$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7d3c3ba1-1e12-3bd3-82db-a77f8b6114a3.roa File: 7d3c3ba1-1e12-3bd3-82db-a77f8b6114a3.roa (raw, json) Hash identifier: VSzWeocSLKhUBji8DPigF6ylEdY/S84m5IN7z+o/cU8= Subject key identifier: 02:55:89:19:1F:F7:A2:B0:31:DB:4A:64:C7:D6:09:D4:E2:9B:AD:53 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A5FC5F2242FA70D3932003C00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7d3c3ba1-1e12-3bd3-82db-a77f8b6114a3.roa Signing time: Tue 01 Jul 2025 13:01:04 +0000 ROA not before: Tue 01 Jul 2025 13:01:04 +0000 ROA not after: Mon 29 Sep 2025 13:01:04 +0000 asID: 20940 IP address blocks: 2600:140b:c800::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:c5:f2:24:2f:a7:0d:39:32:00:3c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 1 13:01:04 2025 GMT Not After : Sep 29 13:01:04 2025 GMT Subject: CN=5094c4b2-c886-40cf-8145-5451488f477e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:9c:38:08:83:21:70:10:61:22:cf:f3:6c:71: 7b:0a:05:6c:9e:f5:50:89:75:3b:13:53:3b:dc:f0: 6d:e4:13:b0:25:00:8a:37:a6:fd:25:e5:f2:0c:64: ac:74:5a:fc:d3:8f:b5:63:24:e6:10:c9:e2:36:be: 76:6d:77:06:c1:b2:a0:e7:72:9c:0b:c6:81:88:af: 38:4c:0a:14:a5:61:7a:da:18:9c:6b:a7:28:f5:d4: 9f:a7:1e:f8:61:c0:9c:7e:84:42:04:d1:b2:a4:13: e5:0e:c0:f7:46:7a:a1:e7:ed:dc:7b:fc:78:c1:83: 98:e1:68:64:09:ff:0b:bd:52:da:e1:1a:3a:16:2a: a1:46:1c:ef:20:1f:16:e6:78:5c:8a:00:16:e7:8c: 0d:21:b8:d4:a1:33:73:2e:ab:ee:ae:e7:fc:fc:b3: 0f:89:85:55:c1:c5:af:5d:ba:d2:50:13:3b:bc:4e: f6:28:c5:1c:50:62:e4:e1:d8:7b:16:e6:c5:df:5d: 34:01:20:2b:2d:e0:b5:97:40:f3:12:81:9d:a3:60: 58:4d:a5:bf:40:2c:61:f9:32:4d:37:75:11:f8:8a: 3c:7b:d3:c4:4c:29:80:e8:7f:37:6c:c2:45:cf:2c: b6:39:28:e6:20:89:05:b1:91:89:ff:a3:99:9b:50: a7:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:55:89:19:1F:F7:A2:B0:31:DB:4A:64:C7:D6:09:D4:E2:9B:AD:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7d3c3ba1-1e12-3bd3-82db-a77f8b6114a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:140b:c800::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:49:3f:84:6f:4c:85:f5:65:a8:1f:41:79:34:4e:d1:2d:87: c7:da:8a:ea:97:00:a1:55:a8:48:b9:c3:f1:43:ef:68:20:4a: ea:34:ca:02:02:74:71:7a:9d:76:de:43:b5:bf:d4:02:00:b0: 62:1a:83:23:54:d2:b3:64:fa:95:91:c4:8b:f9:8b:7e:0d:b4: 10:c3:f4:e5:e2:2d:f4:6c:38:66:87:d9:0d:35:d5:ef:cf:b8: c1:49:e5:5c:ac:a2:6a:f8:09:87:7d:cc:ed:9b:8e:07:4e:eb: 81:78:8c:10:3f:c0:2d:65:80:81:7b:dc:b8:ec:a1:d6:d3:fb: 56:bf:db:7d:40:89:76:e2:80:da:20:7f:24:a2:a1:8a:21:28: f9:9b:2a:31:19:4a:bc:3c:32:b7:4d:69:7c:3e:1a:73:a0:b6: a2:ed:a5:96:db:93:8b:06:54:b9:64:2a:7f:4b:e7:94:a9:a1: 58:08:cc:c3:ee:f0:9e:f6:88:95:fb:a8:81:b1:9f:e4:e7:30: 9f:7d:a3:e5:a6:5a:d9:59:3f:02:25:62:75:49:0f:d4:cd:77: 2a:35:a6:0e:0b:0a:a9:25:42:55:44:cd:64:04:a8:7b:3b:ec: 32:ee:12:56:74:48:d7:3f:72:3a:c9:c8:9a:1e:d1:4d:bb:ed: 9a:4f:20:8f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpfxfIkL6cNOTIAPAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcwMTEzMDEwNFoXDTI1MDkyOTEzMDEwNFowLzEtMCsGA1UEAxMk NTA5NGM0YjItYzg4Ni00MGNmLTgxNDUtNTQ1MTQ4OGY0NzdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopw4CIMhcBBhIs/zbHF7CgVsnvVQiXU7E1M7 3PBt5BOwJQCKN6b9JeXyDGSsdFr804+1YyTmEMniNr52bXcGwbKg53KcC8aBiK84 TAoUpWF62hica6co9dSfpx74YcCcfoRCBNGypBPlDsD3Rnqh5+3ce/x4wYOY4Whk Cf8LvVLa4Ro6FiqhRhzvIB8W5nhcigAW54wNIbjUoTNzLqvuruf8/LMPiYVVwcWv XbrSUBM7vE72KMUcUGLk4dh7FubF3100ASArLeC1l0DzEoGdo2BYTaW/QCxh+TJN N3UR+Io8e9PETCmA6H83bMJFzyy2OSjmIIkFsZGJ/6OZm1CnZQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAJViRkf96KwMdtKZMfWCdTim61TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvN2QzYzNiYTEtMWUxMi0z YmQzLTgyZGItYTc3ZjhiNjExNGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUC8gA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHhJP4RvTIX1ZagfQXk0TtEth8faiuqXAKFVqEi5w/FD72ggSuo0 ygICdHF6nXbeQ7W/1AIAsGIagyNU0rNk+pWRxIv5i34NtBDD9OXiLfRsOGaH2Q01 1e/PuMFJ5Vysomr4CYd9zO2bjgdO64F4jBA/wC1lgIF73LjsodbT+1a/231AiXbi gNogfySioYohKPmbKjEZSrw8MrdNaXw+GnOgtqLtpZbbk4sGVLlkKn9L55SpoVgI zMPu8J72iJX7qIGxn+TnMJ99o+WmWtlZPwIlYnVJD9TNdyo1pg4LCqklQlVEzWQE qHs77DLuElZ0SNc/cjrJyJoe0U277ZpPII8= -----END CERTIFICATE-----Generated at Tue Jul 22 19:31:10 2025 by rpki-client