$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d518362-1d79-3607-a8f3-c4b7e15bf95d.roa File: 5d518362-1d79-3607-a8f3-c4b7e15bf95d.roa (raw, json) Hash identifier: Fn+A/6tdwMG7f4pBMNBtfDslBfDgW96ebbfRf5JOySc= Subject key identifier: E4:43:73:18:F0:70:77:CE:AE:37:83:0D:0E:67:8C:DE:60:2D:1D:73 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A71EB55DFEB04440395966760 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d518362-1d79-3607-a8f3-c4b7e15bf95d.roa Signing time: Tue 08 Jul 2025 01:00:51 +0000 ROA not before: Tue 08 Jul 2025 01:00:51 +0000 ROA not after: Mon 06 Oct 2025 01:00:51 +0000 asID: 21342 IP address blocks: 2600:1480:a800::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:71:eb:55:df:eb:04:44:03:95:96:67:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 8 01:00:51 2025 GMT Not After : Oct 6 01:00:51 2025 GMT Subject: CN=2124b399-8fcb-469f-8d3f-86cb401c1400 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:4a:91:ff:b4:11:d2:0e:d8:4d:91:c5:e4:a4: 11:7b:89:f5:1a:96:f3:4e:a6:c2:9d:36:83:53:e3: de:ee:40:a7:ea:a8:eb:77:ee:a3:69:b4:95:18:bc: 17:a7:12:24:d6:dc:46:70:4d:91:f3:f3:a1:26:37: 68:bd:36:34:a7:a7:f1:02:9f:23:45:50:de:b5:8f: 6b:49:09:57:d5:8a:7d:11:d8:04:5d:10:d4:02:5e: 48:31:f5:e3:6f:b0:7f:8e:48:58:55:3b:31:19:0d: 15:c1:c8:f7:c6:f6:d4:4d:80:69:99:bf:43:4b:8a: aa:0d:a8:8f:b1:ae:17:88:56:cc:23:d9:49:62:c1: b2:1f:5a:8c:67:b6:c0:31:87:4d:f8:31:5a:ec:15: ca:e4:99:9d:8c:05:71:e7:65:db:16:db:47:e2:d5: db:2d:94:5d:06:73:c5:a2:d5:09:c2:46:3b:5a:15: ba:21:f1:91:95:41:d4:9f:ca:6d:2a:1a:06:10:cf: 7d:ee:47:de:6a:20:3a:73:10:80:74:a6:3c:69:09: 49:cd:b8:25:a0:6d:32:da:43:97:ee:c4:53:7e:ef: 05:95:58:7a:d2:e4:42:11:1f:c7:cd:6c:33:4d:c4: 52:ff:5d:25:b5:9f:62:48:20:00:92:7e:31:62:62: 62:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:43:73:18:F0:70:77:CE:AE:37:83:0D:0E:67:8C:DE:60:2D:1D:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d518362-1d79-3607-a8f3-c4b7e15bf95d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1480:a800::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:09:6a:46:6c:e9:07:be:0b:02:bf:e4:56:93:f1:74:6d:d4: 1a:aa:19:3b:98:d5:0b:81:6a:89:16:d7:59:80:1a:3c:84:df: 13:e5:d9:72:51:65:8b:4d:00:8c:79:24:e8:f7:60:aa:a3:e5: f9:f6:65:8d:2a:d3:85:a6:44:d5:1b:c0:f2:70:23:80:3a:75: 91:fa:8d:6b:de:e8:e9:8c:1b:4b:e6:72:f6:ec:fa:66:44:39: 20:c3:66:02:c0:f1:38:b8:af:8e:b4:de:f9:a1:ea:98:f6:0a: 82:59:79:b7:e2:72:cd:cc:38:5f:eb:27:70:32:de:0e:4c:35: e6:8e:07:1e:28:68:74:bf:3a:42:8b:30:4a:ea:7c:58:6e:47: c6:f3:71:3d:f0:2a:f8:c5:e4:42:e8:2a:c4:aa:c7:c7:69:c3: 8e:36:6f:23:c8:d2:7a:59:db:c2:5c:2f:f5:df:ce:3a:56:08: 57:30:29:36:7a:1e:bb:9b:5b:64:3f:3c:ed:ca:31:db:1b:d4: 00:ff:08:f7:8c:c5:ab:8a:38:df:a1:ae:c0:43:88:f8:2f:e3: 23:e4:84:c0:cb:33:2b:b3:b4:59:71:3e:dc:58:d2:d6:95:d8: 95:75:59:1c:85:16:7d:db:32:d5:33:51:2e:e4:3b:79:44:c4: 84:09:9b:bc -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpx61Xf6wREA5WWZ2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcwODAxMDA1MVoXDTI1MTAwNjAxMDA1MVowLzEtMCsGA1UEAxMk MjEyNGIzOTktOGZjYi00NjlmLThkM2YtODZjYjQwMWMxNDAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEqR/7QR0g7YTZHF5KQRe4n1GpbzTqbCnTaD U+Pe7kCn6qjrd+6jabSVGLwXpxIk1txGcE2R8/OhJjdovTY0p6fxAp8jRVDetY9r SQlX1Yp9EdgEXRDUAl5IMfXjb7B/jkhYVTsxGQ0Vwcj3xvbUTYBpmb9DS4qqDaiP sa4XiFbMI9lJYsGyH1qMZ7bAMYdN+DFa7BXK5JmdjAVx52XbFttH4tXbLZRdBnPF otUJwkY7WhW6IfGRlUHUn8ptKhoGEM997kfeaiA6cxCAdKY8aQlJzbgloG0y2kOX 7sRTfu8FlVh60uRCER/HzWwzTcRS/10ltZ9iSCAAkn4xYmJiMwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFORDcxjwcHfOrjeDDQ5njN5gLR1zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWQ1MTgzNjItMWQ3OS0z NjA3LWE4ZjMtYzRiN2UxNWJmOTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUgKgA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGQJakZs6Qe+CwK/5FaT8XRt1BqqGTuY1QuBaokW11mAGjyE3xPl 2XJRZYtNAIx5JOj3YKqj5fn2ZY0q04WmRNUbwPJwI4A6dZH6jWve6OmMG0vmcvbs +mZEOSDDZgLA8Ti4r4603vmh6pj2CoJZebfics3MOF/rJ3Ay3g5MNeaOBx4oaHS/ OkKLMErqfFhuR8bzcT3wKvjF5ELoKsSqx8dpw442byPI0npZ28JcL/XfzjpWCFcw KTZ6HrubW2Q/PO3KMdsb1AD/CPeMxauKON+hrsBDiPgv4yPkhMDLMyuztFlxPtxY 0taV2JV1WRyFFn3bMtUzUS7kO3lExIQJm7w= -----END CERTIFICATE-----Generated at Tue Jul 22 19:33:38 2025 by rpki-client