$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/20b6cf57-bcf3-3dd6-85fe-b2aaa2a59a6e.roa File: 20b6cf57-bcf3-3dd6-85fe-b2aaa2a59a6e.roa (raw, json) Hash identifier: 8wQ9IN5SH7GFAIMLKFmEuKD1i/pmaq/RlE6qeDcy+jA= Subject key identifier: 2E:A0:57:52:3F:A6:56:BA:FF:CA:7D:1B:3E:C9:2A:15:46:94:08:5C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A5FC5F6C0532F02FEAE9B12C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/20b6cf57-bcf3-3dd6-85fe-b2aaa2a59a6e.roa Signing time: Tue 01 Jul 2025 13:01:04 +0000 ROA not before: Tue 01 Jul 2025 13:01:04 +0000 ROA not after: Mon 29 Sep 2025 13:01:04 +0000 asID: 20940 IP address blocks: 2600:1406:2e00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:c5:f6:c0:53:2f:02:fe:ae:9b:12:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 1 13:01:04 2025 GMT Not After : Sep 29 13:01:04 2025 GMT Subject: CN=a1e16b60-679c-446f-b4de-258752b879e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:70:fe:6d:4a:fa:06:c9:06:da:4c:49:e9:8b: a0:ee:ec:65:ed:2d:58:ef:89:d9:d0:97:b2:21:09: a8:a2:1c:2b:69:63:06:5e:ea:c2:f8:33:6c:42:31: cf:0b:b9:89:ed:ef:2a:39:1e:ac:3f:99:cb:77:72: e1:30:8a:76:da:50:27:67:29:4b:cf:01:b7:bb:de: e3:86:00:7e:29:48:67:e2:de:40:80:5f:5b:31:cf: 02:2e:7e:47:71:f3:5c:54:e1:de:e9:4e:32:07:e3: 55:96:a2:7a:8c:64:7f:d7:7a:ed:dc:6e:63:92:b1: e5:52:89:19:27:56:ec:ac:92:83:6f:cd:34:8b:fc: b7:ca:39:00:3e:b3:09:5b:d5:a0:05:dd:94:5f:9f: fe:8b:34:ab:ba:74:c2:a8:84:59:dd:f0:62:e2:dc: a2:cd:45:84:3f:46:16:3f:d7:28:86:10:38:5a:10: be:82:a0:5f:46:d5:31:a6:b0:c0:82:ae:45:80:e4: 88:05:c8:88:46:b7:98:08:5c:a1:8d:81:95:fe:83: 35:7a:0c:53:ec:0d:b8:7d:d5:33:a6:74:64:9d:ce: e1:24:2f:ad:0d:a7:e4:95:8e:ed:9f:7f:10:9f:fd: c5:c2:20:f6:7b:15:10:ff:38:e7:80:cd:fb:ef:fc: 32:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:A0:57:52:3F:A6:56:BA:FF:CA:7D:1B:3E:C9:2A:15:46:94:08:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/20b6cf57-bcf3-3dd6-85fe-b2aaa2a59a6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1406:2e00::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:59:61:75:49:02:ea:d2:01:52:a8:50:b3:ed:ba:64:5e:c4: 00:22:12:18:38:cb:06:1b:65:84:66:f6:f9:f0:0c:3b:fe:c9: 5b:29:52:c9:c7:22:f2:24:cc:79:f1:ef:cc:8f:ee:5d:e5:24: ca:1b:1c:97:31:87:89:5a:d8:ef:c8:73:f4:db:8d:51:43:25: b7:69:dd:f0:1f:15:5b:c7:c5:c6:fc:3a:95:04:74:a1:74:db: 5d:22:62:d4:f1:aa:88:e6:a4:fd:ee:5d:39:b1:a0:03:51:fd: 20:58:93:0c:ce:06:be:3a:d3:3f:42:ec:30:34:51:36:fb:85: 0b:20:9a:e3:07:86:9b:7b:b2:fa:33:be:5b:49:fc:e3:8c:a5: 4c:f3:b0:04:eb:5c:a6:10:f8:5e:7f:4a:30:f1:d0:d4:8c:06: 2a:bd:05:4d:21:74:72:3f:a1:7f:8c:86:5c:e6:73:c5:1d:a9: 02:96:50:18:ac:24:84:18:e0:9e:2c:d8:ff:cf:81:b1:a8:85: 43:c4:21:7f:00:73:e7:76:fe:f5:8a:b2:23:54:37:f7:15:ac: 2e:e0:a7:5b:ce:41:75:c5:f2:59:36:5b:cc:45:15:7f:31:90: 82:d8:2d:e0:60:6e:22:d0:f1:26:e1:a8:97:c9:b4:d8:17:7c: 74:28:8b:a1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpfxfbAUy8C/q6bEsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcwMTEzMDEwNFoXDTI1MDkyOTEzMDEwNFowLzEtMCsGA1UEAxMk YTFlMTZiNjAtNjc5Yy00NDZmLWI0ZGUtMjU4NzUyYjg3OWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknD+bUr6BskG2kxJ6Yug7uxl7S1Y74nZ0Jey IQmoohwraWMGXurC+DNsQjHPC7mJ7e8qOR6sP5nLd3LhMIp22lAnZylLzwG3u97j hgB+KUhn4t5AgF9bMc8CLn5HcfNcVOHe6U4yB+NVlqJ6jGR/13rt3G5jkrHlUokZ J1bsrJKDb800i/y3yjkAPrMJW9WgBd2UX5/+izSrunTCqIRZ3fBi4tyizUWEP0YW P9cohhA4WhC+gqBfRtUxprDAgq5FgOSIBciIRreYCFyhjYGV/oM1egxT7A24fdUz pnRknc7hJC+tDafklY7tn38Qn/3FwiD2exUQ/zjngM377/wy2QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFC6gV1I/pla6/8p9Gz7JKhVGlAhcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjBiNmNmNTctYmNmMy0z ZGQ2LTg1ZmUtYjJhYWEyYTU5YTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUBi4A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC1ZYXVJAurSAVKoULPtumRexAAiEhg4ywYbZYRm9vnwDDv+yVsp UsnHIvIkzHnx78yP7l3lJMobHJcxh4la2O/Ic/TbjVFDJbdp3fAfFVvHxcb8OpUE dKF0210iYtTxqojmpP3uXTmxoANR/SBYkwzOBr460z9C7DA0UTb7hQsgmuMHhpt7 svozvltJ/OOMpUzzsATrXKYQ+F5/SjDx0NSMBiq9BU0hdHI/oX+Mhlzmc8UdqQKW UBisJIQY4J4s2P/PgbGohUPEIX8Ac+d2/vWKsiNUN/cVrC7gp1vOQXXF8lk2W8xF FX8xkILYLeBgbiLQ8SbhqJfJtNgXfHQoi6E= -----END CERTIFICATE-----Generated at Thu Jul 24 11:51:50 2025 by rpki-client