$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5afed186-75e6-3708-a389-413082f54de4.roa File: 5afed186-75e6-3708-a389-413082f54de4.roa (raw, json) Hash identifier: MFP7vtK1f0xj+Z2acSPbkajofgeN16K6r+vQQ8J0z0I= Subject key identifier: 65:62:6B:CE:9D:61:35:18:A7:4C:A6:AC:31:29:8C:9B:D0:71:82:77 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A5FC5F4B04D221C5B16CA2E68 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5afed186-75e6-3708-a389-413082f54de4.roa Signing time: Tue 01 Jul 2025 13:01:04 +0000 ROA not before: Tue 01 Jul 2025 13:01:04 +0000 ROA not after: Mon 29 Sep 2025 13:01:04 +0000 asID: 20940 IP address blocks: 2600:141b:d800::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:c5:f4:b0:4d:22:1c:5b:16:ca:2e:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 1 13:01:04 2025 GMT Not After : Sep 29 13:01:04 2025 GMT Subject: CN=a5989448-77c6-40cf-a16a-43706f068766 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e9:53:dc:e4:15:37:df:f9:df:4f:b9:a3:bd: eb:93:a8:e6:53:1d:37:6e:f8:6f:85:c7:c7:2b:55: 03:37:aa:60:ae:dd:92:66:4e:3b:4b:c8:b4:d4:2c: e1:8b:f5:63:37:88:13:f2:0d:cf:d9:fa:2c:7e:be: 1d:db:87:10:b9:18:2a:b6:9a:02:85:c0:e5:fb:9f: bc:f2:32:bb:8d:8e:c8:3f:f9:50:40:5a:84:52:53: be:ae:d7:83:04:07:3a:7d:09:3d:49:b5:21:a3:eb: 25:de:e6:bc:33:12:5f:02:ad:e3:db:d4:71:c3:9f: 6b:1f:1e:3c:09:b0:9e:ce:8d:50:28:f7:b3:f3:22: 44:d7:6b:36:ce:43:21:92:14:20:e7:ad:d8:cb:13: 79:45:b6:d5:82:69:54:75:8b:b3:68:bb:26:12:e4: d1:2e:05:5d:ee:be:c8:40:f9:42:19:9c:fa:10:41: 96:98:0f:ca:79:79:55:75:7a:9c:99:f1:0d:61:9f: 12:06:e8:13:3f:14:bd:7d:6d:db:b4:38:2a:df:2a: a0:15:22:cd:7e:28:4c:08:43:ba:9f:0e:26:82:ec: ba:ed:4c:cb:d4:93:89:17:92:01:3e:7c:1c:aa:93: 27:e2:27:e8:3e:43:a2:8d:7a:c5:0e:7a:ef:5f:ec: 72:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:62:6B:CE:9D:61:35:18:A7:4C:A6:AC:31:29:8C:9B:D0:71:82:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5afed186-75e6-3708-a389-413082f54de4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:141b:d800::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:12:dd:0c:8c:a1:ee:cc:2a:ba:7b:f7:3c:2e:4a:0c:01:4f: b9:9d:70:cd:26:3f:1d:30:68:86:64:fb:ec:bc:4e:bb:cb:53: 53:55:27:31:a9:4f:1e:c5:8a:9e:f3:78:35:1c:97:11:3a:9a: 7f:05:ab:e9:78:56:77:d7:30:51:d7:bf:41:15:82:48:bf:26: 94:30:a4:27:48:9f:8b:80:87:d4:2b:47:1e:ea:89:b8:d1:75: bc:92:42:e8:6d:6c:75:93:d2:96:88:5b:ca:8b:56:e8:a4:83: a5:64:ae:89:71:64:96:4b:ac:38:fa:95:fa:de:f0:df:60:a1: e8:fe:ca:09:8f:2f:7f:4b:fb:9c:92:d1:6f:63:f1:f7:e4:8d: cd:29:18:0b:1f:7a:0b:f1:be:b7:14:21:25:ea:17:58:08:d9: ac:63:4b:d2:ec:19:8d:a7:34:98:08:05:20:5f:ec:3a:bf:8c: c6:2c:65:c5:70:69:17:3c:78:df:37:8a:b6:85:39:1c:8b:07: 78:3c:f5:5a:ad:79:09:1a:89:45:93:65:35:3f:78:29:9b:0f: 0a:25:f4:d0:90:b5:e3:8b:a5:de:77:6d:c4:5b:8e:a9:fd:c5: a9:2e:75:0e:3e:38:a0:b8:fc:11:56:73:a1:c1:a1:b4:fa:89: e9:ab:57:b1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpfxfSwTSIcWxbKLmgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcwMTEzMDEwNFoXDTI1MDkyOTEzMDEwNFowLzEtMCsGA1UEAxMk YTU5ODk0NDgtNzdjNi00MGNmLWExNmEtNDM3MDZmMDY4NzY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+lT3OQVN9/530+5o73rk6jmUx03bvhvhcfH K1UDN6pgrt2SZk47S8i01Czhi/VjN4gT8g3P2fosfr4d24cQuRgqtpoChcDl+5+8 8jK7jY7IP/lQQFqEUlO+rteDBAc6fQk9SbUho+sl3ua8MxJfAq3j29Rxw59rHx48 CbCezo1QKPez8yJE12s2zkMhkhQg563YyxN5RbbVgmlUdYuzaLsmEuTRLgVd7r7I QPlCGZz6EEGWmA/KeXlVdXqcmfENYZ8SBugTPxS9fW3btDgq3yqgFSLNfihMCEO6 nw4mguy67UzL1JOJF5IBPnwcqpMn4ifoPkOijXrFDnrvX+xy+QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGVia86dYTUYp0ymrDEpjJvQcYJ3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWFmZWQxODYtNzVlNi0z NzA4LWEzODktNDEzMDgyZjU0ZGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUG9gA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE8S3QyMoe7MKrp79zwuSgwBT7mdcM0mPx0waIZk++y8TrvLU1NV JzGpTx7Fip7zeDUclxE6mn8Fq+l4VnfXMFHXv0EVgki/JpQwpCdIn4uAh9QrRx7q ibjRdbySQuhtbHWT0paIW8qLVuikg6VkrolxZJZLrDj6lfre8N9goej+ygmPL39L +5yS0W9j8ffkjc0pGAsfegvxvrcUISXqF1gI2axjS9LsGY2nNJgIBSBf7Dq/jMYs ZcVwaRc8eN83iraFORyLB3g89VqteQkaiUWTZTU/eCmbDwol9NCQteOLpd53bcRb jqn9xakudQ4+OKC4/BFWc6HBobT6iemrV7E= -----END CERTIFICATE-----Generated at Wed Jul 23 01:48:47 2025 by rpki-client