$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5372cff9-908a-394e-bcd5-28c0573274b7.roa File: 5372cff9-908a-394e-bcd5-28c0573274b7.roa (raw, json) Hash identifier: Y0Mpj7mY8YszQ46C9ag0PH1LT2BiUEZf8Zbfcfy2Ktk= Subject key identifier: 9A:B5:60:48:DD:3E:32:15:A1:15:04:D4:35:E9:D0:6A:E0:D9:59:56 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858496A19B54BD37A2839A24DD140 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5372cff9-908a-394e-bcd5-28c0573274b7.roa Signing time: Fri 04 Apr 2025 13:00:59 +0000 ROA not before: Fri 04 Apr 2025 13:00:59 +0000 ROA not after: Thu 03 Jul 2025 13:00:59 +0000 asID: 20940 IP address blocks: 2600:1402:800::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6a:19:b5:4b:d3:7a:28:39:a2:4d:d1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 4 13:00:59 2025 GMT Not After : Jul 3 13:00:59 2025 GMT Subject: CN=0ff865d1-ce00-47a0-b732-5b26e491ef51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:1b:00:c1:cb:e6:ac:18:30:d7:7c:03:0a:2f: 06:ec:0a:16:7d:51:ca:2f:53:8d:86:c1:4b:0f:35: 40:8b:dc:2e:e6:54:3e:16:46:67:bf:b1:0d:30:a0: ee:dd:f5:a8:f7:6c:4e:d1:4a:95:99:86:b8:7d:61: 2c:93:d3:50:9f:95:01:0a:0b:04:c4:67:10:01:a1: c4:79:1f:d0:b5:4e:2c:8b:a5:9d:2f:09:ff:f0:30: 9f:db:b6:08:50:65:16:a2:c9:7f:08:54:f9:64:b2: 41:38:13:e4:38:79:13:3e:81:b9:f6:e1:ab:04:27: be:c9:3e:a5:e7:bf:57:5b:16:55:7a:8d:55:83:cd: 6e:c9:03:a5:90:78:d9:8d:f8:26:58:fc:f7:0f:b3: 63:cc:41:3d:67:f3:a4:6b:94:e7:18:06:64:f7:ba: ad:94:62:b9:e8:20:07:d1:f2:84:1d:04:80:9a:e7: db:1b:00:8b:f4:37:1d:ec:51:a1:24:08:04:d2:bc: b3:0e:b1:21:17:8d:21:4c:53:38:e2:54:c1:97:f7: 7c:37:f0:dd:3e:06:5a:7b:b6:36:12:69:f7:4e:65: 87:8e:46:cb:1f:75:77:cf:96:ab:ca:6f:4c:2a:a1: 00:25:ef:60:e0:b4:2a:0f:52:95:d3:8f:a1:80:47: 97:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:B5:60:48:DD:3E:32:15:A1:15:04:D4:35:E9:D0:6A:E0:D9:59:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5372cff9-908a-394e-bcd5-28c0573274b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1402:800::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:2c:7d:34:2d:47:ca:5c:e5:08:dc:c5:c6:92:93:ac:91:d2: e9:e2:aa:71:80:e8:28:4a:9b:77:b6:96:1f:71:7c:26:37:0d: fe:6a:57:49:92:5a:ab:d5:dd:2c:e2:94:f9:9b:88:92:7a:af: 82:99:f1:92:93:89:12:76:88:7f:18:d0:52:fe:86:71:31:10: 10:13:3a:71:77:7f:ac:e3:0a:97:9d:ad:b8:af:07:d0:8e:fa: 3f:33:9f:15:15:98:86:3c:0b:19:eb:00:f8:50:57:de:38:18: 0a:28:4a:69:41:49:3c:13:5d:b1:18:f8:24:35:79:60:d2:9c: 77:47:f7:08:e3:19:a2:46:58:c7:44:a6:22:bc:6e:25:27:ec: 84:26:f7:7b:aa:c9:c0:2c:85:81:9c:04:2d:b5:77:1e:dd:c8: 1c:a6:10:61:6f:c3:c2:d9:62:7b:4b:39:e8:b0:e0:96:0c:03: 2b:3f:10:8a:5a:3b:92:1a:4e:69:96:0c:23:35:d9:32:2f:ae: 64:c7:ce:cf:60:66:ab:22:d3:a7:d7:d7:79:c7:3a:fe:0e:6b: c0:cf:48:d1:5f:4a:51:6e:9d:c5:16:b3:58:57:13:03:78:04: 78:43:18:99:ef:ed:a5:67:85:f2:29:fe:3f:c3:5a:f1:58:fe: ff:77:44:d8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElqGbVL03ooOaJN0UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQwNDEzMDA1OVoXDTI1MDcwMzEzMDA1OVowLzEtMCsGA1UEAxMk MGZmODY1ZDEtY2UwMC00N2EwLWI3MzItNWIyNmU0OTFlZjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7xsAwcvmrBgw13wDCi8G7AoWfVHKL1ONhsFL DzVAi9wu5lQ+FkZnv7ENMKDu3fWo92xO0UqVmYa4fWEsk9NQn5UBCgsExGcQAaHE eR/QtU4si6WdLwn/8DCf27YIUGUWosl/CFT5ZLJBOBPkOHkTPoG59uGrBCe+yT6l 579XWxZVeo1Vg81uyQOlkHjZjfgmWPz3D7NjzEE9Z/Oka5TnGAZk97qtlGK56CAH 0fKEHQSAmufbGwCL9Dcd7FGhJAgE0ryzDrEhF40hTFM44lTBl/d8N/DdPgZae7Y2 Emn3TmWHjkbLH3V3z5arym9MKqEAJe9g4LQqD1KV04+hgEeXZwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJq1YEjdPjIVoRUE1DXp0Grg2VlWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTM3MmNmZjktOTA4YS0z OTRlLWJjZDUtMjhjMDU3MzI3NGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUAggA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH8sfTQtR8pc5QjcxcaSk6yR0uniqnGA6ChKm3e2lh9xfCY3Df5q V0mSWqvV3SzilPmbiJJ6r4KZ8ZKTiRJ2iH8Y0FL+hnExEBATOnF3f6zjCpedrbiv B9CO+j8znxUVmIY8CxnrAPhQV944GAooSmlBSTwTXbEY+CQ1eWDSnHdH9wjjGaJG WMdEpiK8biUn7IQm93uqycAshYGcBC21dx7dyBymEGFvw8LZYntLOeiw4JYMAys/ EIpaO5IaTmmWDCM12TIvrmTHzs9gZqsi06fX13nHOv4Oa8DPSNFfSlFuncUWs1hX EwN4BHhDGJnv7aVnhfIp/j/DWvFY/v93RNg= -----END CERTIFICATE-----Generated at Sat Apr 5 14:11:23 2025 by rpki-client