$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b5355d70-db90-3f38-a26e-0d2de9b483bf.roa File: b5355d70-db90-3f38-a26e-0d2de9b483bf.roa (raw, json) Hash identifier: MqbV+rG4OObcseeEcCQcKJXXk4kBps5vWfZLwYxHnYo= Subject key identifier: 1E:9E:D3:85:A2:05:34:DD:FE:57:CB:86:72:C3:AA:A0:04:D3:75:8A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A5FC5F0C7975A4876F7CBD1A0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b5355d70-db90-3f38-a26e-0d2de9b483bf.roa Signing time: Tue 01 Jul 2025 13:01:04 +0000 ROA not before: Tue 01 Jul 2025 13:01:04 +0000 ROA not after: Mon 29 Sep 2025 13:01:04 +0000 asID: 20940 IP address blocks: 2600:1406:e400::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:c5:f0:c7:97:5a:48:76:f7:cb:d1:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 1 13:01:04 2025 GMT Not After : Sep 29 13:01:04 2025 GMT Subject: CN=2f9c6bdf-1823-48fb-b328-c6b7134e01aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:50:6f:c2:74:75:fb:e7:c4:07:9b:04:16:98: 8c:94:ea:24:21:11:fd:51:1b:cf:a1:43:2f:36:9d: ca:98:6d:52:aa:20:42:b9:71:c0:fc:94:2f:be:67: f0:77:ee:47:cd:ee:53:39:f2:ff:9f:33:45:92:89: 88:27:89:55:ba:d4:d6:20:b7:4a:10:c2:a0:bc:19: 14:97:4b:76:78:d6:a8:7c:5b:8f:07:2a:1a:67:e9: 68:d0:af:75:9c:20:53:ca:3a:55:2b:05:8c:6d:da: 36:fc:aa:c9:90:83:04:08:1a:5f:a9:17:df:15:eb: d0:26:5f:63:a2:ec:2f:69:f5:f9:08:6d:21:d6:58: 8e:c1:a9:aa:42:57:9d:f0:cb:6f:0a:7a:11:0e:6e: 93:c4:9f:ec:b5:b2:da:5a:72:8e:1d:9c:04:74:43: 2f:ba:8e:1a:ec:fb:fd:11:2d:ed:84:63:23:8d:c0: 26:09:fa:4b:46:37:69:3d:b8:fe:97:51:8a:ed:3a: 3a:e0:ab:21:91:e0:7f:88:04:64:12:54:85:81:0d: 62:7a:bb:20:7e:1f:6b:01:23:a4:32:63:b5:06:c1: ec:6e:63:ec:e6:f2:28:87:cb:2e:6c:af:66:f8:48: 99:d5:bf:93:eb:bd:ce:6b:c5:90:e8:0b:bf:b4:b0: f4:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:9E:D3:85:A2:05:34:DD:FE:57:CB:86:72:C3:AA:A0:04:D3:75:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b5355d70-db90-3f38-a26e-0d2de9b483bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1406:e400::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:a3:15:3c:34:e2:78:e3:b9:3c:32:b5:1e:6a:d5:72:b5:a0: 53:26:78:31:cf:e0:e1:d6:13:6a:8f:e1:0b:d7:09:f4:55:04: ac:a1:fa:47:a3:d9:d7:58:82:fb:8b:a0:d0:e5:ac:8e:b0:31: bd:50:53:57:2c:b6:d7:9d:24:06:50:44:fd:c0:ca:73:20:81: 3d:c8:08:af:b4:0e:48:15:ab:43:b7:58:0f:22:30:4a:e1:c1: b9:c2:60:8c:5e:c4:a2:c1:01:0b:dd:e3:bb:f1:47:e5:32:23: 6c:2d:52:bb:95:cf:c7:cb:c5:06:ac:fa:51:0a:89:b6:bc:fc: fc:a5:2b:11:e3:dc:02:bd:f8:51:73:59:5c:55:d9:3b:92:4e: af:f5:d0:b6:eb:42:a4:cd:f6:b5:8a:94:9c:b9:f9:de:7d:4f: 49:10:d2:f3:6d:3f:3e:b3:a6:b1:28:7f:bd:5d:38:c6:de:c0: d4:c6:9e:82:43:22:b6:1d:18:09:6f:c2:60:18:44:c9:f6:4d: 5d:50:cc:2e:97:62:a3:78:2f:f7:c7:15:ca:4a:ed:0c:42:bc: e8:19:36:bf:66:46:be:00:26:7c:7b:fa:5f:c4:f3:b9:68:ea: 01:cb:a1:a2:8c:97:24:53:b5:db:2b:56:3c:01:3f:b2:5c:c0: a3:9a:70:ef -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpfxfDHl1pIdvfL0aAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcwMTEzMDEwNFoXDTI1MDkyOTEzMDEwNFowLzEtMCsGA1UEAxMk MmY5YzZiZGYtMTgyMy00OGZiLWIzMjgtYzZiNzEzNGUwMWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplBvwnR1++fEB5sEFpiMlOokIRH9URvPoUMv Np3KmG1SqiBCuXHA/JQvvmfwd+5Hze5TOfL/nzNFkomIJ4lVutTWILdKEMKgvBkU l0t2eNaofFuPByoaZ+lo0K91nCBTyjpVKwWMbdo2/KrJkIMECBpfqRffFevQJl9j ouwvafX5CG0h1liOwamqQled8MtvCnoRDm6TxJ/stbLaWnKOHZwEdEMvuo4a7Pv9 ES3thGMjjcAmCfpLRjdpPbj+l1GK7To64KshkeB/iARkElSFgQ1iersgfh9rASOk MmO1BsHsbmPs5vIoh8subK9m+EiZ1b+T673Oa8WQ6Au/tLD0RwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFB6e04WiBTTd/lfLhnLDqqAE03WKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjUzNTVkNzAtZGI5MC0z ZjM4LWEyNmUtMGQyZGU5YjQ4M2JmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUBuQA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADujFTw04njjuTwytR5q1XK1oFMmeDHP4OHWE2qP4QvXCfRVBKyh +kej2ddYgvuLoNDlrI6wMb1QU1csttedJAZQRP3AynMggT3ICK+0DkgVq0O3WA8i MErhwbnCYIxexKLBAQvd47vxR+UyI2wtUruVz8fLxQas+lEKiba8/PylKxHj3AK9 +FFzWVxV2TuSTq/10LbrQqTN9rWKlJy5+d59T0kQ0vNtPz6zprEof71dOMbewNTG noJDIrYdGAlvwmAYRMn2TV1QzC6XYqN4L/fHFcpK7QxCvOgZNr9mRr4AJnx7+l/E 87lo6gHLoaKMlyRTtdsrVjwBP7JcwKOacO8= -----END CERTIFICATE-----Generated at Tue Jul 22 19:31:16 2025 by rpki-client