$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d244cc3-9c26-3454-866a-b4055ea08dc0.roa File: 5d244cc3-9c26-3454-866a-b4055ea08dc0.roa (raw, json) Hash identifier: Us+dfS3MuZPwwgXNGyfhjCP5W6HYUny6Ib6NIQr4zJc= Subject key identifier: 6C:E1:CC:50:DB:81:CB:EF:11:0B:39:71:9F:4F:10:82:DD:21:14:02 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858498CFF27CAE265DEC97EA0E000 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d244cc3-9c26-3454-866a-b4055ea08dc0.roa Signing time: Thu 17 Apr 2025 01:00:45 +0000 ROA not before: Thu 17 Apr 2025 01:00:45 +0000 ROA not after: Wed 16 Jul 2025 01:00:45 +0000 asID: 24319 IP address blocks: 2600:1417:2a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8c:ff:27:ca:e2:65:de:c9:7e:a0:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 17 01:00:45 2025 GMT Not After : Jul 16 01:00:45 2025 GMT Subject: CN=5a925e99-2687-4bb9-81d2-23ceeeedb6c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:99:d5:7c:72:05:1b:94:ef:b9:fa:14:46:01: 60:9f:dd:c5:4d:de:62:d4:45:dd:33:69:e7:dc:77: 97:1b:fd:ce:7b:18:b5:2e:6f:be:e3:d8:23:b8:e3: 03:1f:1c:54:f9:eb:d2:a0:10:f3:50:ce:b5:9f:6b: 6c:05:9f:17:28:aa:5d:13:52:bd:ee:9f:ce:ef:47: cf:cf:2d:5b:23:96:86:ba:1a:ae:42:a5:f3:c9:92: 81:e5:f8:ac:d2:7e:7d:db:ea:6b:33:d6:f2:da:07: 92:ad:95:22:1f:0d:9a:49:26:12:e6:52:a2:02:11: 34:43:4f:8f:7a:b0:4b:b5:a2:ee:e4:cb:55:5d:2a: 25:77:57:48:6d:fe:90:09:55:58:b4:ee:a7:b9:87: f2:79:a5:9a:86:78:e4:76:37:c0:f0:a9:94:78:f2: 36:62:f8:3b:68:5c:b1:64:7a:8c:a9:9f:4b:0e:8d: bd:82:1b:99:4a:e0:95:ca:fc:c1:2d:82:3d:26:38: 88:02:04:a3:b4:0c:c3:ee:8d:d4:83:45:59:6b:c8: 34:b6:c9:e7:0c:5e:d3:bb:e8:e5:1f:d6:fb:dc:a3: 86:01:7e:f2:05:0d:67:a4:e5:a8:d6:1b:37:c5:2d: 67:61:11:de:0c:85:fb:c8:7f:e9:87:e5:96:62:c6: e5:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:E1:CC:50:DB:81:CB:EF:11:0B:39:71:9F:4F:10:82:DD:21:14:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d244cc3-9c26-3454-866a-b4055ea08dc0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1417:2a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:81:f3:bb:77:5e:bc:37:b4:37:21:4c:99:82:1e:f5:9e:3a: 5d:e7:77:82:db:04:f3:8e:d3:36:3d:ae:c6:0f:11:18:bf:e9: 0f:5d:6c:ef:ff:a6:8b:78:04:9d:72:19:7b:a4:2b:a9:4f:14: ff:e9:39:d6:b4:77:59:df:f7:93:15:7b:69:32:80:e8:12:19: a2:de:54:d7:9d:48:da:5e:fa:7e:e3:7d:0b:8b:33:b7:a1:46: 6b:96:c7:7e:a8:c7:af:7e:3c:eb:cf:08:54:9c:36:b7:f9:5d: ee:3c:1c:28:b8:ba:84:ea:de:85:91:a1:91:27:c3:2d:11:66: e6:e9:a2:50:f2:f0:3b:42:ed:b2:db:bd:e6:2a:de:b1:01:68: bc:d9:35:77:5c:3e:94:18:9b:a3:7a:1d:57:90:fb:60:d1:31: 52:0d:c6:61:83:93:10:9b:82:e5:42:d4:57:e2:7b:9e:8c:0c: 88:a8:08:34:95:a0:0b:9d:d3:5e:c8:20:ef:77:72:1f:ba:f0: ff:bd:78:7b:ce:9f:4b:ff:e2:cd:ba:c7:6f:a2:85:4f:f1:a8: a5:e8:8d:07:30:12:81:11:ed:cd:e3:c3:59:2c:13:6e:19:c0: 7d:61:22:c6:44:31:52:e6:fd:46:f8:5e:3a:51:d1:57:63:4b: fb:7d:84:14 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmM/yfK4mXeyX6g4AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQxNzAxMDA0NVoXDTI1MDcxNjAxMDA0NVowLzEtMCsGA1UEAxMk NWE5MjVlOTktMjY4Ny00YmI5LTgxZDItMjNjZWVlZWRiNmMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5nVfHIFG5TvufoURgFgn93FTd5i1EXdM2nn 3HeXG/3Oexi1Lm++49gjuOMDHxxU+evSoBDzUM61n2tsBZ8XKKpdE1K97p/O70fP zy1bI5aGuhquQqXzyZKB5fis0n592+prM9by2geSrZUiHw2aSSYS5lKiAhE0Q0+P erBLtaLu5MtVXSold1dIbf6QCVVYtO6nuYfyeaWahnjkdjfA8KmUePI2Yvg7aFyx ZHqMqZ9LDo29ghuZSuCVyvzBLYI9JjiIAgSjtAzD7o3Ug0VZa8g0tsnnDF7Tu+jl H9b73KOGAX7yBQ1npOWo1hs3xS1nYRHeDIX7yH/ph+WWYsbl1wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGzhzFDbgcvvEQs5cZ9PEILdIRQCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWQyNDRjYzMtOWMyNi0z NDU0LTg2NmEtYjQwNTVlYTA4ZGMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUFwAq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIeB87t3Xrw3tDchTJmCHvWeOl3nd4LbBPOO0zY9rsYPERi/6Q9d bO//pot4BJ1yGXukK6lPFP/pOda0d1nf95MVe2kygOgSGaLeVNedSNpe+n7jfQuL M7ehRmuWx36ox69+POvPCFScNrf5Xe48HCi4uoTq3oWRoZEnwy0RZubpolDy8DtC 7bLbveYq3rEBaLzZNXdcPpQYm6N6HVeQ+2DRMVINxmGDkxCbguVC1Ffie56MDIio CDSVoAud017IIO93ch+68P+9eHvOn0v/4s26x2+ihU/xqKXojQcwEoER7c3jw1ks E24ZwH1hIsZEMVLm/Ub4XjpR0VdjS/t9hBQ= -----END CERTIFICATE-----Generated at Sun Apr 27 17:48:22 2025 by rpki-client