$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e52913ed-be0f-3df1-86c0-804fff6983e4.roa File: e52913ed-be0f-3df1-86c0-804fff6983e4.roa (raw, json) Hash identifier: 2HrkCAroc7DtcklVpPrciK5UTHYkpO6DNFjODiJx8g0= Subject key identifier: 5F:B5:0A:21:03:F4:98:83:55:26:73:66:87:5C:10:C4:88:DF:2C:58 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849806F2F31D28933C100674310 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e52913ed-be0f-3df1-86c0-804fff6983e4.roa Signing time: Sat 12 Apr 2025 13:01:01 +0000 ROA not before: Sat 12 Apr 2025 13:01:01 +0000 ROA not after: Fri 11 Jul 2025 13:01:01 +0000 asID: 20940 IP address blocks: 2600:1406:4a00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:80:6f:2f:31:d2:89:33:c1:00:67:43:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 12 13:01:01 2025 GMT Not After : Jul 11 13:01:01 2025 GMT Subject: CN=b43a5c61-656a-438a-a147-b8970b26d7f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:bf:6b:24:44:f7:09:0b:b7:f5:83:83:a2:97: cb:73:ec:c1:f5:9e:f9:d3:e3:00:99:9e:78:ca:46: 07:2f:6a:62:08:29:f9:2b:f4:83:cd:91:74:88:9a: 25:f8:98:8b:bc:83:56:6a:ff:db:de:8c:48:8c:01: 55:b7:2e:3c:44:0c:3d:8c:2e:d3:29:e0:21:72:4c: 01:47:21:b2:2e:1b:37:10:66:7a:91:08:ca:dc:37: df:6f:e6:4d:91:14:a5:7a:53:74:9d:aa:22:93:75: 21:42:be:73:11:21:b6:58:ef:b8:e5:7e:1b:1f:d0: ec:78:df:55:e1:99:d9:eb:de:aa:b6:8b:1c:93:89: 79:c2:fc:0a:f3:34:a6:4e:44:fe:64:d1:49:a5:21: af:ba:da:5c:8b:c1:17:a7:17:ea:d1:7c:b2:6b:bd: 7a:8a:aa:0e:24:06:e5:24:71:19:a9:1e:a9:6d:e6: 96:25:08:01:c4:d2:db:34:79:bc:b9:d3:27:01:94: 31:b6:b3:49:a0:b7:fc:4d:78:fa:3e:72:57:cb:bb: f4:55:e3:72:72:b1:99:e9:ad:e6:82:39:72:c9:ef: a8:de:63:e1:f1:0d:11:77:74:fe:5c:41:6a:21:b3: 26:bb:cd:40:2b:7e:93:82:86:ee:b8:ba:ea:30:7f: 50:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:B5:0A:21:03:F4:98:83:55:26:73:66:87:5C:10:C4:88:DF:2C:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e52913ed-be0f-3df1-86c0-804fff6983e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1406:4a00::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:52:26:52:cd:6d:45:b9:3c:2f:79:97:f7:6c:05:2a:d2:bc: 51:a9:1c:d1:fc:b2:bf:9e:7e:d8:40:8f:58:ec:f3:9f:99:50: 20:85:16:ae:d5:ef:9a:33:34:52:c5:0d:1e:d0:5c:18:30:62: 01:b0:12:85:0c:54:32:8e:ca:c4:c7:a2:51:29:f7:c7:09:4e: c7:c0:59:e3:67:26:77:94:1d:a2:3c:25:3c:a3:d1:88:ae:06: 5b:a4:56:80:90:3c:6f:d1:76:ed:ef:6d:5a:12:39:8f:a9:4e: 0d:4d:ad:04:06:5c:f2:24:d2:cf:ee:04:84:23:b5:0b:c7:67: 15:58:86:15:0b:f2:01:d5:b0:24:71:60:39:49:5e:1f:cf:7d: b3:7e:8f:24:2b:69:05:99:cc:04:67:2e:68:66:0f:08:e4:90: 6a:24:a3:42:68:46:e9:70:81:5e:72:4c:96:aa:96:f8:be:c2: 44:8c:17:4f:a0:33:3e:e3:22:6b:f1:45:22:13:90:c5:4f:7c: 0b:55:6c:c8:f6:b5:c5:49:8b:39:66:ca:af:54:55:a5:d8:85: 71:dc:89:1f:bd:74:92:1d:e1:87:60:57:d2:67:49:12:8e:90: df:eb:28:a9:2c:de:d4:90:6f:35:d4:2e:6e:f5:05:4b:0b:35: 5f:d8:c9:3e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmAby8x0okzwQBnQxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQxMjEzMDEwMVoXDTI1MDcxMTEzMDEwMVowLzEtMCsGA1UEAxMk YjQzYTVjNjEtNjU2YS00MzhhLWExNDctYjg5NzBiMjZkN2Y4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAor9rJET3CQu39YODopfLc+zB9Z750+MAmZ54 ykYHL2piCCn5K/SDzZF0iJol+JiLvINWav/b3oxIjAFVty48RAw9jC7TKeAhckwB RyGyLhs3EGZ6kQjK3Dffb+ZNkRSlelN0naoik3UhQr5zESG2WO+45X4bH9DseN9V 4ZnZ696qtosck4l5wvwK8zSmTkT+ZNFJpSGvutpci8EXpxfq0Xyya716iqoOJAbl JHEZqR6pbeaWJQgBxNLbNHm8udMnAZQxtrNJoLf8TXj6PnJXy7v0VeNycrGZ6a3m gjlyye+o3mPh8Q0Rd3T+XEFqIbMmu81AK36TgobuuLrqMH9Q4wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFF+1CiED9JiDVSZzZodcEMSI3yxYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTUyOTEzZWQtYmUwZi0z ZGYxLTg2YzAtODA0ZmZmNjk4M2U0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUBkoA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGpSJlLNbUW5PC95l/dsBSrSvFGpHNH8sr+efthAj1js85+ZUCCF Fq7V75ozNFLFDR7QXBgwYgGwEoUMVDKOysTHolEp98cJTsfAWeNnJneUHaI8JTyj 0YiuBlukVoCQPG/Rdu3vbVoSOY+pTg1NrQQGXPIk0s/uBIQjtQvHZxVYhhUL8gHV sCRxYDlJXh/PfbN+jyQraQWZzARnLmhmDwjkkGoko0JoRulwgV5yTJaqlvi+wkSM F0+gMz7jImvxRSITkMVPfAtVbMj2tcVJizlmyq9UVaXYhXHciR+9dJId4YdgV9Jn SRKOkN/rKKks3tSQbzXULm71BUsLNV/YyT4= -----END CERTIFICATE-----Generated at Sat Apr 26 17:42:51 2025 by rpki-client