$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/36d040ee-ad5a-3a4b-afd9-81b07b8c855e.roa File: 36d040ee-ad5a-3a4b-afd9-81b07b8c855e.roa (raw, json) Hash identifier: UBmQL1ZifHExtswQRK+4yOPKXSL0u+8BRIfBhUAjOkA= Subject key identifier: D7:F9:F2:8C:48:DD:71:E7:4C:CD:22:83:7D:14:2F:D2:EA:30:B0:72 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A5FC5FBFF22626862FA8DCA80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/36d040ee-ad5a-3a4b-afd9-81b07b8c855e.roa Signing time: Tue 01 Jul 2025 13:01:04 +0000 ROA not before: Tue 01 Jul 2025 13:01:04 +0000 ROA not after: Mon 29 Sep 2025 13:01:04 +0000 asID: 20940 IP address blocks: 2600:140a:7000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:c5:fb:ff:22:62:68:62:fa:8d:ca:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 1 13:01:04 2025 GMT Not After : Sep 29 13:01:04 2025 GMT Subject: CN=a94d526e-4ee9-43d4-87eb-7d04d2595e38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f1:72:e2:4b:6f:95:bf:81:3c:dc:34:af:cc: f9:9b:59:eb:01:10:74:f1:f5:82:ec:4c:9c:f5:44: a0:4f:d6:20:e7:7b:02:68:2b:d6:d3:f6:b0:e7:29: af:50:67:72:c5:24:20:92:36:b6:c5:8e:b1:38:72: 81:ee:c7:e4:ca:92:4d:74:e7:d4:dd:10:43:56:70: cf:78:3b:25:8f:a7:32:83:69:9c:53:45:9a:c1:a5: fc:59:30:8e:37:a1:63:c8:88:aa:42:2f:66:99:6a: a4:c7:1a:f8:71:06:b0:37:5e:14:35:fb:15:25:c4: 70:42:7a:b9:97:16:ed:a0:c1:0d:f3:8f:63:d4:4f: 4d:40:ca:57:f4:46:41:1a:43:6c:b8:24:ee:cd:24: 7f:82:35:2c:b0:67:c0:13:67:39:a9:76:cc:fa:99: 81:03:ee:3f:29:f3:c1:f2:6e:15:d0:83:48:dc:89: 02:71:58:ed:65:13:77:85:4e:dd:78:72:2e:2d:5f: 6c:2c:2d:77:7c:6e:7f:df:74:df:1e:36:e8:9d:53: dd:5b:38:4f:b3:0f:e7:a1:17:56:a1:3a:5d:e3:6c: 89:78:26:cb:fa:0d:3d:50:d6:da:af:c3:3c:76:2e: 40:b8:be:54:9b:23:ba:55:ca:71:d3:db:ae:58:74: c4:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:F9:F2:8C:48:DD:71:E7:4C:CD:22:83:7D:14:2F:D2:EA:30:B0:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/36d040ee-ad5a-3a4b-afd9-81b07b8c855e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:140a:7000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:ba:ae:79:3b:e2:f7:2a:23:52:74:86:a7:16:14:0e:14:82: 76:3b:ae:5a:fe:e8:a2:f3:74:7b:65:88:45:b5:23:ee:57:77: 5b:08:fb:e4:e2:6c:4b:a7:e8:9c:c9:d4:f4:7b:f1:f8:9a:03: 36:b1:e3:e4:eb:a9:d9:ce:ae:1f:47:7a:02:eb:5f:db:a9:13: 61:89:b1:73:75:bc:ce:14:a8:9b:26:39:51:2c:46:4b:e4:bd: 07:22:17:0a:fd:f6:c5:17:69:a0:cc:85:f3:61:64:db:21:76: c0:c7:69:9d:22:ea:2a:54:75:58:b3:f1:03:d4:84:10:db:e7: e5:69:d4:6f:aa:ce:a0:b8:6c:e2:25:0d:db:a8:f4:56:98:44: 8b:79:e8:ba:e7:9f:77:ec:99:35:35:e1:47:ef:51:98:b8:8b: 34:32:e6:96:19:de:2d:8a:de:c8:0a:30:bc:11:e0:8a:10:c3: e8:f3:ca:06:60:8c:22:48:11:78:73:a7:9f:62:52:3b:b4:05: 32:7a:9e:a8:42:cf:09:06:03:aa:c5:64:42:1e:3c:92:44:3f: 76:48:e8:6d:c4:25:e7:12:5a:3b:1c:4f:5e:16:f1:4a:12:f6: 4c:78:c2:e3:5e:43:83:9d:5f:a4:96:2c:00:aa:7d:e2:8c:b4: 99:bd:cb:74 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpfxfv/ImJoYvqNyoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcwMTEzMDEwNFoXDTI1MDkyOTEzMDEwNFowLzEtMCsGA1UEAxMk YTk0ZDUyNmUtNGVlOS00M2Q0LTg3ZWItN2QwNGQyNTk1ZTM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/Fy4ktvlb+BPNw0r8z5m1nrARB08fWC7Eyc 9USgT9Yg53sCaCvW0/aw5ymvUGdyxSQgkja2xY6xOHKB7sfkypJNdOfU3RBDVnDP eDslj6cyg2mcU0WawaX8WTCON6FjyIiqQi9mmWqkxxr4cQawN14UNfsVJcRwQnq5 lxbtoMEN849j1E9NQMpX9EZBGkNsuCTuzSR/gjUssGfAE2c5qXbM+pmBA+4/KfPB 8m4V0INI3IkCcVjtZRN3hU7deHIuLV9sLC13fG5/33TfHjbonVPdWzhPsw/noRdW oTpd42yJeCbL+g09UNbar8M8di5AuL5UmyO6Vcpx09uuWHTEjwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNf58oxI3XHnTM0ig30UL9LqMLByMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzZkMDQwZWUtYWQ1YS0z YTRiLWFmZDktODFiMDdiOGM4NTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUCnAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF+6rnk74vcqI1J0hqcWFA4UgnY7rlr+6KLzdHtliEW1I+5Xd1sI ++TibEun6JzJ1PR78fiaAzax4+TrqdnOrh9HegLrX9upE2GJsXN1vM4UqJsmOVEs RkvkvQciFwr99sUXaaDMhfNhZNshdsDHaZ0i6ipUdViz8QPUhBDb5+Vp1G+qzqC4 bOIlDduo9FaYRIt56Lrnn3fsmTU14UfvUZi4izQy5pYZ3i2K3sgKMLwR4IoQw+jz ygZgjCJIEXhzp59iUju0BTJ6nqhCzwkGA6rFZEIePJJEP3ZI6G3EJecSWjscT14W 8UoS9kx4wuNeQ4OdX6SWLACqfeKMtJm9y3Q= -----END CERTIFICATE-----Generated at Tue Jul 22 19:34:09 2025 by rpki-client