$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a536c405-143a-37a8-87a4-ae1d57a2a636.roa File: a536c405-143a-37a8-87a4-ae1d57a2a636.roa (raw, json) Hash identifier: 2JjLNEzpvuRb61TIbOuPrHwYOjp0ipWy4VfodQfywg4= Subject key identifier: 4B:FA:F5:D3:03:D6:E9:55:9A:62:D3:7D:FA:B8:F9:D2:75:43:7E:E6 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849B14A09306F2279303C4FB280 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a536c405-143a-37a8-87a4-ae1d57a2a636.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 20940 IP address blocks: 2600:14a0::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:09:30:6f:22:79:30:3c:4f:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=5d83401b-db89-4636-92ed-6444fd43a570 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:3a:39:12:53:ad:3d:58:76:24:ff:48:19:ba: 49:4d:88:75:a8:9a:ac:40:4f:b1:df:ed:77:07:c6: 7a:71:63:f6:ed:0d:cb:54:4b:e3:70:e2:90:12:7c: ac:31:54:d0:60:75:cb:eb:7a:28:cc:f4:99:51:23: 08:cf:05:34:33:59:03:6c:4f:cd:7c:13:a6:da:ef: e3:e7:df:70:73:d3:2b:e1:ae:5a:bd:f7:33:9d:6f: e2:f7:e1:19:70:a9:5f:aa:b8:09:77:f6:05:58:6a: 1b:80:4e:ac:b7:cb:01:a3:a4:d2:8d:9f:98:6f:c9: 86:c5:13:7e:0a:3d:42:28:d5:62:e6:48:52:9a:58: e4:7a:8f:47:a0:78:82:47:29:81:66:a6:b8:d4:c9: fe:e2:63:4e:d6:1f:0f:3e:43:6e:9f:7f:83:c8:d1: 6c:f5:5a:75:90:01:1d:79:f2:b4:fc:7c:45:7b:38: c2:71:88:ed:b0:4e:68:11:43:0f:72:ea:45:60:e1: cb:b6:b1:47:15:52:a5:05:f5:2f:7b:e2:74:e0:f0: 5e:5f:77:7f:b6:03:68:15:14:2b:b8:74:08:1a:eb: c1:d8:ab:e1:c1:33:29:09:80:0b:b7:98:86:4f:2b: ff:62:9b:ae:ef:a7:ed:71:35:34:74:6c:b0:a0:03: 24:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:FA:F5:D3:03:D6:E9:55:9A:62:D3:7D:FA:B8:F9:D2:75:43:7E:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a536c405-143a-37a8-87a4-ae1d57a2a636.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:14a0::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:de:e9:45:0e:f2:77:f9:bb:1c:a0:b1:97:8c:17:97:b6:c6: 5c:ae:4b:68:ca:a5:19:bd:28:d5:93:2e:1d:58:ca:b3:c7:24: f6:c1:19:88:44:ff:bf:28:91:07:3b:ea:d3:25:1d:59:cd:ea: e6:e2:25:89:f5:5f:e3:e7:57:9f:59:84:07:ab:42:35:c3:a2: 87:1a:2a:6c:c6:50:f1:87:80:98:65:39:59:20:78:e9:8b:9a: 68:08:a0:36:b8:99:8f:9b:2c:f7:9d:c4:3f:5d:46:69:4d:a8: f8:72:48:2f:42:38:36:4e:4d:08:27:97:5a:af:30:6e:9c:bd: a5:6f:49:81:d6:98:7c:e0:9b:25:65:3e:f5:bd:3a:d7:7e:e6: 05:c3:11:13:09:08:c0:f0:4d:4d:f6:f7:8c:54:12:0e:fc:a6: 79:e5:ca:73:5c:3a:b7:ec:d1:de:bd:0e:62:41:36:6f:e3:cb: 8a:b4:54:d9:4e:dc:cf:c7:e0:9b:f6:c4:ba:0e:06:a3:7e:97: 03:e3:ba:6e:b7:c9:30:db:22:b7:ac:26:d8:29:cb:f9:42:1c: 7f:c1:7d:c2:af:e8:6a:28:dd:9b:e6:ca:36:27:28:39:f7:2f: fc:4a:fd:5f:58:79:08:90:cc:8b:ae:d3:94:f9:c3:64:c5:f6: 8f:bb:71:a0 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmxSgkwbyJ5MDxPsoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk NWQ4MzQwMWItZGI4OS00NjM2LTkyZWQtNjQ0NGZkNDNhNTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjo5ElOtPVh2JP9IGbpJTYh1qJqsQE+x3+13 B8Z6cWP27Q3LVEvjcOKQEnysMVTQYHXL63oozPSZUSMIzwU0M1kDbE/NfBOm2u/j 599wc9Mr4a5avfcznW/i9+EZcKlfqrgJd/YFWGobgE6st8sBo6TSjZ+Yb8mGxRN+ Cj1CKNVi5khSmljkeo9HoHiCRymBZqa41Mn+4mNO1h8PPkNun3+DyNFs9Vp1kAEd efK0/HxFezjCcYjtsE5oEUMPcupFYOHLtrFHFVKlBfUve+J04PBeX3d/tgNoFRQr uHQIGuvB2KvhwTMpCYALt5iGTyv/Ypuu76ftcTU0dGywoAMkfQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFEv69dMD1ulVmmLTffq4+dJ1Q37mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTUzNmM0MDUtMTQzYS0z N2E4LTg3YTQtYWUxZDU3YTJhNjM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgAUoAAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEATN7pRQ7yd/m7HKCxl4wXl7bGXK5LaMqlGb0o1ZMuHVjKs8ck9sEZ iET/vyiRBzvq0yUdWc3q5uIlifVf4+dXn1mEB6tCNcOihxoqbMZQ8YeAmGU5WSB4 6YuaaAigNriZj5ss953EP11GaU2o+HJIL0I4Nk5NCCeXWq8wbpy9pW9JgdaYfOCb JWU+9b06137mBcMREwkIwPBNTfb3jFQSDvymeeXKc1w6t+zR3r0OYkE2b+PLirRU 2U7cz8fgm/bEug4Go36XA+O6brfJMNsit6wm2CnL+UIcf8F9wq/oaijdm+bKNico Ofcv/Er9X1h5CJDMi67TlPnDZMX2j7txoA== -----END CERTIFICATE-----Generated at Thu May 8 17:22:38 2025 by rpki-client