$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aecdc342-b34c-394b-b735-1033691ffd83.roa File: aecdc342-b34c-394b-b735-1033691ffd83.roa (raw, json) Hash identifier: VYRv8ggePLwcL5LbbHgktb0nAvKCCFCuo5+D328CvQE= Subject key identifier: 52:47:7F:1F:6F:B8:39:3E:6F:C1:95:43:A5:03:2F:7E:38:3A:91:8A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849806F2D803095086907EB2A80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aecdc342-b34c-394b-b735-1033691ffd83.roa Signing time: Sat 12 Apr 2025 13:01:01 +0000 ROA not before: Sat 12 Apr 2025 13:01:01 +0000 ROA not after: Fri 11 Jul 2025 13:01:01 +0000 asID: 20940 IP address blocks: 2600:1418:a000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:80:6f:2d:80:30:95:08:69:07:eb:2a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 12 13:01:01 2025 GMT Not After : Jul 11 13:01:01 2025 GMT Subject: CN=9fad5f7b-81f3-4e1e-a304-c604e2268f35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:8e:44:1c:1b:26:2d:c7:79:fe:ac:28:12:e2: b7:1e:5e:c8:d7:1c:5d:5c:ed:2e:0d:27:0c:70:a0: 06:32:9d:b4:58:30:37:21:ea:11:f0:df:b9:3b:4e: 2f:ac:10:89:20:04:15:17:57:26:77:cd:9b:cd:2b: 78:2f:b0:da:38:0c:3c:c1:b0:e4:bd:2f:4c:0f:fc: c8:60:e2:be:60:ec:12:49:0a:3e:43:1f:ec:17:e1: 93:a1:ec:56:37:36:16:d8:44:c0:1c:7d:77:af:45: 13:dc:00:3a:78:08:ac:29:ef:38:ba:df:d5:8f:27: 2c:a1:1c:8c:39:3c:b0:35:b1:a1:86:72:46:6e:d2: be:cb:eb:d6:38:ef:d6:46:2a:93:30:e4:db:79:b4: b4:d9:b6:60:c7:98:5e:02:15:77:44:44:65:ab:80: e6:c8:12:e0:55:1a:6d:d8:dd:64:24:51:bb:63:bd: bf:6b:d5:d2:b3:a9:d3:2a:8d:50:16:7b:3a:68:87: 28:61:b0:31:b1:16:c5:50:88:04:b7:09:c9:26:21: 61:2e:5a:e9:61:a4:b3:eb:2d:6c:5a:0c:52:ef:1d: 13:b4:48:cd:67:dd:d5:46:89:ba:01:7e:10:bc:8d: e1:1a:6c:f3:bb:fd:2b:41:cd:59:51:89:78:8c:f5: 3d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:47:7F:1F:6F:B8:39:3E:6F:C1:95:43:A5:03:2F:7E:38:3A:91:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aecdc342-b34c-394b-b735-1033691ffd83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1418:a000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:eb:33:84:b9:45:e5:43:a4:b6:bb:4b:f6:b9:e6:dc:1b:65: ba:3a:0f:ba:5c:c2:75:9e:80:eb:e1:97:65:e2:c8:74:07:81: 4f:54:74:19:9f:f0:61:fb:d7:cf:10:aa:b2:f8:6c:ef:a8:6d: 07:45:37:09:55:a9:2a:28:0a:75:5a:8c:f1:ba:04:dd:38:48: 8c:e8:18:f1:a7:c3:93:9f:d6:a9:23:67:88:7c:41:01:68:91: c7:9d:fe:f9:77:48:a4:0d:cf:22:64:c1:fe:32:83:96:92:aa: 67:85:b7:8f:94:03:ae:13:a5:6a:0d:f6:42:1e:23:fe:c9:23: 53:e3:78:d6:04:27:dd:b5:f4:d4:a0:a4:59:1a:5e:db:90:46: 0f:59:cc:4d:67:6c:87:91:9a:b2:24:c8:cf:ba:08:e5:22:e1: 93:b3:22:99:0c:c7:a6:b0:0a:6a:9d:75:54:b9:8f:0c:91:28: b3:21:11:aa:c8:ae:5d:d7:66:36:23:5a:ad:2c:a3:35:97:6a: 13:71:ba:a1:a9:74:a1:56:04:66:e0:81:92:19:fb:fe:bd:cd: 36:61:3d:4c:85:d4:0a:23:b1:b2:f1:5f:ba:cc:20:1b:1a:15: de:e9:48:07:13:70:9b:79:65:42:f1:9e:40:80:7d:39:af:bf: a4:e8:0b:e9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmAby2AMJUIaQfrKoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQxMjEzMDEwMVoXDTI1MDcxMTEzMDEwMVowLzEtMCsGA1UEAxMk OWZhZDVmN2ItODFmMy00ZTFlLWEzMDQtYzYwNGUyMjY4ZjM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA045EHBsmLcd5/qwoEuK3Hl7I1xxdXO0uDScM cKAGMp20WDA3IeoR8N+5O04vrBCJIAQVF1cmd82bzSt4L7DaOAw8wbDkvS9MD/zI YOK+YOwSSQo+Qx/sF+GToexWNzYW2ETAHH13r0UT3AA6eAisKe84ut/VjycsoRyM OTywNbGhhnJGbtK+y+vWOO/WRiqTMOTbebS02bZgx5heAhV3RERlq4DmyBLgVRpt 2N1kJFG7Y72/a9XSs6nTKo1QFns6aIcoYbAxsRbFUIgEtwnJJiFhLlrpYaSz6y1s WgxS7x0TtEjNZ93VRom6AX4QvI3hGmzzu/0rQc1ZUYl4jPU9gQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFJHfx9vuDk+b8GVQ6UDL344OpGKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWVjZGMzNDItYjM0Yy0z OTRiLWI3MzUtMTAzMzY5MWZmZDgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUGKAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJbrM4S5ReVDpLa7S/a55twbZbo6D7pcwnWegOvhl2XiyHQHgU9U dBmf8GH7188QqrL4bO+obQdFNwlVqSooCnVajPG6BN04SIzoGPGnw5Of1qkjZ4h8 QQFokced/vl3SKQNzyJkwf4yg5aSqmeFt4+UA64TpWoN9kIeI/7JI1PjeNYEJ921 9NSgpFkaXtuQRg9ZzE1nbIeRmrIkyM+6COUi4ZOzIpkMx6awCmqddVS5jwyRKLMh EarIrl3XZjYjWq0sozWXahNxuqGpdKFWBGbggZIZ+/69zTZhPUyF1AojsbLxX7rM IBsaFd7pSAcTcJt5ZULxnkCAfTmvv6ToC+k= -----END CERTIFICATE-----Generated at Sat Apr 26 19:16:12 2025 by rpki-client