$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c7cec4d3-1b79-32c5-8e79-2963cb9a074e.roa File: c7cec4d3-1b79-32c5-8e79-2963cb9a074e.roa (raw, json) Hash identifier: Ueulm2SdaVDxrhtx36jrIsZfy3yOG8vs5D0UNtq/jlA= Subject key identifier: 58:22:55:29:7C:97:2A:C4:24:6A:07:F1:16:F7:02:51:AD:77:A0:EA Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584988CF36C03CCFC5B875EF2B00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c7cec4d3-1b79-32c5-8e79-2963cb9a074e.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 20940 IP address blocks: 2600:1488:a340::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:36:c0:3c:cf:c5:b8:75:ef:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=674b5a87-9b4a-4db4-b3ac-946c2359a886 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:8d:78:55:f2:fc:a6:a9:a8:43:c5:49:79:63: b7:89:cc:78:36:dc:ff:fb:da:aa:92:29:b4:06:27: c7:6b:69:38:98:bb:b5:16:7a:28:51:16:4f:1f:f5: 4a:f5:dc:02:0d:2e:96:0c:68:47:51:cf:b3:da:5e: 0f:d3:77:34:bc:a5:20:1d:77:23:b8:f2:f8:49:98: 79:0c:6b:97:71:8b:4b:41:70:9e:9d:b7:c5:c2:b3: 5b:14:95:49:23:b4:12:89:89:08:b3:bf:07:c5:52: 64:c8:04:77:43:42:c4:b6:41:e3:ff:10:61:f4:6b: f9:5f:2f:e4:df:2b:0b:68:80:e0:a3:17:4f:36:ed: 80:c5:00:f8:38:a3:e4:75:59:f0:40:87:6a:ec:7d: bc:dd:af:c1:9e:c6:06:1c:30:55:2e:79:05:35:09: 08:f9:52:ed:cb:ba:00:62:21:5d:b1:12:3f:af:c1: b2:0c:1f:b1:3a:43:61:b5:04:60:59:d8:a9:44:ac: 29:72:f6:33:ef:7b:9a:e8:3a:87:2c:73:f5:d7:4f: d5:38:33:65:36:a2:20:f1:3b:a7:ed:88:c4:04:45: 9e:9d:39:59:9b:6e:a5:c5:78:e8:6f:2c:6f:0e:82: d4:3b:9d:54:9d:b3:ba:bd:9e:7b:6b:4f:1a:03:2d: 4e:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:22:55:29:7C:97:2A:C4:24:6A:07:F1:16:F7:02:51:AD:77:A0:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c7cec4d3-1b79-32c5-8e79-2963cb9a074e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1488:a340::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:6e:8b:81:7d:eb:d3:77:8a:94:87:9e:41:32:27:35:38:30: 5c:34:b2:09:8b:80:0f:a4:8d:50:a7:00:99:ae:9c:e8:b8:5b: 53:4b:48:47:89:18:2e:51:82:ad:dc:bf:90:ca:0a:59:33:af: 86:e8:64:b0:8d:ac:ef:ca:82:de:a3:63:79:be:c6:d2:d3:bf: 23:89:a5:da:b3:26:bd:39:f5:23:2f:cf:72:2b:2c:37:56:ea: 65:2c:47:df:ca:ea:91:25:14:7b:d9:a7:6e:1a:45:54:c7:f5: 5f:ca:e0:d2:6d:7c:42:be:26:ea:be:90:dd:50:99:c3:76:d6: 1d:b2:81:e2:62:e9:fd:f9:eb:9a:9e:ff:76:4b:9d:14:0d:bf: 80:96:64:27:c2:02:2c:16:82:6b:1b:d6:2c:d7:71:ce:4b:af: ac:11:a2:aa:59:cd:5a:80:e2:01:07:5b:00:4a:5d:47:03:10: 4e:52:31:60:91:d4:a0:7e:f8:50:2e:61:91:3f:3c:74:3e:4d: 20:ed:fb:09:ad:64:21:9c:19:30:1e:f0:74:db:f2:f5:b5:87: b4:cb:25:11:a0:43:26:cb:40:89:08:e2:b9:cf:a8:fb:19:5f: 9a:9a:4e:ee:82:81:94:24:26:9e:ea:50:cb:bc:ae:bc:4b:2f: 94:40:94:49 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmIzzbAPM/FuHXvKwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk Njc0YjVhODctOWI0YS00ZGI0LWIzYWMtOTQ2YzIzNTlhODg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwo14VfL8pqmoQ8VJeWO3icx4Ntz/+9qqkim0 BifHa2k4mLu1FnooURZPH/VK9dwCDS6WDGhHUc+z2l4P03c0vKUgHXcjuPL4SZh5 DGuXcYtLQXCenbfFwrNbFJVJI7QSiYkIs78HxVJkyAR3Q0LEtkHj/xBh9Gv5Xy/k 3ysLaIDgoxdPNu2AxQD4OKPkdVnwQIdq7H283a/BnsYGHDBVLnkFNQkI+VLty7oA YiFdsRI/r8GyDB+xOkNhtQRgWdipRKwpcvYz73ua6DqHLHP110/VODNlNqIg8Tun 7YjEBEWenTlZm26lxXjobyxvDoLUO51UnbO6vZ57a08aAy1OtwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFgiVSl8lyrEJGoH8Rb3AlGtd6DqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzdjZWM0ZDMtMWI3OS0z MmM1LThlNzktMjk2M2NiOWEwNzRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUiKNA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE1ui4F969N3ipSHnkEyJzU4MFw0sgmLgA+kjVCnAJmunOi4W1NL SEeJGC5Rgq3cv5DKClkzr4boZLCNrO/Kgt6jY3m+xtLTvyOJpdqzJr059SMvz3Ir LDdW6mUsR9/K6pElFHvZp24aRVTH9V/K4NJtfEK+Juq+kN1QmcN21h2ygeJi6f35 65qe/3ZLnRQNv4CWZCfCAiwWgmsb1izXcc5Lr6wRoqpZzVqA4gEHWwBKXUcDEE5S MWCR1KB++FAuYZE/PHQ+TSDt+wmtZCGcGTAe8HTb8vW1h7TLJRGgQybLQIkI4rnP qPsZX5qaTu6CgZQkJp7qUMu8rrxLL5RAlEk= -----END CERTIFICATE-----Generated at Mon May 5 01:59:59 2025 by rpki-client