$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/922b79fd-0832-33c7-8f30-dbfc3cf5576c.roa File: 922b79fd-0832-33c7-8f30-dbfc3cf5576c.roa (raw, json) Hash identifier: opLijqxQtJRgKppyWx9ixDZ1dM7z7ahgsfM5ofK20p8= Subject key identifier: 04:F6:9F:F4:15:30:17:50:F9:90:56:D4:D0:9D:70:07:C6:DE:E3:51 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A5FC5F244B4D3866F0677E700 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/922b79fd-0832-33c7-8f30-dbfc3cf5576c.roa Signing time: Tue 01 Jul 2025 13:01:04 +0000 ROA not before: Tue 01 Jul 2025 13:01:04 +0000 ROA not after: Mon 29 Sep 2025 13:01:04 +0000 asID: 20940 IP address blocks: 2600:140b:f000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:c5:f2:44:b4:d3:86:6f:06:77:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 1 13:01:04 2025 GMT Not After : Sep 29 13:01:04 2025 GMT Subject: CN=0c90dbb5-f22d-49c9-bf9b-1f77756d8dd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:0d:55:5c:99:e3:62:26:12:cf:d9:e3:85:c6: db:a5:9f:50:f0:1d:42:8f:50:54:0f:11:6d:7c:b9: f9:87:a0:d5:27:93:48:fa:1e:49:be:27:ea:2f:3e: 33:e0:f8:2c:b9:6c:76:50:0a:2b:d0:bf:16:35:3d: 67:86:02:0a:41:3b:cd:a4:69:8f:ff:57:98:eb:7b: 3e:aa:76:27:8e:eb:b0:a7:e3:67:7d:cf:51:97:cc: bd:df:87:49:d5:29:99:ec:52:5b:98:f4:c4:1d:fb: d6:1a:45:10:b6:32:65:25:99:b5:90:9e:bf:bf:76: 8e:66:95:04:26:73:05:b9:53:5e:08:ed:c1:cd:09: 31:08:e0:72:e4:c2:ae:be:93:92:a9:cc:30:ea:39: cb:29:a7:65:73:d6:7c:01:8e:e7:a6:1c:44:cd:73: 23:ac:c8:c3:8c:f1:29:0c:dc:6c:86:d1:29:f8:ff: c1:28:e5:4a:ae:cc:ec:3a:2f:80:c5:ce:2b:73:a0: 00:0b:cd:5b:86:47:1e:e6:c0:b4:5f:7a:76:07:5d: 75:30:81:4b:10:ae:0d:58:b8:21:af:da:f0:1a:8f: 13:42:2e:52:5c:ff:b0:ce:b8:f1:67:77:43:f9:3f: 78:dd:a9:de:b0:73:3f:3f:ed:a2:39:e2:a4:f8:c7: 22:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:F6:9F:F4:15:30:17:50:F9:90:56:D4:D0:9D:70:07:C6:DE:E3:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/922b79fd-0832-33c7-8f30-dbfc3cf5576c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:140b:f000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:d3:ae:0c:1b:79:c5:4a:a2:48:f0:1f:b4:86:10:1f:69:6a: fb:0b:9b:fc:f6:c6:d0:ff:5e:6e:6a:8d:19:09:45:47:b2:b1: b5:27:56:5e:42:4e:1b:61:f3:ef:5f:59:0c:81:6a:3c:3e:b3: e4:70:55:74:3e:df:9a:b2:45:1d:cd:3c:1c:de:51:0f:ee:c9: 33:de:0c:07:13:e5:42:f2:52:df:ee:1b:0f:a2:3b:1f:91:ed: dc:c3:00:12:42:e3:c0:92:d8:22:f5:de:96:26:32:10:df:56: 80:8f:d6:b1:a8:8a:8f:6e:c5:f4:21:0b:99:89:47:00:1f:b3: 8d:1b:35:5b:ea:c6:57:b8:16:d4:2f:5d:df:ac:33:5e:06:b0: 9e:43:84:0f:95:5e:81:ea:7c:42:c6:dd:d8:f6:e6:e7:18:9b: 9b:2c:7a:c0:2d:80:8a:f6:42:f5:69:d6:e5:39:9c:3f:5b:34: 0e:29:2b:a6:8d:9c:ed:39:be:fe:b8:8c:e6:e4:13:4d:67:98: b9:81:c6:6d:fc:8b:1c:ed:77:08:04:1d:59:27:6f:79:1f:7f: 2e:93:3f:a1:72:c7:9e:a0:59:09:ab:b2:45:d7:c6:8e:02:05: 77:9a:b0:be:22:a2:3e:e6:85:12:23:74:60:1a:b3:4b:e7:1b: 37:82:7e:92 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpfxfJEtNOGbwZ35wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcwMTEzMDEwNFoXDTI1MDkyOTEzMDEwNFowLzEtMCsGA1UEAxMk MGM5MGRiYjUtZjIyZC00OWM5LWJmOWItMWY3Nzc1NmQ4ZGQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiw1VXJnjYiYSz9njhcbbpZ9Q8B1Cj1BUDxFt fLn5h6DVJ5NI+h5JvifqLz4z4PgsuWx2UAor0L8WNT1nhgIKQTvNpGmP/1eY63s+ qnYnjuuwp+Nnfc9Rl8y934dJ1SmZ7FJbmPTEHfvWGkUQtjJlJZm1kJ6/v3aOZpUE JnMFuVNeCO3BzQkxCOBy5MKuvpOSqcww6jnLKadlc9Z8AY7nphxEzXMjrMjDjPEp DNxshtEp+P/BKOVKrszsOi+Axc4rc6AAC81bhkce5sC0X3p2B111MIFLEK4NWLgh r9rwGo8TQi5SXP+wzrjxZ3dD+T943anesHM/P+2iOeKk+Mci6wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAT2n/QVMBdQ+ZBW1NCdcAfG3uNRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTIyYjc5ZmQtMDgzMi0z M2M3LThmMzAtZGJmYzNjZjU1NzZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUC/AA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF/TrgwbecVKokjwH7SGEB9pavsLm/z2xtD/Xm5qjRkJRUeysbUn Vl5CThth8+9fWQyBajw+s+RwVXQ+35qyRR3NPBzeUQ/uyTPeDAcT5ULyUt/uGw+i Ox+R7dzDABJC48CS2CL13pYmMhDfVoCP1rGoio9uxfQhC5mJRwAfs40bNVvqxle4 FtQvXd+sM14GsJ5DhA+VXoHqfELG3dj25ucYm5ssesAtgIr2QvVp1uU5nD9bNA4p K6aNnO05vv64jObkE01nmLmBxm38ixztdwgEHVknb3kffy6TP6Fyx56gWQmrskXX xo4CBXeasL4ioj7mhRIjdGAas0vnGzeCfpI= -----END CERTIFICATE-----Generated at Tue Jul 22 19:30:33 2025 by rpki-client