$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3444b7f1-2a45-3533-a47f-1343fa248cca.roa File: 3444b7f1-2a45-3533-a47f-1343fa248cca.roa (raw, json) Hash identifier: tKh8CH+3KxC0fybUSxBz/aW2FDXri0cP7pMKwXFKwiE= Subject key identifier: B0:C8:93:22:5A:B4:05:CB:0C:47:8A:19:1B:6A:5A:C7:83:7A:D9:7A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849806F398EE8AA637D782BF700 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3444b7f1-2a45-3533-a47f-1343fa248cca.roa Signing time: Sat 12 Apr 2025 13:01:01 +0000 ROA not before: Sat 12 Apr 2025 13:01:01 +0000 ROA not after: Fri 11 Jul 2025 13:01:01 +0000 asID: 20940 IP address blocks: 2600:1407:c800::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:80:6f:39:8e:e8:aa:63:7d:78:2b:f7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 12 13:01:01 2025 GMT Not After : Jul 11 13:01:01 2025 GMT Subject: CN=598dfbd4-e559-48c5-b135-70493614126b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:1d:e1:b8:0b:dc:15:e9:e5:21:19:c0:a4:93: b5:22:e7:30:c8:be:b5:ba:ee:de:f2:0c:93:11:0f: 65:46:cb:37:69:b0:d9:56:f3:a5:58:f1:fd:e1:1c: ec:05:4e:c1:59:31:b4:e4:64:cf:f2:57:b4:6a:29: bf:56:71:8b:ff:c5:6c:43:cd:81:8a:35:0a:9d:d7: 2a:6f:8b:e4:e6:4b:b4:9f:57:4d:c2:f6:98:7a:ff: a5:0e:12:d4:95:1c:d9:e7:a2:87:15:2e:9a:82:44: 9b:9e:cb:e3:97:7a:ca:80:09:d9:0c:0e:fc:38:ef: 7e:05:d4:22:c6:44:7e:db:aa:7a:e8:cc:f2:f2:b5: 41:d1:12:f7:91:81:0f:5f:90:eb:64:59:33:d1:80: b9:49:94:38:cf:0b:f6:da:9d:b5:c6:d1:07:91:47: 9d:36:29:1e:6b:2b:9a:49:9b:80:91:c2:29:5f:b3: 5c:39:29:65:52:72:ac:b0:b3:b8:23:54:90:46:97: 6e:78:f8:2f:28:5a:5d:93:b6:39:d0:3e:60:ed:6e: d8:88:0e:5e:63:93:08:cd:12:ad:be:d2:88:46:73: 7c:21:24:36:42:37:76:4c:70:cc:10:15:43:8a:b6: 5c:19:72:e5:64:3d:78:8f:66:d2:2f:34:b4:9f:86: a5:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:C8:93:22:5A:B4:05:CB:0C:47:8A:19:1B:6A:5A:C7:83:7A:D9:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3444b7f1-2a45-3533-a47f-1343fa248cca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1407:c800::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:cd:da:6f:8a:28:9a:dc:1e:a2:2b:d5:05:99:c7:4d:7c:08: 7a:d4:ef:c1:11:4a:bf:f8:4b:42:1a:c2:dc:9f:90:82:99:c9: fd:90:ac:bf:97:f5:74:5c:29:06:e0:4d:e2:ff:e5:05:2e:20: f7:78:36:eb:05:9d:fa:09:0e:f5:d4:6b:3c:58:b2:56:43:84: ea:fd:0d:54:76:2c:f8:54:c6:84:73:ff:50:5b:6c:02:aa:e3: e5:fb:51:60:50:3c:b0:ce:be:cc:c5:dc:aa:fd:88:e2:50:2f: 96:72:94:68:1f:c2:e8:a8:09:3e:8d:b4:be:f8:84:44:4e:5d: 3a:d7:d1:2e:9d:46:b0:7d:1e:92:15:55:35:1e:f3:ab:e8:96: 54:8f:c2:85:2e:a1:64:46:e4:20:5a:93:f0:68:18:54:83:e9: 17:25:11:9e:e8:ac:10:f7:5d:d1:9e:11:3e:b1:fe:f9:14:40: e2:f9:b2:0d:d1:9e:4e:89:7f:c6:8e:3c:cd:98:12:7f:1c:18: 21:2e:5a:06:b2:87:9e:70:47:67:42:6d:8d:c4:7e:b6:eb:69: 54:89:cb:90:66:3b:b8:57:8b:ec:b2:11:57:ed:ec:84:71:ae: 8c:02:b5:45:df:d2:6f:83:52:e6:ba:f7:53:25:d2:f8:0d:31: 89:d3:f9:bf -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmAbzmO6KpjfXgr9wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQxMjEzMDEwMVoXDTI1MDcxMTEzMDEwMVowLzEtMCsGA1UEAxMk NTk4ZGZiZDQtZTU1OS00OGM1LWIxMzUtNzA0OTM2MTQxMjZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiR3huAvcFenlIRnApJO1IucwyL61uu7e8gyT EQ9lRss3abDZVvOlWPH94RzsBU7BWTG05GTP8le0aim/VnGL/8VsQ82BijUKndcq b4vk5ku0n1dNwvaYev+lDhLUlRzZ56KHFS6agkSbnsvjl3rKgAnZDA78OO9+BdQi xkR+26p66Mzy8rVB0RL3kYEPX5DrZFkz0YC5SZQ4zwv22p21xtEHkUedNikeayua SZuAkcIpX7NcOSllUnKssLO4I1SQRpduePgvKFpdk7Y50D5g7W7YiA5eY5MIzRKt vtKIRnN8ISQ2Qjd2THDMEBVDirZcGXLlZD14j2bSLzS0n4alAwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLDIkyJatAXLDEeKGRtqWseDetl6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzQ0NGI3ZjEtMmE0NS0z NTMzLWE0N2YtMTM0M2ZhMjQ4Y2NhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUB8gA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHjN2m+KKJrcHqIr1QWZx018CHrU78ERSr/4S0IawtyfkIKZyf2Q rL+X9XRcKQbgTeL/5QUuIPd4NusFnfoJDvXUazxYslZDhOr9DVR2LPhUxoRz/1Bb bAKq4+X7UWBQPLDOvszF3Kr9iOJQL5ZylGgfwuioCT6NtL74hEROXTrX0S6dRrB9 HpIVVTUe86vollSPwoUuoWRG5CBak/BoGFSD6RclEZ7orBD3XdGeET6x/vkUQOL5 sg3Rnk6Jf8aOPM2YEn8cGCEuWgayh55wR2dCbY3EfrbraVSJy5BmO7hXi+yyEVft 7IRxrowCtUXf0m+DUua691Ml0vgNMYnT+b8= -----END CERTIFICATE-----Generated at Sat Apr 26 18:03:42 2025 by rpki-client