$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/55bf1873-5ade-3523-8e00-e54e7ad73358.roa File: 55bf1873-5ade-3523-8e00-e54e7ad73358.roa (raw, json) Hash identifier: RiKGt5bEifLft38wSl5+uX0HmeZI6ZCvBjjMpJDYyw0= Subject key identifier: CD:31:2E:8F:90:FD:74:1C:D0:F3:0C:0E:05:0E:4A:6B:C1:B1:33:BF Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A5FC5F13BA16BF1B58AF54A00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/55bf1873-5ade-3523-8e00-e54e7ad73358.roa Signing time: Tue 01 Jul 2025 13:01:04 +0000 ROA not before: Tue 01 Jul 2025 13:01:04 +0000 ROA not after: Mon 29 Sep 2025 13:01:04 +0000 asID: 20940 IP address blocks: 2600:1408:8400::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:c5:f1:3b:a1:6b:f1:b5:8a:f5:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 1 13:01:04 2025 GMT Not After : Sep 29 13:01:04 2025 GMT Subject: CN=0a43ca11-ca83-4eb2-b94b-0394a9179269 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:7f:32:3a:8d:81:54:35:a4:b1:76:4b:42:94: d7:88:24:13:78:69:89:6a:ed:6e:5a:d2:d3:6d:88: 96:de:1e:04:e1:41:d9:39:d6:1e:95:f3:1a:9f:2c: 10:5a:75:cc:56:30:57:55:65:e8:4d:80:b5:46:43: 78:d0:bb:a4:49:d2:fd:a7:7f:ea:0e:92:8b:f2:8f: 41:e8:00:0d:50:d1:a9:da:12:69:99:54:e8:41:10: e2:40:f8:0c:f3:b5:51:83:76:60:09:82:d5:01:24: 43:a9:1a:15:d2:37:78:24:2d:0a:8c:d1:e6:12:a6: e1:01:87:92:4a:f0:80:98:37:0d:12:ae:08:85:7a: 92:7c:d6:80:e1:e9:74:d3:c1:b9:6b:70:73:06:c7: 8d:96:eb:f9:b8:7d:80:5c:9e:4e:5f:d4:bb:01:9e: 83:da:f0:a7:a9:8a:07:b8:43:ad:67:fb:e6:ab:07: ea:c5:31:0a:f2:86:5a:61:b1:04:90:38:ac:c9:e0: 1a:1f:7f:54:52:43:cb:dc:da:a5:51:5b:cb:b8:64: 60:c2:c2:82:8b:8f:2e:0e:53:61:23:bc:eb:64:2e: 6f:d1:2f:22:4d:8d:21:d6:54:c2:75:7e:e2:2a:2f: fc:1c:cc:f3:5b:0d:a7:ce:5a:fb:b5:9f:41:5e:a3: 1d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:31:2E:8F:90:FD:74:1C:D0:F3:0C:0E:05:0E:4A:6B:C1:B1:33:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/55bf1873-5ade-3523-8e00-e54e7ad73358.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1408:8400::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:a0:b2:87:51:74:aa:23:ed:13:5a:10:5e:26:82:92:3d:84: 08:2c:9e:32:5b:80:3f:02:64:e6:44:0a:5c:bf:bb:d1:b4:f6: f5:f2:15:0a:9a:d4:4c:99:59:56:e3:bc:1b:43:45:64:01:3a: 3b:1f:68:f9:bc:13:4e:58:90:ae:64:fb:1a:64:a5:2c:99:6f: 23:7c:86:12:62:bb:40:f5:03:46:dd:f9:94:95:4b:5c:49:d8: 64:f3:23:e8:e4:22:cd:95:dd:fc:7c:6d:cf:a6:b3:ed:a2:79: 33:d4:73:e1:68:46:fb:75:7f:d8:1c:ef:de:41:66:7c:f4:94: 06:51:a7:bb:7f:82:d8:db:01:3f:5f:29:71:9c:0c:b3:2e:f1: 28:f1:f0:9e:db:d6:85:72:23:cd:72:08:b4:6a:2b:18:8d:46: b5:47:0b:d8:5e:b3:e4:67:23:21:9d:5a:d5:15:e5:01:8a:c7: 21:30:6c:d1:85:23:df:f3:9f:b7:0e:95:b1:d1:a6:5d:88:00: aa:24:e7:91:0e:0c:c3:f3:32:56:5a:62:12:9f:8d:ed:e3:43: 82:dc:08:b7:b1:f8:0e:ef:61:3c:2b:04:d7:93:a7:59:49:c6: 72:66:f8:ad:1b:66:26:6f:78:31:5f:5b:b7:37:e5:f7:bb:a1: cd:00:24:be -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpfxfE7oWvxtYr1SgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcwMTEzMDEwNFoXDTI1MDkyOTEzMDEwNFowLzEtMCsGA1UEAxMk MGE0M2NhMTEtY2E4My00ZWIyLWI5NGItMDM5NGE5MTc5MjY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArn8yOo2BVDWksXZLQpTXiCQTeGmJau1uWtLT bYiW3h4E4UHZOdYelfManywQWnXMVjBXVWXoTYC1RkN40LukSdL9p3/qDpKL8o9B 6AANUNGp2hJpmVToQRDiQPgM87VRg3ZgCYLVASRDqRoV0jd4JC0KjNHmEqbhAYeS SvCAmDcNEq4IhXqSfNaA4el008G5a3BzBseNluv5uH2AXJ5OX9S7AZ6D2vCnqYoH uEOtZ/vmqwfqxTEK8oZaYbEEkDisyeAaH39UUkPL3NqlUVvLuGRgwsKCi48uDlNh I7zrZC5v0S8iTY0h1lTCdX7iKi/8HMzzWw2nzlr7tZ9BXqMd7wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFM0xLo+Q/XQc0PMMDgUOSmvBsTO/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTViZjE4NzMtNWFkZS0z NTIzLThlMDAtZTU0ZTdhZDczMzU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUCIQA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEigsodRdKoj7RNaEF4mgpI9hAgsnjJbgD8CZOZECly/u9G09vXy FQqa1EyZWVbjvBtDRWQBOjsfaPm8E05YkK5k+xpkpSyZbyN8hhJiu0D1A0bd+ZSV S1xJ2GTzI+jkIs2V3fx8bc+ms+2ieTPUc+FoRvt1f9gc795BZnz0lAZRp7t/gtjb AT9fKXGcDLMu8Sjx8J7b1oVyI81yCLRqKxiNRrVHC9hes+RnIyGdWtUV5QGKxyEw bNGFI9/zn7cOlbHRpl2IAKok55EODMPzMlZaYhKfje3jQ4LcCLex+A7vYTwrBNeT p1lJxnJm+K0bZiZveDFfW7c35fe7oc0AJL4= -----END CERTIFICATE-----Generated at Tue Jul 22 20:06:26 2025 by rpki-client