$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4a4e7e46-def0-3878-a646-3b772e5c426f.roa File: 4a4e7e46-def0-3878-a646-3b772e5c426f.roa (raw, json) Hash identifier: C4xhZDUyUUt12YRGi15uJioQelxTCy0ARa0cc/029jI= Subject key identifier: AA:9D:43:E4:3F:DA:A2:7F:80:05:24:4D:52:09:23:50:B6:FB:11:9B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858498B99D3688A5AFE2F87FE5524 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4a4e7e46-def0-3878-a646-3b772e5c426f.roa Signing time: Wed 16 Apr 2025 13:01:01 +0000 ROA not before: Wed 16 Apr 2025 13:01:01 +0000 ROA not after: Tue 15 Jul 2025 13:01:01 +0000 asID: 35994 IP address blocks: 2600:1407:b000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8b:99:d3:68:8a:5a:fe:2f:87:fe:55:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 16 13:01:01 2025 GMT Not After : Jul 15 13:01:01 2025 GMT Subject: CN=2e78b0f7-08f6-4a58-b0ae-88bc75027b5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:1a:f4:5a:3c:42:39:9d:08:32:21:86:85:e6: 4b:9d:49:64:de:17:7e:af:ef:35:6c:91:0f:75:3c: ec:36:ea:e3:2c:1d:a8:52:b7:0d:47:ba:74:dc:b4: 2b:42:8d:5b:2d:99:d6:b6:72:96:6f:de:31:2a:fb: e7:5f:93:99:6d:87:fa:d6:41:b6:83:aa:77:93:1f: b1:2e:f2:4f:bb:3d:7f:03:8d:41:22:c2:c0:35:c7: f0:7f:4d:b4:57:c8:5b:c6:54:9a:63:af:53:08:9e: 80:f7:b7:99:35:0f:7a:af:f7:d8:cf:83:90:52:49: 0e:44:9f:ca:0a:c9:fd:bf:fd:31:fa:63:b8:73:18: b7:45:71:fe:3a:f0:b8:bb:29:cf:18:0d:59:50:40: f2:6a:f8:24:ee:43:59:a1:47:10:22:93:b5:c7:38: 6e:b8:ad:26:f4:45:14:ce:b7:39:68:94:d6:75:33: f6:02:99:e6:93:67:59:54:19:58:ae:c9:3e:68:40: 8d:60:96:f1:2c:59:c6:04:05:1c:22:04:bd:b2:91: a2:59:d4:3c:bc:de:73:f3:dd:2e:1a:9e:2b:5f:c9: cc:3a:0f:c2:9a:35:f7:55:7b:d5:7c:6b:a5:7d:bc: d5:99:f0:89:06:7f:d4:10:e5:f7:23:3c:f5:90:e6: 29:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:9D:43:E4:3F:DA:A2:7F:80:05:24:4D:52:09:23:50:B6:FB:11:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4a4e7e46-def0-3878-a646-3b772e5c426f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1407:b000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:1c:a4:27:40:55:d7:f4:d3:df:17:03:91:7b:6a:86:42:86: 17:5f:d2:14:eb:ba:9a:28:e8:27:63:8a:15:12:80:1a:f5:93: 8d:10:c9:1e:a2:eb:0b:4d:43:36:e1:7f:db:8d:97:78:50:94: 6c:4a:fe:39:b2:3b:f8:e3:ad:9e:59:41:ee:e2:70:50:cc:0d: cd:ff:a3:4f:bf:27:0d:71:4b:7a:6f:f7:88:09:c4:00:39:fe: b8:53:6e:be:9d:a2:63:7b:21:49:c1:aa:ec:ac:4d:c3:b7:88: 4f:6c:de:ee:da:aa:cb:77:03:2b:78:fb:a5:22:f9:7e:29:19: 20:72:64:7c:0c:3e:e3:ee:4c:e4:ed:e6:a0:dd:50:e0:2f:6c: d1:fa:08:35:27:9a:29:61:5b:e4:da:1d:1f:4e:a3:13:a2:93: fb:d1:7a:a9:b0:48:12:66:24:6c:47:3c:34:88:4a:37:fe:55: 13:66:13:96:7c:5d:1b:76:4f:25:79:e7:a2:7b:0d:9a:47:ea: 0d:83:96:1a:f8:9c:4d:f9:0a:2a:c0:be:62:74:e0:5b:2b:c8: 6b:e7:cb:ac:48:34:33:ee:a2:76:52:9d:09:6e:ba:29:d1:57: 51:ab:26:62:44:15:90:23:e3:c6:62:96:a3:1c:12:e2:14:d2: 44:ec:61:e7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmLmdNoilr+L4f+VSQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQxNjEzMDEwMVoXDTI1MDcxNTEzMDEwMVowLzEtMCsGA1UEAxMk MmU3OGIwZjctMDhmNi00YTU4LWIwYWUtODhiYzc1MDI3YjVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixr0WjxCOZ0IMiGGheZLnUlk3hd+r+81bJEP dTzsNurjLB2oUrcNR7p03LQrQo1bLZnWtnKWb94xKvvnX5OZbYf61kG2g6p3kx+x LvJPuz1/A41BIsLANcfwf020V8hbxlSaY69TCJ6A97eZNQ96r/fYz4OQUkkORJ/K Csn9v/0x+mO4cxi3RXH+OvC4uynPGA1ZUEDyavgk7kNZoUcQIpO1xzhuuK0m9EUU zrc5aJTWdTP2Apnmk2dZVBlYrsk+aECNYJbxLFnGBAUcIgS9spGiWdQ8vN5z890u Gp4rX8nMOg/CmjX3VXvVfGulfbzVmfCJBn/UEOX3Izz1kOYpSwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKqdQ+Q/2qJ/gAUkTVIJI1C2+xGbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGE0ZTdlNDYtZGVmMC0z ODc4LWE2NDYtM2I3NzJlNWM0MjZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUB7AA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFwcpCdAVdf0098XA5F7aoZChhdf0hTrupoo6CdjihUSgBr1k40Q yR6i6wtNQzbhf9uNl3hQlGxK/jmyO/jjrZ5ZQe7icFDMDc3/o0+/Jw1xS3pv94gJ xAA5/rhTbr6domN7IUnBquysTcO3iE9s3u7aqst3Ayt4+6Ui+X4pGSByZHwMPuPu TOTt5qDdUOAvbNH6CDUnmilhW+TaHR9OoxOik/vReqmwSBJmJGxHPDSISjf+VRNm E5Z8XRt2TyV556J7DZpH6g2Dlhr4nE35CirAvmJ04FsryGvny6xINDPuonZSnQlu uinRV1GrJmJEFZAj48ZilqMcEuIU0kTsYec= -----END CERTIFICATE-----Generated at Mon May 5 15:04:24 2025 by rpki-client