$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8b634fa1-720f-3d5b-a0f7-aa91f8973d10.roa File: 8b634fa1-720f-3d5b-a0f7-aa91f8973d10.roa (raw, json) Hash identifier: LfZW13weFJnCCrqDZqo9xumJHTVtzwAX0aXrrXLnOZQ= Subject key identifier: 9D:7A:6A:58:29:3D:FB:B9:FA:D2:98:E3:C0:92:3E:C5:04:AD:86:96 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858498CFF20DC0C9FE7F9EABB1080 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8b634fa1-720f-3d5b-a0f7-aa91f8973d10.roa Signing time: Thu 17 Apr 2025 01:00:45 +0000 ROA not before: Thu 17 Apr 2025 01:00:45 +0000 ROA not after: Wed 16 Jul 2025 01:00:45 +0000 asID: 9498 IP address blocks: 2600:140f:e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8c:ff:20:dc:0c:9f:e7:f9:ea:bb:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 17 01:00:45 2025 GMT Not After : Jul 16 01:00:45 2025 GMT Subject: CN=8e4b3d17-3a0c-4165-aa39-179b042c5fe0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:86:74:b5:73:94:f5:1f:eb:76:38:9e:fc:a4: 6f:a0:56:29:2c:ff:81:43:c8:a3:7e:1a:20:9c:77: 02:e3:3b:7f:ee:99:85:fa:b6:fa:a8:d9:75:5c:2a: a8:65:e1:b6:b9:8f:09:eb:b2:5e:20:7b:96:a0:a4: 0d:87:cb:e9:f4:68:f7:7a:80:1e:cb:36:ec:59:53: 13:e7:28:7d:26:0f:5c:e0:bf:1e:44:89:2a:ce:6d: 99:04:d3:15:71:8a:5f:1a:c9:3b:6f:ee:fa:dc:1b: 4a:d4:ee:07:bc:82:54:50:10:a1:b7:18:be:d9:45: 22:f5:79:91:b7:09:43:d0:53:d0:ea:22:a4:b6:47: 4c:cc:02:0f:91:85:a4:3e:93:29:b7:7d:3e:2d:ba: 1c:cb:0a:57:df:01:9e:ab:12:34:ce:8b:c1:34:ed: 36:c0:36:70:85:03:f0:63:86:09:b0:db:42:9b:b9: 06:98:6f:0d:f5:2a:46:7f:bf:fa:53:62:5c:95:55: 3e:ef:60:0f:3f:ce:99:3b:c3:d6:d6:72:b1:cb:87: 35:2c:02:1c:30:41:88:f7:64:0f:53:2d:cf:bd:49: c2:e2:05:61:3c:20:84:49:de:b3:c6:c5:98:d8:25: 9d:e4:65:08:99:cf:a3:a3:19:14:fa:64:42:9f:b8: 7f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:7A:6A:58:29:3D:FB:B9:FA:D2:98:E3:C0:92:3E:C5:04:AD:86:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8b634fa1-720f-3d5b-a0f7-aa91f8973d10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:140f:e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:cd:4a:bf:20:d6:e8:b5:12:d5:a9:66:a9:a5:24:d3:f8:fe: ca:b9:3c:55:71:c9:05:12:26:56:e1:a1:91:b1:c6:a6:e9:56: 56:56:1c:67:49:bd:40:06:a2:d6:f4:5a:7b:f2:17:5a:10:f9: 8f:ee:99:5f:50:29:40:7a:fa:a0:d6:33:29:1a:67:24:75:1c: 25:c0:90:74:f0:3a:47:36:25:96:c9:95:c8:f2:ad:2d:a0:9c: 7d:d2:d6:7c:2e:4d:91:52:56:f7:61:9d:1a:2f:f7:03:b1:33: 1a:f5:76:d2:6a:0c:bc:85:a7:55:34:38:e6:51:2d:44:19:38: a7:5c:73:38:35:e1:ac:5f:d8:40:69:6b:86:49:c1:93:17:48: e3:7b:63:b1:3a:49:91:ed:d9:7e:45:e1:9e:31:f7:4b:6e:88: 4e:62:8e:59:31:fa:52:c1:a1:6c:04:54:9e:dd:72:de:46:d8: 3d:4d:c5:42:32:71:ad:70:c0:43:70:63:56:51:26:fe:97:1d: eb:4e:9b:19:9d:10:f3:5b:75:de:a2:34:64:f7:7b:9b:30:e9: 57:fa:c4:6c:f0:48:24:39:6f:c0:1f:e9:c1:6e:33:ae:dd:5e: e7:e3:08:68:68:ac:8c:95:fa:c7:97:7a:ff:f2:63:97:cb:3a: e2:62:c7:c8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmM/yDcDJ/n+eq7EIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQxNzAxMDA0NVoXDTI1MDcxNjAxMDA0NVowLzEtMCsGA1UEAxMk OGU0YjNkMTctM2EwYy00MTY1LWFhMzktMTc5YjA0MmM1ZmUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYZ0tXOU9R/rdjie/KRvoFYpLP+BQ8ijfhog nHcC4zt/7pmF+rb6qNl1XCqoZeG2uY8J67JeIHuWoKQNh8vp9Gj3eoAeyzbsWVMT 5yh9Jg9c4L8eRIkqzm2ZBNMVcYpfGsk7b+763BtK1O4HvIJUUBChtxi+2UUi9XmR twlD0FPQ6iKktkdMzAIPkYWkPpMpt30+LbocywpX3wGeqxI0zovBNO02wDZwhQPw Y4YJsNtCm7kGmG8N9SpGf7/6U2JclVU+72APP86ZO8PW1nKxy4c1LAIcMEGI92QP Uy3PvUnC4gVhPCCESd6zxsWY2CWd5GUImc+joxkU+mRCn7h/nwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJ16algpPfu5+tKY48CSPsUErYaWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGI2MzRmYTEtNzIwZi0z ZDViLWEwZjctYWE5MWY4OTczZDEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUDwAO MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAvNSr8g1ui1EtWpZqmlJNP4/sq5PFVxyQUSJlbhoZGxxqbpVlZW HGdJvUAGotb0WnvyF1oQ+Y/umV9QKUB6+qDWMykaZyR1HCXAkHTwOkc2JZbJlcjy rS2gnH3S1nwuTZFSVvdhnRov9wOxMxr1dtJqDLyFp1U0OOZRLUQZOKdcczg14axf 2EBpa4ZJwZMXSON7Y7E6SZHt2X5F4Z4x90tuiE5ijlkx+lLBoWwEVJ7dct5G2D1N xUIyca1wwENwY1ZRJv6XHetOmxmdEPNbdd6iNGT3e5sw6Vf6xGzwSCQ5b8Af6cFu M67dXufjCGhorIyV+seXev/yY5fLOuJix8g= -----END CERTIFICATE-----Generated at Sat Jun 7 13:52:20 2025 by rpki-client