$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/930876c1-e7f3-33e8-8a35-078cc2bf3c67.roa File: 930876c1-e7f3-33e8-8a35-078cc2bf3c67.roa (raw, json) Hash identifier: YMK16XvvsOTsD61FQ93GPpPc8yZnJ4PRp54X+6hImjM= Subject key identifier: A1:3A:2F:87:72:8F:59:A7:01:5B:D7:20:58:EA:5F:84:47:0D:98:7E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584988CF6B1389F32855AC55FC80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/930876c1-e7f3-33e8-8a35-078cc2bf3c67.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 20940 IP address blocks: 2600:1488:8003::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:6b:13:89:f3:28:55:ac:55:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=971bfc33-9aeb-4d80-b674-1c5c3b961111 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9a:66:37:21:37:cf:2f:aa:1b:ea:bd:94:40: e9:b1:d8:be:cc:73:3b:9c:61:f8:fe:59:ce:e3:e5: 04:56:f4:07:b1:80:dc:f0:77:20:44:68:d4:c3:8b: 05:53:9a:c4:97:bb:76:b2:af:8d:2d:5c:c0:82:b2: 84:28:87:64:6c:98:2e:0b:5a:93:15:61:1f:81:c5: 23:c3:87:ee:ba:ca:72:42:3c:8c:d8:9d:21:09:aa: f7:14:d5:67:87:7f:0f:27:0c:a8:25:6f:7c:41:25: d3:ff:78:71:77:32:b1:1b:c9:91:0c:fb:41:40:6e: 4b:47:29:4a:88:12:e0:73:06:f8:b9:4d:82:32:79: 35:ee:25:66:98:40:3c:b2:04:62:e6:e6:82:b4:ef: 8b:1d:1c:02:19:b5:3b:59:fc:86:c9:65:cc:b4:14: 76:2c:d8:6c:b6:91:58:12:77:b3:46:64:6d:8e:09: fe:83:62:aa:26:94:88:39:d7:a2:ed:18:5b:6a:77: ca:c7:95:05:64:ec:4f:b3:c3:84:61:eb:10:11:d7: 4e:07:2d:e3:ac:eb:40:fe:3a:25:19:35:79:6a:ef: d5:f5:e7:ed:4e:f7:4d:b0:4e:2a:e4:de:72:26:7c: 38:02:b6:82:d6:ad:3e:6f:9a:03:72:1b:bc:42:4c: d3:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:3A:2F:87:72:8F:59:A7:01:5B:D7:20:58:EA:5F:84:47:0D:98:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/930876c1-e7f3-33e8-8a35-078cc2bf3c67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1488:8003::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:73:b2:c1:a0:10:3b:50:a8:a4:58:d3:c4:e5:c6:65:33:7f: ca:b4:d7:9f:44:0d:9c:b7:2f:d1:d9:af:67:1f:8d:13:a7:0a: 85:6f:9e:65:a6:41:3c:29:55:ff:c4:60:9c:9f:d4:1d:eb:73: f1:ee:c5:c5:2a:f2:bc:19:7c:ff:8d:87:a7:e1:f7:3a:a8:96: 7d:aa:88:fd:27:ee:e4:dc:ac:8b:ee:53:23:9d:e0:33:52:0a: 67:a0:e0:b0:98:7d:73:f0:9b:b2:50:99:ff:52:12:fe:df:1e: 3d:5a:f6:fa:21:75:06:be:9f:90:0e:ee:3b:26:99:0a:ff:e9: be:0a:40:c8:a4:c8:42:c8:4e:df:4e:66:cf:36:02:d9:01:16: cf:9d:fd:51:04:1a:18:55:4b:c4:fe:9c:98:40:ea:bb:5a:1b: 48:83:e2:a1:b2:87:b5:a9:9d:40:2b:c8:74:3a:f9:45:69:3d: b1:e7:db:09:0e:97:c5:11:bf:8d:f7:4c:91:ce:71:76:a2:c2: 5c:ff:02:a6:72:0f:4b:a0:ad:7f:18:f5:8e:36:6f:7b:a3:1a: 84:0d:bd:2f:9d:e3:0e:a4:90:a5:84:35:1a:b4:38:39:36:6e: 2d:fe:95:94:a6:69:88:7b:a6:ad:12:17:aa:25:44:a7:c5:80: 70:92:3c:bf -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmIz2sTifMoVaxV/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk OTcxYmZjMzMtOWFlYi00ZDgwLWI2NzQtMWM1YzNiOTYxMTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZpmNyE3zy+qG+q9lEDpsdi+zHM7nGH4/lnO 4+UEVvQHsYDc8HcgRGjUw4sFU5rEl7t2sq+NLVzAgrKEKIdkbJguC1qTFWEfgcUj w4fuuspyQjyM2J0hCar3FNVnh38PJwyoJW98QSXT/3hxdzKxG8mRDPtBQG5LRylK iBLgcwb4uU2CMnk17iVmmEA8sgRi5uaCtO+LHRwCGbU7WfyGyWXMtBR2LNhstpFY EnezRmRtjgn+g2KqJpSIOdei7RhbanfKx5UFZOxPs8OEYesQEddOBy3jrOtA/jol GTV5au/V9eftTvdNsE4q5N5yJnw4AraC1q0+b5oDchu8QkzTEQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKE6L4dyj1mnAVvXIFjqX4RHDZh+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTMwODc2YzEtZTdmMy0z M2U4LThhMzUtMDc4Y2MyYmYzYzY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUiIAD MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJVzssGgEDtQqKRY08TlxmUzf8q0159EDZy3L9HZr2cfjROnCoVv nmWmQTwpVf/EYJyf1B3rc/HuxcUq8rwZfP+Nh6fh9zqoln2qiP0n7uTcrIvuUyOd 4DNSCmeg4LCYfXPwm7JQmf9SEv7fHj1a9vohdQa+n5AO7jsmmQr/6b4KQMikyELI Tt9OZs82AtkBFs+d/VEEGhhVS8T+nJhA6rtaG0iD4qGyh7WpnUAryHQ6+UVpPbHn 2wkOl8URv433TJHOcXaiwlz/AqZyD0ugrX8Y9Y42b3ujGoQNvS+d4w6kkKWENRq0 ODk2bi3+lZSmaYh7pq0SF6olRKfFgHCSPL8= -----END CERTIFICATE-----Generated at Sat Apr 26 16:02:51 2025 by rpki-client