$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5afed186-75e6-3708-a389-413082f54de4.roa File: 5afed186-75e6-3708-a389-413082f54de4.roa (raw, json) Hash identifier: fErPAaG+p4Dm8/m5iZjQq+xHGZpqyN1Fq+oDIFKyGcE= Subject key identifier: AD:9D:4A:BC:41:67:CC:DB:59:5C:73:CD:20:05:07:BE:06:31:7C:5F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849806F33B47F83AFF5A05A1AF0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5afed186-75e6-3708-a389-413082f54de4.roa Signing time: Sat 12 Apr 2025 13:01:01 +0000 ROA not before: Sat 12 Apr 2025 13:01:01 +0000 ROA not after: Fri 11 Jul 2025 13:01:01 +0000 asID: 20940 IP address blocks: 2600:141b:d800::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:80:6f:33:b4:7f:83:af:f5:a0:5a:1a:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 12 13:01:01 2025 GMT Not After : Jul 11 13:01:01 2025 GMT Subject: CN=7ae9a186-bb46-4ab2-aef0-120bdae4c7ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:48:94:bd:9f:b1:b6:f9:05:61:ce:68:9b:3b: 7e:cf:57:8d:ff:6f:7f:a3:bd:5e:8f:20:c6:cf:71: 07:12:f3:82:fc:98:f8:c9:d8:d4:b2:79:bc:83:a6: 20:14:ee:4e:ae:93:72:0c:90:8c:ce:c9:bd:7f:1c: 53:b5:a5:ef:c2:ea:49:c2:30:7f:75:d2:52:d1:f8: 10:6d:96:d4:0c:de:a8:df:90:e2:39:36:bd:9e:d7: 26:9c:88:34:85:a9:c8:e2:11:ad:a6:6f:3a:60:60: e7:bd:28:0c:56:ca:90:28:e6:6b:2d:7a:9b:9b:d2: 29:44:27:e5:d9:a3:cc:6b:bc:97:41:7e:f5:1e:ba: 02:5d:f3:38:56:be:fa:9a:47:be:3a:7a:8e:30:f9: e7:1b:2e:3b:19:a6:9f:06:e0:9c:34:f0:78:bf:6f: 30:6c:64:0d:87:03:7c:e3:c5:9e:08:78:84:5e:e5: 68:7a:38:8a:34:30:09:c0:3f:2f:c8:49:4e:75:ee: cc:2c:94:57:32:81:df:13:ce:66:61:c5:28:18:6b: e6:9a:e8:ac:18:e4:f0:29:a4:a5:d9:8c:09:f8:fb: b3:89:02:1b:e2:c7:ca:ab:6c:ff:0d:0c:7d:c0:23: d9:fa:e0:02:ed:34:15:e3:4e:67:d9:b6:0a:f5:a5: 8a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:9D:4A:BC:41:67:CC:DB:59:5C:73:CD:20:05:07:BE:06:31:7C:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5afed186-75e6-3708-a389-413082f54de4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:141b:d800::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:15:cd:b9:38:d9:b0:0e:ad:59:62:ff:f4:ac:9a:d7:a5:55: a7:6e:2d:32:30:d7:0c:dc:52:68:18:32:cd:98:a9:fa:91:14: 6a:1b:37:64:f9:74:52:d3:dc:54:e8:f9:15:4c:49:20:0e:0a: cd:5d:d9:d1:86:2e:f4:85:12:d4:aa:8e:61:bf:3a:8d:b2:e1: 5d:0c:23:bf:2d:91:7d:21:1b:8b:31:ed:6c:1c:40:73:6a:bb: d0:2f:6e:1c:47:01:12:00:17:9c:8e:05:e0:e6:8b:c6:94:66: db:f0:d2:2a:8c:24:3f:51:9f:77:66:cc:09:eb:78:f8:37:15: 6f:1d:c8:1b:d9:1b:97:f9:65:5e:a8:dc:b5:d2:08:92:a5:9e: 00:d6:56:5a:1e:c7:40:53:b6:31:67:0c:52:d0:19:3e:80:3a: 1d:b0:31:e9:b1:83:5a:5b:e3:e6:c5:b5:ba:2f:16:b4:34:18: a5:53:11:06:e7:14:35:d5:2a:23:50:58:82:f6:20:95:d3:73: 7d:d5:75:28:5d:1f:33:db:cf:d2:c1:1b:ba:dc:70:b4:79:ab: be:a3:97:d7:7b:99:9e:04:d4:27:6e:a4:03:96:83:e8:7f:ad: fd:17:76:28:08:5e:ae:40:4a:6e:5f:e4:56:56:f6:8d:a9:95: fd:6d:f0:9d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmAbzO0f4Ov9aBaGvAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQxMjEzMDEwMVoXDTI1MDcxMTEzMDEwMVowLzEtMCsGA1UEAxMk N2FlOWExODYtYmI0Ni00YWIyLWFlZjAtMTIwYmRhZTRjN2FlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgEiUvZ+xtvkFYc5omzt+z1eN/29/o71ejyDG z3EHEvOC/Jj4ydjUsnm8g6YgFO5OrpNyDJCMzsm9fxxTtaXvwupJwjB/ddJS0fgQ bZbUDN6o35DiOTa9ntcmnIg0hanI4hGtpm86YGDnvSgMVsqQKOZrLXqbm9IpRCfl 2aPMa7yXQX71HroCXfM4Vr76mke+OnqOMPnnGy47GaafBuCcNPB4v28wbGQNhwN8 48WeCHiEXuVoejiKNDAJwD8vyElOde7MLJRXMoHfE85mYcUoGGvmmuisGOTwKaSl 2YwJ+PuziQIb4sfKq2z/DQx9wCPZ+uAC7TQV405n2bYK9aWKRwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFK2dSrxBZ8zbWVxzzSAFB74GMXxfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWFmZWQxODYtNzVlNi0z NzA4LWEzODktNDEzMDgyZjU0ZGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUG9gA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEAVzbk42bAOrVli//SsmtelVaduLTIw1wzcUmgYMs2YqfqRFGob N2T5dFLT3FTo+RVMSSAOCs1d2dGGLvSFEtSqjmG/Oo2y4V0MI78tkX0hG4sx7Wwc QHNqu9AvbhxHARIAF5yOBeDmi8aUZtvw0iqMJD9Rn3dmzAnrePg3FW8dyBvZG5f5 ZV6o3LXSCJKlngDWVloex0BTtjFnDFLQGT6AOh2wMemxg1pb4+bFtbovFrQ0GKVT EQbnFDXVKiNQWIL2IJXTc33VdShdHzPbz9LBG7rccLR5q76jl9d7mZ4E1CdupAOW g+h/rf0XdigIXq5ASm5f5FZW9o2plf1t8J0= -----END CERTIFICATE-----Generated at Sat Apr 26 18:07:45 2025 by rpki-client