$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f985f521-762e-3256-90b6-54f42b80a6c1.roa File: f985f521-762e-3256-90b6-54f42b80a6c1.roa (raw, json) Hash identifier: nv2knsFPVXMd5jVpUvwKYntQWxzFKpoRDL/dixPXy38= Subject key identifier: E8:93:A5:F2:E3:B9:43:E0:BF:98:D3:2A:0D:49:1B:4D:CE:3E:3F:66 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848DA70F42B44425794D8928780 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f985f521-762e-3256-90b6-54f42b80a6c1.roa Signing time: Wed 12 Feb 2025 02:00:39 +0000 ROA not before: Wed 12 Feb 2025 02:00:39 +0000 ROA not after: Tue 13 May 2025 01:00:39 +0000 asID: 21342 IP address blocks: 2600:1405:9c00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:da:70:f4:2b:44:42:57:94:d8:92:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 12 02:00:39 2025 GMT Not After : May 13 01:00:39 2025 GMT Subject: CN=ed62d416-9b27-4a2a-ac4f-bcc899f1e599 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:80:44:4f:14:5c:3f:54:ea:9b:21:c9:b9:58: 2f:f0:e4:82:fa:3b:b2:1f:4d:b4:ac:ec:02:83:f4: 70:29:9c:af:8b:8e:38:ae:57:04:ca:f0:bb:16:bd: 73:78:c6:37:f5:5c:00:ec:41:3e:43:50:92:92:64: ad:1a:99:91:ca:ad:39:e3:4b:2a:26:fc:84:31:91: 6f:22:ad:33:49:90:c3:03:9f:f8:a0:a6:e6:46:bb: 22:06:67:13:d4:11:85:d5:fd:5a:fe:3f:73:34:02: 43:86:51:d8:8e:f0:cd:6c:a4:f3:fb:42:7d:fa:79: 36:03:b4:b3:e9:92:cf:1b:9c:87:5b:24:e1:26:27: 84:6b:41:15:a4:5e:ed:10:66:cc:d3:b6:7e:ca:0e: e3:a2:c5:f4:f4:bb:3f:52:a7:94:01:86:2e:41:af: 44:cb:f7:25:e8:1f:76:a0:81:18:96:5d:a2:b3:6f: 78:99:81:9e:31:d4:61:b0:88:67:46:88:c0:0b:4f: 06:7f:9a:13:53:d6:dd:ba:65:d7:35:15:62:48:08: d7:46:09:19:04:6b:08:e5:c9:a6:59:15:d3:04:e0: 56:ee:c3:0f:4f:eb:a1:49:61:2b:0f:a3:67:91:09: bd:46:36:89:72:f3:78:48:e8:93:ad:33:77:ae:f2: 9c:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:93:A5:F2:E3:B9:43:E0:BF:98:D3:2A:0D:49:1B:4D:CE:3E:3F:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f985f521-762e-3256-90b6-54f42b80a6c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1405:9c00::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:85:3f:2b:75:53:37:5a:d1:53:c2:33:0a:d2:05:47:80:6c: 51:02:a0:2b:a7:23:da:7e:47:1e:65:bd:ca:d4:6f:e2:93:9f: 5e:b9:0c:0f:3f:a6:8e:7e:cc:fe:57:3d:bc:ce:1d:f6:10:4e: 06:d4:df:7b:c9:67:e1:7d:5d:b9:d1:d8:f4:e5:92:bb:d9:c0: f2:fc:5a:65:f2:c5:8d:f2:32:0e:36:d1:3e:d5:08:a9:86:8d: 51:ff:66:25:98:45:e1:2a:5e:69:5a:0f:4a:af:9d:4f:f8:aa: b9:9f:76:e5:04:1f:42:36:1f:b4:37:6d:47:b5:1f:15:27:20: 75:5e:94:91:97:d7:20:74:0e:4c:6e:8d:b5:d0:38:6f:7e:5d: 46:10:2e:58:0c:03:5a:a1:17:89:dd:d5:21:46:bb:56:0a:f5: 11:9f:2d:8f:8d:89:1c:5a:bf:01:fd:3c:93:29:ac:bb:c6:32: 6f:ad:b8:c4:78:2e:09:48:f2:1a:43:9f:82:cb:82:0f:39:0d: d0:60:92:80:38:6e:41:98:56:5f:ab:f5:47:ae:1b:52:58:ac: 05:7c:2f:71:a3:dd:63:1b:8a:38:f5:2c:b2:9a:2a:bc:57:31: 69:21:09:56:9b:2a:52:09:c1:eb:45:41:df:f7:59:ca:da:62: 68:61:4b:e6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjacPQrREJXlNiSh4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIxMjAyMDAzOVoXDTI1MDUxMzAxMDAzOVowLzEtMCsGA1UEAxMk ZWQ2MmQ0MTYtOWIyNy00YTJhLWFjNGYtYmNjODk5ZjFlNTk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4BETxRcP1TqmyHJuVgv8OSC+juyH020rOwC g/RwKZyvi444rlcEyvC7Fr1zeMY39VwA7EE+Q1CSkmStGpmRyq0540sqJvyEMZFv Iq0zSZDDA5/4oKbmRrsiBmcT1BGF1f1a/j9zNAJDhlHYjvDNbKTz+0J9+nk2A7Sz 6ZLPG5yHWyThJieEa0EVpF7tEGbM07Z+yg7josX09Ls/UqeUAYYuQa9Ey/cl6B92 oIEYll2is294mYGeMdRhsIhnRojAC08Gf5oTU9bdumXXNRViSAjXRgkZBGsI5cmm WRXTBOBW7sMPT+uhSWErD6NnkQm9RjaJcvN4SOiTrTN3rvKcMwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOiTpfLjuUPgv5jTKg1JG03OPj9mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjk4NWY1MjEtNzYyZS0z MjU2LTkwYjYtNTRmNDJiODBhNmMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUBZwA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEOFPyt1Uzda0VPCMwrSBUeAbFECoCunI9p+Rx5lvcrUb+KTn165 DA8/po5+zP5XPbzOHfYQTgbU33vJZ+F9XbnR2PTlkrvZwPL8WmXyxY3yMg420T7V CKmGjVH/ZiWYReEqXmlaD0qvnU/4qrmfduUEH0I2H7Q3bUe1HxUnIHVelJGX1yB0 DkxujbXQOG9+XUYQLlgMA1qhF4nd1SFGu1YK9RGfLY+NiRxavwH9PJMprLvGMm+t uMR4LglI8hpDn4LLgg85DdBgkoA4bkGYVl+r9UeuG1JYrAV8L3Gj3WMbijj1LLKa KrxXMWkhCVabKlIJwetFQd/3WcraYmhhS+Y= -----END CERTIFICATE-----Generated at Sat Apr 5 10:57:00 2025 by rpki-client