$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/353a0bb9-f831-3b61-a76c-945e0d03ce8e.roa File: 353a0bb9-f831-3b61-a76c-945e0d03ce8e.roa (raw, json) Hash identifier: v2sUCzB7yvRl/B3a/6B2GwZ7eaA0slttZi4xczGDTc8= Subject key identifier: DE:12:C0:F5:86:2D:B7:1A:E7:97:C2:F0:CC:D7:9E:F1:BA:FA:16:A7 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858497544666E777AF846235C4280 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/353a0bb9-f831-3b61-a76c-945e0d03ce8e.roa Signing time: Tue 08 Apr 2025 13:00:59 +0000 ROA not before: Tue 08 Apr 2025 13:00:59 +0000 ROA not after: Mon 07 Jul 2025 13:00:59 +0000 asID: 20940 IP address blocks: 2600:140f:7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:75:44:66:6e:77:7a:f8:46:23:5c:42:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 8 13:00:59 2025 GMT Not After : Jul 7 13:00:59 2025 GMT Subject: CN=612f3983-b4c9-41d7-8a69-deba410f47ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:80:58:15:5a:5e:96:10:a1:84:7c:81:30:92: b1:73:95:43:57:99:5d:88:ac:b9:6e:4a:a1:61:cf: 03:07:d0:33:ad:84:a1:f7:32:76:85:91:f4:0b:dd: 18:df:b0:1a:ad:26:e5:08:47:19:a6:0b:ae:ee:e5: be:3e:7b:d8:2e:02:66:13:ba:07:d2:ad:af:57:8d: 37:26:1b:5d:ec:14:41:a1:86:b4:b9:3d:cb:1c:ce: e4:7d:c8:55:12:34:4a:0b:66:5d:37:17:16:27:4c: 3f:09:12:17:16:fc:bf:a5:c6:62:ab:43:35:c0:5e: 25:a0:8a:d8:75:33:25:f0:9e:97:6f:fd:7f:01:2a: f3:be:ee:5b:3a:3b:47:08:e1:76:2a:ec:dc:68:73: 22:1e:0e:e8:5e:fb:78:e1:b6:6b:56:07:35:1d:62: 4f:64:f3:71:4e:32:51:ff:e2:93:9f:27:87:be:6b: f8:fe:4d:39:17:1b:1f:8f:fd:99:cc:73:c6:9b:53: ac:13:18:f7:88:66:0b:7d:b8:36:d2:6e:05:dd:b0: 26:9f:20:ab:bd:75:00:f7:10:c2:cd:92:f4:91:b6: ed:21:0c:1a:6d:d7:18:b6:e7:2b:2e:0b:71:09:bf: 59:64:40:74:ae:3c:83:cd:84:cc:63:9e:d7:6a:48: 37:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:12:C0:F5:86:2D:B7:1A:E7:97:C2:F0:CC:D7:9E:F1:BA:FA:16:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/353a0bb9-f831-3b61-a76c-945e0d03ce8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:140f:7::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:ea:9d:a4:fc:d1:35:d1:ae:48:b6:6a:b6:d9:09:16:ca:50: c4:26:59:af:d4:ac:6e:56:25:fb:ca:7a:27:18:5c:20:f5:67: 1e:5e:24:b9:00:3a:a0:8e:65:d7:fe:44:ec:fa:61:2a:9a:91: 1c:7b:af:ec:e3:bf:90:51:18:db:71:a8:2e:bf:89:77:37:6c: 20:aa:b8:9a:56:4d:78:d1:8d:58:c9:81:ee:44:66:89:94:10: 9f:4c:13:08:c9:b5:07:db:39:c4:e4:ab:8a:ec:af:0b:c4:14: 16:1c:7b:15:b8:59:d4:63:b4:b2:69:3c:e0:d9:69:8e:bd:14: 53:98:1f:a1:bf:ee:89:36:36:aa:59:5d:9e:2d:bd:1e:3e:33: 8c:e9:03:8a:79:dc:9c:3c:14:f4:db:a1:a5:e5:27:78:9b:94: 3a:63:34:cd:4f:cf:45:08:16:67:aa:d3:c7:0a:10:94:d1:34: d4:cb:df:03:67:e4:34:30:88:07:5d:cc:94:ca:b0:b2:12:f9: f1:eb:45:fb:4b:62:15:b3:2e:8e:15:1c:31:a3:f9:f4:e9:58: 94:3d:ba:6d:d0:d5:dc:0e:0c:99:e4:25:5c:96:3e:0e:7d:1f: 87:a5:4d:28:77:a8:94:94:4d:b4:8d:b3:57:8c:44:4e:a5:b4: 60:8b:bc:da -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEl1RGZud3r4RiNcQoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQwODEzMDA1OVoXDTI1MDcwNzEzMDA1OVowLzEtMCsGA1UEAxMk NjEyZjM5ODMtYjRjOS00MWQ3LThhNjktZGViYTQxMGY0N2VlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4BYFVpelhChhHyBMJKxc5VDV5ldiKy5bkqh Yc8DB9AzrYSh9zJ2hZH0C90Y37AarSblCEcZpguu7uW+PnvYLgJmE7oH0q2vV403 Jhtd7BRBoYa0uT3LHM7kfchVEjRKC2ZdNxcWJ0w/CRIXFvy/pcZiq0M1wF4loIrY dTMl8J6Xb/1/ASrzvu5bOjtHCOF2KuzcaHMiHg7oXvt44bZrVgc1HWJPZPNxTjJR /+KTnyeHvmv4/k05Fxsfj/2ZzHPGm1OsExj3iGYLfbg20m4F3bAmnyCrvXUA9xDC zZL0kbbtIQwabdcYtucrLgtxCb9ZZEB0rjyDzYTMY57Xakg33wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFN4SwPWGLbca55fC8MzXnvG6+hanMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzUzYTBiYjktZjgzMS0z YjYxLWE3NmMtOTQ1ZTBkMDNjZThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUDwAH MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABbqnaT80TXRrki2arbZCRbKUMQmWa/UrG5WJfvKeicYXCD1Zx5e JLkAOqCOZdf+ROz6YSqakRx7r+zjv5BRGNtxqC6/iXc3bCCquJpWTXjRjVjJge5E ZomUEJ9MEwjJtQfbOcTkq4rsrwvEFBYcexW4WdRjtLJpPODZaY69FFOYH6G/7ok2 NqpZXZ4tvR4+M4zpA4p53Jw8FPTboaXlJ3iblDpjNM1Pz0UIFmeq08cKEJTRNNTL 3wNn5DQwiAddzJTKsLIS+fHrRftLYhWzLo4VHDGj+fTpWJQ9um3Q1dwODJnkJVyW Pg59H4elTSh3qJSUTbSNs1eMRE6ltGCLvNo= -----END CERTIFICATE-----Generated at Sat Apr 26 19:52:02 2025 by rpki-client