$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5a6e11d1-dc33-3898-bbae-1ddfa850894e.roa File: 5a6e11d1-dc33-3898-bbae-1ddfa850894e.roa (raw, json) Hash identifier: rA+Su3rm6BsU84Z41oIv3UvXoQ97fg6kkj57Ct2rhqI= Subject key identifier: 02:00:B8:0D:23:00:49:98:07:3E:98:50:F3:44:E4:96:C4:D2:FE:E4 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A6AF099EDFDDE1B45BCC9FD80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5a6e11d1-dc33-3898-bbae-1ddfa850894e.roa Signing time: Sat 05 Jul 2025 13:01:04 +0000 ROA not before: Sat 05 Jul 2025 13:01:04 +0000 ROA not after: Fri 03 Oct 2025 13:01:04 +0000 asID: 35994 IP address blocks: 2600:1409:4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6a:f0:99:ed:fd:de:1b:45:bc:c9:fd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 5 13:01:04 2025 GMT Not After : Oct 3 13:01:04 2025 GMT Subject: CN=cfb0b078-8bc1-47bd-9ca5-48369d728c9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:78:1d:6b:15:04:7f:80:67:2a:a2:a8:63:df: 37:5d:0b:f4:42:37:97:94:ac:fc:d2:92:96:16:b9: 03:65:d6:7f:d1:3c:49:ed:2c:ca:14:35:5c:2c:97: 6a:2f:16:f0:37:57:95:52:c1:0c:70:55:b7:e0:ac: c4:20:8c:d7:18:b9:39:c3:be:ba:98:0b:99:4c:9f: e3:e9:73:54:59:37:da:6a:9a:b2:34:df:0b:b4:59: c5:0c:ae:b9:f1:d3:de:40:6f:bd:da:93:09:7a:bc: a7:4d:7f:29:bf:0e:04:39:51:f5:b8:b6:d1:5d:1f: c1:48:e1:b6:1c:83:64:30:68:b3:e9:04:46:62:5c: a3:cd:54:da:11:04:e6:7d:94:0b:e1:d3:4c:3a:ea: c2:27:7d:0f:62:b1:ae:46:a1:c0:39:d7:b6:60:3f: 21:70:27:ce:c2:95:8a:12:27:c6:5c:c9:d7:1c:64: 0b:39:67:28:15:bd:49:6b:23:80:5a:e1:70:3a:5a: 94:c0:b1:c3:06:73:91:24:9c:c8:a5:d8:44:2f:b1: 93:fe:4d:80:75:4f:81:41:72:f4:91:c7:17:c9:44: 5f:3e:61:39:67:07:ee:1c:74:3e:29:0d:a7:5a:74: bc:89:09:d8:3e:45:70:9a:e4:42:bc:0a:a9:f1:43: 77:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:00:B8:0D:23:00:49:98:07:3E:98:50:F3:44:E4:96:C4:D2:FE:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5a6e11d1-dc33-3898-bbae-1ddfa850894e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1409:4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:d7:20:b1:ac:7d:46:0f:af:ab:7d:3e:ab:70:69:bc:7b:13: 14:9e:be:1f:3d:f1:4a:ba:03:7e:4e:55:14:05:49:dc:19:b5: 26:ae:32:ac:a6:85:25:f6:30:45:fb:76:5b:d1:62:06:d2:81: 69:d4:8e:65:19:13:83:57:d1:89:f0:06:9d:75:fc:cb:d8:d6: b6:00:16:77:5f:5a:c9:1a:16:c1:d2:c0:aa:b3:57:52:da:a3: 41:c6:af:31:3c:26:0e:9c:03:95:03:0b:42:b3:db:4c:17:cc: f8:cd:3d:27:6c:c2:aa:3d:60:0f:ec:e7:c5:23:ab:0e:56:57: b5:ef:fa:13:13:01:80:e6:b2:7b:13:2f:02:a6:54:72:bc:13: 3a:45:d8:58:9b:5f:36:35:2f:f4:80:8e:ba:a4:92:78:cc:4b: be:67:27:a5:17:6c:1a:25:d4:9c:84:85:b0:41:60:4c:d2:c0: df:50:20:90:da:14:ba:d2:29:b9:2f:17:d4:88:2b:75:19:d7: 6a:ab:22:5a:80:8f:a3:e6:b3:f7:2d:a9:38:41:5d:e8:40:dd: 80:ea:f6:da:ae:18:56:ee:b2:29:1f:06:53:81:9c:02:0a:ab: 03:8d:f5:18:76:1f:15:e4:6c:83:bb:c8:57:b0:ea:87:87:90: a3:f7:8a:54 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpq8Jnt/d4bRbzJ/YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcwNTEzMDEwNFoXDTI1MTAwMzEzMDEwNFowLzEtMCsGA1UEAxMk Y2ZiMGIwNzgtOGJjMS00N2JkLTljYTUtNDgzNjlkNzI4YzlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHgdaxUEf4BnKqKoY983XQv0QjeXlKz80pKW FrkDZdZ/0TxJ7SzKFDVcLJdqLxbwN1eVUsEMcFW34KzEIIzXGLk5w766mAuZTJ/j 6XNUWTfaapqyNN8LtFnFDK658dPeQG+92pMJerynTX8pvw4EOVH1uLbRXR/BSOG2 HINkMGiz6QRGYlyjzVTaEQTmfZQL4dNMOurCJ30PYrGuRqHAOde2YD8hcCfOwpWK EifGXMnXHGQLOWcoFb1JayOAWuFwOlqUwLHDBnORJJzIpdhEL7GT/k2AdU+BQXL0 kccXyURfPmE5ZwfuHHQ+KQ2nWnS8iQnYPkVwmuRCvAqp8UN3ZwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAIAuA0jAEmYBz6YUPNE5JbE0v7kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWE2ZTExZDEtZGMzMy0z ODk4LWJiYWUtMWRkZmE4NTA4OTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUCQAE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACHXILGsfUYPr6t9Pqtwabx7ExSevh898Uq6A35OVRQFSdwZtSau MqymhSX2MEX7dlvRYgbSgWnUjmUZE4NX0YnwBp11/MvY1rYAFndfWskaFsHSwKqz V1Lao0HGrzE8Jg6cA5UDC0Kz20wXzPjNPSdswqo9YA/s58Ujqw5WV7Xv+hMTAYDm snsTLwKmVHK8EzpF2FibXzY1L/SAjrqkknjMS75nJ6UXbBol1JyEhbBBYEzSwN9Q IJDaFLrSKbkvF9SIK3UZ12qrIlqAj6Pms/ctqThBXehA3YDq9tquGFbusikfBlOB nAIKqwON9Rh2HxXkbIO7yFew6oeHkKP3ilQ= -----END CERTIFICATE-----Generated at Wed Jul 23 19:43:46 2025 by rpki-client