$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/509c3d39-ede3-31c2-b00f-9de3813ade40.roa File: 509c3d39-ede3-31c2-b00f-9de3813ade40.roa (raw, json) Hash identifier: siWwio1ZOLSIKJQJrCR+CPoNOIEgQ8xjeGG7St+QO3w= Subject key identifier: A5:B1:D8:E2:7D:94:EA:FC:44:4B:B4:6C:4D:2A:BE:E6:95:59:D6:63 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584988CF374DAC69368D87813E7C Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/509c3d39-ede3-31c2-b00f-9de3813ade40.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 20940 IP address blocks: 2600:1488:c040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:37:4d:ac:69:36:8d:87:81:3e:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=e1e8534d-f05b-4d5b-99b4-0a90ed8f45d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:15:ed:88:a6:c6:8a:32:08:81:cf:31:80:2d: b2:6b:85:98:66:08:3b:da:6b:84:76:53:53:b6:1c: c0:5b:40:0c:c5:dd:e9:46:c4:a1:bb:2e:75:61:be: 90:55:ce:2c:79:ea:15:4c:cf:47:1d:0d:ff:ac:e3: 94:a3:fc:43:02:09:dd:61:32:71:ac:08:03:9f:2b: e8:eb:7a:67:c6:b3:73:f9:32:0f:3a:11:a6:bc:44: 8b:fa:5b:35:c0:04:16:7a:da:a3:93:c2:22:08:db: 23:bf:b2:cc:15:b9:e6:33:b0:d3:0e:6e:b8:e7:c6: a9:63:b4:bb:5c:1c:ea:b4:df:05:de:ab:db:b7:66: de:32:54:83:29:ff:c6:38:85:12:e5:48:00:3b:d0: 93:32:df:cb:52:99:70:ac:d1:55:fb:57:26:37:21: 0f:22:ac:7a:36:7d:19:ea:f6:e5:dc:f4:dc:fe:71: c4:5c:35:dd:d3:79:36:c4:f4:39:03:b6:f6:fe:c4: 25:07:01:96:d6:e8:d6:80:1b:aa:37:3e:61:ff:b9: 63:30:52:b7:93:9b:f5:40:8d:5d:eb:4c:20:5d:73: f4:2b:4f:22:f8:cd:56:87:f4:ed:82:1e:5c:39:50: 73:28:e3:3d:86:4a:cf:90:88:5c:a2:33:2b:b7:3b: fa:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:B1:D8:E2:7D:94:EA:FC:44:4B:B4:6C:4D:2A:BE:E6:95:59:D6:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/509c3d39-ede3-31c2-b00f-9de3813ade40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1488:c040::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:6f:65:ff:c1:00:f2:02:3a:52:23:64:38:c2:c3:16:70:fd: 89:53:73:ae:36:e8:97:f9:1a:47:70:7c:d5:a5:1e:a5:be:5c: 20:96:f9:f1:78:6a:43:df:42:9d:25:1b:5c:f5:5a:db:6c:01: 0a:2d:a3:51:52:bb:03:6a:a4:dd:54:18:89:eb:4c:90:0b:9a: 1a:00:a8:2d:d2:8a:b1:93:92:4c:fb:1b:0f:f6:d0:37:84:3b: 6b:7c:c8:ad:0e:24:37:55:17:66:b8:68:16:34:b9:b9:0c:4b: ce:53:b1:53:f9:e2:75:d5:de:dd:67:46:0a:a5:a5:47:97:e3: f3:58:40:bc:b9:f8:c9:88:f2:d1:5e:29:3d:97:7c:5d:99:9c: cb:83:4d:ea:ec:1a:59:d8:26:6a:fe:bc:80:e2:2f:df:c2:e7: 04:7c:6e:57:9d:df:41:c2:3b:19:80:84:6e:68:31:0e:71:b9: d9:42:26:b0:45:76:61:85:86:e5:ed:72:78:21:c2:07:7c:6a: 55:10:8d:e8:ce:01:38:f0:b3:29:ce:2f:b5:3d:6e:e9:e8:73: aa:8f:55:92:9c:90:1b:47:34:fa:80:80:cb:d3:1e:91:a6:da: c6:a3:68:af:78:8c:26:84:62:d0:5d:e6:20:cd:fa:69:b5:fd: 8c:bf:0c:44 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmIzzdNrGk2jYeBPnwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk ZTFlODUzNGQtZjA1Yi00ZDViLTk5YjQtMGE5MGVkOGY0NWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBXtiKbGijIIgc8xgC2ya4WYZgg72muEdlNT thzAW0AMxd3pRsShuy51Yb6QVc4seeoVTM9HHQ3/rOOUo/xDAgndYTJxrAgDnyvo 63pnxrNz+TIPOhGmvESL+ls1wAQWetqjk8IiCNsjv7LMFbnmM7DTDm6458apY7S7 XBzqtN8F3qvbt2beMlSDKf/GOIUS5UgAO9CTMt/LUplwrNFV+1cmNyEPIqx6Nn0Z 6vbl3PTc/nHEXDXd03k2xPQ5A7b2/sQlBwGW1ujWgBuqNz5h/7ljMFK3k5v1QI1d 60wgXXP0K08i+M1Wh/Ttgh5cOVBzKOM9hkrPkIhcojMrtzv6pQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKWx2OJ9lOr8REu0bE0qvuaVWdZjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTA5YzNkMzktZWRlMy0z MWMyLWIwMGYtOWRlMzgxM2FkZTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUiMBA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABdvZf/BAPICOlIjZDjCwxZw/YlTc6426Jf5GkdwfNWlHqW+XCCW +fF4akPfQp0lG1z1WttsAQoto1FSuwNqpN1UGInrTJALmhoAqC3SirGTkkz7Gw/2 0DeEO2t8yK0OJDdVF2a4aBY0ubkMS85TsVP54nXV3t1nRgqlpUeX4/NYQLy5+MmI 8tFeKT2XfF2ZnMuDTersGlnYJmr+vIDiL9/C5wR8bled30HCOxmAhG5oMQ5xudlC JrBFdmGFhuXtcnghwgd8alUQjejOATjwsynOL7U9bunoc6qPVZKckBtHNPqAgMvT HpGm2sajaK94jCaEYtBd5iDN+mm1/Yy/DEQ= -----END CERTIFICATE-----Generated at Sat Apr 26 16:10:42 2025 by rpki-client