$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/853c1aa1-1fc0-3639-b52e-955d1420a50c.roa File: 853c1aa1-1fc0-3639-b52e-955d1420a50c.roa (raw, json) Hash identifier: YY4YLx+JwRI1AhUHhSCN599fowVPWH9yRDtqcZx7p5A= Subject key identifier: 60:BA:BF:62:A6:E2:38:E4:49:EA:9E:3C:2D:99:2B:02:33:BE:40:DE Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858498CFF20E9081626C75398B920 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/853c1aa1-1fc0-3639-b52e-955d1420a50c.roa Signing time: Thu 17 Apr 2025 01:00:45 +0000 ROA not before: Thu 17 Apr 2025 01:00:45 +0000 ROA not after: Wed 16 Jul 2025 01:00:45 +0000 asID: 9498 IP address blocks: 2600:140f:3c00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8c:ff:20:e9:08:16:26:c7:53:98:b9:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 17 01:00:45 2025 GMT Not After : Jul 16 01:00:45 2025 GMT Subject: CN=4c118e14-b20e-4489-8ce2-94b667a996df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:a7:ab:73:82:2f:55:47:1e:c7:34:f5:7d:aa: 33:65:11:12:4a:83:38:eb:2d:c6:17:9e:13:e6:8d: a3:ad:ac:14:44:5c:fc:46:14:c3:49:60:d3:85:67: b0:dd:e5:e0:2a:f8:c7:d5:d2:53:6e:9e:7f:78:81: 72:a8:03:54:eb:22:6a:a7:96:c3:d8:a0:85:fa:8b: 30:9d:01:bb:e5:22:99:2a:14:12:9c:b9:db:26:b4: d3:62:49:3b:bc:08:ea:51:1c:30:1e:7e:aa:e2:c6: df:62:f2:2d:24:f9:05:40:22:c8:3e:dd:be:d2:ec: 8a:68:0a:1d:f3:53:ff:2d:87:c3:40:08:fa:df:c1: da:e5:bc:89:1c:ac:36:f4:ec:11:24:27:48:5b:28: a4:fb:39:ed:18:82:93:68:92:2a:3f:fe:d5:97:c0: d4:68:a4:5d:8a:60:89:44:78:37:88:93:6b:ab:c4: 3e:7b:86:88:49:0f:1f:d7:3a:5e:3a:5b:3a:be:ba: bf:85:de:93:14:f0:43:f1:ca:99:14:86:7e:e6:ed: d2:97:ca:8b:8f:77:90:c4:f7:05:b9:b6:f9:b5:e1: 9b:00:58:61:f0:da:91:f3:ec:06:56:22:70:34:84: 74:e2:ca:c8:34:ae:7f:a1:91:bc:7e:d1:dc:84:39: 6c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:BA:BF:62:A6:E2:38:E4:49:EA:9E:3C:2D:99:2B:02:33:BE:40:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/853c1aa1-1fc0-3639-b52e-955d1420a50c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:140f:3c00::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:a9:07:40:8f:f9:26:15:87:2a:5a:1f:43:e3:b1:d1:89:cf: 2d:4b:b1:15:50:7f:dc:45:c8:f4:c3:2c:7f:dd:de:23:e6:d7: 55:c3:d9:30:e5:bc:9f:a2:b1:00:52:61:32:d1:c4:b3:d1:fa: 01:f2:fc:40:12:9f:58:4b:82:4a:5a:8c:f5:ea:d7:26:47:77: f6:83:f5:54:17:17:1f:b2:55:a1:79:ee:08:ca:54:89:af:50: 87:a1:0e:77:cd:28:b4:b9:e4:cd:83:4a:17:31:e6:04:32:28: 12:bc:5f:bb:db:9a:f5:a4:25:8a:a5:92:9a:a8:c1:28:71:23: cb:fa:74:67:50:c0:94:19:67:75:28:4d:6a:05:8f:13:e7:16: 8a:b4:02:23:7c:04:e1:7c:0b:1d:2a:de:2c:7e:6d:87:91:c7: eb:09:e6:ff:7f:6f:61:92:0e:8b:3a:df:0d:d1:5a:4e:0b:76: c7:12:cb:00:8d:91:83:a1:41:47:f2:f6:65:a2:bb:e7:6e:e8: ed:25:36:63:a6:6a:2c:67:26:d8:9b:12:8e:89:23:b7:54:8f: b5:3e:0a:d6:76:c4:76:06:7a:d2:8e:47:31:08:72:b8:a3:c7: 16:b3:c6:15:2d:7e:7f:1c:22:f5:a9:4c:8e:5f:80:03:77:e9: 71:a5:7f:5e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmM/yDpCBYmx1OYuSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQxNzAxMDA0NVoXDTI1MDcxNjAxMDA0NVowLzEtMCsGA1UEAxMk NGMxMThlMTQtYjIwZS00NDg5LThjZTItOTRiNjY3YTk5NmRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6erc4IvVUcexzT1faozZRESSoM46y3GF54T 5o2jrawURFz8RhTDSWDThWew3eXgKvjH1dJTbp5/eIFyqANU6yJqp5bD2KCF+osw nQG75SKZKhQSnLnbJrTTYkk7vAjqURwwHn6q4sbfYvItJPkFQCLIPt2+0uyKaAod 81P/LYfDQAj638Ha5byJHKw29OwRJCdIWyik+zntGIKTaJIqP/7Vl8DUaKRdimCJ RHg3iJNrq8Q+e4aISQ8f1zpeOls6vrq/hd6TFPBD8cqZFIZ+5u3Sl8qLj3eQxPcF ubb5teGbAFhh8NqR8+wGViJwNIR04srINK5/oZG8ftHchDlsqQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGC6v2Km4jjkSeqePC2ZKwIzvkDeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODUzYzFhYTEtMWZjMC0z NjM5LWI1MmUtOTU1ZDE0MjBhNTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUDzwA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC6pB0CP+SYVhypaH0PjsdGJzy1LsRVQf9xFyPTDLH/d3iPm11XD 2TDlvJ+isQBSYTLRxLPR+gHy/EASn1hLgkpajPXq1yZHd/aD9VQXFx+yVaF57gjK VImvUIehDnfNKLS55M2DShcx5gQyKBK8X7vbmvWkJYqlkpqowShxI8v6dGdQwJQZ Z3UoTWoFjxPnFoq0AiN8BOF8Cx0q3ix+bYeRx+sJ5v9/b2GSDos63w3RWk4LdscS ywCNkYOhQUfy9mWiu+du6O0lNmOmaixnJtibEo6JI7dUj7U+CtZ2xHYGetKORzEI crijxxazxhUtfn8cIvWpTI5fgAN36XGlf14= -----END CERTIFICATE-----Generated at Sat Apr 26 21:53:50 2025 by rpki-client