$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ddfac75d-9eef-3d4b-b571-4ccfcfe2d993.roa File: ddfac75d-9eef-3d4b-b571-4ccfcfe2d993.roa (raw, json) Hash identifier: 3FAtsFdifCF5+MdX7Ln3n6Uo5v6NSTZa9L0h60daj84= Subject key identifier: 19:B3:C7:E2:D4:F0:32:0B:BE:E3:9B:59:43:6D:B8:97:5B:D2:03:68 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849E2252E43376FAC9A2497EF00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ddfac75d-9eef-3d4b-b571-4ccfcfe2d993.roa Signing time: Sat 17 May 2025 13:01:02 +0000 ROA not before: Sat 17 May 2025 13:01:02 +0000 ROA not after: Fri 15 Aug 2025 13:01:02 +0000 asID: 35994 IP address blocks: 2600:1404:a400::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e2:25:2e:43:37:6f:ac:9a:24:97:ef:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 17 13:01:02 2025 GMT Not After : Aug 15 13:01:02 2025 GMT Subject: CN=a6a3fce0-9eaa-488a-b5ca-13044a83c80b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d8:7c:17:7a:48:2d:91:18:0a:de:9e:74:9a: 2f:94:0a:c0:f8:75:49:7a:c9:dd:6c:86:fa:e6:ca: 4b:0a:be:2f:37:75:e4:df:df:b8:fc:05:b9:52:e7: 25:8b:dd:2b:96:7e:78:5c:94:89:24:3a:ee:20:b9: 10:33:fb:14:1e:00:87:7e:c9:38:32:2c:b8:ec:5e: 49:e5:38:15:06:c8:31:0c:f1:1b:f4:b6:e6:ec:b6: 1a:d9:07:9b:00:22:0d:12:ab:af:f2:b0:c4:31:d0: f4:a2:3c:96:eb:e7:bd:e7:e9:8c:d8:26:09:31:f8: 11:55:0d:a0:ab:04:e3:43:3d:ea:00:29:85:3d:94: 44:18:af:7d:4e:4b:70:cf:fe:4d:3f:11:cf:28:54: b3:47:10:71:44:37:da:97:f4:b6:78:f1:7a:67:8a: 84:bc:45:7e:9c:56:b7:df:2f:65:e2:aa:c3:25:e4: 08:93:5e:30:f4:4d:33:f0:ce:9c:45:3c:2a:3b:c1: c7:f5:31:68:37:83:b5:9b:10:fc:84:93:d8:16:00: 87:1f:b7:df:1d:79:03:a2:54:54:ca:93:e0:e1:c4: 45:a2:95:2e:dd:21:c0:0f:bc:cc:2d:15:af:ad:c0: 08:6f:bc:93:e4:f3:5d:06:f8:cc:00:54:3b:24:75: 19:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:B3:C7:E2:D4:F0:32:0B:BE:E3:9B:59:43:6D:B8:97:5B:D2:03:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ddfac75d-9eef-3d4b-b571-4ccfcfe2d993.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1404:a400::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:da:ea:a2:cb:38:49:77:c5:10:b5:a8:f8:8a:dc:c5:a5:ce: b7:5d:54:32:61:0b:35:a9:dc:50:a5:d9:c9:6c:ec:63:4b:85: 90:2b:08:71:e5:b5:f5:a5:ba:5d:f9:ed:d4:ce:d5:41:68:17: 79:ce:0e:60:11:d4:46:91:12:18:d5:82:fa:0a:35:88:1a:16: bc:78:07:62:67:61:e8:ea:f6:ff:90:fc:aa:87:c3:a0:67:36: bf:f5:67:ed:ad:99:fa:21:7d:5f:f9:75:03:c4:6d:ca:86:47: e0:cd:c3:dd:81:98:34:fc:8a:aa:fe:b0:90:06:bd:06:9c:ed: 71:18:58:6e:73:01:db:f6:89:0c:d6:a0:c1:35:ba:fe:5a:c3: 03:e8:f2:36:5e:a5:a2:4c:93:e6:98:b7:83:d1:7e:87:cc:fb: a0:78:57:2e:25:84:c1:ac:fc:5f:44:52:21:f9:b9:5f:93:09: 6c:44:81:19:bd:11:03:03:58:89:b0:0d:7e:b1:ed:e8:3c:29: 40:ea:df:1b:17:4e:96:1b:c1:c8:e7:0c:13:09:8f:4a:49:ad: e6:6b:87:4d:71:e2:b9:b0:5b:77:59:bc:2f:e2:6f:07:70:3e: 80:f8:8c:8e:08:0a:82:84:89:48:b9:18:2d:8b:23:a6:32:0f: c4:63:99:4b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEniJS5DN2+smiSX7wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUxNzEzMDEwMloXDTI1MDgxNTEzMDEwMlowLzEtMCsGA1UEAxMk YTZhM2ZjZTAtOWVhYS00ODhhLWI1Y2EtMTMwNDRhODNjODBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9h8F3pILZEYCt6edJovlArA+HVJesndbIb6 5spLCr4vN3Xk39+4/AW5Uucli90rln54XJSJJDruILkQM/sUHgCHfsk4Miy47F5J 5TgVBsgxDPEb9Lbm7LYa2QebACINEquv8rDEMdD0ojyW6+e95+mM2CYJMfgRVQ2g qwTjQz3qACmFPZREGK99Tktwz/5NPxHPKFSzRxBxRDfal/S2ePF6Z4qEvEV+nFa3 3y9l4qrDJeQIk14w9E0z8M6cRTwqO8HH9TFoN4O1mxD8hJPYFgCHH7ffHXkDolRU ypPg4cRFopUu3SHAD7zMLRWvrcAIb7yT5PNdBvjMAFQ7JHUZuwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBmzx+LU8DILvuObWUNtuJdb0gNoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGRmYWM3NWQtOWVlZi0z ZDRiLWI1NzEtNGNjZmNmZTJkOTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUBKQA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAILa6qLLOEl3xRC1qPiK3MWlzrddVDJhCzWp3FCl2cls7GNLhZAr CHHltfWlul357dTO1UFoF3nODmAR1EaREhjVgvoKNYgaFrx4B2JnYejq9v+Q/KqH w6BnNr/1Z+2tmfohfV/5dQPEbcqGR+DNw92BmDT8iqr+sJAGvQac7XEYWG5zAdv2 iQzWoME1uv5awwPo8jZepaJMk+aYt4PRfofM+6B4Vy4lhMGs/F9EUiH5uV+TCWxE gRm9EQMDWImwDX6x7eg8KUDq3xsXTpYbwcjnDBMJj0pJreZrh01x4rmwW3dZvC/i bwdwPoD4jI4ICoKEiUi5GC2LI6YyD8RjmUs= -----END CERTIFICATE-----Generated at Sat Jun 7 22:54:08 2025 by rpki-client