$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4e90b7e5-62f3-3307-b2f5-0d7536f76bde.roa File: 4e90b7e5-62f3-3307-b2f5-0d7536f76bde.roa (raw, json) Hash identifier: /YgkhMFWzXMOGYtnQY9H5EMpWkmBRA5ao0zAXOfwUtA= Subject key identifier: 75:11:71:8E:B3:F2:7E:43:2A:FE:69:39:DE:A2:6D:32:98:23:98:7F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849754467CB0374DE298B3FB020 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4e90b7e5-62f3-3307-b2f5-0d7536f76bde.roa Signing time: Tue 08 Apr 2025 13:00:59 +0000 ROA not before: Tue 08 Apr 2025 13:00:59 +0000 ROA not after: Mon 07 Jul 2025 13:00:59 +0000 asID: 20940 IP address blocks: 2600:1417:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:75:44:67:cb:03:74:de:29:8b:3f:b0:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 8 13:00:59 2025 GMT Not After : Jul 7 13:00:59 2025 GMT Subject: CN=f230c735-005f-4143-9ffa-11a6f4259594 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:89:89:6e:15:ac:40:97:18:6e:82:a8:0b:89: b2:bc:09:46:e4:c7:f1:92:c6:41:c4:0d:d5:4c:ac: 55:96:76:ba:76:8f:30:d1:43:9b:94:e6:97:ea:b5: 75:f4:7c:dc:73:d7:0e:b3:66:e3:a9:c2:c3:43:ab: 12:d5:d2:08:65:73:a5:f5:dc:24:f1:88:c7:f2:9c: ef:1f:73:eb:23:7c:84:d6:3a:58:26:74:af:96:7f: df:75:30:81:bd:38:fe:a1:c3:b5:4b:c8:fc:a7:e5: bf:59:a8:1d:12:c1:da:79:b4:cb:45:12:8f:2a:77: 20:ee:6e:c1:0f:11:8d:e7:b2:56:a9:a6:8d:c4:ff: 0e:44:c0:d2:bd:52:35:fa:90:da:1a:30:a7:e3:81: cb:cf:3b:f9:b0:c7:d1:77:f0:b3:af:f7:89:94:52: 4e:59:93:b3:07:00:69:e2:78:a5:57:89:43:69:6c: 56:55:fb:1f:fc:ae:9a:d2:a6:a6:96:9a:3e:12:13: e1:ac:99:76:a7:0b:a6:3a:17:77:03:1e:2c:80:14: 72:aa:7d:f4:b7:95:90:36:3b:d7:11:8a:83:4a:34: 28:c1:0d:ee:5e:d1:be:4b:40:5c:35:fb:f3:45:bd: 95:a7:76:cf:b5:82:59:24:ef:85:a7:7e:b9:33:4d: ef:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:11:71:8E:B3:F2:7E:43:2A:FE:69:39:DE:A2:6D:32:98:23:98:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4e90b7e5-62f3-3307-b2f5-0d7536f76bde.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1417:3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:93:8a:f0:91:48:96:8a:52:9b:d5:24:77:3f:26:4c:d0:1d: 58:6e:3c:b9:b4:70:60:4b:1a:6d:9e:e2:28:2c:88:c6:e7:59: 0a:44:31:cd:52:18:3b:06:14:84:af:a2:bf:53:92:bb:1b:fd: 9c:f3:b3:e7:6b:e1:c4:d5:0f:18:0e:bd:3e:25:5c:1c:b9:ec: 65:f5:a1:00:95:b7:41:14:f6:ac:c3:8d:1a:17:ae:84:fc:7d: 69:5e:b5:87:62:09:85:13:08:cb:7b:2a:fe:c1:37:2a:b8:d8: c0:a4:5a:72:2f:84:28:1e:96:76:2d:36:c4:07:89:72:8b:c3: f4:af:80:dc:e8:07:1c:d2:eb:03:64:f9:2b:7f:39:69:f5:a3: 04:16:5f:bf:3e:65:a9:7e:ff:68:5f:a4:6b:70:5b:d5:97:ac: 64:ca:dd:fa:53:08:4d:95:d4:b7:0e:96:46:f0:ff:7f:60:94: 23:ec:b9:0f:d7:74:f6:ed:21:b5:09:1e:d8:c9:49:90:4b:8b: 86:b2:ea:d5:d3:b6:83:0d:00:06:0b:e9:7a:7d:b0:17:2b:f6: f5:b8:3e:69:0a:bd:97:15:19:b6:68:d2:e5:60:45:79:06:09: 0f:4c:47:8e:60:9d:74:8e:3f:da:34:84:56:a4:42:32:07:b6: 50:69:b5:4f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEl1RGfLA3TeKYs/sCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQwODEzMDA1OVoXDTI1MDcwNzEzMDA1OVowLzEtMCsGA1UEAxMk ZjIzMGM3MzUtMDA1Zi00MTQzLTlmZmEtMTFhNmY0MjU5NTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4mJbhWsQJcYboKoC4myvAlG5MfxksZBxA3V TKxVlna6do8w0UOblOaX6rV19Hzcc9cOs2bjqcLDQ6sS1dIIZXOl9dwk8YjH8pzv H3PrI3yE1jpYJnSvln/fdTCBvTj+ocO1S8j8p+W/WagdEsHaebTLRRKPKncg7m7B DxGN57JWqaaNxP8ORMDSvVI1+pDaGjCn44HLzzv5sMfRd/Czr/eJlFJOWZOzBwBp 4nilV4lDaWxWVfsf/K6a0qamlpo+EhPhrJl2pwumOhd3Ax4sgBRyqn30t5WQNjvX EYqDSjQowQ3uXtG+S0BcNfvzRb2Vp3bPtYJZJO+Fp365M03v1QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHURcY6z8n5DKv5pOd6ibTKYI5h/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGU5MGI3ZTUtNjJmMy0z MzA3LWIyZjUtMGQ3NTM2Zjc2YmRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUFwAD MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFqTivCRSJaKUpvVJHc/JkzQHVhuPLm0cGBLGm2e4igsiMbnWQpE Mc1SGDsGFISvor9Tkrsb/Zzzs+dr4cTVDxgOvT4lXBy57GX1oQCVt0EU9qzDjRoX roT8fWletYdiCYUTCMt7Kv7BNyq42MCkWnIvhCgelnYtNsQHiXKLw/SvgNzoBxzS 6wNk+St/OWn1owQWX78+Zal+/2hfpGtwW9WXrGTK3fpTCE2V1LcOlkbw/39glCPs uQ/XdPbtIbUJHtjJSZBLi4ay6tXTtoMNAAYL6Xp9sBcr9vW4PmkKvZcVGbZo0uVg RXkGCQ9MR45gnXSOP9o0hFakQjIHtlBptU8= -----END CERTIFICATE-----Generated at Sat Apr 26 15:55:44 2025 by rpki-client