$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a7eec214-f1a2-3c35-8e51-5bca0959ef9e.roa File: a7eec214-f1a2-3c35-8e51-5bca0959ef9e.roa (raw, json) Hash identifier: ck8VVE8QtsofBGZEHGuyck+XOsEpgKAfrUHG+v18NLY= Subject key identifier: 44:6B:72:08:23:42:1C:DF:3B:64:31:35:2E:DF:6A:6C:8E:18:28:2A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849806F2FA91734254FFA3A2DA0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a7eec214-f1a2-3c35-8e51-5bca0959ef9e.roa Signing time: Sat 12 Apr 2025 13:01:01 +0000 ROA not before: Sat 12 Apr 2025 13:01:01 +0000 ROA not after: Fri 11 Jul 2025 13:01:01 +0000 asID: 20940 IP address blocks: 2600:1406:c800::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:80:6f:2f:a9:17:34:25:4f:fa:3a:2d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 12 13:01:01 2025 GMT Not After : Jul 11 13:01:01 2025 GMT Subject: CN=825a2342-640b-448a-a923-8e276ca0bcc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:76:bf:37:e5:dd:26:64:8a:f5:5b:e4:21:0a: 72:0b:86:ec:cb:69:59:3d:ac:df:f5:49:7e:83:1c: 2f:5c:93:7a:94:89:0c:9e:f0:e4:47:f2:c0:05:fe: bf:d2:dd:34:66:2c:c0:64:e9:01:83:85:40:14:f8: 4d:c6:fa:93:42:03:7a:8c:29:f8:94:90:fc:96:2d: ab:4d:67:18:5e:b5:74:68:bd:41:87:59:5a:e3:ac: 67:83:6a:b0:7e:74:40:c1:0d:6d:c2:41:a3:42:70: 03:ac:87:37:65:7c:a6:52:81:7c:df:f7:4b:36:5f: 04:d6:7c:04:2b:d4:a2:08:a3:f3:02:37:f3:6e:44: 02:ba:ca:38:84:4b:04:ac:52:bd:3c:fa:9d:28:0e: 2e:bb:d6:e2:31:1d:95:14:1d:98:99:60:32:b3:43: 06:69:69:96:d9:a8:fd:5f:73:7e:8a:f6:95:39:48: d7:bc:f3:62:00:b9:50:ab:72:38:04:d6:f6:51:6b: 13:d1:46:94:54:ae:96:79:d3:6e:b3:65:7f:7a:08: 2f:e5:be:d2:72:65:df:cb:60:21:d8:01:6e:76:bb: 27:3d:d8:61:4f:66:09:3c:dd:f1:53:4e:f2:a8:93: b9:01:01:2b:89:5e:f0:a4:7b:59:ee:81:f6:a2:95: b3:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:6B:72:08:23:42:1C:DF:3B:64:31:35:2E:DF:6A:6C:8E:18:28:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a7eec214-f1a2-3c35-8e51-5bca0959ef9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1406:c800::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:db:26:1e:85:bd:cc:b1:06:f8:ab:12:d0:ac:df:d1:0f:7b: ef:87:6e:3a:47:7e:ed:18:64:56:5b:54:9d:e3:ba:fb:4c:85: da:aa:fb:4e:4b:f6:fb:22:d0:b1:d5:0a:d6:e1:c5:e6:d1:9d: 10:43:f1:97:b7:f3:0e:35:4b:27:57:c6:19:c0:a1:8c:cb:b5: 38:35:6e:92:74:70:c8:c1:ca:31:75:9c:67:5d:e2:e1:88:be: a5:2e:a7:8e:94:40:88:10:e3:9d:fb:c2:ed:fb:a5:8a:5d:e1: 58:1f:f1:2e:be:35:69:72:ad:14:b2:73:78:71:59:1e:88:d6: 7a:20:59:b9:be:13:ee:8b:f5:1e:22:bd:ba:85:21:7c:56:b7: 1b:75:1d:16:aa:c4:81:3c:28:33:72:a4:36:3f:ad:12:4d:c3: 5d:ca:a8:cc:8b:f4:98:33:5b:81:e8:32:da:eb:cb:55:0c:27: a6:55:c5:81:c5:34:6b:04:9a:f5:ae:34:e6:f8:46:8c:b4:f4: c9:13:8d:6c:50:37:e2:d6:f1:79:ba:36:4a:9d:2e:8d:f0:d3: 32:11:97:31:c7:8d:ce:40:e3:9e:cb:fd:40:7c:a3:ad:22:ad: 6b:93:92:79:01:bb:a1:36:76:5c:83:de:c2:44:6c:94:d0:ed: 72:9a:ec:73 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmAby+pFzQlT/o6LaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQxMjEzMDEwMVoXDTI1MDcxMTEzMDEwMVowLzEtMCsGA1UEAxMk ODI1YTIzNDItNjQwYi00NDhhLWE5MjMtOGUyNzZjYTBiY2M0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXa/N+XdJmSK9VvkIQpyC4bsy2lZPazf9Ul+ gxwvXJN6lIkMnvDkR/LABf6/0t00ZizAZOkBg4VAFPhNxvqTQgN6jCn4lJD8li2r TWcYXrV0aL1Bh1la46xng2qwfnRAwQ1twkGjQnADrIc3ZXymUoF83/dLNl8E1nwE K9SiCKPzAjfzbkQCuso4hEsErFK9PPqdKA4uu9biMR2VFB2YmWAys0MGaWmW2aj9 X3N+ivaVOUjXvPNiALlQq3I4BNb2UWsT0UaUVK6WedNus2V/eggv5b7ScmXfy2Ah 2AFudrsnPdhhT2YJPN3xU07yqJO5AQEriV7wpHtZ7oH2opWz3QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFERrcggjQhzfO2QxNS7famyOGCgqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTdlZWMyMTQtZjFhMi0z YzM1LThlNTEtNWJjYTA5NTllZjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUBsgA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAETbJh6FvcyxBvirEtCs39EPe++HbjpHfu0YZFZbVJ3juvtMhdqq +05L9vsi0LHVCtbhxebRnRBD8Ze38w41SydXxhnAoYzLtTg1bpJ0cMjByjF1nGdd 4uGIvqUup46UQIgQ4537wu37pYpd4Vgf8S6+NWlyrRSyc3hxWR6I1nogWbm+E+6L 9R4ivbqFIXxWtxt1HRaqxIE8KDNypDY/rRJNw13KqMyL9JgzW4HoMtrry1UMJ6ZV xYHFNGsEmvWuNOb4Roy09MkTjWxQN+LW8Xm6NkqdLo3w0zIRlzHHjc5A457L/UB8 o60irWuTknkBu6E2dlyD3sJEbJTQ7XKa7HM= -----END CERTIFICATE-----Generated at Sat Apr 26 19:11:19 2025 by rpki-client