$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3d3f39e8-66a9-3783-bc82-cb3cdd72d1dd.roa File: 3d3f39e8-66a9-3783-bc82-cb3cdd72d1dd.roa (raw, json) Hash identifier: y75gsje20fI0rPC3JAJKQKi+eXV6DmKJ4EgFBWINYyg= Subject key identifier: A6:59:2D:95:E1:1E:9D:DD:A6:7A:12:D4:E6:A1:F9:6A:75:3D:15:E4 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A5FC5FBCB1442A3C7CE81C800 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3d3f39e8-66a9-3783-bc82-cb3cdd72d1dd.roa Signing time: Tue 01 Jul 2025 13:01:04 +0000 ROA not before: Tue 01 Jul 2025 13:01:04 +0000 ROA not after: Mon 29 Sep 2025 13:01:04 +0000 asID: 20940 IP address blocks: 2600:1409:e800::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:c5:fb:cb:14:42:a3:c7:ce:81:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 1 13:01:04 2025 GMT Not After : Sep 29 13:01:04 2025 GMT Subject: CN=9f139915-36b5-4c57-814a-c2e690b47569 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:83:3a:dc:7d:05:65:96:4f:5a:c3:1d:31:81: b6:61:b5:9b:7c:0d:21:08:0c:1e:b8:ed:fc:73:f5: d0:00:0d:cd:d0:0f:c0:63:47:e1:db:0f:24:35:38: a3:09:5a:11:43:cd:8d:4e:86:02:23:86:9e:47:f3: f9:32:2c:fc:eb:89:df:a0:c1:65:4f:36:c8:66:4c: 47:47:eb:43:9c:86:d1:93:84:56:0f:ba:f8:03:f5: 8b:5f:c7:d6:4b:8b:36:ec:e6:73:96:5b:fb:20:cd: 04:5b:c9:ef:c2:f3:b5:55:7e:79:46:99:c4:d2:9d: 44:48:52:20:27:53:06:c0:43:18:21:0f:7e:7c:4b: c2:b9:5f:b1:20:55:bf:c8:5a:36:90:f7:25:2b:e9: 37:7f:ce:34:a3:a7:82:83:71:c8:3a:5b:03:88:aa: 5f:16:28:db:1f:8b:c8:26:13:b0:38:f6:52:d5:af: 71:f1:2d:a5:23:f7:3d:3e:cd:3e:26:89:f0:9c:58: 68:7a:9c:1c:ee:16:b9:f1:c2:82:3a:9d:53:c1:06: b9:4d:f8:21:8c:86:82:65:d2:66:ea:fa:6c:75:8d: 97:65:62:e1:2f:6e:45:b0:36:7c:55:80:52:6f:8a: 6c:37:8e:e8:ed:a0:df:9a:fa:ef:ae:9b:06:4c:71: 3c:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:59:2D:95:E1:1E:9D:DD:A6:7A:12:D4:E6:A1:F9:6A:75:3D:15:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3d3f39e8-66a9-3783-bc82-cb3cdd72d1dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1409:e800::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:e8:a4:73:f7:d6:f4:ce:98:27:7e:ba:d1:72:5b:ac:0c:3c: a3:ed:a5:43:36:35:e0:0c:39:cc:61:b0:8b:fb:fc:e2:57:0f: b2:92:40:24:f8:f6:41:e5:f5:d3:f8:98:fe:4b:66:d3:d2:4b: c9:a8:d0:e2:3a:ef:db:37:7e:d7:cd:ac:35:67:00:d0:6d:7f: fb:5e:69:e0:d3:8f:7b:c9:4d:c2:6d:1c:38:81:45:c1:00:3a: e7:2f:80:15:18:3f:c4:94:1d:a1:90:37:cc:dc:f2:69:73:b9: 69:6a:45:3f:cf:45:b4:aa:53:f5:44:fc:53:3b:74:5b:c0:f7: 0d:6c:df:6f:1b:5e:47:92:5a:bc:43:2a:6d:0d:08:40:4f:02: 73:b7:50:7b:39:fa:33:0c:cb:25:c6:49:a8:0c:d2:fb:00:df: 9f:50:0b:25:39:b1:bd:c6:f9:5a:c6:49:d1:5b:ae:25:54:78: f3:b3:5a:b4:95:0a:c2:02:19:d9:73:5f:86:9d:98:04:95:08: b5:33:ee:38:ed:88:73:da:17:41:24:04:ad:2f:22:e7:60:19: 0e:da:5f:4d:44:1a:95:ba:da:a3:69:e4:30:ce:5f:6d:36:90: dc:85:a6:8e:0d:cd:89:11:1c:2c:85:04:e6:63:1d:a2:5f:2c: c5:08:4f:14 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpfxfvLFEKjx86ByAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcwMTEzMDEwNFoXDTI1MDkyOTEzMDEwNFowLzEtMCsGA1UEAxMk OWYxMzk5MTUtMzZiNS00YzU3LTgxNGEtYzJlNjkwYjQ3NTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYM63H0FZZZPWsMdMYG2YbWbfA0hCAweuO38 c/XQAA3N0A/AY0fh2w8kNTijCVoRQ82NToYCI4aeR/P5Miz864nfoMFlTzbIZkxH R+tDnIbRk4RWD7r4A/WLX8fWS4s27OZzllv7IM0EW8nvwvO1VX55RpnE0p1ESFIg J1MGwEMYIQ9+fEvCuV+xIFW/yFo2kPclK+k3f840o6eCg3HIOlsDiKpfFijbH4vI JhOwOPZS1a9x8S2lI/c9Ps0+JonwnFhoepwc7ha58cKCOp1TwQa5TfghjIaCZdJm 6vpsdY2XZWLhL25FsDZ8VYBSb4psN47o7aDfmvrvrpsGTHE84wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKZZLZXhHp3dpnoS1Oah+Wp1PRXkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2QzZjM5ZTgtNjZhOS0z NzgzLWJjODItY2IzY2RkNzJkMWRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUCegA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGfopHP31vTOmCd+utFyW6wMPKPtpUM2NeAMOcxhsIv7/OJXD7KS QCT49kHl9dP4mP5LZtPSS8mo0OI679s3ftfNrDVnANBtf/teaeDTj3vJTcJtHDiB RcEAOucvgBUYP8SUHaGQN8zc8mlzuWlqRT/PRbSqU/VE/FM7dFvA9w1s328bXkeS WrxDKm0NCEBPAnO3UHs5+jMMyyXGSagM0vsA359QCyU5sb3G+VrGSdFbriVUePOz WrSVCsICGdlzX4admASVCLUz7jjtiHPaF0EkBK0vIudgGQ7aX01EGpW62qNp5DDO X202kNyFpo4NzYkRHCyFBOZjHaJfLMUITxQ= -----END CERTIFICATE-----Generated at Wed Jul 23 01:35:11 2025 by rpki-client