$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4a8ddabd-05f7-33a1-bc56-8a4a845b0e3b.roa File: 4a8ddabd-05f7-33a1-bc56-8a4a845b0e3b.roa (raw, json) Hash identifier: oNPhoKhQaDd5n13GflHvfkTQd/Nr2Pwyl6hO7SwaX0A= Subject key identifier: CB:C8:21:11:36:9D:8B:A9:84:99:DB:A4:AF:7D:55:2B:D6:F5:62:95 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584988CF36A0C8DF1E2D9101D180 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4a8ddabd-05f7-33a1-bc56-8a4a845b0e3b.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 20940 IP address blocks: 2600:1488:a300::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:36:a0:c8:df:1e:2d:91:01:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=7a5d8032-9279-4734-875e-d69d284d5285 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:cf:27:09:b7:11:23:3e:03:4c:69:e5:e1:19: 5f:51:d1:8b:55:3d:92:07:8d:75:1a:f3:8f:c5:f8: af:d7:8e:bd:de:59:89:81:aa:ca:7a:71:94:15:2f: 81:3a:2c:2e:2f:1c:6e:9e:98:cc:ec:58:0c:08:d8: d4:b5:03:3d:99:ba:02:49:65:42:82:1c:57:e6:08: e6:38:37:47:1c:88:4b:a7:db:b1:71:25:06:ee:fe: cb:65:3f:6d:7e:33:43:af:17:b0:55:e1:35:78:34: 1e:bc:38:ed:fb:7b:26:fb:3c:d6:32:28:ac:31:30: 1b:65:0e:49:ec:44:4e:55:fd:6e:d6:9b:c7:2c:dc: 18:2c:d9:6b:86:88:af:80:70:08:f0:0e:2c:a4:94: ae:43:d9:d5:1c:04:af:c2:a9:e4:c9:bf:25:09:df: 88:fd:30:65:fb:2c:6e:67:32:b7:d1:a9:8a:30:67: d1:64:90:67:b1:eb:20:ac:6c:fe:41:e4:14:b3:57: 21:fa:54:0e:59:31:86:83:e5:61:08:4b:cb:78:e8: 91:6e:53:94:8e:52:42:fb:1a:e4:03:d9:d8:3e:74: dd:59:14:c4:51:18:8e:6b:44:63:60:f5:fd:39:b7: b6:6b:ee:17:b7:64:f3:cc:4c:1f:b9:04:5a:b4:e6: 96:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:C8:21:11:36:9D:8B:A9:84:99:DB:A4:AF:7D:55:2B:D6:F5:62:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4a8ddabd-05f7-33a1-bc56-8a4a845b0e3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1488:a300::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:aa:d0:9e:88:00:40:73:de:90:53:2c:6f:f8:b3:e9:2f:a4: 48:60:cf:4a:1c:be:88:75:00:f2:4c:3b:00:16:3d:54:f5:5c: 40:ab:c8:16:a7:57:fa:f6:bc:31:f0:90:a0:6f:bc:76:4a:26: 0a:38:ed:3f:61:a7:16:d0:be:ba:ad:d7:58:02:c2:e6:20:72: 51:ea:19:55:d0:02:7d:10:53:8e:38:16:12:25:fc:e4:f8:61: 08:6a:d8:62:ad:90:43:d2:a8:41:72:ec:b3:81:82:f4:88:0b: 70:dd:db:6d:c1:8f:3a:08:9d:36:65:81:df:d4:99:a1:17:32: c3:47:7f:c8:1d:3a:16:99:67:35:88:48:24:58:56:95:b2:5b: 45:4b:55:ce:2b:4a:c5:dc:4d:16:fd:19:32:d6:3a:9f:5b:84: 6b:6c:92:ef:e6:53:e7:28:2d:d3:99:56:93:13:e0:ac:a1:cd: 99:ca:26:5f:75:38:48:ee:4d:e9:c9:5b:4a:04:60:3b:d3:f5: 67:fd:0b:a7:72:dc:82:5c:6b:c7:b9:61:58:40:67:b1:83:ee: ed:09:2a:71:11:9a:de:90:1f:04:fe:6c:a6:0d:1d:16:7f:35: a9:7f:ad:33:9d:af:ad:5a:e6:53:8a:82:63:18:88:dc:77:ad: c0:e0:12:cb -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmIzzagyN8eLZEB0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk N2E1ZDgwMzItOTI3OS00NzM0LTg3NWUtZDY5ZDI4NGQ1Mjg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi88nCbcRIz4DTGnl4RlfUdGLVT2SB411GvOP xfiv14693lmJgarKenGUFS+BOiwuLxxunpjM7FgMCNjUtQM9mboCSWVCghxX5gjm ODdHHIhLp9uxcSUG7v7LZT9tfjNDrxewVeE1eDQevDjt+3sm+zzWMiisMTAbZQ5J 7EROVf1u1pvHLNwYLNlrhoivgHAI8A4spJSuQ9nVHASvwqnkyb8lCd+I/TBl+yxu ZzK30amKMGfRZJBnsesgrGz+QeQUs1ch+lQOWTGGg+VhCEvLeOiRblOUjlJC+xrk A9nYPnTdWRTEURiOa0RjYPX9Obe2a+4Xt2TzzEwfuQRatOaWPwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMvIIRE2nYuphJnbpK99VSvW9WKVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGE4ZGRhYmQtMDVmNy0z M2ExLWJjNTYtOGE0YTg0NWIwZTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUiKMA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADaq0J6IAEBz3pBTLG/4s+kvpEhgz0ocvoh1APJMOwAWPVT1XECr yBanV/r2vDHwkKBvvHZKJgo47T9hpxbQvrqt11gCwuYgclHqGVXQAn0QU444FhIl /OT4YQhq2GKtkEPSqEFy7LOBgvSIC3Dd223BjzoInTZlgd/UmaEXMsNHf8gdOhaZ ZzWISCRYVpWyW0VLVc4rSsXcTRb9GTLWOp9bhGtsku/mU+coLdOZVpMT4KyhzZnK Jl91OEjuTenJW0oEYDvT9Wf9C6dy3IJca8e5YVhAZ7GD7u0JKnERmt6QHwT+bKYN HRZ/Nal/rTOdr61a5lOKgmMYiNx3rcDgEss= -----END CERTIFICATE-----Generated at Sat Apr 26 19:53:30 2025 by rpki-client