$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4aa86a68-10cb-370d-8d42-0b0e1703b041.roa File: 4aa86a68-10cb-370d-8d42-0b0e1703b041.roa (raw, json) Hash identifier: nCJHM4tyrTHEXSHR2KAb6Lz+DYHb/PaIM2F5AMfBeDE= Subject key identifier: 09:EA:AB:98:F3:FE:45:BF:60:01:B7:4A:A8:4F:9E:B3:D0:4B:D1:ED Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A68260DDC6DE00D46CE905380 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4aa86a68-10cb-370d-8d42-0b0e1703b041.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 20940 IP address blocks: 2600:1488:60c2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:26:0d:dc:6d:e0:0d:46:ce:90:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=286ce148-449f-447c-9688-5f3009b25529 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:dd:95:87:74:10:58:2c:2e:86:bf:95:55:5b: dc:0a:ae:c0:d5:3e:c2:5b:90:4a:db:02:e6:37:ed: ff:18:9e:76:cb:56:76:ad:28:d3:b4:21:bf:51:6a: 1e:c1:70:22:87:3c:25:eb:33:ed:9c:89:12:8a:24: 5c:7f:0f:02:e8:23:5b:09:ea:20:f0:33:75:f3:c3: 69:8c:19:67:82:1d:60:bf:24:1a:76:5d:7c:c9:34: be:7e:4e:5d:d2:dc:ca:5b:a5:95:95:1c:1d:bb:1c: 85:81:a5:c3:2f:5f:e9:ab:16:13:a2:81:90:35:a1: fd:b3:e2:7c:e0:88:ac:d1:ba:06:dd:3e:f0:cb:73: bd:03:60:86:77:17:13:80:da:58:6e:74:e7:91:d0: 53:28:b3:59:59:b4:ee:b8:73:bb:6f:e8:e6:c0:3b: 67:12:ac:04:81:68:e3:7f:32:45:8f:0f:01:bf:18: 97:2d:1f:65:94:d7:f3:36:db:ab:d6:f3:d7:84:16: b1:e6:10:46:0b:9c:9f:5f:09:a5:02:3a:04:dc:d0: d4:e8:37:9f:0c:b9:e9:7a:68:bf:26:36:fb:b2:27: 13:63:76:e4:84:f5:5c:90:4c:9f:a0:2d:db:d5:fd: aa:4b:12:ff:16:ab:6e:4a:07:8a:ba:7f:aa:11:a2: 83:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:EA:AB:98:F3:FE:45:BF:60:01:B7:4A:A8:4F:9E:B3:D0:4B:D1:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4aa86a68-10cb-370d-8d42-0b0e1703b041.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1488:60c2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:f9:42:81:18:eb:ed:2f:98:a0:27:f7:8c:29:03:aa:7f:e8: 3b:39:ee:85:04:55:33:cc:14:1f:a0:11:66:10:99:7d:c8:5f: b6:81:28:f8:0b:a6:b6:66:d8:cd:85:67:dd:0c:d7:03:26:c0: 9c:10:3e:61:f6:66:e0:ee:19:f0:4b:5f:94:af:65:07:ce:95: f3:c0:30:98:85:e5:65:b6:01:fc:43:e9:19:ad:73:22:3a:3a: d3:37:84:91:c0:98:41:78:d8:3b:64:28:fc:e2:23:a7:20:03: 7d:c6:71:6c:c7:f9:5d:b9:e3:0b:19:a7:ff:c4:d2:cb:96:ab: 9a:ee:e4:b3:89:ba:94:da:29:5b:4f:26:59:d1:00:b6:3a:ce: 39:01:34:50:2a:3a:c4:0c:a9:78:60:3d:7f:80:4a:2c:93:9f: 29:31:23:14:d2:05:ae:b7:c4:5e:fa:6f:3d:1b:17:71:fb:ff: 5b:e2:ae:ae:42:7b:27:b3:87:42:4e:36:12:fa:70:b0:27:1a: c0:57:ca:ab:81:ba:66:67:f8:6f:53:f2:d4:24:96:bd:92:8b: 5e:af:e7:8a:ee:0d:bc:48:b8:54:56:1b:e1:72:53:63:aa:a0: e5:c3:77:e1:c1:ae:d8:b1:49:46:cd:98:c7:ae:31:32:ee:53: 0d:3a:18:6e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpoJg3cbeANRs6QU4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk Mjg2Y2UxNDgtNDQ5Zi00NDdjLTk2ODgtNWYzMDA5YjI1NTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlN2Vh3QQWCwuhr+VVVvcCq7A1T7CW5BK2wLm N+3/GJ52y1Z2rSjTtCG/UWoewXAihzwl6zPtnIkSiiRcfw8C6CNbCeog8DN188Np jBlngh1gvyQadl18yTS+fk5d0tzKW6WVlRwduxyFgaXDL1/pqxYTooGQNaH9s+J8 4Iis0boG3T7wy3O9A2CGdxcTgNpYbnTnkdBTKLNZWbTuuHO7b+jmwDtnEqwEgWjj fzJFjw8BvxiXLR9llNfzNtur1vPXhBax5hBGC5yfXwmlAjoE3NDU6DefDLnpemi/ Jjb7sicTY3bkhPVckEyfoC3b1f2qSxL/FqtuSgeKun+qEaKDGwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAnqq5jz/kW/YAG3SqhPnrPQS9HtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGFhODZhNjgtMTBjYi0z NzBkLThkNDItMGIwZTE3MDNiMDQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUiGDC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIr5QoEY6+0vmKAn94wpA6p/6Ds57oUEVTPMFB+gEWYQmX3IX7aB KPgLprZm2M2FZ90M1wMmwJwQPmH2ZuDuGfBLX5SvZQfOlfPAMJiF5WW2AfxD6Rmt cyI6OtM3hJHAmEF42DtkKPziI6cgA33GcWzH+V254wsZp//E0suWq5ru5LOJupTa KVtPJlnRALY6zjkBNFAqOsQMqXhgPX+ASiyTnykxIxTSBa63xF76bz0bF3H7/1vi rq5Ceyezh0JONhL6cLAnGsBXyquBumZn+G9T8tQklr2Si16v54ruDbxIuFRWG+Fy U2OqoOXDd+HBrtixSUbNmMeuMTLuUw06GG4= -----END CERTIFICATE-----Generated at Thu Jul 24 11:54:46 2025 by rpki-client