$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/894c2056-e2e2-3940-b1f8-91e29f89c34c.roa File: 894c2056-e2e2-3940-b1f8-91e29f89c34c.roa (raw, json) Hash identifier: M214ou73QkffiTVlYFG2lG8uYs6XIXkreYIomA5P5l4= Subject key identifier: 41:E1:9E:3E:65:02:7A:E5:3F:DF:9C:05:8D:31:A5:16:7F:07:D0:49 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A68263E5B9B242B285268C450 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/894c2056-e2e2-3940-b1f8-91e29f89c34c.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 20940 IP address blocks: 2600:1488:a003::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:26:3e:5b:9b:24:2b:28:52:68:c4:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=de76ce43-71e3-4db3-b3ca-a7c07a5f6de4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:b2:91:78:4c:65:85:b8:ad:3c:d1:46:5e:72: 1a:5c:07:e8:27:1d:ab:98:df:de:5e:78:02:02:fb: e7:fc:ea:02:cf:6e:ee:de:c4:fe:a7:5f:7e:67:30: a0:6d:aa:0c:c3:dc:87:b7:4d:cc:da:80:5e:ca:9a: ed:1f:69:e2:2b:aa:3a:d5:48:f9:75:b3:2b:6b:98: 69:01:5c:ed:c4:02:6e:49:96:ac:03:61:37:41:58: 3b:12:e5:b4:33:11:67:fd:c7:f7:17:6d:e6:1f:70: b5:c4:6a:e3:f9:c8:b8:d0:85:44:9a:9a:6f:7d:ab: cf:da:44:ff:26:38:6b:d9:50:73:da:22:9c:8f:59: af:bb:90:1e:0b:17:1c:d3:96:c2:94:2b:4e:39:f3: c2:83:e5:f2:af:46:c0:34:c7:11:ee:7a:f4:f9:a3: 9d:05:af:88:4f:52:3e:de:22:88:35:c3:9a:8e:64: a5:52:ae:a2:61:15:c8:e7:e0:8f:1d:36:30:50:73: 31:9a:e7:6d:eb:ed:24:3c:3f:db:f1:81:9f:9d:9d: 43:0d:3c:62:41:1b:33:77:73:8b:87:f7:2d:5e:6d: fd:d6:bb:c4:58:ea:a9:ff:6e:c1:b0:88:1c:b6:73: 0a:35:62:1f:81:35:ee:65:a6:fd:9f:90:65:7e:41: c6:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:E1:9E:3E:65:02:7A:E5:3F:DF:9C:05:8D:31:A5:16:7F:07:D0:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/894c2056-e2e2-3940-b1f8-91e29f89c34c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1488:a003::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:ec:1c:09:e1:e6:a1:cb:56:30:27:4b:99:95:be:3d:d1:34: 81:f0:35:ea:69:1f:c5:c2:7a:ea:6a:ee:80:39:63:7c:98:fa: 01:4c:4c:db:13:91:56:21:9e:1c:5c:52:4f:d0:e8:62:0c:5c: a0:db:de:9b:c5:ad:30:c4:1d:95:6d:63:f0:bc:32:7d:55:0e: e8:82:58:74:17:6d:3a:70:f8:7e:6e:d8:63:96:3f:92:74:25: ed:0c:68:8a:9e:79:37:9c:bf:d3:92:90:56:8b:75:db:ba:fc: 4b:e0:ef:17:b5:34:29:a5:d6:a0:91:b8:de:ce:bf:80:0c:71: fb:a2:5c:c1:f5:c9:fe:24:8b:b9:7a:c0:40:a6:19:ed:f6:c4: d2:18:a0:48:29:79:1e:2c:8d:13:48:0f:ef:a7:c0:45:55:bb: 3d:f6:3a:56:ab:2a:94:d5:dc:38:d1:9b:aa:cd:dc:cf:dc:01: 12:f6:2b:72:5d:4b:71:4e:4f:42:44:73:88:b1:4e:42:ef:49: 32:05:15:75:c9:99:12:8d:96:67:52:bb:c4:ad:bd:22:45:f9: dd:b3:6b:30:50:ea:36:81:49:54:fa:9f:09:ce:f8:8c:d1:cc: 17:78:a9:0d:24:ac:65:76:ab:ff:1c:73:6c:37:91:c5:0f:8f: ab:06:dc:20 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpoJj5bmyQrKFJoxFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk ZGU3NmNlNDMtNzFlMy00ZGIzLWIzY2EtYTdjMDdhNWY2ZGU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLKReExlhbitPNFGXnIaXAfoJx2rmN/eXngC Avvn/OoCz27u3sT+p19+ZzCgbaoMw9yHt03M2oBeyprtH2niK6o61Uj5dbMra5hp AVztxAJuSZasA2E3QVg7EuW0MxFn/cf3F23mH3C1xGrj+ci40IVEmppvfavP2kT/ Jjhr2VBz2iKcj1mvu5AeCxcc05bClCtOOfPCg+Xyr0bANMcR7nr0+aOdBa+IT1I+ 3iKINcOajmSlUq6iYRXI5+CPHTYwUHMxmudt6+0kPD/b8YGfnZ1DDTxiQRszd3OL h/ctXm391rvEWOqp/27BsIgctnMKNWIfgTXuZab9n5BlfkHGuQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEHhnj5lAnrlP9+cBY0xpRZ/B9BJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODk0YzIwNTYtZTJlMi0z OTQwLWIxZjgtOTFlMjlmODljMzRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUiKAD MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAjsHAnh5qHLVjAnS5mVvj3RNIHwNeppH8XCeupq7oA5Y3yY+gFM TNsTkVYhnhxcUk/Q6GIMXKDb3pvFrTDEHZVtY/C8Mn1VDuiCWHQXbTpw+H5u2GOW P5J0Je0MaIqeeTecv9OSkFaLddu6/Evg7xe1NCml1qCRuN7Ov4AMcfuiXMH1yf4k i7l6wECmGe32xNIYoEgpeR4sjRNID++nwEVVuz32OlarKpTV3DjRm6rN3M/cARL2 K3JdS3FOT0JEc4ixTkLvSTIFFXXJmRKNlmdSu8StvSJF+d2zazBQ6jaBSVT6nwnO +IzRzBd4qQ0krGV2q/8cc2w3kcUPj6sG3CA= -----END CERTIFICATE-----Generated at Tue Jul 22 19:34:24 2025 by rpki-client