$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8e1400e4-3a76-3332-9d5a-b3bdc7571e62.roa File: 8e1400e4-3a76-3332-9d5a-b3bdc7571e62.roa (raw, json) Hash identifier: Zc2hnvYe4uYDEztk+tafeZUf8GT853E3gZQgk8KqcU8= Subject key identifier: 96:1F:B0:FC:0E:F8:A3:84:D7:E2:5A:6C:DC:19:25:51:B8:FC:89:58 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849806F2E2AEA47CA533BD0C2C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8e1400e4-3a76-3332-9d5a-b3bdc7571e62.roa Signing time: Sat 12 Apr 2025 13:01:01 +0000 ROA not before: Sat 12 Apr 2025 13:01:01 +0000 ROA not after: Fri 11 Jul 2025 13:01:01 +0000 asID: 20940 IP address blocks: 2600:1404:1600::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:80:6f:2e:2a:ea:47:ca:53:3b:d0:c2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 12 13:01:01 2025 GMT Not After : Jul 11 13:01:01 2025 GMT Subject: CN=cb23cb3f-c2d6-43ba-8489-8ad27f814005 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:04:39:11:e4:7e:d6:d5:14:76:96:16:8c:b4: 20:d6:e5:ba:b4:17:f6:93:10:3c:8c:29:de:28:09: e1:ca:a4:71:c8:61:18:86:6e:e0:1d:09:ed:af:80: c9:d1:96:ff:71:ce:a0:51:02:f3:c8:d0:3d:9f:fc: 3b:28:9d:f0:9a:54:bd:7a:c5:73:6a:60:af:8c:a7: 4e:60:71:d0:22:fe:40:7c:48:a4:43:7c:1d:42:98: 9a:ce:87:1f:3d:ba:f5:21:7a:eb:0a:6e:79:63:76: f0:5c:d6:dc:48:f7:6f:b0:c4:41:06:fd:5b:3d:ee: 7d:01:4d:3d:9b:45:a3:e5:80:38:c5:a8:b9:d6:fa: 57:9a:f1:45:9d:12:24:19:90:59:4f:51:ae:4d:df: 7b:d3:c1:62:c3:b4:12:1b:40:00:56:9a:3d:3d:25: 9f:b4:ca:0f:dd:c4:cd:bf:d2:bb:15:b8:31:cf:25: e5:1f:1c:33:13:6b:fb:25:c7:c5:ba:83:44:13:ed: 43:da:ac:05:ed:35:9d:4f:c6:45:3f:71:4b:1e:b6: ca:cb:d1:41:d6:14:39:0f:fb:eb:65:45:04:aa:06: 8c:a3:21:cd:61:e2:b9:88:17:5e:04:75:99:26:7a: bf:ad:ef:e9:23:cd:81:45:b4:56:b8:f0:e6:2b:06: b3:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:1F:B0:FC:0E:F8:A3:84:D7:E2:5A:6C:DC:19:25:51:B8:FC:89:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8e1400e4-3a76-3332-9d5a-b3bdc7571e62.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1404:1600::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:5a:fd:d3:b9:42:75:92:49:b2:06:e1:2b:40:ae:50:77:33: ee:70:95:27:7b:7e:88:8a:92:fd:e9:a3:d2:ef:a9:23:9c:95: a0:1c:96:29:46:22:d1:a6:bd:93:97:5c:76:4f:0e:f1:77:42: 6f:19:1a:6c:09:56:36:0d:79:ca:af:38:c4:4e:76:ee:63:7e: 83:d9:6d:a9:f1:1b:b3:bd:af:df:4a:ff:d8:e3:c0:ef:b3:53: 1c:b3:5a:b9:4d:dc:a1:12:51:67:d4:09:3e:fb:df:b0:ca:17: 4c:16:0e:e1:33:8a:80:1c:e2:60:70:e0:bd:09:d0:d5:6c:92: b0:52:64:22:ff:28:14:3f:3f:ab:45:4b:9b:2a:5c:ba:96:5e: 53:14:9c:7c:48:80:50:fb:19:ce:1c:3c:e1:d2:f4:78:13:98: f0:c1:c5:a4:11:dc:59:94:33:87:9b:ce:e5:b1:ad:2c:b1:f0: 18:69:6e:29:a8:db:c1:35:c2:4d:e1:5a:96:d5:68:92:e9:eb: 78:02:97:c1:ad:19:27:7e:40:ed:73:d6:6f:4b:24:8b:01:50: ca:4e:1c:cf:71:67:3c:c8:f5:89:bb:18:da:a1:b0:d3:0f:ef: 08:31:ed:9d:00:da:27:44:1b:28:72:b1:3f:45:83:19:5c:84: 07:2f:dc:77 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmAby4q6kfKUzvQwsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQxMjEzMDEwMVoXDTI1MDcxMTEzMDEwMVowLzEtMCsGA1UEAxMk Y2IyM2NiM2YtYzJkNi00M2JhLTg0ODktOGFkMjdmODE0MDA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQQ5EeR+1tUUdpYWjLQg1uW6tBf2kxA8jCne KAnhyqRxyGEYhm7gHQntr4DJ0Zb/cc6gUQLzyNA9n/w7KJ3wmlS9esVzamCvjKdO YHHQIv5AfEikQ3wdQpiazocfPbr1IXrrCm55Y3bwXNbcSPdvsMRBBv1bPe59AU09 m0Wj5YA4xai51vpXmvFFnRIkGZBZT1GuTd9708Fiw7QSG0AAVpo9PSWftMoP3cTN v9K7FbgxzyXlHxwzE2v7JcfFuoNEE+1D2qwF7TWdT8ZFP3FLHrbKy9FB1hQ5D/vr ZUUEqgaMoyHNYeK5iBdeBHWZJnq/re/pI82BRbRWuPDmKwazVQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJYfsPwO+KOE1+JabNwZJVG4/IlYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGUxNDAwZTQtM2E3Ni0z MzMyLTlkNWEtYjNiZGM3NTcxZTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUBBYA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACda/dO5QnWSSbIG4StArlB3M+5wlSd7foiKkv3po9LvqSOclaAc lilGItGmvZOXXHZPDvF3Qm8ZGmwJVjYNecqvOMROdu5jfoPZbanxG7O9r99K/9jj wO+zUxyzWrlN3KESUWfUCT7737DKF0wWDuEzioAc4mBw4L0J0NVskrBSZCL/KBQ/ P6tFS5sqXLqWXlMUnHxIgFD7Gc4cPOHS9HgTmPDBxaQR3FmUM4ebzuWxrSyx8Bhp bimo28E1wk3hWpbVaJLp63gCl8GtGSd+QO1z1m9LJIsBUMpOHM9xZzzI9Ym7GNqh sNMP7wgx7Z0A2idEGyhysT9FgxlchAcv3Hc= -----END CERTIFICATE-----Generated at Sat Apr 26 19:20:48 2025 by rpki-client