$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4494e686-1aaa-3acb-9382-b299803a04ec.roa File: 4494e686-1aaa-3acb-9382-b299803a04ec.roa (raw, json) Hash identifier: 7MSMzBqRbTm9kXdPglXWMLi7hJm/SZz3XV8pCFjVTL4= Subject key identifier: 94:80:58:AA:38:74:43:2C:C2:86:62:6E:1D:43:5F:F2:58:99:76:55 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A5FC5F458870810E2D09A0A00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4494e686-1aaa-3acb-9382-b299803a04ec.roa Signing time: Tue 01 Jul 2025 13:01:04 +0000 ROA not before: Tue 01 Jul 2025 13:01:04 +0000 ROA not after: Mon 29 Sep 2025 13:01:04 +0000 asID: 20940 IP address blocks: 2600:141b:1400::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:c5:f4:58:87:08:10:e2:d0:9a:0a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 1 13:01:04 2025 GMT Not After : Sep 29 13:01:04 2025 GMT Subject: CN=c60b19d3-a897-47d7-97ca-b6d5da058e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:fa:19:eb:a7:8f:7b:06:ff:7a:bf:0e:1d:59: cb:f9:24:91:ee:3b:43:e8:33:e9:2b:88:75:f0:d3: ab:c8:67:1b:11:b5:6b:c3:f8:c3:be:b7:8a:01:89: 67:b5:90:6a:25:ed:b2:48:89:6c:e5:ca:3f:fe:3f: 4a:70:fb:99:4d:e0:0b:53:54:bf:78:5d:d8:85:c8: 1d:67:2d:f8:f8:ff:ae:5e:55:44:e5:5a:f4:8b:41: 25:11:15:7a:50:aa:95:0c:96:fb:fa:0d:6e:26:44: b1:65:92:b8:9d:19:04:29:3f:d9:bf:7a:18:5a:81: c7:b2:c3:ab:94:44:1a:88:78:90:3f:a7:5e:af:ff: 1c:5e:13:82:f5:fb:b9:d4:09:09:40:09:4a:48:33: 5c:60:34:a4:36:da:59:46:2e:39:8b:3d:d5:98:52: 69:9e:84:22:24:84:a5:ae:3e:e0:2b:2f:b1:ec:19: 11:11:36:c3:1e:db:2a:c3:2d:c8:5c:b9:a4:19:d2: 26:09:0d:cf:bc:4d:dd:8e:84:8c:1f:23:e2:ff:4a: 50:68:1c:9b:d1:2f:b3:e9:74:0c:ae:78:20:62:2a: d8:2a:31:40:92:9f:10:f4:c4:40:51:ed:ea:46:44: 7b:27:83:70:30:0f:2d:a4:46:c9:59:2d:51:35:3d: bd:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:80:58:AA:38:74:43:2C:C2:86:62:6E:1D:43:5F:F2:58:99:76:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4494e686-1aaa-3acb-9382-b299803a04ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:141b:1400::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:9a:c4:64:14:70:98:c5:44:78:2c:ab:94:a3:ae:05:e3:70: a1:8c:ba:71:77:c7:d4:53:71:a7:56:05:76:61:01:6e:f4:ba: bc:c7:20:3e:a4:5e:99:96:6b:5d:21:78:46:9b:41:26:58:8f: 03:b9:98:d5:15:13:8c:24:04:35:26:e5:f5:dc:86:24:67:35: 94:4b:2f:d0:70:0c:9f:9a:9d:5c:94:80:c0:b4:d7:19:ea:eb: 9f:70:c5:bc:7b:af:8b:61:ed:6a:60:f2:6a:4c:47:0f:d5:9a: dd:30:97:4c:35:bf:36:df:f3:21:af:70:92:18:90:cb:5b:d1: c9:14:08:90:63:23:ab:be:9d:31:01:38:4d:44:76:de:0c:12: d9:9b:13:d3:e3:87:2b:6e:37:b4:f2:44:8c:82:20:72:cd:86: d6:4d:d0:0b:14:fd:48:b0:29:e0:4c:26:55:b1:a4:0d:42:c2: 81:0f:d5:2d:bf:56:08:30:ce:93:45:49:d9:ac:6c:dc:97:09: ef:41:fa:76:ed:50:1b:66:84:03:02:80:73:3b:5c:72:fc:3c: e3:ca:51:aa:f9:f3:11:1e:82:f2:f3:b3:17:75:0f:7f:4e:a9: dd:04:47:5b:02:dd:2c:65:aa:f8:19:7c:95:bd:c9:b3:65:4b: ee:50:09:77 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpfxfRYhwgQ4tCaCgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcwMTEzMDEwNFoXDTI1MDkyOTEzMDEwNFowLzEtMCsGA1UEAxMk YzYwYjE5ZDMtYTg5Ny00N2Q3LTk3Y2EtYjZkNWRhMDU4ZTIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPoZ66ePewb/er8OHVnL+SSR7jtD6DPpK4h1 8NOryGcbEbVrw/jDvreKAYlntZBqJe2ySIls5co//j9KcPuZTeALU1S/eF3Yhcgd Zy34+P+uXlVE5Vr0i0ElERV6UKqVDJb7+g1uJkSxZZK4nRkEKT/Zv3oYWoHHssOr lEQaiHiQP6der/8cXhOC9fu51AkJQAlKSDNcYDSkNtpZRi45iz3VmFJpnoQiJISl rj7gKy+x7BkRETbDHtsqwy3IXLmkGdImCQ3PvE3djoSMHyPi/0pQaByb0S+z6XQM rnggYirYKjFAkp8Q9MRAUe3qRkR7J4NwMA8tpEbJWS1RNT290wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJSAWKo4dEMswoZibh1DX/JYmXZVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDQ5NGU2ODYtMWFhYS0z YWNiLTkzODItYjI5OTgwM2EwNGVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUGxQA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEKaxGQUcJjFRHgsq5SjrgXjcKGMunF3x9RTcadWBXZhAW70urzH ID6kXpmWa10heEabQSZYjwO5mNUVE4wkBDUm5fXchiRnNZRLL9BwDJ+anVyUgMC0 1xnq659wxbx7r4th7Wpg8mpMRw/Vmt0wl0w1vzbf8yGvcJIYkMtb0ckUCJBjI6u+ nTEBOE1Edt4MEtmbE9PjhytuN7TyRIyCIHLNhtZN0AsU/UiwKeBMJlWxpA1CwoEP 1S2/VggwzpNFSdmsbNyXCe9B+nbtUBtmhAMCgHM7XHL8POPKUar58xEegvLzsxd1 D39Oqd0ER1sC3SxlqvgZfJW9ybNlS+5QCXc= -----END CERTIFICATE-----Generated at Wed Jul 23 01:34:27 2025 by rpki-client