$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0643a5b1-12f8-3823-9851-1590244b2064.roa File: 0643a5b1-12f8-3823-9851-1590244b2064.roa (raw, json) Hash identifier: cBjiiw2E4ygtgxj2UonxkkOTgM5K1UvMMuX5Z3BoEKc= Subject key identifier: 9D:47:85:6B:6A:4B:8C:3E:B7:29:E9:8B:25:14:59:22:8F:4D:1C:FF Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A761B69E50EA8839ADF4A0880 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0643a5b1-12f8-3823-9851-1590244b2064.roa Signing time: Wed 09 Jul 2025 13:01:04 +0000 ROA not before: Wed 09 Jul 2025 13:01:04 +0000 ROA not after: Tue 07 Oct 2025 13:01:04 +0000 asID: 20940 IP address blocks: 2600:141b:f800::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:76:1b:69:e5:0e:a8:83:9a:df:4a:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 9 13:01:04 2025 GMT Not After : Oct 7 13:01:04 2025 GMT Subject: CN=f7b4156e-28af-4b70-b7fc-8a0fc0117a8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:a8:93:e7:c8:32:89:b6:be:c6:a9:fd:8c:25: 9a:92:2a:62:b8:24:f4:47:cf:cc:c4:3e:ed:e4:09: 77:b9:24:a8:f1:1b:3f:bf:f9:f0:89:4c:2b:86:98: 59:76:fc:bd:77:46:bb:a2:20:97:d4:1a:a9:27:67: c8:b3:dd:e7:5e:07:bb:10:d9:51:2d:6c:cf:39:99: 64:b2:02:a2:c7:15:63:22:45:b1:64:2b:bb:32:c8: e7:80:84:69:49:0a:b6:b2:c2:8d:9f:e3:7b:b5:4f: 17:82:f6:ca:6a:f6:6a:07:af:9a:95:02:0e:71:02: b3:cd:a8:bb:a2:bd:8f:51:66:fd:a5:96:e5:ac:ee: 98:2e:ec:e5:66:3f:4d:02:0c:40:9f:23:db:b5:97: f5:c6:d9:5a:01:c6:43:4c:c8:95:90:88:0c:cb:a1: f0:da:1d:d8:90:08:ce:09:a4:0a:9e:97:2d:6d:f1: f7:f4:79:c7:3b:15:12:e5:25:31:b7:7a:70:7d:9e: 3a:17:1d:75:d4:63:f3:2e:f3:38:f8:d5:56:31:00: 75:c9:b9:8b:ca:85:4f:94:d0:55:04:e0:dc:15:64: 35:cc:de:94:d0:78:18:01:5d:52:32:1e:bc:dc:d1: 6a:31:5b:49:af:76:d6:f6:c4:37:4b:ba:a2:b5:76: d7:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:47:85:6B:6A:4B:8C:3E:B7:29:E9:8B:25:14:59:22:8F:4D:1C:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0643a5b1-12f8-3823-9851-1590244b2064.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:141b:f800::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:c9:4c:90:42:5c:e5:e1:bc:57:6f:8c:8a:68:26:70:73:cb: 1b:67:f3:a5:42:32:49:a4:e6:ae:35:3b:a7:28:f9:29:59:cc: 78:c5:11:d7:40:e8:68:df:d4:db:5a:eb:98:7f:aa:a3:4e:87: ee:91:47:c4:ef:1f:21:6b:b7:b0:3c:88:3c:d9:5b:77:b4:6e: d4:78:2a:73:45:79:fd:79:56:27:e3:2f:f6:26:3d:8f:c0:0a: 49:e2:e4:64:93:d8:44:bd:1e:24:e6:b3:b3:9e:22:50:60:86: 22:1f:0c:ad:ce:22:d8:f9:4a:23:28:de:05:6e:d5:62:18:dc: bd:8e:21:88:01:bd:45:ce:51:21:19:fe:41:7d:0e:b9:eb:f8: d4:b1:f6:93:83:da:f3:8b:1c:b0:05:4a:29:4c:a8:25:16:b4: a8:eb:f2:ab:2c:06:fb:0c:34:02:9a:20:14:d6:ca:6e:2a:29: 1b:fa:18:93:8f:ef:52:c8:fc:c5:fe:57:d7:73:f4:ff:eb:db: 4b:0b:59:62:d4:02:10:f1:96:5d:60:bb:c5:23:c1:cb:3c:c4: ff:48:7b:b9:8f:30:89:aa:2a:6f:7e:4e:64:77:9e:21:62:19: 88:77:0d:84:10:35:53:02:2e:2a:23:e1:8c:d5:97:e4:1a:9b: a3:bf:d4:78 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEp2G2nlDqiDmt9KCIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcwOTEzMDEwNFoXDTI1MTAwNzEzMDEwNFowLzEtMCsGA1UEAxMk ZjdiNDE1NmUtMjhhZi00YjcwLWI3ZmMtOGEwZmMwMTE3YThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqiT58gyiba+xqn9jCWakipiuCT0R8/MxD7t 5Al3uSSo8Rs/v/nwiUwrhphZdvy9d0a7oiCX1BqpJ2fIs93nXge7ENlRLWzPOZlk sgKixxVjIkWxZCu7MsjngIRpSQq2ssKNn+N7tU8XgvbKavZqB6+alQIOcQKzzai7 or2PUWb9pZblrO6YLuzlZj9NAgxAnyPbtZf1xtlaAcZDTMiVkIgMy6Hw2h3YkAjO CaQKnpctbfH39HnHOxUS5SUxt3pwfZ46Fx111GPzLvM4+NVWMQB1ybmLyoVPlNBV BODcFWQ1zN6U0HgYAV1SMh683NFqMVtJr3bW9sQ3S7qitXbXtQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJ1HhWtqS4w+tynpiyUUWSKPTRz/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDY0M2E1YjEtMTJmOC0z ODIzLTk4NTEtMTU5MDI0NGIyMDY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUG/gA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADjJTJBCXOXhvFdvjIpoJnBzyxtn86VCMkmk5q41O6co+SlZzHjF EddA6Gjf1Nta65h/qqNOh+6RR8TvHyFrt7A8iDzZW3e0btR4KnNFef15VifjL/Ym PY/ACkni5GST2ES9HiTms7OeIlBghiIfDK3OItj5SiMo3gVu1WIY3L2OIYgBvUXO USEZ/kF9Drnr+NSx9pOD2vOLHLAFSilMqCUWtKjr8qssBvsMNAKaIBTWym4qKRv6 GJOP71LI/MX+V9dz9P/r20sLWWLUAhDxll1gu8Ujwcs8xP9Ie7mPMImqKm9+TmR3 niFiGYh3DYQQNVMCLioj4YzVl+Qam6O/1Hg= -----END CERTIFICATE-----Generated at Thu Jul 24 11:58:31 2025 by rpki-client