$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/387e4f4d-006c-3f90-81f7-92e630f2f64e.roa File: 387e4f4d-006c-3f90-81f7-92e630f2f64e.roa (raw, json) Hash identifier: P7HEGQgxr76aqvtOzHLBiYBWt+H2Ag7VgPgk0qzrLTM= Subject key identifier: E8:F6:48:87:F1:F9:00:12:8D:0B:4C:F6:D6:93:53:C3:CF:FB:5D:65 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858496CE46CBEDBBD9DCFDAD1DA00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/387e4f4d-006c-3f90-81f7-92e630f2f64e.roa Signing time: Sat 05 Apr 2025 13:01:01 +0000 ROA not before: Sat 05 Apr 2025 13:01:01 +0000 ROA not after: Fri 04 Jul 2025 13:01:01 +0000 asID: 20940 IP address blocks: 2600:1405:9000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6c:e4:6c:be:db:bd:9d:cf:da:d1:da:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 5 13:01:01 2025 GMT Not After : Jul 4 13:01:01 2025 GMT Subject: CN=416f582b-dd87-4383-99ac-a2309aade32c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:dc:c2:54:f2:ca:97:50:bb:8c:6c:e5:e6:c9: a4:94:2d:6d:ac:6f:c1:e9:c1:3d:dc:04:fb:b0:9b: ed:2f:db:cc:60:89:0d:e0:d0:fe:58:99:63:3c:25: 96:b2:ae:5b:bf:ca:a9:3f:58:6c:01:57:06:a5:4d: 20:6e:a4:44:6a:a3:5f:26:dc:de:69:68:73:4f:88: b9:aa:44:c2:3e:fb:82:43:c8:e9:f7:38:6e:89:a0: 2f:45:66:81:35:06:c5:3f:eb:ce:23:49:ed:d2:83: e3:7c:ff:f9:63:50:05:80:44:c6:c7:8b:6d:26:a9: da:b4:db:43:58:07:1b:73:be:bd:dd:23:84:69:be: c3:1d:7c:09:5b:86:6d:5d:11:d7:02:78:6d:91:4d: 6a:52:27:9e:a1:f6:20:bd:7b:4b:f9:e2:8f:4b:19: 94:6c:b4:eb:40:d7:0e:be:f8:4c:cb:ff:71:31:45: 41:26:53:b9:26:bf:a5:9a:8a:56:ec:a7:9f:74:ef: dc:2f:32:ab:0d:c0:3a:17:3b:00:a7:f4:c9:da:63: 08:ae:9f:1c:a8:8c:da:c7:86:f3:e0:8a:e9:f8:71: 74:6c:8c:4c:8d:0c:65:e8:22:b7:ef:80:b9:cc:3d: 4f:54:f0:f4:4e:1c:4e:a0:2f:2d:7b:0e:0f:e1:e4: 0a:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:F6:48:87:F1:F9:00:12:8D:0B:4C:F6:D6:93:53:C3:CF:FB:5D:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/387e4f4d-006c-3f90-81f7-92e630f2f64e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1405:9000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:e5:08:f4:95:2a:81:98:18:a7:a4:35:3b:51:af:ec:32:0c: 87:30:c4:d9:fc:43:12:9f:65:f7:08:a5:49:2d:21:9d:97:76: 99:0a:b6:b6:02:d6:14:1e:b7:c4:4b:18:ff:5c:ef:9a:4e:3f: 21:ec:a3:30:f6:c7:a0:bd:7a:0a:39:55:13:94:d0:04:93:41: 7b:42:8e:88:c6:5b:0e:f4:7b:44:ab:67:5b:95:31:45:d8:32: 3a:5c:35:5a:e5:d5:51:f9:35:86:7c:54:54:a3:bf:0c:02:4f: ad:7c:6a:3c:84:a6:a6:f5:d6:1e:6c:52:42:aa:7c:91:5f:cd: 90:9e:d9:3b:16:02:d9:0b:47:3e:c1:cf:71:7f:d6:06:9c:05: b7:a7:60:4a:c4:cd:6f:16:1a:1f:c8:be:35:d2:97:67:f5:94: e1:6f:6a:61:a8:07:c0:46:22:f2:25:2a:a2:1e:d2:36:95:65: ad:ff:ad:a2:b9:c7:01:46:80:92:51:f6:9f:df:a9:d2:45:4a: 10:57:e0:ac:bb:2e:48:7e:ef:81:d8:30:a8:80:c4:35:79:76: 54:02:c7:e6:5b:e8:ae:3f:f5:7d:96:db:99:d2:9c:e8:48:1e: fe:22:12:82:64:6c:f9:2d:0a:fd:d1:db:12:7f:d4:f2:6d:5f: 9c:0e:dd:de -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEls5Gy+272dz9rR2gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQwNTEzMDEwMVoXDTI1MDcwNDEzMDEwMVowLzEtMCsGA1UEAxMk NDE2ZjU4MmItZGQ4Ny00MzgzLTk5YWMtYTIzMDlhYWRlMzJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidzCVPLKl1C7jGzl5smklC1trG/B6cE93AT7 sJvtL9vMYIkN4ND+WJljPCWWsq5bv8qpP1hsAVcGpU0gbqREaqNfJtzeaWhzT4i5 qkTCPvuCQ8jp9zhuiaAvRWaBNQbFP+vOI0nt0oPjfP/5Y1AFgETGx4ttJqnatNtD WAcbc7693SOEab7DHXwJW4ZtXRHXAnhtkU1qUieeofYgvXtL+eKPSxmUbLTrQNcO vvhMy/9xMUVBJlO5Jr+lmopW7KefdO/cLzKrDcA6FzsAp/TJ2mMIrp8cqIzax4bz 4Irp+HF0bIxMjQxl6CK374C5zD1PVPD0ThxOoC8tew4P4eQK5QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOj2SIfx+QASjQtM9taTU8PP+11lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzg3ZTRmNGQtMDA2Yy0z ZjkwLTgxZjctOTJlNjMwZjJmNjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUBZAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADrlCPSVKoGYGKekNTtRr+wyDIcwxNn8QxKfZfcIpUktIZ2XdpkK trYC1hQet8RLGP9c75pOPyHsozD2x6C9ego5VROU0ASTQXtCjojGWw70e0SrZ1uV MUXYMjpcNVrl1VH5NYZ8VFSjvwwCT618ajyEpqb11h5sUkKqfJFfzZCe2TsWAtkL Rz7Bz3F/1gacBbenYErEzW8WGh/IvjXSl2f1lOFvamGoB8BGIvIlKqIe0jaVZa3/ raK5xwFGgJJR9p/fqdJFShBX4Ky7Lkh+74HYMKiAxDV5dlQCx+Zb6K4/9X2W25nS nOhIHv4iEoJkbPktCv3R2xJ/1PJtX5wO3d4= -----END CERTIFICATE-----Generated at Mon Apr 28 00:11:30 2025 by rpki-client