$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b2a8596a-433c-3d6e-a993-8f0c0d369dc9.roa File: b2a8596a-433c-3d6e-a993-8f0c0d369dc9.roa (raw, json) Hash identifier: A5IaLq9QZBfruoKJsk6wxdn2h9YTOPeG60DtEi7ALG4= Subject key identifier: F0:83:E0:22:62:36:32:D8:D0:15:9F:D4:57:B8:7D:9C:C7:59:FD:19 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A68260FBCBCC65B4A30846D80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b2a8596a-433c-3d6e-a993-8f0c0d369dc9.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 35994 IP address blocks: 2600:1402:1a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:26:0f:bc:bc:c6:5b:4a:30:84:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=d74e597c-354a-4323-a5d4-7cfc9424975d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:b7:84:e0:a7:eb:81:95:57:1d:8a:e8:99:7b: 98:1c:d7:30:c2:8b:d3:dd:7e:f8:3e:6b:32:53:fd: 14:de:92:33:f7:9c:0c:12:62:27:b7:b8:3c:52:aa: e3:a2:40:63:10:86:b2:94:4f:6f:c2:11:47:b1:4f: a2:98:d7:e0:f5:8c:91:c1:e9:86:e1:0c:aa:8e:c8: 4b:7f:8d:1f:60:56:ff:66:1a:dd:62:a3:64:e6:d2: a0:ed:fa:37:1b:c4:4d:0b:10:0b:fe:76:59:a8:73: 07:13:3e:7a:1b:f9:2b:01:5a:16:c2:10:31:6b:eb: ca:34:ca:bd:9a:be:21:34:5a:a2:cc:97:d3:5c:6f: e8:82:9d:fd:57:43:1e:03:96:27:30:48:db:12:e9: ab:dd:5e:3d:33:7a:3a:d2:5c:07:f8:1d:df:3b:0d: c6:ae:1d:74:58:0a:7d:66:6d:6d:fe:20:23:6b:46: 6f:d2:aa:f0:33:c8:f5:f4:54:bd:f5:7c:0c:60:e5: 65:97:86:98:26:30:7e:f2:35:c1:95:07:8e:94:76: 03:c5:20:8f:47:7f:c1:7d:dd:6f:32:68:62:a3:35: 88:e7:83:2d:a2:dd:f7:13:6b:05:8e:4a:a5:d8:cf: 85:2b:33:cd:db:06:c2:01:1a:64:c0:c2:93:7b:84: 59:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:83:E0:22:62:36:32:D8:D0:15:9F:D4:57:B8:7D:9C:C7:59:FD:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b2a8596a-433c-3d6e-a993-8f0c0d369dc9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1402:1a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:5b:f6:0b:77:95:f3:69:2f:68:74:2d:6c:13:8c:d7:04:13: 59:bb:30:8c:dd:39:b7:b7:6c:59:fa:77:a1:d0:bb:ee:37:0b: d7:39:b8:b8:f7:cc:4d:71:15:cd:27:aa:f8:85:24:86:70:e4: bf:fc:e8:69:e3:53:3f:cc:34:1f:71:2d:a0:85:e3:20:35:d6: 89:b0:f3:a6:bb:b4:d9:2c:80:e0:2e:c2:f9:84:2f:09:8f:ff: dc:f5:95:d6:be:58:d0:96:f9:82:84:09:20:18:4a:d9:cb:29: fd:c5:f4:ef:c2:37:a8:80:b6:c8:c2:e6:e0:dd:cd:9f:eb:47: 61:18:42:12:7c:7c:6b:19:48:d3:e6:65:af:bd:0f:ed:3e:8f: 97:b2:45:13:cc:28:15:e0:ae:a4:90:f0:9f:0c:ea:d7:2d:f3: 8d:c0:80:03:1e:ae:83:b3:70:de:83:42:d8:95:66:d6:c1:51: 46:5b:d9:76:0e:1f:af:05:5a:89:24:42:97:3f:8c:f6:b0:9c: a5:9e:85:6d:85:1c:13:db:f2:3e:89:47:b2:fd:7b:39:cf:52: 92:7c:84:14:e0:2f:2c:5b:5b:ec:15:81:0c:7b:1f:88:59:ec: a2:8f:65:5f:c6:c1:60:8a:c5:86:bc:d8:3a:9f:82:e2:0e:78: 4c:d2:09:13 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpoJg+8vMZbSjCEbYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk ZDc0ZTU5N2MtMzU0YS00MzIzLWE1ZDQtN2NmYzk0MjQ5NzVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7eE4KfrgZVXHYromXuYHNcwwovT3X74Pmsy U/0U3pIz95wMEmInt7g8UqrjokBjEIaylE9vwhFHsU+imNfg9YyRwemG4QyqjshL f40fYFb/ZhrdYqNk5tKg7fo3G8RNCxAL/nZZqHMHEz56G/krAVoWwhAxa+vKNMq9 mr4hNFqizJfTXG/ogp39V0MeA5YnMEjbEumr3V49M3o60lwH+B3fOw3Grh10WAp9 Zm1t/iAja0Zv0qrwM8j19FS99XwMYOVll4aYJjB+8jXBlQeOlHYDxSCPR3/Bfd1v MmhiozWI54Mtot33E2sFjkql2M+FKzPN2wbCARpkwMKTe4RZgwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPCD4CJiNjLY0BWf1Fe4fZzHWf0ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjJhODU5NmEtNDMzYy0z ZDZlLWE5OTMtOGYwYzBkMzY5ZGM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUAgAa MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEdb9gt3lfNpL2h0LWwTjNcEE1m7MIzdObe3bFn6d6HQu+43C9c5 uLj3zE1xFc0nqviFJIZw5L/86GnjUz/MNB9xLaCF4yA11omw86a7tNksgOAuwvmE LwmP/9z1lda+WNCW+YKECSAYStnLKf3F9O/CN6iAtsjC5uDdzZ/rR2EYQhJ8fGsZ SNPmZa+9D+0+j5eyRRPMKBXgrqSQ8J8M6tct843AgAMeroOzcN6DQtiVZtbBUUZb 2XYOH68FWokkQpc/jPawnKWehW2FHBPb8j6JR7L9eznPUpJ8hBTgLyxbW+wVgQx7 H4hZ7KKPZV/GwWCKxYa82DqfguIOeEzSCRM= -----END CERTIFICATE-----Generated at Tue Jul 22 19:48:58 2025 by rpki-client