$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8421f1d6-084c-329e-b54a-2cac536f6385.roa File: 8421f1d6-084c-329e-b54a-2cac536f6385.roa (raw, json) Hash identifier: fJX1VwqsFGTCoMqBSfFc0a9cn05Zda9oZOQgi2FyIK8= Subject key identifier: 76:FD:60:8A:DC:FA:B0:10:6B:76:22:DA:54:E2:02:40:B7:3A:D2:2D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849806F3092C5C766444D759F00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8421f1d6-084c-329e-b54a-2cac536f6385.roa Signing time: Sat 12 Apr 2025 13:01:01 +0000 ROA not before: Sat 12 Apr 2025 13:01:01 +0000 ROA not after: Fri 11 Jul 2025 13:01:01 +0000 asID: 20940 IP address blocks: 2600:1409:5800::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:80:6f:30:92:c5:c7:66:44:4d:75:9f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 12 13:01:01 2025 GMT Not After : Jul 11 13:01:01 2025 GMT Subject: CN=65e31f91-1810-473b-a51d-1c6067a0fa8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:55:fe:ef:a4:1a:7c:9d:39:ee:cf:99:62:b8: 5d:a9:50:fd:c6:5a:5c:b7:d3:e3:a0:7e:b2:34:04: 48:02:5f:39:1d:39:c3:b0:b8:cb:43:f6:94:df:72: 79:30:a7:7d:67:bc:d5:00:14:5d:68:b8:92:d1:b4: 53:2d:2b:df:7a:be:be:5a:e1:b0:c6:ee:12:95:16: 66:20:5d:40:52:89:2d:7e:ea:43:c9:0f:a7:41:2a: 82:61:39:53:ff:53:21:fa:03:9a:ee:59:01:4f:32: 97:de:ea:c1:a8:ad:a2:b3:13:e5:80:bc:3e:cc:0a: 5d:3f:c4:70:8f:8c:a4:00:a0:60:07:76:8d:fa:f1: 50:45:51:e5:c0:b4:81:fe:8d:23:51:9c:c5:18:e4: db:68:be:99:ac:0e:27:b2:19:35:04:56:ab:4f:21: 7a:07:a9:cf:0a:5f:9c:bf:87:d2:b1:2c:a6:fb:87: 2d:bd:33:9a:eb:af:08:b6:11:56:f5:d1:70:ee:db: c6:cb:f0:4a:e3:56:2c:cc:bf:1a:26:3b:70:14:73: b3:05:ed:d1:27:d3:a6:f9:19:1c:72:57:86:cd:15: 72:85:35:90:27:20:e8:5f:24:77:fd:f9:d8:61:3d: 4d:e4:b0:29:26:fb:72:98:6e:ee:dc:c9:10:78:98: 3a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:FD:60:8A:DC:FA:B0:10:6B:76:22:DA:54:E2:02:40:B7:3A:D2:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8421f1d6-084c-329e-b54a-2cac536f6385.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1409:5800::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:51:47:34:cc:68:fc:3c:c0:10:48:df:31:73:e9:bc:27:6b: 01:5a:da:22:9a:6a:1b:ad:a8:e8:7b:e6:16:62:e4:49:c5:89: 25:34:19:b1:72:e4:4f:a6:c1:fe:ef:92:f1:51:e9:91:aa:5f: 21:ca:1f:dd:a6:ba:97:52:fc:54:5a:e4:b5:c5:bb:39:9a:9a: 66:6d:ea:56:c2:b6:d2:5a:85:e5:fa:ee:33:d6:94:ca:99:bc: d3:35:2e:16:c9:24:f0:11:25:27:08:b0:4a:ac:8b:8c:0e:56: d3:20:08:05:3d:c7:75:b5:fb:e3:7f:31:45:d8:fa:c1:a8:e9: 32:99:df:a2:8f:f6:d2:fc:69:c5:10:ce:f7:18:ba:1d:2a:e6: 7c:66:28:97:14:23:b8:f6:a5:a7:de:70:e2:0b:a9:c2:3a:2a: 28:eb:5c:2f:f9:c7:2c:18:d3:dd:3f:39:f0:ee:5d:8c:aa:d9: dd:ab:2c:fa:c0:70:47:3a:5f:69:f7:36:3c:ca:41:8a:75:2a: 87:2a:2f:67:69:bd:59:25:4e:34:d3:9d:99:19:31:20:8f:11: c9:52:7d:98:1c:25:1f:be:fb:1a:1b:cb:5f:c7:ec:a8:c2:31: 05:25:fb:ec:95:39:1e:d1:d3:22:60:14:47:1a:26:9a:6f:af: 06:43:31:9f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmAbzCSxcdmRE11nwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQxMjEzMDEwMVoXDTI1MDcxMTEzMDEwMVowLzEtMCsGA1UEAxMk NjVlMzFmOTEtMTgxMC00NzNiLWE1MWQtMWM2MDY3YTBmYThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1X+76QafJ057s+ZYrhdqVD9xlpct9PjoH6y NARIAl85HTnDsLjLQ/aU33J5MKd9Z7zVABRdaLiS0bRTLSvfer6+WuGwxu4SlRZm IF1AUoktfupDyQ+nQSqCYTlT/1Mh+gOa7lkBTzKX3urBqK2isxPlgLw+zApdP8Rw j4ykAKBgB3aN+vFQRVHlwLSB/o0jUZzFGOTbaL6ZrA4nshk1BFarTyF6B6nPCl+c v4fSsSym+4ctvTOa668IthFW9dFw7tvGy/BK41YszL8aJjtwFHOzBe3RJ9Om+Rkc cleGzRVyhTWQJyDoXyR3/fnYYT1N5LApJvtymG7u3MkQeJg6TwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHb9YIrc+rAQa3Yi2lTiAkC3OtItMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODQyMWYxZDYtMDg0Yy0z MjllLWI1NGEtMmNhYzUzNmY2Mzg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUCVgA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAhRRzTMaPw8wBBI3zFz6bwnawFa2iKaahutqOh75hZi5EnFiSU0 GbFy5E+mwf7vkvFR6ZGqXyHKH92mupdS/FRa5LXFuzmammZt6lbCttJaheX67jPW lMqZvNM1LhbJJPARJScIsEqsi4wOVtMgCAU9x3W1++N/MUXY+sGo6TKZ36KP9tL8 acUQzvcYuh0q5nxmKJcUI7j2pafecOILqcI6KijrXC/5xywY090/OfDuXYyq2d2r LPrAcEc6X2n3NjzKQYp1KocqL2dpvVklTjTTnZkZMSCPEclSfZgcJR+++xoby1/H 7KjCMQUl++yVOR7R0yJgFEcaJppvrwZDMZ8= -----END CERTIFICATE-----Generated at Sat Apr 26 17:44:16 2025 by rpki-client