$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6ce688ed-acfb-3be4-8774-90e56b9a3cea.roa File: 6ce688ed-acfb-3be4-8774-90e56b9a3cea.roa (raw, json) Hash identifier: lE+7B3f3R1v734Sd9KkRu4GYAatRTS3W+D73wb78tB0= Subject key identifier: D7:F4:35:99:74:B9:25:C7:AE:7F:16:09:07:A8:BD:1E:BA:21:52:7E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A5FC5F81F1664F48BE991FD00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6ce688ed-acfb-3be4-8774-90e56b9a3cea.roa Signing time: Tue 01 Jul 2025 13:01:04 +0000 ROA not before: Tue 01 Jul 2025 13:01:04 +0000 ROA not after: Mon 29 Sep 2025 13:01:04 +0000 asID: 20940 IP address blocks: 2600:1419:6a00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:c5:f8:1f:16:64:f4:8b:e9:91:fd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 1 13:01:04 2025 GMT Not After : Sep 29 13:01:04 2025 GMT Subject: CN=9ffe2421-d074-4788-b4c0-1c20fcd3b4e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:0f:10:9f:34:24:a7:ad:2f:69:dc:3c:e7:b5: 72:e2:b2:9b:45:4a:f3:82:4f:b5:50:22:e8:58:38: 6d:a1:d2:9d:a7:2a:73:ea:ab:eb:f9:60:d3:2d:e5: 20:2e:20:b7:6f:39:9d:e9:a1:03:0e:d6:6c:f6:b1: b1:91:16:27:3b:14:7f:22:98:57:c3:82:5e:77:41: bb:87:61:b6:75:2c:de:92:e4:18:ca:4d:09:5c:42: 24:e8:41:91:ac:bd:3d:c6:c2:74:c3:64:2d:0c:e4: d0:38:a7:86:2b:cd:65:fd:ca:15:c3:07:23:b2:ff: cb:c8:d0:5b:00:15:a1:77:2c:c2:3d:e5:2e:fd:c1: d5:09:7a:5d:ad:90:fe:37:5e:5d:bd:76:da:fb:1d: e7:f5:cf:86:97:0c:36:c6:b5:3b:ec:d9:4f:e5:d8: 80:b5:1c:d5:14:26:62:19:6d:82:83:96:a0:4d:ed: c2:28:1a:d8:cf:8f:07:f8:69:4d:e0:81:37:77:aa: cd:33:35:e2:12:f6:53:5a:af:43:8d:0f:c5:98:3a: 22:a3:1c:e1:9e:c0:e7:46:7e:d9:1e:0f:63:b2:87: a2:2c:cb:1d:74:cd:88:46:a0:d8:8c:a1:35:fd:e4: 81:a2:7b:ab:ea:94:37:e8:94:27:61:e4:18:86:32: f2:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:F4:35:99:74:B9:25:C7:AE:7F:16:09:07:A8:BD:1E:BA:21:52:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6ce688ed-acfb-3be4-8774-90e56b9a3cea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1419:6a00::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:e4:6a:f6:62:0f:9e:b0:63:58:7c:6c:76:1d:1d:92:f3:25: 78:db:8e:e4:10:3b:fd:df:3e:03:7c:16:24:49:3a:a2:56:5a: 98:d2:ad:7d:5b:29:46:34:01:04:d8:ec:34:a4:30:a1:70:b6: 41:7f:25:4e:d8:4e:de:38:b3:b1:55:c6:49:24:1c:88:25:43: 50:ec:89:6d:ce:4b:0d:85:4c:fa:4e:0e:ac:97:8a:07:94:7f: b1:a3:69:5d:e4:4f:e6:ef:1e:9b:5c:a6:a8:d8:31:fa:af:bb: fb:89:4b:66:e6:6a:5e:5d:dd:75:fb:2e:10:da:21:90:8a:30: 5e:bc:18:ab:4d:90:62:f3:84:cb:d5:6a:52:64:0a:1a:b7:80: 21:a2:6d:1b:ec:8b:50:1a:f1:1d:eb:7f:b9:6d:b4:31:00:1b: b2:94:30:70:5e:6b:d9:2c:03:48:8d:2e:97:de:c9:75:61:4b: ec:29:f8:59:27:f1:a2:e0:57:4f:53:7a:28:f2:e9:3a:c2:70: 9d:fb:99:cc:d1:53:81:5f:f7:74:7a:2b:b8:1b:a4:ee:ed:bd: 6f:f8:51:b1:59:ae:14:31:f4:e0:81:e0:8a:f8:b1:73:43:fd: 32:25:0d:f6:a3:25:0f:d1:31:8a:ac:25:7f:64:d1:a1:e4:79: a4:00:de:e0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpfxfgfFmT0i+mR/QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcwMTEzMDEwNFoXDTI1MDkyOTEzMDEwNFowLzEtMCsGA1UEAxMk OWZmZTI0MjEtZDA3NC00Nzg4LWI0YzAtMWMyMGZjZDNiNGU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiw8QnzQkp60vadw857Vy4rKbRUrzgk+1UCLo WDhtodKdpypz6qvr+WDTLeUgLiC3bzmd6aEDDtZs9rGxkRYnOxR/IphXw4Jed0G7 h2G2dSzekuQYyk0JXEIk6EGRrL09xsJ0w2QtDOTQOKeGK81l/coVwwcjsv/LyNBb ABWhdyzCPeUu/cHVCXpdrZD+N15dvXba+x3n9c+Glww2xrU77NlP5diAtRzVFCZi GW2Cg5agTe3CKBrYz48H+GlN4IE3d6rNMzXiEvZTWq9DjQ/FmDoioxzhnsDnRn7Z Hg9jsoeiLMsddM2IRqDYjKE1/eSBonur6pQ36JQnYeQYhjLygwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNf0NZl0uSXHrn8WCQeovR66IVJ+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNmNlNjg4ZWQtYWNmYi0z YmU0LTg3NzQtOTBlNTZiOWEzY2VhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUGWoA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFfkavZiD56wY1h8bHYdHZLzJXjbjuQQO/3fPgN8FiRJOqJWWpjS rX1bKUY0AQTY7DSkMKFwtkF/JU7YTt44s7FVxkkkHIglQ1DsiW3OSw2FTPpODqyX igeUf7GjaV3kT+bvHptcpqjYMfqvu/uJS2bmal5d3XX7LhDaIZCKMF68GKtNkGLz hMvValJkChq3gCGibRvsi1Aa8R3rf7lttDEAG7KUMHBea9ksA0iNLpfeyXVhS+wp +Fkn8aLgV09Teijy6TrCcJ37mczRU4Ff93R6K7gbpO7tvW/4UbFZrhQx9OCB4Ir4 sXND/TIlDfajJQ/RMYqsJX9k0aHkeaQA3uA= -----END CERTIFICATE-----Generated at Wed Jul 23 01:30:21 2025 by rpki-client