$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/29118a57-a984-33e5-b70d-544407bb1794.roa File: 29118a57-a984-33e5-b70d-544407bb1794.roa (raw, json) Hash identifier: fzpUuh2YS1tdMK+HqjMpwwdgAcENmvgJ20CAHx6Ky8I= Subject key identifier: FD:89:1C:41:89:64:07:16:BB:9F:B2:DC:17:54:CC:68:DF:66:C1:9C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858498B99D483020F3E23C5D6BE80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/29118a57-a984-33e5-b70d-544407bb1794.roa Signing time: Wed 16 Apr 2025 13:01:01 +0000 ROA not before: Wed 16 Apr 2025 13:01:01 +0000 ROA not after: Tue 15 Jul 2025 13:01:01 +0000 asID: 35994 IP address blocks: 2600:141b:3800::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8b:99:d4:83:02:0f:3e:23:c5:d6:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 16 13:01:01 2025 GMT Not After : Jul 15 13:01:01 2025 GMT Subject: CN=666507b2-3d61-4f45-a241-3261e58b2e21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:df:b9:32:a1:a8:9d:c5:70:bf:be:e2:c7:50: de:29:4c:d0:6e:05:1f:1a:67:e0:31:0b:cf:e8:99: 8b:d7:f5:c3:86:53:61:42:2f:3f:42:76:4d:89:31: e8:d3:ea:d4:f7:71:6b:f2:e3:f5:b3:43:37:3b:14: 05:86:5f:c1:7d:30:f5:93:9b:4a:3c:ab:d3:90:7c: 5a:6e:24:36:d8:a0:b1:49:a7:72:02:3d:0b:16:7b: 75:46:07:9a:5e:74:da:34:b2:c6:4f:eb:44:f1:00: a7:4c:4d:90:9c:e5:9e:03:2a:a4:b5:85:15:0f:40: 21:dd:14:0a:59:aa:e4:79:9c:18:8d:a8:f5:0f:1e: aa:b8:1b:e2:f0:00:ef:90:eb:b4:0a:49:43:ce:1a: 24:95:34:02:ad:ab:39:0e:ff:4e:eb:5a:63:20:94: 7b:b7:00:90:1d:e4:ad:14:09:65:e4:ed:32:e7:88: f5:50:51:8f:11:f4:88:66:35:4c:d6:35:bd:27:1a: 31:74:e3:be:97:a9:95:ff:84:4c:51:59:dc:a1:17: 3d:e0:02:d8:67:ec:1b:d1:b2:32:aa:55:50:2c:6c: 90:0b:11:d1:58:28:fc:9b:07:e6:03:1e:e7:d6:9a: d0:7a:2d:c9:f6:27:d0:18:b3:bf:d9:4a:de:b4:2a: a3:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:89:1C:41:89:64:07:16:BB:9F:B2:DC:17:54:CC:68:DF:66:C1:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/29118a57-a984-33e5-b70d-544407bb1794.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:141b:3800::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:92:65:31:8b:7d:ab:13:96:10:80:cd:93:93:c0:59:ce:3f: 57:76:a1:9c:6a:63:a8:a2:cd:6d:0b:0e:e6:24:3e:b4:59:02: fd:3c:68:90:bb:91:7b:27:03:b0:0d:9b:e6:96:61:ef:d0:d6: 7e:3b:3a:55:4b:6d:75:7b:60:b4:15:60:d1:05:68:ef:ff:20: 3c:47:2f:c0:da:02:94:14:cc:ef:92:f9:cc:c9:39:13:9d:0b: 73:a6:8b:fc:13:50:3b:95:0a:36:be:b3:0c:7e:16:f9:30:86: 5b:9b:0e:76:9e:15:1a:41:64:48:ff:d8:7e:fd:da:40:25:98: c9:93:99:78:6f:89:20:20:20:3f:c3:3f:1f:92:6e:04:9a:d7: 8a:b5:9a:60:2a:c7:43:cd:4b:eb:fa:ec:cc:39:b9:3c:8b:70: 77:43:f7:77:80:47:7f:cd:60:12:91:02:2d:79:b0:fc:51:b7: f3:35:78:45:73:5e:71:7d:84:91:08:bd:d3:ae:e1:55:4a:b3: 82:25:f1:96:79:ff:aa:c2:ef:a4:b6:9e:01:fc:81:98:3f:eb: 2c:93:c9:2d:5d:f3:08:13:ab:5f:0a:b3:74:b5:68:1c:51:df: 90:04:09:14:80:49:c4:78:4d:20:df:d2:3e:52:7f:38:fc:51: c1:8b:90:e7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmLmdSDAg8+I8XWvoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQxNjEzMDEwMVoXDTI1MDcxNTEzMDEwMVowLzEtMCsGA1UEAxMk NjY2NTA3YjItM2Q2MS00ZjQ1LWEyNDEtMzI2MWU1OGIyZTIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9+5MqGoncVwv77ix1DeKUzQbgUfGmfgMQvP 6JmL1/XDhlNhQi8/QnZNiTHo0+rU93Fr8uP1s0M3OxQFhl/BfTD1k5tKPKvTkHxa biQ22KCxSadyAj0LFnt1RgeaXnTaNLLGT+tE8QCnTE2QnOWeAyqktYUVD0Ah3RQK WarkeZwYjaj1Dx6quBvi8ADvkOu0CklDzhoklTQCras5Dv9O61pjIJR7twCQHeSt FAll5O0y54j1UFGPEfSIZjVM1jW9JxoxdOO+l6mV/4RMUVncoRc94ALYZ+wb0bIy qlVQLGyQCxHRWCj8mwfmAx7n1prQei3J9ifQGLO/2UretCqjHwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFP2JHEGJZAcWu5+y3BdUzGjfZsGcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjkxMThhNTctYTk4NC0z M2U1LWI3MGQtNTQ0NDA3YmIxNzk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUGzgA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH2SZTGLfasTlhCAzZOTwFnOP1d2oZxqY6iizW0LDuYkPrRZAv08 aJC7kXsnA7ANm+aWYe/Q1n47OlVLbXV7YLQVYNEFaO//IDxHL8DaApQUzO+S+czJ OROdC3Omi/wTUDuVCja+swx+FvkwhlubDnaeFRpBZEj/2H792kAlmMmTmXhviSAg ID/DPx+SbgSa14q1mmAqx0PNS+v67Mw5uTyLcHdD93eAR3/NYBKRAi15sPxRt/M1 eEVzXnF9hJEIvdOu4VVKs4Il8ZZ5/6rC76S2ngH8gZg/6yyTyS1d8wgTq18Ks3S1 aBxR35AECRSAScR4TSDf0j5Sfzj8UcGLkOc= -----END CERTIFICATE-----Generated at Sun Apr 27 21:33:24 2025 by rpki-client