$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5589ead9-c11f-30d7-bdb8-a23490952129.roa File: 5589ead9-c11f-30d7-bdb8-a23490952129.roa (raw, json) Hash identifier: DsP0k3wbcECUGm+EW2KwjqFPgVvwBQ4ObSKO4QgHPa0= Subject key identifier: 2E:D3:17:5C:DB:D7:61:F7:E6:0A:25:5A:D5:9E:C7:AA:D7:CC:6A:DF Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A6C55EC2E63442189ABAEF640 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5589ead9-c11f-30d7-bdb8-a23490952129.roa Signing time: Sun 06 Jul 2025 01:00:49 +0000 ROA not before: Sun 06 Jul 2025 01:00:49 +0000 ROA not after: Sat 04 Oct 2025 01:00:49 +0000 asID: 24319 IP address blocks: 2600:1417:41::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6c:55:ec:2e:63:44:21:89:ab:ae:f6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 6 01:00:49 2025 GMT Not After : Oct 4 01:00:49 2025 GMT Subject: CN=17381445-4025-4deb-90d2-8099949a46fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:5d:1c:85:ea:03:f6:82:8e:01:69:40:24:d8: 66:df:8b:4a:3a:af:7b:bf:69:cc:0b:1e:37:e9:bf: eb:2b:5c:f3:2c:ff:37:b6:99:39:60:20:7e:11:ae: 37:2b:e3:5c:70:0f:3b:8b:e2:ab:c1:e9:bd:98:a0: e8:cb:ed:92:6c:57:f6:88:a0:48:59:63:66:00:ce: 9f:34:0c:8a:ff:a5:45:7e:f3:de:28:08:80:6f:90: 06:b5:c7:7c:da:c6:24:91:5e:62:de:bd:a8:70:97: f5:37:dd:ff:37:0e:b6:d6:34:b0:17:98:59:08:42: 84:cd:9d:ed:d8:6b:0c:a3:63:e6:89:44:6d:67:1e: f3:85:7e:04:3f:7d:43:af:c5:17:83:3c:87:ab:7a: 47:df:8b:c5:ab:62:4c:ec:f9:4b:2c:e6:da:df:e2: 43:a2:8a:5f:bb:37:be:a2:06:c3:7c:14:5e:05:69: e0:31:a6:2e:49:cd:be:46:02:63:87:62:8b:44:f3: e9:8b:39:74:07:28:26:6c:ad:30:0c:7a:9d:b5:c0: c5:a0:db:57:e4:78:1d:00:39:30:ae:5d:d3:ab:fc: d8:62:90:ae:19:f0:69:fc:71:14:47:df:12:ad:ba: 92:77:89:7f:b5:99:87:9d:20:21:8c:2b:2e:1d:00: 6e:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:D3:17:5C:DB:D7:61:F7:E6:0A:25:5A:D5:9E:C7:AA:D7:CC:6A:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5589ead9-c11f-30d7-bdb8-a23490952129.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1417:41::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:53:a8:88:98:6a:b5:94:1d:b6:57:5f:cb:51:5d:b0:6d:a7: b7:a7:a7:1f:71:50:30:b1:73:9a:15:80:be:43:76:a2:e0:43: fa:c0:13:cb:4e:af:30:9c:d1:6a:6f:01:2c:f3:9a:2d:89:f0: 5b:bf:e9:b5:d4:83:30:f9:27:fd:d8:a6:b9:a0:77:d0:3c:69: d9:f5:54:b4:3c:55:f3:3d:77:fd:47:e2:be:a9:f1:b7:58:bb: 49:36:6f:b9:7a:da:ef:fc:c4:17:30:d9:b0:75:aa:c7:7d:cb: 64:64:96:53:40:77:7c:f5:20:a8:7d:f9:b0:6a:70:f8:1a:59: 95:ad:86:04:6a:ef:d7:0e:b5:e2:a7:da:3f:23:51:b3:22:59: 00:96:38:57:3f:db:ec:83:33:8b:d8:ba:c3:d8:fc:ec:f6:75: cb:e3:7d:b4:39:f7:26:76:de:00:6c:55:64:05:14:31:4f:b6: 74:26:70:ac:8f:69:ca:e3:ee:e7:48:f9:c8:89:a5:b6:e2:5e: ff:21:7f:50:c6:3a:c2:b9:63:b4:61:1b:98:ff:e6:4d:30:c5: 08:a4:9e:94:bc:c6:bb:37:23:b9:df:52:a5:b2:3f:54:d8:bd: 47:a3:b0:dd:f6:92:77:f7:87:b6:aa:f0:1e:99:86:77:4b:80: 4e:06:26:ea -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpsVewuY0Qhiauu9kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcwNjAxMDA0OVoXDTI1MTAwNDAxMDA0OVowLzEtMCsGA1UEAxMk MTczODE0NDUtNDAyNS00ZGViLTkwZDItODA5OTk0OWE0NmZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAil0cheoD9oKOAWlAJNhm34tKOq97v2nMCx43 6b/rK1zzLP83tpk5YCB+Ea43K+NccA87i+Krwem9mKDoy+2SbFf2iKBIWWNmAM6f NAyK/6VFfvPeKAiAb5AGtcd82sYkkV5i3r2ocJf1N93/Nw621jSwF5hZCEKEzZ3t 2GsMo2PmiURtZx7zhX4EP31Dr8UXgzyHq3pH34vFq2JM7PlLLOba3+JDoopfuze+ ogbDfBReBWngMaYuSc2+RgJjh2KLRPPpizl0BygmbK0wDHqdtcDFoNtX5HgdADkw rl3Tq/zYYpCuGfBp/HEUR98SrbqSd4l/tZmHnSAhjCsuHQBuDwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFC7TF1zb12H35golWtWex6rXzGrfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTU4OWVhZDktYzExZi0z MGQ3LWJkYjgtYTIzNDkwOTUyMTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUFwBB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACRTqIiYarWUHbZXX8tRXbBtp7enpx9xUDCxc5oVgL5DdqLgQ/rA E8tOrzCc0WpvASzzmi2J8Fu/6bXUgzD5J/3Yprmgd9A8adn1VLQ8VfM9d/1H4r6p 8bdYu0k2b7l62u/8xBcw2bB1qsd9y2RkllNAd3z1IKh9+bBqcPgaWZWthgRq79cO teKn2j8jUbMiWQCWOFc/2+yDM4vYusPY/Oz2dcvjfbQ59yZ23gBsVWQFFDFPtnQm cKyPacrj7udI+ciJpbbiXv8hf1DGOsK5Y7RhG5j/5k0wxQiknpS8xrs3I7nfUqWy P1TYvUejsN32knf3h7aq8B6ZhndLgE4GJuo= -----END CERTIFICATE-----Generated at Wed Jul 23 01:34:22 2025 by rpki-client