$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a54dad5d-42c0-379e-87a2-bf06f3eb7413.roa File: a54dad5d-42c0-379e-87a2-bf06f3eb7413.roa (raw, json) Hash identifier: y10Ki7O4iE+zZltqtO3ZDSHZmKYKPXQKgQnn7OxqVrc= Subject key identifier: 3F:9B:59:38:A5:E3:78:AD:96:3C:E1:5F:16:5A:55:23:E7:93:89:1C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849806F33D4869B910597C8A480 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a54dad5d-42c0-379e-87a2-bf06f3eb7413.roa Signing time: Sat 12 Apr 2025 13:01:01 +0000 ROA not before: Sat 12 Apr 2025 13:01:01 +0000 ROA not after: Fri 11 Jul 2025 13:01:01 +0000 asID: 20940 IP address blocks: 2600:141c:1800::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:80:6f:33:d4:86:9b:91:05:97:c8:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 12 13:01:01 2025 GMT Not After : Jul 11 13:01:01 2025 GMT Subject: CN=ebe7f9cc-610f-45a4-a4cf-763d6bef5da1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:bc:31:f4:75:7c:ba:13:e4:6f:95:c0:c7:ff: ce:1b:eb:d6:e0:01:33:dc:dc:a3:43:84:2f:3a:00: ea:e5:e4:33:34:cf:a4:ca:10:d5:fb:29:71:7c:47: 83:c2:67:8a:bb:c9:93:51:4c:8b:8d:8b:6c:fc:0a: b3:9c:a3:83:d4:f9:51:97:2b:7e:77:63:3c:47:4f: 19:95:b5:cc:52:04:6e:d2:48:fa:b7:13:8d:d9:48: 4e:ed:04:d0:d2:26:74:77:5e:87:c0:d7:ae:2d:28: cb:b9:df:f9:f2:08:37:6a:c6:85:2e:9f:b9:c2:2d: 44:d6:61:40:02:29:36:bd:54:26:ec:40:6e:21:3f: aa:38:3d:1c:31:ca:4a:b7:4c:2b:d3:d1:cf:44:5b: 38:be:5c:25:ea:4d:14:b5:3b:80:61:5d:61:57:1c: 70:8d:ee:71:8a:66:4d:d6:1f:5b:79:b1:68:28:86: 5e:b9:0e:6f:aa:79:e5:56:7b:f7:ec:8e:a6:8a:4e: b6:d8:8d:7e:62:8b:d9:1f:57:bb:00:28:7f:f4:c4: 5d:eb:40:69:a9:42:dc:52:55:dc:80:ff:b7:d4:50: 03:f3:77:0e:32:5d:54:ec:5b:0d:72:af:36:72:87: c3:75:b7:92:01:d0:74:c1:16:a1:f5:38:d2:ae:23: 73:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:9B:59:38:A5:E3:78:AD:96:3C:E1:5F:16:5A:55:23:E7:93:89:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a54dad5d-42c0-379e-87a2-bf06f3eb7413.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:141c:1800::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:2e:b8:e8:17:6a:23:ba:97:d3:8e:be:05:30:f9:63:08:26: d7:85:38:5e:b3:d0:4e:cb:d9:e2:25:4c:92:aa:17:99:2f:13: b9:27:7c:31:2f:2c:09:dc:4c:6d:3e:c8:43:9e:83:ce:c8:08: 20:af:67:89:ac:d3:5c:12:2e:30:11:3a:b3:fd:2b:01:8a:71: 32:0b:49:cf:5a:42:e3:67:0f:c4:55:8d:e8:12:a5:b1:74:d1: 26:cb:7d:bd:f0:ca:76:16:24:40:d2:24:ad:78:c1:d9:d1:7d: e9:d5:ea:7f:a0:ec:98:63:92:4f:66:d2:f6:ec:51:48:bd:f9: 19:4c:05:89:a7:89:d6:fb:e1:cf:57:b6:24:69:b5:ad:64:3a: ee:50:ac:ca:d8:d1:e4:af:31:ba:71:fc:c3:9e:b8:2d:42:81: f6:aa:31:2e:1a:7e:41:84:1d:19:08:12:39:7a:7f:ff:6f:68: b1:73:e1:87:d7:7a:5f:e6:64:45:cf:76:99:38:fb:7b:ca:78: e6:ed:91:4e:dc:ad:4a:d2:ce:9a:8e:57:09:8f:76:d3:91:0e: 39:c3:a8:9e:13:12:f0:83:20:72:9f:20:99:5a:d1:34:e9:08: e7:04:c4:a9:01:0d:2a:fd:3e:31:1c:e3:8b:11:f0:91:f0:b6: 62:47:62:dd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmAbzPUhpuRBZfIpIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQxMjEzMDEwMVoXDTI1MDcxMTEzMDEwMVowLzEtMCsGA1UEAxMk ZWJlN2Y5Y2MtNjEwZi00NWE0LWE0Y2YtNzYzZDZiZWY1ZGExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLwx9HV8uhPkb5XAx//OG+vW4AEz3NyjQ4Qv OgDq5eQzNM+kyhDV+ylxfEeDwmeKu8mTUUyLjYts/AqznKOD1PlRlyt+d2M8R08Z lbXMUgRu0kj6txON2UhO7QTQ0iZ0d16HwNeuLSjLud/58gg3asaFLp+5wi1E1mFA Aik2vVQm7EBuIT+qOD0cMcpKt0wr09HPRFs4vlwl6k0UtTuAYV1hVxxwje5ximZN 1h9bebFoKIZeuQ5vqnnlVnv37I6mik622I1+YovZH1e7ACh/9MRd60BpqULcUlXc gP+31FAD83cOMl1U7FsNcq82cofDdbeSAdB0wRah9TjSriNzeQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFD+bWTil43itljzhXxZaVSPnk4kcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTU0ZGFkNWQtNDJjMC0z NzllLTg3YTItYmYwNmYzZWI3NDEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUHBgA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAwuuOgXaiO6l9OOvgUw+WMIJteFOF6z0E7L2eIlTJKqF5kvE7kn fDEvLAncTG0+yEOeg87ICCCvZ4ms01wSLjAROrP9KwGKcTILSc9aQuNnD8RVjegS pbF00SbLfb3wynYWJEDSJK14wdnRfenV6n+g7Jhjkk9m0vbsUUi9+RlMBYmnidb7 4c9XtiRpta1kOu5QrMrY0eSvMbpx/MOeuC1CgfaqMS4afkGEHRkIEjl6f/9vaLFz 4YfXel/mZEXPdpk4+3vKeObtkU7crUrSzpqOVwmPdtORDjnDqJ4TEvCDIHKfIJla 0TTpCOcExKkBDSr9PjEc44sR8JHwtmJHYt0= -----END CERTIFICATE-----Generated at Sat Apr 26 17:46:51 2025 by rpki-client