$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/514fc274-0cb5-3f5d-a875-dba74d78b967.roa File: 514fc274-0cb5-3f5d-a875-dba74d78b967.roa (raw, json) Hash identifier: wORpDNU5xBPEJ4KOF1B6+MI3Cdjch6vDe7OWuIYUUkQ= Subject key identifier: FF:23:7B:0E:FB:93:D4:4F:B1:C6:58:3E:1B:63:7E:80:71:D0:5C:D8 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584988CF6A2FD9A4D14174618A00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/514fc274-0cb5-3f5d-a875-dba74d78b967.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 20940 IP address blocks: 2600:1488:6001::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:6a:2f:d9:a4:d1:41:74:61:8a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=7b8dfec7-8834-46c9-a977-0e22288e8817 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:8e:93:f5:be:d5:53:fb:59:da:fe:db:b6:86: 3e:78:57:47:57:42:48:4a:1f:fe:17:bd:dc:10:5b: 40:6c:59:b0:99:e9:b6:79:86:af:05:d9:d9:82:a6: 98:6c:69:22:05:bb:23:cf:dd:84:f9:50:2a:00:aa: 16:93:17:26:6f:7c:50:2e:76:e6:6d:79:28:91:e6: 08:8f:28:d8:3e:2c:4b:62:4c:b3:1f:d9:39:a1:7a: 25:03:e2:2c:01:61:89:2e:20:5a:e8:84:41:f9:49: ef:ce:7e:6f:5b:47:ab:5f:14:75:b7:dc:9a:a6:65: f2:c6:a2:59:08:87:7b:5e:17:f5:f4:f0:3f:69:86: 4d:9f:95:7d:4e:29:65:e2:28:5e:4c:15:77:1b:8b: 4b:40:b6:80:14:5d:27:96:1d:58:db:32:c7:69:14: e7:7a:a3:af:43:67:9e:29:b9:a9:11:c2:8f:07:a0: 64:a0:bd:14:bb:fc:e2:75:90:60:f1:4a:7a:f5:62: bc:97:b9:10:82:a7:bb:d2:70:d7:91:e1:75:ed:7e: 89:d6:b8:cf:af:ce:47:b8:b2:d4:61:57:87:c5:1f: 25:36:9f:23:68:a9:60:05:09:12:4a:e4:63:d6:2f: ca:47:0f:b7:aa:b5:72:71:6e:fb:b0:e0:8d:76:77: a3:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:23:7B:0E:FB:93:D4:4F:B1:C6:58:3E:1B:63:7E:80:71:D0:5C:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/514fc274-0cb5-3f5d-a875-dba74d78b967.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1488:6001::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:1f:40:40:02:ab:f8:56:e0:61:b0:d7:c7:04:8d:1b:15:72: b2:31:2d:71:e4:74:05:2c:fc:9d:dd:8c:1d:46:6d:c3:7a:07: a5:fe:53:b3:3d:d2:d9:dc:37:e0:f5:36:cd:c3:57:76:d0:79: 1f:09:8f:43:ae:d4:6d:43:70:3f:35:ed:4c:bd:18:be:17:f3: 65:e0:f7:c3:ff:08:d4:7f:d8:28:d0:b8:47:41:14:ed:e3:70: f3:cb:d1:28:b2:86:0d:0a:97:9d:39:1e:3c:18:85:33:65:75: 58:34:04:62:a1:b5:33:e7:54:22:78:c7:db:f2:ac:61:32:44: d9:52:d0:7b:b9:ba:6d:ad:a6:52:e7:8f:67:c6:0e:69:a6:4c: 51:b0:a3:f4:2f:f6:fd:1c:17:77:8b:e2:ef:91:0d:86:3c:fb: 39:21:11:08:c1:13:1c:e6:69:82:78:b6:ef:8a:a7:4b:45:86: b6:ff:33:a6:d6:6d:4d:70:81:a9:de:ec:97:0e:01:bd:15:de: 49:05:da:31:a4:a2:d4:2f:5b:af:20:01:ac:ef:57:96:cf:a5: d9:c4:d3:78:e9:0b:64:70:0e:c3:ee:95:d5:6f:3d:ac:3d:a7: 43:8e:33:a7:2b:83:ce:4b:6f:a3:a9:84:9b:b9:27:82:f7:d4: ce:a1:b9:a7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmIz2ov2aTRQXRhigAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk N2I4ZGZlYzctODgzNC00NmM5LWE5NzctMGUyMjI4OGU4ODE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkI6T9b7VU/tZ2v7btoY+eFdHV0JISh/+F73c EFtAbFmwmem2eYavBdnZgqaYbGkiBbsjz92E+VAqAKoWkxcmb3xQLnbmbXkokeYI jyjYPixLYkyzH9k5oXolA+IsAWGJLiBa6IRB+Unvzn5vW0erXxR1t9yapmXyxqJZ CId7Xhf19PA/aYZNn5V9Till4iheTBV3G4tLQLaAFF0nlh1Y2zLHaRTneqOvQ2ee KbmpEcKPB6BkoL0Uu/zidZBg8Up69WK8l7kQgqe70nDXkeF17X6J1rjPr85HuLLU YVeHxR8lNp8jaKlgBQkSSuRj1i/KRw+3qrVycW77sOCNdnejMwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFP8jew77k9RPscZYPhtjfoBx0FzYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTE0ZmMyNzQtMGNiNS0z ZjVkLWE4NzUtZGJhNzRkNzhiOTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUiGAB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD0fQEACq/hW4GGw18cEjRsVcrIxLXHkdAUs/J3djB1GbcN6B6X+ U7M90tncN+D1Ns3DV3bQeR8Jj0Ou1G1DcD817Uy9GL4X82Xg98P/CNR/2CjQuEdB FO3jcPPL0Siyhg0Kl505HjwYhTNldVg0BGKhtTPnVCJ4x9vyrGEyRNlS0Hu5um2t plLnj2fGDmmmTFGwo/Qv9v0cF3eL4u+RDYY8+zkhEQjBExzmaYJ4tu+Kp0tFhrb/ M6bWbU1wgane7JcOAb0V3kkF2jGkotQvW68gAazvV5bPpdnE03jpC2RwDsPuldVv Paw9p0OOM6crg85Lb6OphJu5J4L31M6huac= -----END CERTIFICATE-----Generated at Sat Apr 26 15:56:29 2025 by rpki-client