$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/35c02588-ef9a-32cb-8f98-53e462f32b95.roa File: 35c02588-ef9a-32cb-8f98-53e462f32b95.roa (raw, json) Hash identifier: 2YM8gRVlJXQvhtLIq4kfzQHwBujbYaeKvSmJcjbNfdg= Subject key identifier: 14:21:93:A1:40:2F:96:2A:77:0A:13:F5:AC:4A:05:21:BB:D4:5F:58 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849780F1B7181AEF78943077100 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/35c02588-ef9a-32cb-8f98-53e462f32b95.roa Signing time: Wed 09 Apr 2025 13:01:01 +0000 ROA not before: Wed 09 Apr 2025 13:01:01 +0000 ROA not after: Tue 08 Jul 2025 13:01:01 +0000 asID: 20940 IP address blocks: 2600:141c:c000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:78:0f:1b:71:81:ae:f7:89:43:07:71:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 9 13:01:01 2025 GMT Not After : Jul 8 13:01:01 2025 GMT Subject: CN=b925ac85-19a6-49ad-a088-c809c4d27163 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ae:6a:f7:71:4d:0a:33:89:fb:e7:19:43:74: 49:91:8b:6c:fe:d6:b8:71:fe:62:d6:c6:76:c5:f8: 97:08:77:09:5c:26:04:be:65:5f:9e:b3:a7:f6:83: 29:9b:90:fb:d0:e4:50:05:13:28:1f:2b:27:57:ed: 95:22:cf:5b:00:fc:3d:d6:14:32:23:f0:46:68:34: 36:ef:58:a6:38:1b:6f:e1:1c:0b:5b:cb:27:6f:b9: 86:2f:13:4c:a4:87:cb:2a:02:89:6b:e1:4b:5a:10: ba:56:d9:fd:27:07:f9:f0:85:de:85:ff:5f:c7:f8: 66:d8:83:ef:f6:ab:f4:ad:34:93:5e:32:61:8f:85: 82:5f:1a:f1:8c:af:ff:d2:0d:7a:e7:54:bd:75:64: cf:c1:55:82:8f:cc:b1:a8:79:bc:5a:a7:b7:4c:d8: 11:6f:90:41:76:45:35:34:3f:7c:82:fc:a2:9b:28: 94:b9:68:14:f3:88:4d:2e:e2:1e:0a:ff:ab:af:dc: 48:83:3e:4a:fe:7d:6b:ec:12:e2:fb:00:ef:47:75: c8:3e:f0:0d:a3:5a:9c:e9:2c:08:8b:c3:a7:93:6b: b6:62:a7:de:25:7a:bf:74:85:a2:bb:5b:2a:45:76: 33:14:5e:b9:0f:af:42:b4:d3:5e:b5:64:77:04:61: 86:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:21:93:A1:40:2F:96:2A:77:0A:13:F5:AC:4A:05:21:BB:D4:5F:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/35c02588-ef9a-32cb-8f98-53e462f32b95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:141c:c000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:21:b2:aa:da:8d:86:1f:c5:12:1a:b8:8d:e1:cc:0d:f4:aa: 73:b6:38:78:9e:79:2c:01:69:b3:0f:31:c5:5b:d0:0a:87:87: 4c:e6:55:9f:42:05:ec:5e:4a:1a:c6:b0:b9:c5:98:22:b4:8e: bc:ec:6a:00:4c:4f:17:94:f5:10:be:a3:1a:36:38:1a:96:5e: fa:ae:e9:c4:2b:10:0c:7a:4a:d6:dc:a8:33:c3:12:5b:53:e3: 1c:e4:32:08:6f:72:34:c6:d3:21:06:20:7e:d7:87:37:d2:05: af:a3:f7:eb:5c:3c:03:16:ed:f6:03:55:d3:9a:ee:bd:c7:f4: a1:f9:ef:5d:2c:6c:7e:bc:04:71:f2:0d:7f:69:51:94:1f:0c: 47:ca:11:33:c4:1d:62:49:df:c7:30:a7:4f:ab:42:7c:51:20: 39:82:ec:fe:47:34:ae:ba:31:f3:fd:28:f2:42:1f:b0:a9:67: 3e:22:bd:9e:a1:c7:50:e3:95:c4:2d:d7:b2:42:ca:4e:7e:f2: b1:1b:1a:4e:8e:48:20:91:5d:d9:31:81:d2:8d:6e:a7:f7:3b: e2:c2:ba:9f:5c:30:4e:73:c7:54:43:86:76:d7:19:59:e0:17: 5e:52:93:3a:e8:43:ac:f9:cf:f5:db:a4:f7:df:c4:b4:a0:ec: 34:1f:f3:69 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEl4Dxtxga73iUMHcQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQwOTEzMDEwMVoXDTI1MDcwODEzMDEwMVowLzEtMCsGA1UEAxMk YjkyNWFjODUtMTlhNi00OWFkLWEwODgtYzgwOWM0ZDI3MTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxa5q93FNCjOJ++cZQ3RJkYts/ta4cf5i1sZ2 xfiXCHcJXCYEvmVfnrOn9oMpm5D70ORQBRMoHysnV+2VIs9bAPw91hQyI/BGaDQ2 71imOBtv4RwLW8snb7mGLxNMpIfLKgKJa+FLWhC6Vtn9Jwf58IXehf9fx/hm2IPv 9qv0rTSTXjJhj4WCXxrxjK//0g1651S9dWTPwVWCj8yxqHm8Wqe3TNgRb5BBdkU1 ND98gvyimyiUuWgU84hNLuIeCv+rr9xIgz5K/n1r7BLi+wDvR3XIPvANo1qc6SwI i8Onk2u2YqfeJXq/dIWiu1sqRXYzFF65D69CtNNetWR3BGGGnQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBQhk6FAL5YqdwoT9axKBSG71F9YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzVjMDI1ODgtZWY5YS0z MmNiLThmOTgtNTNlNDYyZjMyYjk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUHMAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACUhsqrajYYfxRIauI3hzA30qnO2OHieeSwBabMPMcVb0AqHh0zm VZ9CBexeShrGsLnFmCK0jrzsagBMTxeU9RC+oxo2OBqWXvqu6cQrEAx6StbcqDPD EltT4xzkMghvcjTG0yEGIH7XhzfSBa+j9+tcPAMW7fYDVdOa7r3H9KH5710sbH68 BHHyDX9pUZQfDEfKETPEHWJJ38cwp0+rQnxRIDmC7P5HNK66MfP9KPJCH7CpZz4i vZ6hx1DjlcQt17JCyk5+8rEbGk6OSCCRXdkxgdKNbqf3O+LCup9cME5zx1RDhnbX GVngF15SkzroQ6z5z/XbpPffxLSg7DQf82k= -----END CERTIFICATE-----Generated at Sat Apr 26 16:19:03 2025 by rpki-client