$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/93f9e586-e1ee-3913-8896-9c9bde341115.roa File: 93f9e586-e1ee-3913-8896-9c9bde341115.roa (raw, json) Hash identifier: Z8JK6QmnXCvgKi2tfXvWQjRm323YYJcdchm+o1FjjxM= Subject key identifier: 02:52:37:2A:FC:09:B3:76:43:86:D1:F4:1F:36:55:25:E2:51:0D:5B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849754465C3B0AAC51479FCAEC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/93f9e586-e1ee-3913-8896-9c9bde341115.roa Signing time: Tue 08 Apr 2025 13:00:59 +0000 ROA not before: Tue 08 Apr 2025 13:00:59 +0000 ROA not after: Mon 07 Jul 2025 13:00:59 +0000 asID: 20940 IP address blocks: 2600:140b:e400::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:75:44:65:c3:b0:aa:c5:14:79:fc:ae:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 8 13:00:59 2025 GMT Not After : Jul 7 13:00:59 2025 GMT Subject: CN=1046d9cf-a10a-46d5-b93a-163d67cca98f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:d2:c1:96:5b:c4:bc:fd:ca:6e:60:38:d4:86: 75:de:bd:4e:8d:da:08:a4:08:b2:f5:c3:5d:23:aa: a1:c8:7e:48:f2:68:86:89:66:4b:8b:8a:3e:b6:85: 08:93:f5:b4:c8:49:c3:e5:36:81:d8:01:80:02:be: d3:27:1f:93:19:35:ac:11:b7:ec:d0:1b:2a:d4:86: d6:88:dc:a5:9d:ed:e8:75:7e:70:37:7c:55:22:62: 4d:5a:df:45:c2:af:a1:4b:5e:7c:ae:aa:51:ab:e7: 39:9d:32:6f:af:4b:ea:ec:fe:b6:1b:67:96:f8:f9: 9b:a6:d2:5c:05:20:2e:e6:14:a9:89:25:2e:b8:bd: b4:e6:56:29:4f:2f:74:0f:a5:1e:3a:03:43:6e:13: b1:5b:42:d9:03:1c:e0:7c:3c:07:3c:d5:8b:f2:00: 23:6c:5f:64:44:b5:44:3f:c9:e7:bf:a3:c6:f5:98: c8:03:e8:ec:c1:24:90:7d:68:b7:14:70:62:07:09: 44:15:ae:87:e0:47:e0:39:15:d7:c6:b5:f0:14:cc: 22:b8:70:37:a5:ba:21:25:e2:d0:1d:97:f6:78:de: 5d:86:1d:35:3d:23:c8:df:39:d3:17:cd:b6:c5:a5: 99:71:36:27:4c:27:a1:5f:83:0c:5c:fc:92:17:3a: f2:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:52:37:2A:FC:09:B3:76:43:86:D1:F4:1F:36:55:25:E2:51:0D:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/93f9e586-e1ee-3913-8896-9c9bde341115.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:140b:e400::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:55:d4:55:9e:36:06:93:80:7f:0d:dd:9b:a7:55:b8:c8:ba: d6:dd:ee:d5:2d:19:db:c4:01:cb:0c:bd:bb:88:85:89:5d:68: 77:c1:82:63:f6:8c:6e:3f:b0:32:e4:91:ca:57:4f:f6:26:56: c2:59:e2:de:2d:27:71:c5:14:c6:cf:51:1d:d9:9d:67:03:de: 29:d1:84:cd:17:6b:ed:db:53:a5:64:ea:6c:1c:0d:64:9f:3c: ed:08:8c:7b:90:da:69:e4:43:a2:35:69:d1:b7:a6:35:d1:c8: 46:cd:c7:98:ed:e8:67:c0:36:aa:ba:60:9c:7b:94:ea:a5:d9: 32:a2:16:2a:a3:93:c4:40:e0:60:da:29:50:9b:a9:85:54:d3: 1d:c8:47:53:75:41:a7:55:6b:77:a1:83:39:11:60:e2:b0:b5: a2:fd:4d:8e:f2:e3:ea:0d:ae:63:af:44:cf:30:1c:1b:63:a4: 96:18:75:9a:1f:e2:50:17:12:36:83:13:cd:c6:a5:cc:06:b6: 08:79:88:1c:27:ff:72:80:e1:3a:d1:1f:a6:4b:ea:85:90:85: 68:ef:57:8d:67:d8:1c:bb:91:31:9d:f2:08:04:52:e8:41:6f: 40:b8:e7:38:29:9f:5a:4a:24:de:ee:57:3d:50:0c:d8:79:fe: b8:91:57:ec -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEl1RGXDsKrFFHn8rsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQwODEzMDA1OVoXDTI1MDcwNzEzMDA1OVowLzEtMCsGA1UEAxMk MTA0NmQ5Y2YtYTEwYS00NmQ1LWI5M2EtMTYzZDY3Y2NhOThmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9LBllvEvP3KbmA41IZ13r1OjdoIpAiy9cNd I6qhyH5I8miGiWZLi4o+toUIk/W0yEnD5TaB2AGAAr7TJx+TGTWsEbfs0Bsq1IbW iNylne3odX5wN3xVImJNWt9Fwq+hS158rqpRq+c5nTJvr0vq7P62G2eW+PmbptJc BSAu5hSpiSUuuL205lYpTy90D6UeOgNDbhOxW0LZAxzgfDwHPNWL8gAjbF9kRLVE P8nnv6PG9ZjIA+jswSSQfWi3FHBiBwlEFa6H4EfgORXXxrXwFMwiuHA3pbohJeLQ HZf2eN5dhh01PSPI3znTF822xaWZcTYnTCehX4MMXPySFzrywwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAJSNyr8CbN2Q4bR9B82VSXiUQ1bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTNmOWU1ODYtZTFlZS0z OTEzLTg4OTYtOWM5YmRlMzQxMTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUC+QA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHlV1FWeNgaTgH8N3ZunVbjIutbd7tUtGdvEAcsMvbuIhYldaHfB gmP2jG4/sDLkkcpXT/YmVsJZ4t4tJ3HFFMbPUR3ZnWcD3inRhM0Xa+3bU6Vk6mwc DWSfPO0IjHuQ2mnkQ6I1adG3pjXRyEbNx5jt6GfANqq6YJx7lOql2TKiFiqjk8RA 4GDaKVCbqYVU0x3IR1N1QadVa3ehgzkRYOKwtaL9TY7y4+oNrmOvRM8wHBtjpJYY dZof4lAXEjaDE83GpcwGtgh5iBwn/3KA4TrRH6ZL6oWQhWjvV41n2By7kTGd8ggE UuhBb0C45zgpn1pKJN7uVz1QDNh5/riRV+w= -----END CERTIFICATE-----Generated at Wed May 7 22:02:42 2025 by rpki-client