y7Uqgb+LCgPgGCPZxneVBSCFujn4wEGOtgLhurYMh SvKfMHDeB7GjhkalLBHBEuor2N9ufVaIJhymbvgRX13ZEtDRJ7kjCIwsbfceHWDm SwnkI+gVzfYOq9tAFdKTo5TQnQA5S5H/cukzR0R2/QDc3xqiFwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHmNRUETLKDvbzaFN841ZRIRYDhGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjJjZjRjZWEtNDA3MS0z M2Y2LTg4ZjQtOTcwMmEyMjM0ZmQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUBgYA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHcEYB3295EiwbAV1ACIaOaLrAYW5paIl1OWBekWge6tQ6ikZzRI 7Mmm06eZGggzZakvFjp60nzHo9bpJ2N81rXQ5/iyZTz61UGNnyhqbluytux+xmOu RwLrYLVW8jpVwnHTOM4QVJ0nYRtG70qXc1Zsp17GqMDhhiCRU6eaDteO7eNtfCa9 G6HgtPG2VFiw43yJpXynWsDATCwbZbi7TW5DhdxT0nlcBlyXtbp+BM/UfzwyBBmy VcDsfvHihklCKoUexc759RP2OmmOYQhCLYHdI1qQANXCokRgfCjs3Rqgg12jjynY COyzC5SLIQCiasaNj5z7WbT+6Xa9VtwVZhM= -----END CERTIFICATE-----Generated at Sun Apr 27 11:23:07 2025 by rpki-client