$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/42172cbf-6cf0-3da3-8bfb-394d1f2c48f0.roa File: 42172cbf-6cf0-3da3-8bfb-394d1f2c48f0.roa (raw, json) Hash identifier: Cp2IdOxRS59r10A4yj3CT92Dt7/Axh6G1CR6YM0gXgY= Subject key identifier: 7A:74:B4:90:C2:38:12:05:DF:3D:B7:7D:16:9B:C1:55:E6:47:74:1D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849806F2E52862AF8DA34290500 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/42172cbf-6cf0-3da3-8bfb-394d1f2c48f0.roa Signing time: Sat 12 Apr 2025 13:01:01 +0000 ROA not before: Sat 12 Apr 2025 13:01:01 +0000 ROA not after: Fri 11 Jul 2025 13:01:01 +0000 asID: 20940 IP address blocks: 2600:1404:8400::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:80:6f:2e:52:86:2a:f8:da:34:29:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 12 13:01:01 2025 GMT Not After : Jul 11 13:01:01 2025 GMT Subject: CN=94e095e7-cc05-466d-874e-497041d872e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:a0:66:d8:47:e1:a1:a2:c5:70:35:93:2b:48: a1:ca:0f:28:54:66:7c:e3:18:45:d5:54:42:63:c6: c8:d5:e7:82:f9:e0:7a:53:28:41:18:3f:8a:99:54: e6:d0:fd:f4:8e:c0:cb:8d:e1:7a:43:0b:ea:80:01: b6:6d:5c:5f:fc:b9:40:5e:ff:58:fc:92:83:ee:87: 67:7f:79:26:90:5b:50:69:5c:83:54:73:20:55:e3: 38:14:b9:a1:08:3e:28:b6:2a:02:35:40:60:b2:08: 31:25:ad:11:dc:4c:ba:8c:b5:60:89:16:bf:18:63: bb:2f:da:0e:a6:61:08:fb:81:93:c6:36:c9:66:c3: e8:d2:25:a3:f8:62:1a:7b:00:37:38:e5:3d:ad:2a: 57:a1:9b:44:5a:86:81:b5:eb:f3:da:57:82:62:9a: 3a:d6:5a:94:6a:2c:bd:10:ea:01:16:29:4e:1d:83: a1:a4:b8:7c:70:d2:e9:53:e5:89:cf:d0:f6:fe:e2: b8:86:f2:38:37:c7:3a:1f:c1:29:c8:68:ac:48:f3: ce:f9:64:a1:b7:1e:9a:c3:a9:99:38:a9:08:cb:2a: df:de:d8:cf:eb:23:f0:7f:f2:14:4a:ca:00:aa:eb: 34:b9:c5:e2:c8:91:40:c1:54:64:a3:c9:5f:3c:21: df:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:74:B4:90:C2:38:12:05:DF:3D:B7:7D:16:9B:C1:55:E6:47:74:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/42172cbf-6cf0-3da3-8bfb-394d1f2c48f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1404:8400::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:e3:c7:ae:66:88:03:97:9e:9e:9d:4b:23:34:e8:79:82:cc: db:8a:15:68:2f:c4:ab:e0:fc:02:52:9c:d9:28:49:3e:46:92: 14:8b:6f:01:b7:ab:ba:f5:92:50:3e:96:34:57:46:86:10:06: b5:28:28:e7:f8:17:a0:b6:d6:30:84:cc:ce:28:eb:ad:cb:15: 15:6f:38:1b:81:47:1c:e9:f1:53:25:f5:cd:23:42:f9:73:4f: 79:5b:4b:17:76:9a:6b:48:b2:d7:24:82:e1:1b:9d:57:cb:7a: de:a8:3e:f2:5b:d5:b9:80:a0:1e:d5:6d:5f:86:78:77:28:cd: bc:b5:d8:22:f0:5d:43:28:f0:a9:9a:51:7b:c3:ab:6c:4e:6f: 74:56:af:80:0b:8d:3b:1e:38:f4:7c:23:0d:13:bc:65:b8:a2: 2a:78:a3:68:9b:b6:c2:21:95:62:c9:a4:d9:26:ca:8d:a3:c6: a3:9b:d6:e7:e0:61:21:e4:34:a9:4a:76:02:c9:6b:57:ff:c1: ca:d9:3f:9c:70:cf:6c:66:4d:b4:c9:2a:9e:91:95:43:34:d5: f2:5d:ff:1d:51:24:d9:29:86:fd:0f:1a:42:18:99:d4:af:cd: ac:11:23:9c:e4:be:c1:b9:f4:4a:fb:80:05:3a:a3:63:c0:0e: dd:8b:ff:e3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmAby5Shir42jQpBQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQxMjEzMDEwMVoXDTI1MDcxMTEzMDEwMVowLzEtMCsGA1UEAxMk OTRlMDk1ZTctY2MwNS00NjZkLTg3NGUtNDk3MDQxZDg3MmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkaBm2EfhoaLFcDWTK0ihyg8oVGZ84xhF1VRC Y8bI1eeC+eB6UyhBGD+KmVTm0P30jsDLjeF6QwvqgAG2bVxf/LlAXv9Y/JKD7odn f3kmkFtQaVyDVHMgVeM4FLmhCD4otioCNUBgsggxJa0R3Ey6jLVgiRa/GGO7L9oO pmEI+4GTxjbJZsPo0iWj+GIaewA3OOU9rSpXoZtEWoaBtevz2leCYpo61lqUaiy9 EOoBFilOHYOhpLh8cNLpU+WJz9D2/uK4hvI4N8c6H8EpyGisSPPO+WShtx6aw6mZ OKkIyyrf3tjP6yPwf/IUSsoAqus0ucXiyJFAwVRko8lfPCHffQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHp0tJDCOBIF3z23fRabwVXmR3QdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDIxNzJjYmYtNmNmMC0z ZGEzLThiZmItMzk0ZDFmMmM0OGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUBIQA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD7jx65miAOXnp6dSyM06HmCzNuKFWgvxKvg/AJSnNkoST5GkhSL bwG3q7r1klA+ljRXRoYQBrUoKOf4F6C21jCEzM4o663LFRVvOBuBRxzp8VMl9c0j QvlzT3lbSxd2mmtIstckguEbnVfLet6oPvJb1bmAoB7VbV+GeHcozby12CLwXUMo 8KmaUXvDq2xOb3RWr4ALjTseOPR8Iw0TvGW4oip4o2ibtsIhlWLJpNkmyo2jxqOb 1ufgYSHkNKlKdgLJa1f/wcrZP5xwz2xmTbTJKp6RlUM01fJd/x1RJNkphv0PGkIY mdSvzawRI5zkvsG59Er7gAU6o2PADt2L/+M= -----END CERTIFICATE-----Generated at Sat Apr 26 19:10:39 2025 by rpki-client