$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5c432216-bd6c-3f90-a94b-9ad80710daa1.roa File: 5c432216-bd6c-3f90-a94b-9ad80710daa1.roa (raw, json) Hash identifier: Jhkas9tX91x1OLgl7C/+5GU5wevmGgKo/iv5edRkkZs= Subject key identifier: B9:9F:94:19:EA:92:EE:5B:00:66:88:19:39:02:D8:29:69:B6:15:C8 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858497F09A9473D537CEDB7BF6400 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5c432216-bd6c-3f90-a94b-9ad80710daa1.roa Signing time: Sat 12 Apr 2025 01:00:48 +0000 ROA not before: Sat 12 Apr 2025 01:00:48 +0000 ROA not after: Fri 11 Jul 2025 01:00:48 +0000 asID: 20940 IP address blocks: 2600:1402:b800::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7f:09:a9:47:3d:53:7c:ed:b7:bf:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 12 01:00:48 2025 GMT Not After : Jul 11 01:00:48 2025 GMT Subject: CN=f70e68b6-6a8e-4d0a-a399-317346b451e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:c2:bf:17:c9:0c:43:d0:c3:05:4c:56:29:dd: 00:7f:f5:6c:ce:90:73:39:dc:bd:1e:49:cb:bd:52: 4b:87:56:ee:ff:bb:85:48:20:2d:a9:3e:72:70:0e: 62:44:6e:b5:2b:77:10:fb:89:32:69:42:03:db:4f: e1:bf:2a:48:97:d5:cc:c1:4c:32:69:81:0d:8b:93: aa:22:ca:51:97:19:6b:e4:9e:53:fc:39:05:db:40: 01:a4:0c:5b:e7:a7:15:72:6c:dd:03:fe:96:3c:48: 1a:17:3b:69:91:a9:90:c9:21:55:dc:dc:f1:62:78: ad:66:5f:44:3f:f8:e5:0e:76:43:4b:e7:20:80:76: 8b:8e:12:7f:bb:ae:a8:16:2e:aa:2b:3b:87:cb:c4: 00:84:40:0e:09:7f:bd:1e:c9:7a:a7:ea:f3:42:0f: ee:f6:07:05:bd:5a:47:c9:16:6e:ef:f8:0e:ea:8d: 6a:51:d8:83:2c:5d:c2:f7:a3:fb:a7:41:a5:b1:e3: 19:3d:03:16:ce:c8:cd:dd:aa:cb:fe:79:b4:2e:c3: fd:f5:11:b1:e8:d1:ce:94:b4:83:1f:c3:7f:d0:44: 3f:5c:f1:ac:fb:a3:11:1a:39:32:c2:96:6e:50:5f: 6a:0b:7c:64:e6:46:8a:da:f1:97:3c:60:40:bd:05: 49:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:9F:94:19:EA:92:EE:5B:00:66:88:19:39:02:D8:29:69:B6:15:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5c432216-bd6c-3f90-a94b-9ad80710daa1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1402:b800::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:2d:5c:57:41:f4:8c:d3:d1:bf:72:a9:a0:cf:09:57:bc:fa: 4a:40:5d:26:f1:fe:9d:0f:3b:95:a3:b8:e4:8d:59:d2:95:ad: 54:0b:db:1d:39:27:b3:7c:9d:39:6e:6d:d8:3a:ee:25:21:d1: db:9d:ce:aa:f4:23:28:dd:b2:1d:81:51:b0:d3:c2:70:52:f2: 6b:eb:a5:cc:37:d8:29:8a:6a:71:85:5c:16:56:1b:f3:c0:2c: 82:9c:b2:23:dd:9e:cd:3b:6a:96:3d:78:86:a5:44:b2:60:86: 95:63:91:cd:63:5f:80:6f:4e:81:78:dc:bb:87:9b:fa:b1:95: c4:f5:2d:b5:17:84:5e:f2:b3:31:1d:1d:68:6c:77:59:67:e6: cb:48:1a:f2:27:ce:31:1d:78:fc:5c:40:52:d6:79:49:6b:79: 2b:ba:c7:7c:4c:04:8a:88:c7:bd:d3:45:75:ba:81:56:33:10: 5c:98:3c:d3:db:1a:86:a9:2a:d1:86:74:d4:1b:69:99:9c:d3: 56:5b:a8:ba:ae:cb:15:01:3d:ac:86:8d:a8:95:d2:38:6f:fb: 22:f1:a6:86:ab:55:31:fc:ff:e7:cc:b8:33:f9:17:04:36:d2: 9d:53:87:03:8c:7d:a7:4c:82:58:e4:4b:0a:25:fd:53:74:3f: 0e:d9:ad:18 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEl/CalHPVN87be/ZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQxMjAxMDA0OFoXDTI1MDcxMTAxMDA0OFowLzEtMCsGA1UEAxMk ZjcwZTY4YjYtNmE4ZS00ZDBhLWEzOTktMzE3MzQ2YjQ1MWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMK/F8kMQ9DDBUxWKd0Af/VszpBzOdy9HknL vVJLh1bu/7uFSCAtqT5ycA5iRG61K3cQ+4kyaUID20/hvypIl9XMwUwyaYENi5Oq IspRlxlr5J5T/DkF20ABpAxb56cVcmzdA/6WPEgaFztpkamQySFV3NzxYnitZl9E P/jlDnZDS+cggHaLjhJ/u66oFi6qKzuHy8QAhEAOCX+9Hsl6p+rzQg/u9gcFvVpH yRZu7/gO6o1qUdiDLF3C96P7p0GlseMZPQMWzsjN3arL/nm0LsP99RGx6NHOlLSD H8N/0EQ/XPGs+6MRGjkywpZuUF9qC3xk5kaK2vGXPGBAvQVJfQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLmflBnqku5bAGaIGTkC2ClpthXIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWM0MzIyMTYtYmQ2Yy0z ZjkwLWE5NGItOWFkODA3MTBkYWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUArgA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGgtXFdB9IzT0b9yqaDPCVe8+kpAXSbx/p0PO5WjuOSNWdKVrVQL 2x05J7N8nTlubdg67iUh0dudzqr0Iyjdsh2BUbDTwnBS8mvrpcw32CmKanGFXBZW G/PALIKcsiPdns07apY9eIalRLJghpVjkc1jX4BvToF43LuHm/qxlcT1LbUXhF7y szEdHWhsd1ln5stIGvInzjEdePxcQFLWeUlreSu6x3xMBIqIx73TRXW6gVYzEFyY PNPbGoapKtGGdNQbaZmc01ZbqLquyxUBPayGjaiV0jhv+yLxpoarVTH8/+fMuDP5 FwQ20p1ThwOMfadMgljkSwol/VN0Pw7ZrRg= -----END CERTIFICATE-----Generated at Sat Apr 26 15:59:58 2025 by rpki-client