$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5a1ccf24-4cca-37d9-a721-d5af22df8ec8.roa File: 5a1ccf24-4cca-37d9-a721-d5af22df8ec8.roa (raw, json) Hash identifier: /Y97v4sCVHelyFHzxsBzN85rFUNnqWlN0zLs/YihBWs= Subject key identifier: 1A:70:20:14:D1:52:3F:14:A4:16:10:21:D3:9E:8B:15:F9:96:57:1C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A5FC5FA0328321C6D204F3900 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5a1ccf24-4cca-37d9-a721-d5af22df8ec8.roa Signing time: Tue 01 Jul 2025 13:01:04 +0000 ROA not before: Tue 01 Jul 2025 13:01:04 +0000 ROA not after: Mon 29 Sep 2025 13:01:04 +0000 asID: 20940 IP address blocks: 2600:1406:2800::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:c5:fa:03:28:32:1c:6d:20:4f:39:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 1 13:01:04 2025 GMT Not After : Sep 29 13:01:04 2025 GMT Subject: CN=4c8ed71b-3090-4269-828a-24c6f8833a4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:47:5a:e3:47:67:5f:1c:0f:a0:19:f3:c0:22: f4:f4:35:57:fe:c5:e1:b2:f2:ce:1e:47:d2:9a:ce: 73:fb:12:90:65:c2:79:6c:7b:74:12:07:58:13:54: 45:db:56:b5:9e:81:30:10:02:db:33:02:7e:a4:d3: 3f:66:2d:01:0d:f1:7f:47:c2:fb:f6:61:63:ae:a5: 5d:3e:5e:85:bc:ab:9a:9c:af:85:ad:74:58:c5:69: 87:bf:eb:42:7a:19:fc:17:f6:d6:bd:b8:95:b7:a1: ec:49:66:d6:b0:2f:06:ee:67:78:79:c4:05:c9:be: a6:7b:cd:10:86:f4:25:0f:29:d6:33:bc:5d:c8:4b: 38:8c:6c:64:51:10:69:1c:40:28:a9:03:58:e9:f9: 43:5b:83:be:80:47:de:78:33:99:ac:85:a0:c8:c6: dc:99:55:43:0e:5c:e5:56:35:06:72:ad:39:68:f7: 0c:05:a2:38:af:31:f3:05:71:e0:64:4a:c0:b9:a0: 3c:e3:a4:9a:3b:6b:00:3d:1e:a3:07:29:46:3a:c1: 20:07:08:60:42:c3:de:4c:cb:54:de:83:d6:68:7e: bc:10:92:07:94:33:0d:a2:c1:95:05:ae:1e:ac:8c: 9e:c0:62:0a:1e:46:0d:3c:5c:1f:34:ae:e6:6b:b6: b4:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:70:20:14:D1:52:3F:14:A4:16:10:21:D3:9E:8B:15:F9:96:57:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5a1ccf24-4cca-37d9-a721-d5af22df8ec8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1406:2800::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:91:34:b4:67:90:d9:ef:ae:21:d1:43:b7:c1:41:90:05:eb: 9c:a5:1a:4e:6c:d7:cd:22:28:15:20:6c:e7:3b:d9:92:f4:c2: dd:be:34:35:3b:96:06:48:c5:13:56:71:6d:19:76:ae:a6:05: 82:7c:e4:9e:c9:27:13:6b:9c:9a:94:dd:c8:9c:d4:69:36:ec: 5f:29:ed:f1:4a:bf:6e:e8:38:a2:ca:82:f6:ba:1f:b0:63:44: 47:7b:da:41:6b:72:15:d0:49:92:b4:88:3d:c4:6f:39:83:3a: 44:0e:65:9d:36:a7:31:ff:e1:61:cd:63:b1:44:c6:f8:dd:f5: 61:ae:20:52:2f:6c:41:ab:ca:4a:79:f3:e2:e0:f0:6a:b6:1f: 49:ee:3f:cb:0e:5e:12:fd:42:2e:73:70:8a:8f:13:9d:f4:54: 9a:fd:d3:ef:ea:8a:9a:d6:af:b1:b8:cc:97:b5:64:e5:fe:d7: a5:11:f0:f3:ea:84:95:aa:c9:ef:17:07:94:b6:39:12:cf:dc: b1:3c:96:41:9f:5b:6c:50:e3:a6:5d:76:f0:11:9e:17:6e:50: f7:88:7f:fc:a4:33:06:fc:03:f5:28:f2:7c:21:47:c9:ac:ef: 12:c7:a4:9a:3f:41:07:d1:f8:2b:ad:5c:f7:c5:d0:cc:e1:90: 61:aa:49:e6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpfxfoDKDIcbSBPOQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcwMTEzMDEwNFoXDTI1MDkyOTEzMDEwNFowLzEtMCsGA1UEAxMk NGM4ZWQ3MWItMzA5MC00MjY5LTgyOGEtMjRjNmY4ODMzYTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0da40dnXxwPoBnzwCL09DVX/sXhsvLOHkfS ms5z+xKQZcJ5bHt0EgdYE1RF21a1noEwEALbMwJ+pNM/Zi0BDfF/R8L79mFjrqVd Pl6FvKuanK+FrXRYxWmHv+tCehn8F/bWvbiVt6HsSWbWsC8G7md4ecQFyb6me80Q hvQlDynWM7xdyEs4jGxkURBpHEAoqQNY6flDW4O+gEfeeDOZrIWgyMbcmVVDDlzl VjUGcq05aPcMBaI4rzHzBXHgZErAuaA846SaO2sAPR6jBylGOsEgBwhgQsPeTMtU 3oPWaH68EJIHlDMNosGVBa4erIyewGIKHkYNPFwfNK7ma7a06wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBpwIBTRUj8UpBYQIdOeixX5llccMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWExY2NmMjQtNGNjYS0z N2Q5LWE3MjEtZDVhZjIyZGY4ZWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUBigA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHCRNLRnkNnvriHRQ7fBQZAF65ylGk5s180iKBUgbOc72ZL0wt2+ NDU7lgZIxRNWcW0Zdq6mBYJ85J7JJxNrnJqU3cic1Gk27F8p7fFKv27oOKLKgva6 H7BjREd72kFrchXQSZK0iD3EbzmDOkQOZZ02pzH/4WHNY7FExvjd9WGuIFIvbEGr ykp58+Lg8Gq2H0nuP8sOXhL9Qi5zcIqPE530VJr90+/qiprWr7G4zJe1ZOX+16UR 8PPqhJWqye8XB5S2ORLP3LE8lkGfW2xQ46ZddvARnhduUPeIf/ykMwb8A/Uo8nwh R8ms7xLHpJo/QQfR+CutXPfF0MzhkGGqSeY= -----END CERTIFICATE-----Generated at Tue Jul 22 19:47:34 2025 by rpki-client