$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/331027c3-82c5-320b-8687-293996b4d46d.roa File: 331027c3-82c5-320b-8687-293996b4d46d.roa (raw, json) Hash identifier: 3eWNJnmyLjuiDAbmjLfz3g42CBmzBWKdwXvA5wA0UoE= Subject key identifier: 38:51:3E:3B:9A:D7:D9:51:09:E6:CE:A3:C1:6A:2E:C8:43:91:00:10 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A68260E93AE9F66F0401F5000 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/331027c3-82c5-320b-8687-293996b4d46d.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 20940 IP address blocks: 2600:1488:a004::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:26:0e:93:ae:9f:66:f0:40:1f:50:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=51a317c7-0c58-495c-8715-eeb7d689d713 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:54:44:39:bc:13:3c:04:6a:82:01:1f:16:be: db:5b:96:15:14:88:11:84:dc:bc:6b:1e:08:80:0b: d4:e0:05:1f:86:14:ac:54:65:42:ce:b6:d9:f5:25: 8b:3f:ef:69:08:e7:84:f4:44:48:45:d4:30:18:b8: 8a:1e:5f:cb:e2:9e:55:31:3b:3c:87:e2:93:23:0b: 6a:5b:c6:3d:ce:4e:e2:5b:01:d9:4f:c2:7a:22:ba: da:ec:dd:3c:91:98:9d:e5:c5:3e:83:d5:6a:38:63: 7e:2a:72:01:33:c8:c2:24:6a:1c:8b:18:eb:2f:57: cd:59:b0:3c:8d:3f:0d:52:73:d3:42:a7:53:2b:67: 55:ce:70:b3:f6:e8:f3:0b:97:c9:a7:cb:52:7e:b7: 2c:c7:5f:f9:99:c2:e4:16:f1:ff:56:97:c6:02:75: 18:ad:2d:01:4c:6e:cf:67:b4:5f:73:8e:69:16:fb: 8c:48:73:2f:94:32:79:29:6b:ab:69:1a:f4:ad:0e: 77:e1:5d:cc:5c:01:3e:fb:34:02:33:50:a1:3c:db: 8d:eb:bd:d9:96:6f:09:d1:61:89:da:97:0a:b5:65: 2e:22:7f:03:25:f2:d7:78:98:03:5f:63:3b:41:a5: 90:4c:eb:4d:c0:b7:ab:c1:e6:7a:6f:e1:cb:40:be: c5:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:51:3E:3B:9A:D7:D9:51:09:E6:CE:A3:C1:6A:2E:C8:43:91:00:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/331027c3-82c5-320b-8687-293996b4d46d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1488:a004::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:8b:d8:95:f1:5e:89:6c:74:cf:3d:d9:8e:3d:80:11:59:17: 75:9f:d0:eb:93:5f:84:e5:11:c6:c6:3c:f6:26:d3:85:a5:79: dc:c4:eb:32:50:a3:1b:01:c3:03:06:71:f0:81:2e:2e:36:be: e6:a7:4d:d8:6d:63:48:d6:fe:00:b4:0b:a5:d9:b7:b8:ad:89: 81:ce:a8:de:c7:e6:66:48:0a:24:81:fb:a0:e6:8e:f1:de:10: 0f:98:e8:40:02:36:49:cb:62:39:49:b8:6e:33:be:7a:07:d5: ec:d2:56:bf:23:0d:62:09:83:b6:5b:2b:31:b9:14:3e:eb:6d: 03:3e:4e:71:30:f3:b9:c8:ee:a6:29:4c:18:19:ee:fe:0e:84: 16:b4:6e:87:43:d4:db:41:98:d3:05:4a:6e:77:24:6d:2b:57: 11:0c:79:74:5b:19:e0:c5:36:fd:7c:24:e0:96:dd:1a:e3:15: 7d:4b:8d:11:07:1d:29:a3:28:e5:8a:8c:2c:12:f5:b5:f8:e2: 46:eb:92:fc:0c:fa:19:4b:9f:0f:46:08:52:24:9c:fc:6d:71: a1:52:20:2f:1e:65:f6:a4:b7:f9:30:f9:51:9a:06:c7:28:c0: 6b:27:71:9d:56:c1:93:c9:b4:e8:ee:bf:4a:4e:b1:19:bb:32: d8:b1:5d:2b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpoJg6Trp9m8EAfUAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk NTFhMzE3YzctMGM1OC00OTVjLTg3MTUtZWViN2Q2ODlkNzEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFREObwTPARqggEfFr7bW5YVFIgRhNy8ax4I gAvU4AUfhhSsVGVCzrbZ9SWLP+9pCOeE9ERIRdQwGLiKHl/L4p5VMTs8h+KTIwtq W8Y9zk7iWwHZT8J6Irra7N08kZid5cU+g9VqOGN+KnIBM8jCJGocixjrL1fNWbA8 jT8NUnPTQqdTK2dVznCz9ujzC5fJp8tSfrcsx1/5mcLkFvH/VpfGAnUYrS0BTG7P Z7Rfc45pFvuMSHMvlDJ5KWuraRr0rQ534V3MXAE++zQCM1ChPNuN673Zlm8J0WGJ 2pcKtWUuIn8DJfLXeJgDX2M7QaWQTOtNwLerweZ6b+HLQL7F/wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDhRPjua19lRCebOo8FqLshDkQAQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzMxMDI3YzMtODJjNS0z MjBiLTg2ODctMjkzOTk2YjRkNDZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUiKAE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIyL2JXxXolsdM892Y49gBFZF3Wf0OuTX4TlEcbGPPYm04WledzE 6zJQoxsBwwMGcfCBLi42vuanTdhtY0jW/gC0C6XZt7itiYHOqN7H5mZICiSB+6Dm jvHeEA+Y6EACNknLYjlJuG4zvnoH1ezSVr8jDWIJg7ZbKzG5FD7rbQM+TnEw87nI 7qYpTBgZ7v4OhBa0bodD1NtBmNMFSm53JG0rVxEMeXRbGeDFNv18JOCW3RrjFX1L jREHHSmjKOWKjCwS9bX44kbrkvwM+hlLnw9GCFIknPxtcaFSIC8eZfakt/kw+VGa BscowGsncZ1WwZPJtOjuv0pOsRm7MtixXSs= -----END CERTIFICATE-----Generated at Wed Jul 23 01:47:49 2025 by rpki-client