$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ebaa7cf3-7d4f-3bfa-8cc6-3c9dfaa7ce10.roa File: ebaa7cf3-7d4f-3bfa-8cc6-3c9dfaa7ce10.roa (raw, json) Hash identifier: L07lE4Io5Mnh+s0n1Kgfh2UuLEdiaQdWm/wfa/7X75g= Subject key identifier: 9C:FD:85:87:F3:A9:6D:FC:B6:82:F1:F8:3E:DE:B6:94:31:44:4D:47 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849806F387957BED97E75582500 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ebaa7cf3-7d4f-3bfa-8cc6-3c9dfaa7ce10.roa Signing time: Sat 12 Apr 2025 13:01:01 +0000 ROA not before: Sat 12 Apr 2025 13:01:01 +0000 ROA not after: Fri 11 Jul 2025 13:01:01 +0000 asID: 20940 IP address blocks: 2600:1404:7000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:80:6f:38:79:57:be:d9:7e:75:58:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 12 13:01:01 2025 GMT Not After : Jul 11 13:01:01 2025 GMT Subject: CN=39303d4c-5417-4e4d-8210-851877d97788 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:52:d3:81:48:d5:91:c8:98:4e:06:70:0b:49: a4:dc:47:ad:cf:3d:21:05:47:7f:5f:ae:0c:04:ce: ee:35:9e:85:e8:43:30:f0:59:89:f1:e4:b7:05:cc: ff:58:4d:aa:97:1e:9e:2c:7b:a4:f7:f5:c4:71:91: 3f:e3:21:9a:6a:2e:9b:2d:38:dd:04:04:eb:cb:b7: 5d:69:16:7e:02:6e:6f:db:99:de:c5:a5:ef:37:d5: 0b:19:b2:71:9c:a7:2b:39:0d:1b:5c:e8:56:75:5b: 21:80:86:e1:91:f4:55:70:de:dd:c3:3e:79:2c:ca: ec:a7:65:2e:05:0e:65:c2:9b:b6:8d:e1:08:ec:30: 1c:17:0b:65:49:ae:dc:ab:e2:11:26:1e:d1:7a:0a: 33:93:0e:00:5b:51:12:5a:64:e2:ff:9c:35:ce:c6: f9:61:86:2e:78:90:5b:5e:fb:59:d8:8d:29:68:16: f7:2e:d0:6a:2e:85:74:9e:44:2b:7e:95:b7:3b:1d: e8:ad:db:ae:99:85:df:b9:03:45:73:96:cb:91:91: c8:af:92:04:5a:b7:18:ce:0a:d3:8c:df:db:59:55: 4a:82:a2:c3:02:a6:2c:8a:cf:30:d5:7c:8b:81:d9: 74:bf:e3:a1:94:fc:b3:9f:7e:97:38:6d:60:bb:0f: 77:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:FD:85:87:F3:A9:6D:FC:B6:82:F1:F8:3E:DE:B6:94:31:44:4D:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ebaa7cf3-7d4f-3bfa-8cc6-3c9dfaa7ce10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1404:7000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:c4:59:76:b4:e1:05:ca:22:cc:77:ec:64:0a:1c:b8:20:6c: 6d:5e:77:54:51:97:ff:77:e4:18:38:a0:b2:e1:29:b0:bb:e4: 39:2e:ae:aa:89:a6:0f:f0:2d:94:e4:4e:8d:ce:4f:88:37:d0: f0:9c:2b:97:46:57:e9:41:cc:97:61:cc:7f:00:56:ed:8b:3c: 41:8f:b6:9e:94:54:1c:f4:ec:85:bf:19:3d:a2:43:ac:08:e8: b6:54:7d:90:73:34:76:d5:fb:09:b9:1c:be:28:24:57:3f:e9: c0:70:77:82:ba:c3:cb:7d:2d:0a:e3:d0:1b:33:a1:44:e3:a7: c6:40:aa:11:f7:27:2d:46:ad:5a:2b:e0:65:14:87:4b:c4:24: c6:b0:ca:bd:cf:2e:11:bc:d9:ff:a8:db:4a:45:6b:92:96:08: cf:a2:44:a5:6a:8f:12:47:4f:e1:00:0b:3f:97:ad:fe:33:52: 0a:d8:21:e1:25:c5:af:2b:9d:5f:c9:02:57:49:7c:65:95:97: 9c:72:c7:ad:aa:2c:de:1e:01:cf:fa:40:36:80:3b:74:12:3e: d8:43:64:1b:b4:38:e9:c7:ba:c3:fd:b5:8b:53:e5:37:d4:e1: c9:76:e7:28:0b:9e:ee:a8:ff:83:5e:a9:19:0a:b2:0f:78:32: 6f:c9:5c:6c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmAbzh5V77ZfnVYJQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQxMjEzMDEwMVoXDTI1MDcxMTEzMDEwMVowLzEtMCsGA1UEAxMk MzkzMDNkNGMtNTQxNy00ZTRkLTgyMTAtODUxODc3ZDk3Nzg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1LTgUjVkciYTgZwC0mk3Eetzz0hBUd/X64M BM7uNZ6F6EMw8FmJ8eS3Bcz/WE2qlx6eLHuk9/XEcZE/4yGaai6bLTjdBATry7dd aRZ+Am5v25nexaXvN9ULGbJxnKcrOQ0bXOhWdVshgIbhkfRVcN7dwz55LMrsp2Uu BQ5lwpu2jeEI7DAcFwtlSa7cq+IRJh7Regozkw4AW1ESWmTi/5w1zsb5YYYueJBb XvtZ2I0paBb3LtBqLoV0nkQrfpW3Ox3orduumYXfuQNFc5bLkZHIr5IEWrcYzgrT jN/bWVVKgqLDAqYsis8w1XyLgdl0v+OhlPyzn36XOG1guw93iwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJz9hYfzqW38toLx+D7etpQxRE1HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZWJhYTdjZjMtN2Q0Zi0z YmZhLThjYzYtM2M5ZGZhYTdjZTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUBHAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACDEWXa04QXKIsx37GQKHLggbG1ed1RRl/935Bg4oLLhKbC75Dku rqqJpg/wLZTkTo3OT4g30PCcK5dGV+lBzJdhzH8AVu2LPEGPtp6UVBz07IW/GT2i Q6wI6LZUfZBzNHbV+wm5HL4oJFc/6cBwd4K6w8t9LQrj0BszoUTjp8ZAqhH3Jy1G rVor4GUUh0vEJMawyr3PLhG82f+o20pFa5KWCM+iRKVqjxJHT+EACz+Xrf4zUgrY IeElxa8rnV/JAldJfGWVl5xyx62qLN4eAc/6QDaAO3QSPthDZBu0OOnHusP9tYtT 5TfU4cl25ygLnu6o/4NeqRkKsg94Mm/JXGw= -----END CERTIFICATE-----Generated at Sat Apr 26 15:54:35 2025 by rpki-client