$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ac0f2d7f-abed-38c1-8ad6-864e51d811a7.roa File: ac0f2d7f-abed-38c1-8ad6-864e51d811a7.roa (raw, json) Hash identifier: j2sjfB6isAnUpARWB7Snhvn5cSPRImEiTY/aIq4Rdqg= Subject key identifier: B8:CE:27:EB:46:4E:B1:AA:41:AC:98:B0:B8:D9:76:63:72:F8:2D:82 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A5FC5FB7FB6268D75B4F70D40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ac0f2d7f-abed-38c1-8ad6-864e51d811a7.roa Signing time: Tue 01 Jul 2025 13:01:04 +0000 ROA not before: Tue 01 Jul 2025 13:01:04 +0000 ROA not after: Mon 29 Sep 2025 13:01:04 +0000 asID: 20940 IP address blocks: 2600:1409:3000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:c5:fb:7f:b6:26:8d:75:b4:f7:0d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 1 13:01:04 2025 GMT Not After : Sep 29 13:01:04 2025 GMT Subject: CN=29c161f5-c2da-4bfc-825a-d1fdf6fa7330 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:55:a0:07:86:c2:99:b8:5c:49:38:60:03:4e: f6:30:86:00:c6:9b:14:5c:f6:bb:60:51:93:a5:00: 3e:f9:f1:d9:88:c7:7a:a6:9a:9b:f4:c6:8b:40:a2: 71:8f:c8:27:1c:54:46:74:fa:85:fb:83:82:2f:7f: c8:52:80:89:65:35:fb:5d:91:da:de:88:5c:65:ae: 03:79:3f:0c:c0:80:42:c9:c6:32:0f:16:64:d5:07: 07:a7:cf:13:75:b5:57:a3:8f:2e:13:ff:a9:20:ba: 72:a2:ba:b6:30:55:89:73:fd:11:35:e5:3b:41:85: c0:44:6d:0c:ff:e3:45:e2:bf:21:48:a5:9a:5b:b6: e9:bd:62:19:19:f6:8e:a9:02:fa:96:9d:35:86:f3: 11:a2:b7:c6:36:f5:20:9a:4a:47:ba:0e:38:c2:96: 83:c7:af:3e:57:94:a3:69:1e:6b:f2:f9:b3:bb:2e: c3:f3:63:ff:e5:82:a4:cf:59:11:34:c6:81:2b:22: fe:2f:0b:e4:a4:73:3c:f4:fd:16:d7:9b:5d:90:6c: 92:9f:77:27:49:0c:3d:3d:5e:03:60:86:31:1b:45: dc:8b:d8:c7:86:cb:37:13:43:cc:19:0c:78:8f:e8: 66:53:3e:17:bb:a0:2e:7c:d8:0b:86:33:89:6c:64: 75:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:CE:27:EB:46:4E:B1:AA:41:AC:98:B0:B8:D9:76:63:72:F8:2D:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ac0f2d7f-abed-38c1-8ad6-864e51d811a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1409:3000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:57:b9:40:a3:bc:0a:53:c3:98:74:02:0c:ed:0d:da:6e:0a: 3e:04:31:64:32:90:db:13:78:a4:59:6a:e3:80:90:a9:19:79: 5f:23:6a:91:2e:1f:d9:7c:42:c4:ab:27:56:84:87:80:b7:64: 17:13:d0:c7:e4:42:7e:cc:16:c1:b3:17:d4:c6:4a:4c:38:8f: 3f:0b:35:aa:4c:12:4d:72:79:ce:19:ff:07:9f:89:22:2e:c8: b2:9f:fd:fb:ce:1a:88:1e:a4:cb:f5:7e:d2:3d:1e:64:c0:a1: 1a:41:ce:de:c8:c6:df:4c:63:f9:7f:36:43:89:7a:31:ed:b2: 99:59:7c:59:a9:1e:2e:46:6f:a2:5a:05:e8:69:c8:28:c4:ee: e0:4b:37:07:7e:ca:28:5a:1e:fa:be:26:14:2b:6b:10:32:39: b1:50:a5:d0:c6:f2:53:4c:e1:84:b6:bd:d1:78:04:0e:1a:34: 78:48:98:ce:ad:16:4d:27:48:96:40:53:d2:21:46:45:5f:b1: 3f:a3:ad:c9:5c:b9:99:fc:fc:50:8c:15:eb:dd:76:d1:15:0a: d2:d9:cc:98:da:e6:de:12:88:be:49:7b:61:0c:91:8c:13:fe: b2:20:79:69:29:79:13:d6:cb:64:36:15:5b:c4:fe:af:92:be: 08:be:31:a7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpfxft/tiaNdbT3DUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcwMTEzMDEwNFoXDTI1MDkyOTEzMDEwNFowLzEtMCsGA1UEAxMk MjljMTYxZjUtYzJkYS00YmZjLTgyNWEtZDFmZGY2ZmE3MzMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVWgB4bCmbhcSThgA072MIYAxpsUXPa7YFGT pQA++fHZiMd6ppqb9MaLQKJxj8gnHFRGdPqF+4OCL3/IUoCJZTX7XZHa3ohcZa4D eT8MwIBCycYyDxZk1QcHp88TdbVXo48uE/+pILpyorq2MFWJc/0RNeU7QYXARG0M /+NF4r8hSKWaW7bpvWIZGfaOqQL6lp01hvMRorfGNvUgmkpHug44wpaDx68+V5Sj aR5r8vmzuy7D82P/5YKkz1kRNMaBKyL+LwvkpHM89P0W15tdkGySn3cnSQw9PV4D YIYxG0Xci9jHhss3E0PMGQx4j+hmUz4Xu6AufNgLhjOJbGR1WwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLjOJ+tGTrGqQayYsLjZdmNy+C2CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWMwZjJkN2YtYWJlZC0z OGMxLThhZDYtODY0ZTUxZDgxMWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUCTAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJdXuUCjvApTw5h0AgztDdpuCj4EMWQykNsTeKRZauOAkKkZeV8j apEuH9l8QsSrJ1aEh4C3ZBcT0MfkQn7MFsGzF9TGSkw4jz8LNapMEk1yec4Z/wef iSIuyLKf/fvOGogepMv1ftI9HmTAoRpBzt7Ixt9MY/l/NkOJejHtsplZfFmpHi5G b6JaBehpyCjE7uBLNwd+yihaHvq+JhQraxAyObFQpdDG8lNM4YS2vdF4BA4aNHhI mM6tFk0nSJZAU9IhRkVfsT+jrclcuZn8/FCMFevddtEVCtLZzJja5t4SiL5Je2EM kYwT/rIgeWkpeRPWy2Q2FVvE/q+Svgi+Mac= -----END CERTIFICATE-----Generated at Wed Jul 23 01:31:04 2025 by rpki-client