$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/af9cdc19-56ae-3864-b75c-16f6fc87d937.roa File: af9cdc19-56ae-3864-b75c-16f6fc87d937.roa (raw, json) Hash identifier: IcuVd+q61stQunxDDZwxrjBRZxK7wAhE4DtnwDJnzoU= Subject key identifier: 86:E6:93:78:DD:DA:33:11:F3:D0:1F:FD:74:24:27:18:82:C8:47:00 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858498CFF22A2D7A0C041915C89B0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/af9cdc19-56ae-3864-b75c-16f6fc87d937.roa Signing time: Thu 17 Apr 2025 01:00:45 +0000 ROA not before: Thu 17 Apr 2025 01:00:45 +0000 ROA not after: Wed 16 Jul 2025 01:00:45 +0000 asID: 24319 IP address blocks: 2600:1417:33::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8c:ff:22:a2:d7:a0:c0:41:91:5c:89:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 17 01:00:45 2025 GMT Not After : Jul 16 01:00:45 2025 GMT Subject: CN=4e8a6422-d7b5-4137-9652-2b0c3d5cc7da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:81:2d:e3:e8:4d:1c:50:08:b0:8b:fa:fc:74: 1a:44:44:65:e1:d4:11:77:7d:d3:57:c7:f7:7d:10: 4f:93:e6:b8:47:6e:3b:b0:43:9c:ea:6b:ae:00:6b: 90:4c:37:b8:44:5b:10:3e:25:3b:0a:48:7b:a8:09: f5:12:27:08:80:dd:a4:db:94:01:92:24:5d:12:50: 98:48:d8:31:81:06:1c:06:49:1f:5d:6d:24:3d:2a: 78:4b:59:11:3b:41:fa:78:3f:14:2c:95:25:fe:05: 06:f2:b5:f0:6b:6b:46:2c:ec:0a:a0:2e:02:cc:47: 43:50:5c:a8:2e:f0:c0:c2:09:5e:5b:7b:3f:86:34: bc:fc:c5:89:37:a1:e5:c2:07:89:71:03:2c:99:3f: 5a:bd:22:2b:21:92:c0:e4:3e:07:9d:0d:9f:5f:41: d2:17:19:03:01:6c:ad:0c:1a:d1:b0:bf:0f:1b:80: b1:d0:9e:f5:56:c0:cf:56:e2:17:31:3f:50:7d:9e: 60:32:c0:9d:23:05:de:f3:00:4c:d1:c9:34:a4:d7: 9c:dc:a0:86:ee:e9:3f:9e:ae:93:27:d6:9a:31:84: 76:7a:bb:28:1f:9e:73:d2:a7:7e:e7:c0:67:34:6c: 28:52:f1:2e:e3:3e:05:c9:3e:fd:d9:60:2d:6d:47: e5:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:E6:93:78:DD:DA:33:11:F3:D0:1F:FD:74:24:27:18:82:C8:47:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/af9cdc19-56ae-3864-b75c-16f6fc87d937.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1417:33::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:2c:47:19:b6:87:02:fa:b9:dc:61:79:5c:75:7e:fd:97:a8: 27:66:70:a1:5b:13:89:48:14:d5:83:5c:c1:6a:ae:bb:b5:4b: 4e:1a:f9:7c:a9:37:cd:96:70:6f:66:ec:84:ad:f3:0b:c3:27: c7:63:db:e6:c0:55:8d:ed:3c:06:c3:19:02:d8:65:b3:d8:46: 4a:36:d5:2a:2c:9b:67:5f:43:39:26:b5:32:bf:8f:be:7f:ef: 15:ea:e6:20:62:8d:df:11:6f:ba:93:df:63:fe:6a:b6:ff:63: ef:a1:1e:5e:4a:00:33:59:25:85:6a:c9:95:40:01:2c:9f:4e: fb:f9:dd:89:23:e8:92:fb:5a:e1:4b:67:bd:2d:b5:ff:5c:bc: ab:63:07:3c:7d:68:a3:73:d8:dc:b8:ab:85:29:b3:a3:75:27: 5f:47:8e:7f:b4:22:e6:35:bb:04:fe:57:62:27:f3:16:f9:ca: ba:a8:e7:1c:a5:80:bd:a8:d6:16:b1:1b:79:86:0e:c4:19:af: 17:04:ce:d0:25:18:c2:95:f5:32:47:49:2f:72:c3:e8:2d:e1: 3f:b0:b3:7a:10:69:17:e0:ed:b0:98:e0:86:15:41:57:72:f7: c5:2d:d7:bd:0d:7d:15:53:be:f2:a7:b0:0f:c2:a9:a2:64:6f: 22:d1:4b:76 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmM/yKi16DAQZFcibAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQxNzAxMDA0NVoXDTI1MDcxNjAxMDA0NVowLzEtMCsGA1UEAxMk NGU4YTY0MjItZDdiNS00MTM3LTk2NTItMmIwYzNkNWNjN2RhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYEt4+hNHFAIsIv6/HQaRERl4dQRd33TV8f3 fRBPk+a4R247sEOc6muuAGuQTDe4RFsQPiU7Ckh7qAn1EicIgN2k25QBkiRdElCY SNgxgQYcBkkfXW0kPSp4S1kRO0H6eD8ULJUl/gUG8rXwa2tGLOwKoC4CzEdDUFyo LvDAwgleW3s/hjS8/MWJN6HlwgeJcQMsmT9avSIrIZLA5D4HnQ2fX0HSFxkDAWyt DBrRsL8PG4Cx0J71VsDPVuIXMT9QfZ5gMsCdIwXe8wBM0ck0pNec3KCG7uk/nq6T J9aaMYR2ersoH55z0qd+58BnNGwoUvEu4z4FyT792WAtbUfl8QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIbmk3jd2jMR89Af/XQkJxiCyEcAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWY5Y2RjMTktNTZhZS0z ODY0LWI3NWMtMTZmNmZjODdkOTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUFwAz MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEosRxm2hwL6udxheVx1fv2XqCdmcKFbE4lIFNWDXMFqrru1S04a +XypN82WcG9m7ISt8wvDJ8dj2+bAVY3tPAbDGQLYZbPYRko21Sosm2dfQzkmtTK/ j75/7xXq5iBijd8Rb7qT32P+arb/Y++hHl5KADNZJYVqyZVAASyfTvv53Ykj6JL7 WuFLZ70ttf9cvKtjBzx9aKNz2Ny4q4Ups6N1J19Hjn+0IuY1uwT+V2In8xb5yrqo 5xylgL2o1haxG3mGDsQZrxcEztAlGMKV9TJHSS9yw+gt4T+ws3oQaRfg7bCY4IYV QVdy98Ut170NfRVTvvKnsA/CqaJkbyLRS3Y= -----END CERTIFICATE-----Generated at Sun Apr 27 22:27:30 2025 by rpki-client