$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fca9671b-eda5-3c88-9ead-7bc4c0330068.roa File: fca9671b-eda5-3c88-9ead-7bc4c0330068.roa (raw, json) Hash identifier: cBCx1KaLec5DtJhOlZdYBanwm3xqDYhicUDHStbCxyE= Subject key identifier: 1D:F9:02:09:87:F1:A0:64:49:9C:5C:4F:AD:13:61:6D:D3:70:48:1C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849806F309F3AA6ED0AE23DF700 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fca9671b-eda5-3c88-9ead-7bc4c0330068.roa Signing time: Sat 12 Apr 2025 13:01:01 +0000 ROA not before: Sat 12 Apr 2025 13:01:01 +0000 ROA not after: Fri 11 Jul 2025 13:01:01 +0000 asID: 20940 IP address blocks: 2600:1409:a800::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:80:6f:30:9f:3a:a6:ed:0a:e2:3d:f7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 12 13:01:01 2025 GMT Not After : Jul 11 13:01:01 2025 GMT Subject: CN=1aa4fb4c-8782-45d4-9134-38132feff334 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:7e:e8:b5:cc:aa:98:82:cf:54:20:5d:23:6d: ec:1a:3a:02:0e:10:c7:fc:8e:d8:18:c6:96:c3:46: 5b:ed:bc:3c:7d:2f:c4:84:5a:29:45:ac:68:03:41: 85:bd:cc:3a:e5:cf:c3:37:cc:42:70:51:d5:5a:ea: 73:0d:f7:76:98:89:07:a6:d0:3b:49:6a:bb:98:95: 64:36:b8:35:af:c8:26:f3:60:72:7d:03:3f:db:9f: f0:18:cd:02:ad:86:cb:10:5c:92:eb:b3:88:09:2e: f2:a2:08:61:6b:2f:a9:8b:b3:70:46:a8:b9:08:f0: c4:7e:1c:c6:2d:b2:a8:bc:9c:1d:52:5c:8d:16:80: 88:e6:39:ed:a5:8d:9a:78:84:79:bb:d7:2d:28:47: b1:b8:80:4c:5f:32:a8:12:bd:52:13:9a:90:1c:04: aa:6a:02:ed:59:ba:59:61:f1:84:e4:ff:25:db:e6: 93:9c:53:57:8e:df:b4:30:56:01:1e:c4:c2:5d:d0: 24:5f:75:58:ef:d4:69:22:58:11:1c:f3:cd:87:ab: 98:37:1a:df:97:b0:bf:62:8f:4a:72:c6:e6:8c:00: a1:d4:e1:2e:76:1f:55:77:5f:21:4d:40:23:57:02: 03:1a:16:09:63:90:43:33:18:00:18:44:71:f5:3d: b1:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:F9:02:09:87:F1:A0:64:49:9C:5C:4F:AD:13:61:6D:D3:70:48:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fca9671b-eda5-3c88-9ead-7bc4c0330068.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1409:a800::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:c0:79:00:43:6f:90:6d:f6:87:60:84:73:6f:0c:58:60:5a: 8b:c3:a6:f7:09:16:83:dc:dc:05:3b:a4:ce:ba:6d:6b:ca:63: b8:33:1d:07:5a:0a:a6:cc:27:96:ba:6c:ba:59:f3:7f:61:e6: 5b:d2:f5:28:e4:87:0b:e1:21:f9:60:90:fa:28:b7:41:35:c9: 3e:c7:11:ce:cb:f2:53:51:1f:bb:98:35:c5:93:58:00:53:ec: 6b:12:c8:4c:03:cc:5e:8f:ca:4a:bc:52:91:67:1d:43:68:89: 47:e6:cf:cf:03:00:57:2b:0a:47:07:0c:fa:61:34:c7:50:23: 4a:e5:c3:ff:54:78:95:d7:3e:bc:d9:c6:92:c3:a5:e9:66:7a: 9f:e9:8c:cb:e2:a7:ea:30:d4:5b:4a:8c:60:91:09:e1:b4:82: d0:32:ed:47:8e:f5:e7:53:7c:b5:a9:67:43:f6:04:49:32:22: 80:2e:45:90:b2:f5:35:83:a9:7e:3f:94:c6:04:05:9c:58:f5: 3f:bb:b6:67:8e:7c:99:2e:94:29:70:28:b9:ab:7d:a6:30:63: bb:df:a8:eb:08:12:76:6d:6d:a0:b3:9b:15:4e:50:f9:1e:cc: 9c:4f:30:73:37:4c:ad:99:3f:ba:23:90:d0:cc:6c:ba:d6:53: 2f:27:eb:5d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmAbzCfOqbtCuI99wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQxMjEzMDEwMVoXDTI1MDcxMTEzMDEwMVowLzEtMCsGA1UEAxMk MWFhNGZiNGMtODc4Mi00NWQ0LTkxMzQtMzgxMzJmZWZmMzM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlH7otcyqmILPVCBdI23sGjoCDhDH/I7YGMaW w0Zb7bw8fS/EhFopRaxoA0GFvcw65c/DN8xCcFHVWupzDfd2mIkHptA7SWq7mJVk Nrg1r8gm82ByfQM/25/wGM0CrYbLEFyS67OICS7yoghhay+pi7NwRqi5CPDEfhzG LbKovJwdUlyNFoCI5jntpY2aeIR5u9ctKEexuIBMXzKoEr1SE5qQHASqagLtWbpZ YfGE5P8l2+aTnFNXjt+0MFYBHsTCXdAkX3VY79RpIlgRHPPNh6uYNxrfl7C/Yo9K csbmjACh1OEudh9Vd18hTUAjVwIDGhYJY5BDMxgAGERx9T2xQwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFB35AgmH8aBkSZxcT60TYW3TcEgcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZmNhOTY3MWItZWRhNS0z Yzg4LTllYWQtN2JjNGMwMzMwMDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUCagA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHrAeQBDb5Bt9odghHNvDFhgWovDpvcJFoPc3AU7pM66bWvKY7gz HQdaCqbMJ5a6bLpZ839h5lvS9SjkhwvhIflgkPoot0E1yT7HEc7L8lNRH7uYNcWT WABT7GsSyEwDzF6Pykq8UpFnHUNoiUfmz88DAFcrCkcHDPphNMdQI0rlw/9UeJXX PrzZxpLDpelmep/pjMvip+ow1FtKjGCRCeG0gtAy7UeO9edTfLWpZ0P2BEkyIoAu RZCy9TWDqX4/lMYEBZxY9T+7tmeOfJkulClwKLmrfaYwY7vfqOsIEnZtbaCzmxVO UPkezJxPMHM3TK2ZP7ojkNDMbLrWUy8n610= -----END CERTIFICATE-----Generated at Sat Apr 26 19:19:38 2025 by rpki-client