$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/218e906f-05f3-3371-a223-387730275fd3.roa File: 218e906f-05f3-3371-a223-387730275fd3.roa (raw, json) Hash identifier: lTvTvmr7M+P22RLffyQ2A5Es6HBbvtVdQYI2Na6Lxxo= Subject key identifier: A5:20:73:71:D0:97:8B:CE:74:E8:EF:7F:BF:69:EC:7A:2B:37:5D:12 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A6AF095F8C92B42104D8DA580 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/218e906f-05f3-3371-a223-387730275fd3.roa Signing time: Sat 05 Jul 2025 13:01:04 +0000 ROA not before: Sat 05 Jul 2025 13:01:04 +0000 ROA not after: Fri 03 Oct 2025 13:01:04 +0000 asID: 35994 IP address blocks: 2600:1408:3c00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6a:f0:95:f8:c9:2b:42:10:4d:8d:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 5 13:01:04 2025 GMT Not After : Oct 3 13:01:04 2025 GMT Subject: CN=7ff12f50-d495-42a1-a59d-172a854e1a7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:47:7a:ab:5c:8e:5b:0e:88:b4:8d:6f:d5:2b: 5d:b1:c7:f7:27:3c:ca:94:53:ff:2d:2b:4a:32:b5: 55:1b:12:ba:38:f4:22:64:5e:05:86:8c:fd:7c:f5: 26:62:3b:d2:92:77:f6:28:60:27:c4:3d:8e:a9:47: d6:90:cc:38:7e:c8:01:77:60:d9:93:7b:78:8d:27: 82:ed:cf:2b:2d:1c:cf:58:d8:21:6b:0c:c1:54:32: 82:80:54:a5:9b:1c:86:16:6d:41:d5:1f:63:3b:b7: bf:91:8c:ca:ed:65:23:02:5a:7a:e4:32:21:c3:56: 21:df:56:97:40:7b:24:8b:24:0c:07:f9:44:6a:44: 98:28:d0:19:13:c2:6b:f3:77:ca:2b:b4:e9:ce:11: 0a:e8:17:81:7c:3a:c8:ea:30:ca:85:16:9c:97:e5: 27:c5:a7:34:7e:f0:21:ab:66:72:10:0e:93:fb:65: 57:77:ad:bd:72:7e:f1:c9:fd:41:18:9a:bc:f2:06: 59:e8:9b:5f:b8:e7:f4:1d:eb:2e:bc:88:cf:7a:75: d7:50:27:97:bc:9b:c8:88:74:a7:96:b3:48:fb:42: 3f:c0:1c:45:12:bb:78:bd:f0:a3:36:65:6d:6a:76: bb:44:14:2e:ed:76:c5:d8:7a:f0:1a:57:29:eb:82: d2:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:20:73:71:D0:97:8B:CE:74:E8:EF:7F:BF:69:EC:7A:2B:37:5D:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/218e906f-05f3-3371-a223-387730275fd3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1408:3c00::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:fa:6d:16:27:05:91:91:78:c7:b7:cb:57:88:e2:10:fe:af: 5e:0f:a1:83:6c:8a:b9:29:1c:d1:64:ca:60:c1:05:86:63:ba: a1:b2:35:e5:05:0b:09:5d:db:e8:4f:60:89:95:f3:a5:05:c5: ec:cf:80:47:0c:e6:f0:62:ba:4d:eb:ba:32:66:ca:36:1a:e7: 11:28:cf:d8:c0:d8:a6:1b:c4:cd:82:7b:fe:9b:c5:4e:de:3f: ee:81:e8:19:d9:b4:27:7e:db:3b:d0:5b:f9:39:27:fe:05:3c: 57:7e:10:e3:80:80:a7:88:03:3f:ef:e8:cb:20:55:65:27:05: 39:ec:2e:5d:ce:08:60:99:15:08:72:66:65:1f:31:92:8c:0a: 4d:29:e7:a2:8d:0d:df:37:03:f6:7c:f3:0e:e3:e9:41:a3:fc: 08:8a:9f:41:bd:46:fe:ff:06:b3:a0:1c:66:ff:55:6f:60:e9: 22:2c:2c:53:29:3b:bb:49:25:0a:41:a7:1d:a1:dc:0d:14:a9: 7c:cb:f3:d0:b9:27:29:a1:d5:3c:b9:d3:a7:7b:33:0c:d7:7d: c4:c4:5d:63:76:46:1f:d5:c7:31:ce:d4:06:49:ec:a5:ac:b5: 9a:1e:ae:2e:33:58:c4:7b:fe:48:bb:f2:b2:09:d8:70:4e:c7: ca:81:e0:b3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpq8JX4yStCEE2NpYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcwNTEzMDEwNFoXDTI1MTAwMzEzMDEwNFowLzEtMCsGA1UEAxMk N2ZmMTJmNTAtZDQ5NS00MmExLWE1OWQtMTcyYTg1NGUxYTdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkEd6q1yOWw6ItI1v1Stdscf3JzzKlFP/LStK MrVVGxK6OPQiZF4Fhoz9fPUmYjvSknf2KGAnxD2OqUfWkMw4fsgBd2DZk3t4jSeC 7c8rLRzPWNghawzBVDKCgFSlmxyGFm1B1R9jO7e/kYzK7WUjAlp65DIhw1Yh31aX QHskiyQMB/lEakSYKNAZE8Jr83fKK7TpzhEK6BeBfDrI6jDKhRacl+Unxac0fvAh q2ZyEA6T+2VXd629cn7xyf1BGJq88gZZ6JtfuOf0HesuvIjPenXXUCeXvJvIiHSn lrNI+0I/wBxFErt4vfCjNmVtana7RBQu7XbF2HrwGlcp64LSyQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKUgc3HQl4vOdOjvf79p7HorN10SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjE4ZTkwNmYtMDVmMy0z MzcxLWEyMjMtMzg3NzMwMjc1ZmQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUCDwA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIr6bRYnBZGReMe3y1eI4hD+r14PoYNsirkpHNFkymDBBYZjuqGy NeUFCwld2+hPYImV86UFxezPgEcM5vBiuk3rujJmyjYa5xEoz9jA2KYbxM2Ce/6b xU7eP+6B6BnZtCd+2zvQW/k5J/4FPFd+EOOAgKeIAz/v6MsgVWUnBTnsLl3OCGCZ FQhyZmUfMZKMCk0p56KNDd83A/Z88w7j6UGj/AiKn0G9Rv7/BrOgHGb/VW9g6SIs LFMpO7tJJQpBpx2h3A0UqXzL89C5Jymh1Ty506d7MwzXfcTEXWN2Rh/VxzHO1AZJ 7KWstZoeri4zWMR7/ki78rIJ2HBOx8qB4LM= -----END CERTIFICATE-----Generated at Wed Jul 23 19:34:44 2025 by rpki-client