$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6ee9539d-7eaf-308f-9a66-adf3d69540c4.roa File: 6ee9539d-7eaf-308f-9a66-adf3d69540c4.roa (raw, json) Hash identifier: /R2w0KCwbfhmN+o9VoF1SLqkvuTQCpMSjevYvSICluI= Subject key identifier: D2:06:AE:DA:79:1F:FF:C0:1A:48:CF:0C:C8:1B:91:41:B1:A7:B0:A1 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584988CF6ADC36BCC221A7845820 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6ee9539d-7eaf-308f-9a66-adf3d69540c4.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 20940 IP address blocks: 2600:1488:6300::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:6a:dc:36:bc:c2:21:a7:84:58:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=c2294a11-2ecd-40f3-b989-c0c01f4a9f11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:72:49:32:c3:6f:6e:4c:3d:49:8b:9c:2b:95: c1:a1:2a:d3:71:e4:2f:63:d9:89:f3:91:1d:74:90: 7b:54:61:46:d0:d1:bf:f8:8e:b6:c0:ca:b7:88:47: b2:68:66:1b:73:a8:4e:fb:a5:f0:cd:54:81:43:4a: 4a:00:56:5a:8d:f1:0e:c4:ac:f4:d0:1f:9a:47:3e: 8d:45:3a:11:e0:34:9b:95:d7:18:9f:b4:32:2e:3c: 69:12:91:0f:41:c4:ee:a4:cf:16:96:88:47:76:44: 50:06:5d:0b:a5:c4:e6:59:8b:ae:6f:94:44:a9:aa: b3:1a:28:15:0f:2c:13:3a:83:85:ef:c9:c5:8e:b5: ce:14:41:07:07:ab:28:ed:22:9e:5e:42:e6:57:c9: 65:7f:65:d9:34:f4:20:e5:b9:6e:41:e5:e4:38:71: f5:42:7f:5c:34:b6:06:ea:7d:1b:7e:a6:8b:b2:49: 62:b7:1c:6a:ec:0d:b7:4a:fa:15:10:05:7a:15:9d: 25:86:af:04:80:24:a1:7e:59:93:a2:25:02:6a:a1: 9b:8f:00:f0:c6:4e:fd:fe:63:03:84:db:92:3d:c3: f5:84:6f:ec:80:e9:ef:a4:b8:e4:ac:21:c9:79:e3: c3:34:f8:68:02:f6:f5:53:ae:c8:74:43:40:33:80: 93:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:06:AE:DA:79:1F:FF:C0:1A:48:CF:0C:C8:1B:91:41:B1:A7:B0:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6ee9539d-7eaf-308f-9a66-adf3d69540c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1488:6300::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:89:c6:d1:6b:41:b8:e0:f4:4a:04:7d:72:14:74:81:e6:86: e1:78:8e:4a:3e:f1:ad:9a:20:77:47:5a:87:c0:7c:8d:cb:2d: c0:6d:c9:b7:ab:3e:a1:0c:d0:03:04:63:68:23:67:59:b7:ac: 70:d8:85:64:8a:d8:6b:80:81:57:05:a3:0b:7c:2e:52:e7:cb: 3e:9e:c5:04:c2:73:ee:f3:e3:f8:e8:f5:d8:9b:de:79:ba:e0: 08:e3:b3:38:26:bf:99:6c:7f:a1:ca:5d:0b:c4:d6:4d:7b:2f: 8e:fd:ac:fe:cb:db:ee:7a:17:64:64:4f:03:8d:55:07:83:5b: dc:d2:54:aa:89:ec:3f:96:f8:5e:fb:6c:6e:a8:96:2c:f8:bf: 50:a2:40:23:7c:90:5c:92:99:da:0d:61:c9:97:f6:9e:b1:75: e7:07:bf:fb:1f:66:ac:6a:88:73:5f:77:50:1f:ea:28:0c:1f: 6f:7f:9e:9c:8c:fd:6e:90:7d:d2:8a:c3:ba:88:a6:8f:19:cb: b9:b9:35:e0:5e:00:3a:8a:36:a5:05:06:62:23:bf:af:4e:57: 35:25:27:01:40:65:c7:f5:ac:b7:a4:0d:c1:2c:40:ac:22:d4: 51:b2:ec:d3:be:0b:71:11:87:8f:60:db:65:ea:7c:cb:4e:ba: ca:21:b5:b9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmIz2rcNrzCIaeEWCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk YzIyOTRhMTEtMmVjZC00MGYzLWI5ODktYzBjMDFmNGE5ZjExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3JJMsNvbkw9SYucK5XBoSrTceQvY9mJ85Ed dJB7VGFG0NG/+I62wMq3iEeyaGYbc6hO+6XwzVSBQ0pKAFZajfEOxKz00B+aRz6N RToR4DSbldcYn7QyLjxpEpEPQcTupM8WlohHdkRQBl0LpcTmWYuub5REqaqzGigV DywTOoOF78nFjrXOFEEHB6so7SKeXkLmV8llf2XZNPQg5bluQeXkOHH1Qn9cNLYG 6n0bfqaLsklitxxq7A23SvoVEAV6FZ0lhq8EgCShflmToiUCaqGbjwDwxk79/mMD hNuSPcP1hG/sgOnvpLjkrCHJeePDNPhoAvb1U67IdENAM4CTwwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNIGrtp5H//AGkjPDMgbkUGxp7ChMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNmVlOTUzOWQtN2VhZi0z MDhmLTlhNjYtYWRmM2Q2OTU0MGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUiGMA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAECJxtFrQbjg9EoEfXIUdIHmhuF4jko+8a2aIHdHWofAfI3LLcBt yberPqEM0AMEY2gjZ1m3rHDYhWSK2GuAgVcFowt8LlLnyz6exQTCc+7z4/jo9dib 3nm64Ajjszgmv5lsf6HKXQvE1k17L479rP7L2+56F2RkTwONVQeDW9zSVKqJ7D+W +F77bG6oliz4v1CiQCN8kFySmdoNYcmX9p6xdecHv/sfZqxqiHNfd1Af6igMH29/ npyM/W6QfdKKw7qIpo8Zy7m5NeBeADqKNqUFBmIjv69OVzUlJwFAZcf1rLekDcEs QKwi1FGy7NO+C3ERh49g22XqfMtOusohtbk= -----END CERTIFICATE-----Generated at Sat Apr 26 16:02:59 2025 by rpki-client