$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5b6f689e-cb95-33c8-a08e-212138ba65c6.roa File: 5b6f689e-cb95-33c8-a08e-212138ba65c6.roa (raw, json) Hash identifier: ky//ANByNiETX7vhoMHQBPQLyx1Ma+bj5iFpE/nDNVw= Subject key identifier: 85:05:8C:00:EF:87:29:71:AA:78:92:5F:4C:07:1F:EF:9B:56:AE:77 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858496CE46DD1B7142F146B212F00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5b6f689e-cb95-33c8-a08e-212138ba65c6.roa Signing time: Sat 05 Apr 2025 13:01:01 +0000 ROA not before: Sat 05 Apr 2025 13:01:01 +0000 ROA not after: Fri 04 Jul 2025 13:01:01 +0000 asID: 20940 IP address blocks: 2600:1409:3800::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6c:e4:6d:d1:b7:14:2f:14:6b:21:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 5 13:01:01 2025 GMT Not After : Jul 4 13:01:01 2025 GMT Subject: CN=32d140d8-3627-484d-a81b-63123e41bd8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:15:16:59:a0:53:cb:35:e1:27:81:eb:cd:2f: cd:6c:80:9d:32:f5:7b:ef:f9:97:e3:03:11:86:1f: c9:2c:44:d7:79:bc:e1:c6:06:f4:72:39:58:5a:e7: 3f:be:b2:7e:0a:ca:6e:d8:e3:49:3f:a2:e8:ac:64: 70:bd:30:ce:af:9b:15:a3:01:d9:95:f4:f0:09:69: 23:25:19:eb:20:80:ad:c1:52:99:e7:b5:d8:ff:f2: 25:d9:bd:d9:4f:21:a2:11:a6:d9:34:34:dd:e9:2b: 56:71:54:4e:d6:9b:22:26:91:a6:25:b2:09:cf:7b: a4:d0:39:a3:6e:59:48:42:08:ba:6d:58:e2:66:6b: 41:a9:b9:7a:c6:4d:81:88:1a:9e:cf:77:5a:68:88: 97:29:e7:e8:ee:d1:d1:b1:91:b5:2b:98:70:7f:1d: 4c:69:6f:67:d7:8d:aa:6c:39:09:a8:ac:61:e1:16: 5e:72:ed:92:ea:af:72:17:30:2a:7a:71:f0:94:25: 73:d0:5a:5e:71:40:59:b3:54:e7:58:14:5a:69:ce: dc:01:2e:a1:b2:b3:1c:01:a5:ac:ea:d4:62:55:79: 45:df:d6:31:6e:73:4b:27:71:39:77:44:41:d5:b1: 98:55:9f:a7:86:46:9e:3f:e4:39:29:b3:7d:ef:b7: dc:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:05:8C:00:EF:87:29:71:AA:78:92:5F:4C:07:1F:EF:9B:56:AE:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5b6f689e-cb95-33c8-a08e-212138ba65c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1409:3800::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:c1:fa:48:9f:38:a2:9d:24:10:e6:dd:c0:63:39:4c:33:a8: b5:a2:06:62:52:8d:ba:f8:ea:e1:91:a2:85:81:16:76:41:e3: 7d:b2:e6:ec:35:3d:03:ab:71:d2:1a:e4:d3:87:19:3a:3d:74: 03:e2:42:bc:cd:15:7b:b4:b1:81:72:23:c9:a3:95:eb:a0:cf: d7:4b:6e:8a:88:a1:0d:7c:c6:d1:f2:b7:9d:07:1b:71:e4:1f: 41:ce:c8:7f:07:fa:95:30:92:8a:0a:c3:e3:b9:92:65:b0:77: c2:6f:7c:bb:79:10:2f:94:ef:d8:04:5e:64:ff:e3:46:27:f7: 23:66:f7:54:14:05:18:93:ef:1a:45:3e:75:17:44:f7:c8:d1: 0a:77:fb:9a:2f:7d:fb:80:a1:3d:ac:e7:3e:3b:38:ee:93:15: 43:6a:2e:06:c0:7a:9c:16:20:29:c0:87:cb:84:64:a0:6c:be: 7b:88:cf:31:0b:a6:c1:81:01:a0:f2:19:e3:c2:70:40:79:5f: c5:09:c7:3c:dc:30:2a:2a:3a:39:31:08:59:72:c1:99:48:08: ad:2a:cd:e5:f5:91:5a:ab:f9:bb:ef:f9:cc:04:dd:4d:c5:1f: c2:1a:d8:29:7f:ac:df:59:87:1c:54:85:dc:28:99:17:04:08: ac:55:d6:b8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEls5G3RtxQvFGshLwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQwNTEzMDEwMVoXDTI1MDcwNDEzMDEwMVowLzEtMCsGA1UEAxMk MzJkMTQwZDgtMzYyNy00ODRkLWE4MWItNjMxMjNlNDFiZDhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBUWWaBTyzXhJ4HrzS/NbICdMvV77/mX4wMR hh/JLETXebzhxgb0cjlYWuc/vrJ+Cspu2ONJP6LorGRwvTDOr5sVowHZlfTwCWkj JRnrIICtwVKZ57XY//Il2b3ZTyGiEabZNDTd6StWcVRO1psiJpGmJbIJz3uk0Dmj bllIQgi6bVjiZmtBqbl6xk2BiBqez3daaIiXKefo7tHRsZG1K5hwfx1MaW9n142q bDkJqKxh4RZecu2S6q9yFzAqenHwlCVz0FpecUBZs1TnWBRaac7cAS6hsrMcAaWs 6tRiVXlF39YxbnNLJ3E5d0RB1bGYVZ+nhkaeP+Q5KbN977fcjwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIUFjADvhylxqniSX0wHH++bVq53MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWI2ZjY4OWUtY2I5NS0z M2M4LWEwOGUtMjEyMTM4YmE2NWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUCTgA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADvB+kifOKKdJBDm3cBjOUwzqLWiBmJSjbr46uGRooWBFnZB432y 5uw1PQOrcdIa5NOHGTo9dAPiQrzNFXu0sYFyI8mjleugz9dLboqIoQ18xtHyt50H G3HkH0HOyH8H+pUwkooKw+O5kmWwd8JvfLt5EC+U79gEXmT/40Yn9yNm91QUBRiT 7xpFPnUXRPfI0Qp3+5ovffuAoT2s5z47OO6TFUNqLgbAepwWICnAh8uEZKBsvnuI zzELpsGBAaDyGePCcEB5X8UJxzzcMCoqOjkxCFlywZlICK0qzeX1kVqr+bvv+cwE 3U3FH8Ia2Cl/rN9ZhxxUhdwomRcECKxV1rg= -----END CERTIFICATE-----Generated at Sat Apr 26 16:01:56 2025 by rpki-client