$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8acac806-197b-3062-bf6f-1a5445ed13a7.roa File: 8acac806-197b-3062-bf6f-1a5445ed13a7.roa (raw, json) Hash identifier: HEecAVOGCAfYrBQzXN7G6b7FE2Af1ET7HrMgm7YJqNs= Subject key identifier: 31:C9:4E:F6:42:7F:39:01:F0:DD:D9:BF:F7:E3:A3:6B:11:CA:64:03 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A5FC5FE5594F8E624B82A0720 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8acac806-197b-3062-bf6f-1a5445ed13a7.roa Signing time: Tue 01 Jul 2025 13:01:04 +0000 ROA not before: Tue 01 Jul 2025 13:01:04 +0000 ROA not after: Mon 29 Sep 2025 13:01:04 +0000 asID: 20940 IP address blocks: 2600:1419:f400::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:c5:fe:55:94:f8:e6:24:b8:2a:07:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 1 13:01:04 2025 GMT Not After : Sep 29 13:01:04 2025 GMT Subject: CN=f76f4fc1-740b-49f3-a203-2931d9bac006 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:ca:b3:54:8b:af:6d:df:44:74:23:41:f3:9f: f5:33:a2:7c:ed:2d:f2:1b:37:bb:d1:2c:d9:74:1b: cb:3f:f7:e1:8e:88:ff:70:ab:d1:67:5e:3b:6a:58: be:ae:52:ab:e2:fb:2a:39:03:75:6d:80:c4:6c:da: 63:48:36:4c:52:bc:6e:b8:16:36:b5:9d:88:ff:c4: d1:1b:75:ce:ee:8e:af:7b:8a:99:a4:c3:50:5e:fe: 47:d1:ce:a6:75:2d:48:0b:25:6e:9a:ec:19:66:65: 48:3e:10:3f:ce:b5:67:3b:fd:3c:ba:38:af:0e:c4: c9:ef:0f:f8:39:c0:f6:16:ef:f1:19:d5:37:e7:6a: 15:7d:16:1d:63:f6:3a:1e:91:f3:f2:3d:33:67:e5: 88:69:fb:6d:92:d4:63:93:79:59:98:0e:b1:21:8e: 28:a5:72:c8:d1:6f:d7:38:e5:95:a9:58:5e:e4:dd: f6:ab:55:c8:bc:cf:c4:8f:47:29:b8:3f:86:39:53: ab:59:a9:49:7a:9f:48:3c:f5:f1:b8:2b:f1:14:a1: 70:7b:d2:94:16:4c:75:da:1a:1d:d1:7e:2c:1c:37: 51:2a:29:bc:60:de:0a:f3:6c:8c:6a:23:e2:de:ea: 60:70:12:67:c5:d3:86:c5:a7:89:61:0d:5b:28:e0: d0:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:C9:4E:F6:42:7F:39:01:F0:DD:D9:BF:F7:E3:A3:6B:11:CA:64:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8acac806-197b-3062-bf6f-1a5445ed13a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1419:f400::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:25:23:53:96:73:86:44:41:a8:c5:bd:e2:23:17:08:ea:65: 56:45:64:e1:ce:8b:0d:8c:71:f8:18:bf:34:e4:4a:68:ae:04: 9d:42:45:20:3b:e6:79:1a:f9:70:7e:da:e2:e3:cc:23:e9:43: 9f:c9:a1:76:dd:82:11:36:cc:ee:79:86:1d:dc:e6:f2:e3:e1: dd:56:07:aa:f3:66:4e:f0:cd:4d:20:2c:04:4b:fa:43:1e:8e: 05:ec:cf:cf:e4:01:08:76:40:e5:a3:df:52:ff:1c:b3:eb:8f: 8d:65:3d:7d:fa:70:3d:81:86:40:43:19:1e:a0:32:0c:5b:ea: 13:a7:c3:3e:24:2c:43:07:95:90:7e:6b:39:3f:0e:fa:a6:88: 4a:ee:99:9d:33:65:cb:99:2d:ab:59:61:ed:7f:61:04:02:cf: 11:57:09:40:eb:e5:9e:f8:75:36:cc:10:a6:cd:ed:06:21:2f: 2d:9a:0e:b0:82:bf:98:8d:4f:25:6b:44:9d:3d:0b:3e:50:e5: 47:27:9c:0f:2b:cf:d0:d6:03:8b:ce:4d:15:6d:7b:d8:3f:6d: f8:fe:1b:65:c2:10:24:b1:64:d9:fb:91:b7:3a:2f:de:5f:d0: 34:02:99:ac:c8:6e:91:35:5a:fe:12:31:68:b9:da:09:90:fe: da:99:e6:46 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpfxf5VlPjmJLgqByAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcwMTEzMDEwNFoXDTI1MDkyOTEzMDEwNFowLzEtMCsGA1UEAxMk Zjc2ZjRmYzEtNzQwYi00OWYzLWEyMDMtMjkzMWQ5YmFjMDA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMqzVIuvbd9EdCNB85/1M6J87S3yGze70SzZ dBvLP/fhjoj/cKvRZ147ali+rlKr4vsqOQN1bYDEbNpjSDZMUrxuuBY2tZ2I/8TR G3XO7o6ve4qZpMNQXv5H0c6mdS1ICyVumuwZZmVIPhA/zrVnO/08ujivDsTJ7w/4 OcD2Fu/xGdU352oVfRYdY/Y6HpHz8j0zZ+WIafttktRjk3lZmA6xIY4opXLI0W/X OOWVqVhe5N32q1XIvM/Ej0cpuD+GOVOrWalJep9IPPXxuCvxFKFwe9KUFkx12hod 0X4sHDdRKim8YN4K82yMaiPi3upgcBJnxdOGxaeJYQ1bKODQSQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDHJTvZCfzkB8N3Zv/fjo2sRymQDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGFjYWM4MDYtMTk3Yi0z MDYyLWJmNmYtMWE1NDQ1ZWQxM2E3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUGfQA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACUlI1OWc4ZEQajFveIjFwjqZVZFZOHOiw2McfgYvzTkSmiuBJ1C RSA75nka+XB+2uLjzCPpQ5/JoXbdghE2zO55hh3c5vLj4d1WB6rzZk7wzU0gLARL +kMejgXsz8/kAQh2QOWj31L/HLPrj41lPX36cD2BhkBDGR6gMgxb6hOnwz4kLEMH lZB+azk/DvqmiErumZ0zZcuZLatZYe1/YQQCzxFXCUDr5Z74dTbMEKbN7QYhLy2a DrCCv5iNTyVrRJ09Cz5Q5UcnnA8rz9DWA4vOTRVte9g/bfj+G2XCECSxZNn7kbc6 L95f0DQCmazIbpE1Wv4SMWi52gmQ/tqZ5kY= -----END CERTIFICATE-----Generated at Tue Jul 22 19:42:22 2025 by rpki-client