$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f3ffd5f8-062e-3fe8-9d0d-ebe422f941c5.roa File: f3ffd5f8-062e-3fe8-9d0d-ebe422f941c5.roa (raw, json) Hash identifier: 3Hfb1Jygps7Qy1ODd5pWMc4fhGYNUHIj/BXhbqZj2Nw= Subject key identifier: D6:50:44:10:D6:E7:CE:25:7B:26:88:5E:1B:27:D0:D3:BD:9E:7F:F6 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849D85F83E999A9408AC6B11B80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f3ffd5f8-062e-3fe8-9d0d-ebe422f941c5.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 35994 IP address blocks: 2600:141b:14::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:83:e9:99:a9:40:8a:c6:b1:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=ecef62dd-a3df-46f7-be95-4ed1a367ff8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:5d:dd:65:ad:77:b7:4d:10:ea:0d:0d:4b:c9: 40:5e:7c:e4:10:0b:29:7c:93:36:12:d5:46:57:86: d8:a9:d0:53:52:12:e3:1e:2c:35:9e:3d:25:45:46: 10:d2:7b:57:87:a0:44:7c:1e:40:e9:00:d8:d5:68: 01:8e:29:2a:d4:53:70:9b:18:37:1f:7f:96:71:b6: 01:1e:38:1b:6d:74:76:94:f6:ae:de:e4:8b:2b:e2: 7a:b2:5e:f4:77:d6:54:ed:3c:09:99:d5:b9:bf:c7: d7:bb:1a:ce:a3:aa:c3:bf:55:eb:ab:62:14:93:68: 2e:e6:1b:4e:e7:c4:eb:1e:6f:3e:98:b2:02:ea:2e: 3c:6f:f5:64:8b:c7:d9:c1:55:12:54:6d:db:97:f9: df:0a:9c:53:e5:f6:46:e2:b9:25:63:bf:10:3f:a4: 6c:27:05:be:c7:97:b7:33:e0:b8:f4:e6:89:ca:cc: 2c:f1:22:43:1f:cf:d3:25:f8:df:60:b1:24:62:27: 5b:0d:fc:31:1b:29:c5:9c:d7:88:62:bb:6d:23:c0: 30:87:99:28:f3:be:7f:49:6d:2e:6b:d6:46:4c:c4: 83:b6:aa:f2:d4:cf:57:94:49:30:e7:f2:f0:88:fb: 88:69:b9:f7:88:49:4e:46:8a:8d:dd:c2:83:a1:b2: 21:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:50:44:10:D6:E7:CE:25:7B:26:88:5E:1B:27:D0:D3:BD:9E:7F:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f3ffd5f8-062e-3fe8-9d0d-ebe422f941c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:141b:14::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:67:75:dc:59:fc:6c:e9:e3:eb:74:53:e8:c7:88:56:b3:41: 78:2c:e7:26:3d:8e:9c:72:45:04:00:8d:79:81:10:d8:85:08: f3:b1:71:cf:1b:cc:76:c9:e4:d9:5d:c5:77:9d:b1:b1:03:2c: ee:0b:15:2c:2d:19:0b:53:bb:85:89:70:a9:a3:0c:c1:71:85: 9a:47:04:d8:bb:86:57:63:83:0e:75:1d:4e:38:fb:37:98:39: a0:fd:ee:ce:76:13:12:b5:e2:4c:6c:2f:72:b6:bb:2d:c1:c7: c1:77:9f:ed:fd:44:e2:8e:59:65:55:e4:ad:c3:b5:39:13:8e: aa:d2:89:2d:36:04:3f:f4:cc:64:19:f2:8c:d4:34:cc:b0:f5: 93:39:d6:dc:7d:e5:b8:ec:3f:95:34:3f:b2:ea:fb:4d:e4:27: 40:8a:4e:4d:48:92:e1:25:4a:7b:1b:ee:e2:7a:41:fe:2c:70: 75:fa:19:e5:e1:cc:92:f1:18:34:91:d2:b2:60:ef:92:a4:76: 52:cf:f3:c7:d2:6b:17:ca:bb:aa:a9:cd:1d:6a:ec:b7:8b:2a: d1:bd:a2:9f:d3:6c:40:ae:32:d0:97:c3:fd:20:d2:2d:0b:ba: 36:f9:98:fd:36:f8:78:f2:67:eb:50:f5:d6:9a:f0:b8:74:34: 3f:e9:e8:48 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnYX4PpmalAisaxG4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk ZWNlZjYyZGQtYTNkZi00NmY3LWJlOTUtNGVkMWEzNjdmZjhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqF3dZa13t00Q6g0NS8lAXnzkEAspfJM2EtVG V4bYqdBTUhLjHiw1nj0lRUYQ0ntXh6BEfB5A6QDY1WgBjikq1FNwmxg3H3+WcbYB HjgbbXR2lPau3uSLK+J6sl70d9ZU7TwJmdW5v8fXuxrOo6rDv1Xrq2IUk2gu5htO 58TrHm8+mLIC6i48b/Vki8fZwVUSVG3bl/nfCpxT5fZG4rklY78QP6RsJwW+x5e3 M+C49OaJysws8SJDH8/TJfjfYLEkYidbDfwxGynFnNeIYrttI8Awh5ko875/SW0u a9ZGTMSDtqry1M9XlEkw5/LwiPuIabn3iElORoqN3cKDobIhAwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNZQRBDW584leyaIXhsn0NO9nn/2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjNmZmQ1ZjgtMDYyZS0z ZmU4LTlkMGQtZWJlNDIyZjk0MWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUGwAU MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEpnddxZ/Gzp4+t0U+jHiFazQXgs5yY9jpxyRQQAjXmBENiFCPOx cc8bzHbJ5NldxXedsbEDLO4LFSwtGQtTu4WJcKmjDMFxhZpHBNi7hldjgw51HU44 +zeYOaD97s52ExK14kxsL3K2uy3Bx8F3n+39ROKOWWVV5K3DtTkTjqrSiS02BD/0 zGQZ8ozUNMyw9ZM51tx95bjsP5U0P7Lq+03kJ0CKTk1IkuElSnsb7uJ6Qf4scHX6 GeXhzJLxGDSR0rJg75KkdlLP88fSaxfKu6qpzR1q7LeLKtG9op/TbECuMtCXw/0g 0i0Lujb5mP02+HjyZ+tQ9daa8Lh0ND/p6Eg= -----END CERTIFICATE-----Generated at Sat Jun 7 14:02:14 2025 by rpki-client