$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/24c4e859-4b85-3967-8008-1ed01a3eea1b.roa File: 24c4e859-4b85-3967-8008-1ed01a3eea1b.roa (raw, json) Hash identifier: JICnTypVeg613a0hSoTZ5bk8/ZQBW/k1IW3ZeXoKAaA= Subject key identifier: B0:07:42:45:DF:E2:24:F4:BA:BC:7B:DC:4F:BC:BB:F4:12:A7:0F:6B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A8410BBDBF4780C236762DAC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/24c4e859-4b85-3967-8008-1ed01a3eea1b.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 20940 IP address blocks: 2600:1417:7000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:10:bb:db:f4:78:0c:23:67:62:da:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=f26623ab-bec9-483b-b8ca-a6ed9ca5c09b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:01:c3:ea:1b:8b:66:06:c3:54:16:c9:1f:4f: d0:7c:2f:89:11:d3:2a:40:83:98:5b:4e:7f:fa:27: d2:8a:6d:e2:5d:18:2b:07:90:12:e7:b4:90:f9:d5: 9e:9a:5a:c3:56:dc:26:3f:93:d9:d2:7d:6c:02:02: 02:bd:d6:90:5a:e2:9b:62:c0:eb:5b:61:d2:58:6b: 62:50:02:ad:64:1e:64:30:87:d8:39:65:0f:7d:f3: 91:c8:89:0e:1f:54:36:ea:43:27:a9:b2:ef:37:2b: a3:5b:5c:eb:3c:06:8a:e9:e1:b1:ad:af:04:29:3d: 36:2d:a7:03:3c:5a:d4:10:ce:d7:42:be:45:ec:4e: eb:4a:28:21:1d:c0:d0:9b:02:bf:d6:31:e4:e6:0c: ae:85:2c:3d:b0:18:25:04:f3:a4:84:65:65:81:ac: 21:32:d6:e3:52:40:69:74:93:ea:ce:fc:2c:e7:09: e2:61:f4:97:8f:71:2d:52:c6:22:6e:04:6e:e1:05: 20:cf:63:01:d9:04:67:10:0c:c3:fb:b6:9d:e4:a1: 91:3f:82:c7:3c:f6:58:26:bc:21:24:2a:48:95:93: a4:21:e3:60:eb:47:69:b2:3d:29:0e:05:c0:89:76: 5c:bf:e4:9e:39:0a:e9:9d:32:ce:f5:52:da:6a:c7: 78:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:07:42:45:DF:E2:24:F4:BA:BC:7B:DC:4F:BC:BB:F4:12:A7:0F:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/24c4e859-4b85-3967-8008-1ed01a3eea1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1417:7000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:ca:d0:d4:aa:3a:7b:61:fa:aa:f6:10:99:14:e7:07:e9:e2: e3:28:44:a9:c5:59:f3:93:5c:2a:47:a0:06:a0:11:e2:73:33: 8a:e7:49:66:e3:2d:cb:6a:48:e6:14:49:1e:32:31:83:59:32: db:7b:ad:f7:f7:1d:00:2d:b0:cc:e7:ff:2b:74:9d:28:58:3e: eb:2f:98:76:a3:a8:88:51:69:c9:f4:4d:ff:bd:d9:7e:56:4d: 19:b1:54:66:9c:4a:05:be:b2:24:e8:3d:30:79:ff:16:2d:a3: 6e:3e:c9:ec:fa:15:7f:9a:ed:f5:19:7a:ed:6a:76:f8:c6:cd: e0:83:51:c6:1d:7e:4f:e0:60:0f:19:de:67:66:10:79:bd:e2: 11:71:44:29:41:fc:43:67:81:68:51:14:a8:fb:89:11:fa:6a: dc:51:2e:7f:61:2f:51:87:31:9e:0c:49:fb:1b:a5:da:0a:9a: d7:d0:b9:68:a4:15:50:2d:fe:e6:dd:13:69:14:e3:25:69:88: 17:9b:63:63:60:a3:1c:b7:d7:47:5b:21:5e:05:57:ca:09:15: a4:51:e5:ac:3f:69:32:a9:ea:69:4d:8f:67:95:ea:0e:79:04: 3d:95:e0:e9:9e:8a:99:55:7e:8e:6b:48:81:fb:07:51:95:08: fb:bc:20:7c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqEELvb9HgMI2di2sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ZjI2NjIzYWItYmVjOS00ODNiLWI4Y2EtYTZlZDljYTVjMDliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgAHD6huLZgbDVBbJH0/QfC+JEdMqQIOYW05/ +ifSim3iXRgrB5AS57SQ+dWemlrDVtwmP5PZ0n1sAgICvdaQWuKbYsDrW2HSWGti UAKtZB5kMIfYOWUPffORyIkOH1Q26kMnqbLvNyujW1zrPAaK6eGxra8EKT02LacD PFrUEM7XQr5F7E7rSighHcDQmwK/1jHk5gyuhSw9sBglBPOkhGVlgawhMtbjUkBp dJPqzvws5wniYfSXj3EtUsYibgRu4QUgz2MB2QRnEAzD+7ad5KGRP4LHPPZYJrwh JCpIlZOkIeNg60dpsj0pDgXAiXZcv+SeOQrpnTLO9VLaasd47wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLAHQkXf4iT0urx73E+8u/QSpw9rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjRjNGU4NTktNGI4NS0z OTY3LTgwMDgtMWVkMDFhM2VlYTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUF3AA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIrK0NSqOnth+qr2EJkU5wfp4uMoRKnFWfOTXCpHoAagEeJzM4rn SWbjLctqSOYUSR4yMYNZMtt7rff3HQAtsMzn/yt0nShYPusvmHajqIhRacn0Tf+9 2X5WTRmxVGacSgW+siToPTB5/xYto24+yez6FX+a7fUZeu1qdvjGzeCDUcYdfk/g YA8Z3mdmEHm94hFxRClB/ENngWhRFKj7iRH6atxRLn9hL1GHMZ4MSfsbpdoKmtfQ uWikFVAt/ubdE2kU4yVpiBebY2Ngoxy310dbIV4FV8oJFaRR5aw/aTKp6mlNj2eV 6g55BD2V4OmeiplVfo5rSIH7B1GVCPu8IHw= -----END CERTIFICATE-----Generated at Wed Jul 23 01:28:33 2025 by rpki-client