$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/123f88fd-1f50-3570-b4f9-8373d76b60fe.roa File: 123f88fd-1f50-3570-b4f9-8373d76b60fe.roa (raw, json) Hash identifier: 9266cGL+VeE/7V2GrQLSkWcC9APTZYCTwTKxQH95614= Subject key identifier: EB:BC:46:24:9C:C7:8A:E8:2F:62:AC:BF:66:E7:89:98:0F:E6:B5:31 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A5FC5F36035400F9C030D42A0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/123f88fd-1f50-3570-b4f9-8373d76b60fe.roa Signing time: Tue 01 Jul 2025 13:01:04 +0000 ROA not before: Tue 01 Jul 2025 13:01:04 +0000 ROA not after: Mon 29 Sep 2025 13:01:04 +0000 asID: 20940 IP address blocks: 2600:1417:6800::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:c5:f3:60:35:40:0f:9c:03:0d:42:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 1 13:01:04 2025 GMT Not After : Sep 29 13:01:04 2025 GMT Subject: CN=3d1a8aeb-8e39-4230-af61-136a312e1e9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e7:6f:14:01:22:29:2f:27:63:85:12:99:13: 2e:a0:ff:ea:de:75:43:29:73:e3:58:16:d2:1f:fd: 52:15:a5:c8:ff:e3:64:71:5e:9e:b8:3e:60:f5:4f: fb:4e:c0:1d:26:30:07:82:08:23:c9:8a:37:f7:43: 44:60:c6:1c:36:ee:8d:3c:cf:07:e6:33:7c:26:3e: 47:55:30:c6:5e:d2:f5:30:70:19:4f:bb:f2:30:04: c1:9c:25:92:3c:e8:c6:6c:8e:59:00:9a:ae:19:99: a0:ad:15:ab:68:80:81:71:8b:7f:72:cb:66:44:77: 3b:78:7a:92:95:c0:d8:fb:89:a4:5e:df:3b:dc:4f: d5:45:3a:a4:8c:52:7e:b1:37:bc:02:61:3f:bd:1f: 07:a2:0b:10:37:dc:04:bb:b7:0b:36:94:de:7f:a6: 9a:ab:84:e1:5a:60:84:a9:a5:59:e3:51:1e:a2:d0: 44:41:a2:e4:af:f0:f9:12:dd:45:7e:54:da:8c:8b: 36:6e:5c:e3:b2:f2:d0:f5:c5:e3:6a:a4:b4:84:aa: 08:66:a8:2d:d1:a8:86:26:a9:d3:d9:00:f1:cf:e6: 62:d8:ad:ed:e5:40:e6:73:5a:1d:1d:3d:5f:af:89: 3c:6b:fc:a1:c6:d4:90:c2:92:cb:14:15:98:69:39: 23:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:BC:46:24:9C:C7:8A:E8:2F:62:AC:BF:66:E7:89:98:0F:E6:B5:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/123f88fd-1f50-3570-b4f9-8373d76b60fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1417:6800::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:f3:e6:d0:b6:06:41:eb:c3:10:76:6c:74:f0:93:d5:e1:c0: 68:a3:1d:b0:a4:5f:17:71:38:f3:21:0e:4e:c2:ac:7a:2a:50: 64:c6:ad:8e:be:5e:ce:9e:a4:b0:be:d6:8b:0c:7d:b6:a6:f9: 57:6d:ad:42:8f:fb:31:b5:16:cf:a6:bc:b6:ff:b0:d7:df:3c: 23:6f:65:bd:08:7c:fe:7c:c4:46:1d:3b:55:9b:4d:1a:57:f1: c3:e3:cf:b9:f9:22:d1:3a:83:2a:aa:a2:92:14:a8:af:c0:16: a5:ad:b0:ef:e0:e6:11:70:a5:41:fa:0c:c6:94:67:8c:f3:16: a2:9b:4b:d4:3c:c3:6c:d9:db:cb:c2:cb:d7:aa:b7:32:04:b9: ca:4b:ff:e2:5b:84:e0:26:a3:84:3c:95:0b:4a:be:e6:a3:b0: 42:7a:34:3e:cd:7e:0e:e1:9d:02:36:91:67:c5:03:72:20:a2: d9:d7:42:05:18:90:a7:79:69:eb:fc:28:16:69:5c:e9:61:b2: a2:08:f5:e1:0c:86:c1:ff:6f:70:f7:7d:1b:b3:6a:de:c0:26: 88:41:45:3b:43:ce:17:68:5d:4b:43:5b:63:94:cc:03:6a:79: 7c:f5:fe:d0:49:e5:23:97:d6:ce:80:b2:50:27:6a:c8:83:db: d7:4c:5f:d1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpfxfNgNUAPnAMNQqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcwMTEzMDEwNFoXDTI1MDkyOTEzMDEwNFowLzEtMCsGA1UEAxMk M2QxYThhZWItOGUzOS00MjMwLWFmNjEtMTM2YTMxMmUxZTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyedvFAEiKS8nY4USmRMuoP/q3nVDKXPjWBbS H/1SFaXI/+NkcV6euD5g9U/7TsAdJjAHgggjyYo390NEYMYcNu6NPM8H5jN8Jj5H VTDGXtL1MHAZT7vyMATBnCWSPOjGbI5ZAJquGZmgrRWraICBcYt/cstmRHc7eHqS lcDY+4mkXt873E/VRTqkjFJ+sTe8AmE/vR8HogsQN9wEu7cLNpTef6aaq4ThWmCE qaVZ41EeotBEQaLkr/D5Et1FflTajIs2blzjsvLQ9cXjaqS0hKoIZqgt0aiGJqnT 2QDxz+Zi2K3t5UDmc1odHT1fr4k8a/yhxtSQwpLLFBWYaTkjoQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOu8RiScx4roL2Ksv2bniZgP5rUxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTIzZjg4ZmQtMWY1MC0z NTcwLWI0ZjktODM3M2Q3NmI2MGZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUF2gA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACDz5tC2BkHrwxB2bHTwk9XhwGijHbCkXxdxOPMhDk7CrHoqUGTG rY6+Xs6epLC+1osMfbam+VdtrUKP+zG1Fs+mvLb/sNffPCNvZb0IfP58xEYdO1Wb TRpX8cPjz7n5ItE6gyqqopIUqK/AFqWtsO/g5hFwpUH6DMaUZ4zzFqKbS9Q8w2zZ 28vCy9eqtzIEucpL/+JbhOAmo4Q8lQtKvuajsEJ6ND7Nfg7hnQI2kWfFA3IgotnX QgUYkKd5aev8KBZpXOlhsqII9eEMhsH/b3D3fRuzat7AJohBRTtDzhdoXUtDW2OU zANqeXz1/tBJ5SOX1s6AslAnasiD29dMX9E= -----END CERTIFICATE-----Generated at Thu Jul 24 00:04:16 2025 by rpki-client