$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/923c9275-05e0-3961-9d13-233670e66428.roa File: 923c9275-05e0-3961-9d13-233670e66428.roa (raw, json) Hash identifier: pGz0UadVl7FeZ+jLNjKkPUrsZnWDRlmdV7GqeCO/31w= Subject key identifier: 31:25:55:CB:2D:8E:41:F1:9F:0E:36:2E:A2:FF:89:54:34:BA:68:0C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584988CF37EAEBD1FD6169DE3C80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/923c9275-05e0-3961-9d13-233670e66428.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 35994 IP address blocks: 2600:1404:d800::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:37:ea:eb:d1:fd:61:69:de:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=b07f6831-678a-4604-be3f-dfc5bd066422 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ee:f2:f5:f9:97:5b:2b:5f:af:a8:d8:66:13: 76:76:3d:e1:ad:fe:e9:17:ca:21:39:a7:15:1d:a2: d4:e9:97:b0:3e:c9:f1:9a:f0:d6:db:86:39:a5:9b: c1:dd:f8:55:fd:66:ac:5f:68:3e:d5:84:f1:96:5c: 43:03:8a:fb:2a:75:3d:c4:0c:c0:64:2e:2d:1b:2a: be:88:88:3a:df:8e:18:04:e7:7a:40:c7:ca:ec:2c: 0d:88:77:f1:52:8b:16:ba:85:de:a2:b8:84:31:ba: 65:d8:a1:e9:e5:2a:90:dc:bb:c1:cb:ec:61:20:91: bf:d4:2b:36:c0:d8:06:95:14:43:16:a1:c5:ad:86: 32:3e:40:6a:69:75:e9:f6:ca:bd:cc:bc:8b:9a:be: 32:b9:7a:7d:35:d5:bf:82:18:4b:b5:ab:46:49:51: 55:b5:05:86:5a:9a:88:69:83:23:5b:af:42:10:de: fa:5e:0e:07:66:f8:72:6a:cf:23:2e:32:5a:68:60: 71:ab:5d:9f:52:10:56:72:5d:8c:f4:78:aa:87:54: 8d:49:38:c2:2e:43:37:1f:80:5b:35:12:56:0d:4a: f9:ba:36:11:2e:46:af:e4:2c:4a:f1:55:b5:a7:40: 9a:42:00:46:a2:6c:af:d2:07:ee:8e:02:b1:a5:4b: 8b:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:25:55:CB:2D:8E:41:F1:9F:0E:36:2E:A2:FF:89:54:34:BA:68:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/923c9275-05e0-3961-9d13-233670e66428.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1404:d800::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:79:24:31:43:c4:b0:04:76:4d:8e:f9:1c:78:b2:70:72:45: 2b:58:d2:1d:82:1b:f4:53:61:f3:09:cf:33:d2:a4:31:32:1e: b2:17:c5:ee:db:df:7d:08:e4:33:35:9b:20:88:65:30:f2:d0: 94:cf:40:03:dd:6a:38:b3:ce:f3:e2:55:13:12:96:2d:34:e8: 34:66:a6:07:ec:b9:0f:36:e3:a4:4a:6f:0b:ed:aa:45:2f:33: 32:85:f4:73:8f:43:44:02:63:ad:6d:3a:a1:42:a5:4f:a1:6e: 83:eb:d7:b7:94:2f:ec:20:4e:af:db:ab:ec:c1:85:45:b4:31: d5:6c:3f:18:a8:17:70:c2:08:c7:d5:8c:62:af:95:e1:bf:00: 73:34:69:6c:de:23:db:30:c8:2c:2e:31:f5:d9:ed:de:aa:4b: 3d:31:79:fe:4d:53:12:b7:68:7f:6a:1c:75:a1:d5:81:5f:14: f4:16:06:20:cf:a7:97:53:f8:d3:77:0c:ef:4d:f5:04:c1:83: 76:2b:37:55:99:ae:89:22:f8:18:55:09:92:cd:e0:6a:5d:13: 05:78:db:99:57:01:d4:ac:fa:86:6a:81:fd:0c:d9:98:ed:01: 84:92:03:62:c1:4a:a4:74:06:81:77:b7:d4:ae:42:81:7e:3e: 7d:ba:b7:95 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmIzzfq69H9YWnePIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk YjA3ZjY4MzEtNjc4YS00NjA0LWJlM2YtZGZjNWJkMDY2NDIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApe7y9fmXWytfr6jYZhN2dj3hrf7pF8ohOacV HaLU6ZewPsnxmvDW24Y5pZvB3fhV/WasX2g+1YTxllxDA4r7KnU9xAzAZC4tGyq+ iIg6344YBOd6QMfK7CwNiHfxUosWuoXeoriEMbpl2KHp5SqQ3LvBy+xhIJG/1Cs2 wNgGlRRDFqHFrYYyPkBqaXXp9sq9zLyLmr4yuXp9NdW/ghhLtatGSVFVtQWGWpqI aYMjW69CEN76Xg4HZvhyas8jLjJaaGBxq12fUhBWcl2M9Hiqh1SNSTjCLkM3H4Bb NRJWDUr5ujYRLkav5CxK8VW1p0CaQgBGomyv0gfujgKxpUuLGQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDElVcstjkHxnw42LqL/iVQ0umgMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTIzYzkyNzUtMDVlMC0z OTYxLTlkMTMtMjMzNjcwZTY2NDI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUBNgA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF55JDFDxLAEdk2O+Rx4snByRStY0h2CG/RTYfMJzzPSpDEyHrIX xe7b330I5DM1myCIZTDy0JTPQAPdajizzvPiVRMSli006DRmpgfsuQ8246RKbwvt qkUvMzKF9HOPQ0QCY61tOqFCpU+hboPr17eUL+wgTq/bq+zBhUW0MdVsPxioF3DC CMfVjGKvleG/AHM0aWzeI9swyCwuMfXZ7d6qSz0xef5NUxK3aH9qHHWh1YFfFPQW BiDPp5dT+NN3DO9N9QTBg3YrN1WZroki+BhVCZLN4GpdEwV425lXAdSs+oZqgf0M 2ZjtAYSSA2LBSqR0BoF3t9SuQoF+Pn26t5U= -----END CERTIFICATE-----Generated at Thu May 8 19:58:19 2025 by rpki-client