$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8a6b9bd2-f6b6-3519-aa90-16816b9c7028.roa File: 8a6b9bd2-f6b6-3519-aa90-16816b9c7028.roa (raw, json) Hash identifier: VFImKgS6LXwrCrQxheodH3qTYjuKwpkjW8RBmq467mw= Subject key identifier: FF:9D:4B:46:B1:55:97:9D:C3:DE:53:DA:DA:F7:59:F6:C1:53:27:3D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584988CF357C99ABD2896CDFE900 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8a6b9bd2-f6b6-3519-aa90-16816b9c7028.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 20940 IP address blocks: 2600:1488:6140::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:35:7c:99:ab:d2:89:6c:df:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=6d4e3c58-6dca-44a4-b60a-75cf9956cd6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:09:e9:ac:22:5e:ec:2e:6c:1d:95:ce:a9:9a: 3d:da:c1:67:34:ef:a2:c2:e2:3c:a8:c9:b3:4e:e4: ad:c1:a0:87:dd:30:6c:23:4b:a6:07:29:1d:8e:d3: 46:c4:38:6b:b2:e5:a5:df:4d:00:dc:99:9a:44:15: b8:01:f8:3a:1a:56:59:63:c7:49:45:6f:d1:ce:77: d4:e0:c5:62:2a:55:92:e5:97:02:3f:66:6a:93:89: ad:40:85:ba:47:53:f0:6c:73:63:e0:78:11:89:96: 56:ce:e9:46:1f:ae:05:c9:db:6b:da:b3:28:38:fe: f6:62:fa:a0:f6:3b:82:5b:33:cd:a5:12:e2:99:a7: 2d:16:23:df:16:e4:7f:8d:1f:c8:b9:f7:bf:dc:0f: f3:a8:cc:21:33:3f:a1:bd:be:1a:23:f3:16:6d:02: a8:3f:2f:af:b2:03:a4:b2:ca:4c:7e:37:9e:4f:ff: f6:e3:0f:95:ed:19:00:f7:58:86:a1:5d:b8:ed:a4: c7:9d:4c:b5:1e:1b:53:9c:74:51:bd:c2:54:60:06: 6e:ff:d9:de:86:6f:94:61:c8:53:6b:53:3f:a8:3b: 86:92:de:e6:da:9c:f0:54:28:02:8d:9c:66:fe:25: 5a:38:7d:bf:fd:81:4e:cd:2e:c8:74:ce:18:1e:b6: 02:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:9D:4B:46:B1:55:97:9D:C3:DE:53:DA:DA:F7:59:F6:C1:53:27:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8a6b9bd2-f6b6-3519-aa90-16816b9c7028.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1488:6140::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:b4:0e:04:12:ae:69:13:73:c7:cb:41:d7:fe:2a:fb:80:a0: fd:bd:4f:ff:ac:1f:6d:be:68:d2:bd:a7:c6:da:dd:a3:e9:8b: 9d:44:d3:7f:13:62:e5:18:86:ab:5e:42:85:32:cc:f3:22:c8: 2f:b0:81:33:13:46:d6:22:43:bc:d3:9b:d5:39:88:ea:be:33: 91:59:65:94:4d:bb:4b:1a:e7:64:9d:43:0a:e5:1a:6c:db:3c: 2b:ac:cb:9d:a7:bf:8a:5f:68:72:38:bd:af:c2:64:8d:40:76: 96:55:8a:4b:9a:65:53:ff:36:eb:86:41:da:07:14:26:98:92: 48:79:ec:0e:a6:fb:3b:ac:66:2e:3e:1f:04:17:32:bb:4b:f4: 8d:e4:e0:6e:fd:7b:5c:35:74:99:b0:df:e3:84:29:a9:39:9b: 43:d2:c0:7b:a0:24:b1:5c:48:11:96:5f:d1:68:e0:61:a2:22: c5:dc:ea:91:35:a8:13:39:f4:9b:57:e8:0c:31:7e:ea:10:cb: 43:42:0a:79:1a:cf:b4:c3:ab:4c:c4:1d:eb:fa:84:44:f4:e2: ee:82:96:66:2a:c3:f7:5e:85:61:f2:9b:66:59:73:60:5c:36: f4:12:4a:25:c2:09:09:68:42:d9:ce:55:ef:3a:d7:d8:f5:77: 79:93:31:31 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmIzzV8mavSiWzf6QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk NmQ0ZTNjNTgtNmRjYS00NGE0LWI2MGEtNzVjZjk5NTZjZDZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgnprCJe7C5sHZXOqZo92sFnNO+iwuI8qMmz TuStwaCH3TBsI0umBykdjtNGxDhrsuWl300A3JmaRBW4Afg6GlZZY8dJRW/RznfU 4MViKlWS5ZcCP2Zqk4mtQIW6R1PwbHNj4HgRiZZWzulGH64Fydtr2rMoOP72Yvqg 9juCWzPNpRLimactFiPfFuR/jR/Iufe/3A/zqMwhMz+hvb4aI/MWbQKoPy+vsgOk sspMfjeeT//24w+V7RkA91iGoV247aTHnUy1HhtTnHRRvcJUYAZu/9nehm+UYchT a1M/qDuGkt7m2pzwVCgCjZxm/iVaOH2//YFOzS7IdM4YHrYCeQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFP+dS0axVZedw95T2tr3WfbBUyc9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGE2YjliZDItZjZiNi0z NTE5LWFhOTAtMTY4MTZiOWM3MDI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUiGFA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF60DgQSrmkTc8fLQdf+KvuAoP29T/+sH22+aNK9p8ba3aPpi51E 038TYuUYhqteQoUyzPMiyC+wgTMTRtYiQ7zTm9U5iOq+M5FZZZRNu0sa52SdQwrl GmzbPCusy52nv4pfaHI4va/CZI1AdpZVikuaZVP/NuuGQdoHFCaYkkh57A6m+zus Zi4+HwQXMrtL9I3k4G79e1w1dJmw3+OEKak5m0PSwHugJLFcSBGWX9Fo4GGiIsXc 6pE1qBM59JtX6AwxfuoQy0NCCnkaz7TDq0zEHev6hET04u6ClmYqw/dehWHym2ZZ c2BcNvQSSiXCCQloQtnOVe8619j1d3mTMTE= -----END CERTIFICATE-----Generated at Sat Apr 26 20:19:53 2025 by rpki-client