$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4027e276-11f7-3ac3-a9cc-bf461d0ba400.roa File: 4027e276-11f7-3ac3-a9cc-bf461d0ba400.roa (raw, json) Hash identifier: TcBH9x4grZkjX10k3kmee4cKbNdiiw8GrmYIyrZLdcs= Subject key identifier: FF:E6:F8:19:B2:6A:19:4E:E6:40:70:68:F2:1B:35:6F:A1:DC:29:5E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849CE9A55999429068D35B22E20 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4027e276-11f7-3ac3-a9cc-bf461d0ba400.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 20940 IP address blocks: 2600:1405:2000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:55:99:94:29:06:8d:35:b2:2e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=1f14031a-0ea6-49a2-8cb6-81525027b06f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:0b:13:c6:73:0b:2a:06:3f:d0:5b:a5:cd:52: 2a:6f:f2:09:c7:ef:bf:e9:ae:f6:02:cf:03:be:9d: 21:51:5a:fc:0e:b4:bf:15:68:ce:b6:d7:65:3c:d4: 5e:a3:8b:a4:9c:23:e6:fb:85:5f:48:d5:dd:d1:62: 67:77:1d:90:5a:d2:67:b7:18:54:76:64:66:ff:55: 91:69:3a:0c:2e:ca:cd:54:59:ab:4f:38:c6:0c:e7: c7:c9:a3:2b:69:b6:aa:4c:ee:a3:22:82:6c:4d:01: 77:9d:d5:cb:97:d8:9a:f6:be:44:d1:b8:03:26:59: e5:1e:4f:a4:d8:e1:da:2d:63:fb:56:34:c3:27:ca: 32:64:91:fd:e8:e7:91:35:aa:53:f5:70:d0:03:86: 1a:43:7e:aa:a2:4f:4c:03:07:eb:97:32:92:2b:bb: 09:81:30:f5:b4:8f:66:b6:69:b7:ef:84:00:7f:1b: 03:85:d8:51:22:8f:90:e0:67:5b:43:15:33:bc:65: 13:3b:25:66:04:23:ea:bd:cf:5f:0b:2d:ae:2b:19: d2:64:69:63:78:e5:e7:eb:40:37:d6:01:9d:71:16: 12:64:9d:f2:9a:0d:be:9a:ad:15:36:b4:a2:58:81: 4a:49:2b:04:a4:3b:63:09:97:88:aa:db:72:3b:9e: b2:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:E6:F8:19:B2:6A:19:4E:E6:40:70:68:F2:1B:35:6F:A1:DC:29:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4027e276-11f7-3ac3-a9cc-bf461d0ba400.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1405:2000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:3b:c7:be:0b:62:6f:fa:f6:c4:dd:c1:47:d5:f1:3f:30:35: 34:14:e6:3b:05:39:5b:43:47:48:f5:d0:67:86:8d:fd:ed:2e: a8:52:9a:61:46:f4:7d:af:9a:59:72:7e:bf:f2:98:bc:6b:4c: 1e:7a:ca:76:8e:0f:03:16:ec:a9:f6:9a:c0:b8:9c:38:fa:fc: 28:00:9c:de:2c:c6:ee:12:c1:73:8c:dc:b3:0f:9e:70:c2:28: 97:bd:b0:2d:1a:db:50:53:8b:02:98:2f:b4:35:e9:7d:ee:88: 39:9b:8a:cc:3c:65:23:19:10:ee:f4:ce:6e:b6:79:4a:6d:df: a8:9f:e6:2f:f4:91:fb:60:68:be:03:e4:3d:9f:ef:71:8e:a9: 62:4e:29:aa:bf:95:fc:fc:e5:31:36:7d:8a:e3:e6:c3:e0:89: d9:d1:ee:39:47:13:48:6f:c9:2b:ba:46:3c:20:d5:e9:54:0e: cf:ec:35:c5:00:ab:2e:19:a0:91:59:df:67:dc:8b:8c:46:c0: 5b:51:6b:0e:b0:9e:98:31:30:ef:f8:4e:e6:6d:05:b8:32:8e: 0d:c6:a0:a3:d1:64:80:b8:39:39:2f:30:cd:94:1d:51:06:63: 0f:2d:7d:0c:c7:93:76:e2:af:49:f4:60:5f:bb:21:e3:e4:d9: 02:a8:d9:16 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnOmlWZlCkGjTWyLiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk MWYxNDAzMWEtMGVhNi00OWEyLThjYjYtODE1MjUwMjdiMDZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwsTxnMLKgY/0FulzVIqb/IJx++/6a72As8D vp0hUVr8DrS/FWjOttdlPNReo4uknCPm+4VfSNXd0WJndx2QWtJntxhUdmRm/1WR aToMLsrNVFmrTzjGDOfHyaMrabaqTO6jIoJsTQF3ndXLl9ia9r5E0bgDJlnlHk+k 2OHaLWP7VjTDJ8oyZJH96OeRNapT9XDQA4YaQ36qok9MAwfrlzKSK7sJgTD1tI9m tmm374QAfxsDhdhRIo+Q4GdbQxUzvGUTOyVmBCPqvc9fCy2uKxnSZGljeOXn60A3 1gGdcRYSZJ3ymg2+mq0VNrSiWIFKSSsEpDtjCZeIqttyO56yuQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFP/m+BmyahlO5kBwaPIbNW+h3CleMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDAyN2UyNzYtMTFmNy0z YWMzLWE5Y2MtYmY0NjFkMGJhNDAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUBSAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIo7x74LYm/69sTdwUfV8T8wNTQU5jsFOVtDR0j10GeGjf3tLqhS mmFG9H2vmllyfr/ymLxrTB56ynaODwMW7Kn2msC4nDj6/CgAnN4sxu4SwXOM3LMP nnDCKJe9sC0a21BTiwKYL7Q16X3uiDmbisw8ZSMZEO70zm62eUpt36if5i/0kftg aL4D5D2f73GOqWJOKaq/lfz85TE2fYrj5sPgidnR7jlHE0hvySu6Rjwg1elUDs/s NcUAqy4ZoJFZ32fci4xGwFtRaw6wnpgxMO/4TuZtBbgyjg3GoKPRZIC4OTkvMM2U HVEGYw8tfQzHk3bir0n0YF+7IePk2QKo2RY= -----END CERTIFICATE-----Generated at Thu Jun 5 18:15:23 2025 by rpki-client