$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b72ead9e-ed9a-3146-a601-dbc182a5e50e.roa File: b72ead9e-ed9a-3146-a601-dbc182a5e50e.roa (raw, json) Hash identifier: yKbNSCeTq0IUPE/ukK6EGH3twKFXI75Jq5k9bb3wqUw= Subject key identifier: 0D:65:83:A8:B3:13:8D:94:CA:E8:7D:58:57:22:25:09:18:D6:3E:D0 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A8410BB3131DB20D989009F00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b72ead9e-ed9a-3146-a601-dbc182a5e50e.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 9498 IP address blocks: 2600:140f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:10:bb:31:31:db:20:d9:89:00:9f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=9868a0da-42a8-420a-b6ac-0b6f8c61932e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d0:3f:e3:5d:29:8e:f7:02:0f:6e:e0:74:22: e3:2a:4a:89:fe:4e:0c:47:26:56:50:65:47:9e:ae: f8:91:0f:db:95:65:75:cc:da:f8:ca:73:15:a6:bb: fb:d1:1e:3f:74:3c:9d:1c:e7:22:dc:d7:93:43:21: 5e:de:bf:07:f8:e6:66:bf:c6:e0:3f:7f:12:d2:80: bb:86:bf:e0:fd:c5:0c:a9:ca:0c:61:de:3f:da:3e: 6b:2e:b7:61:e0:52:07:15:0e:82:17:8a:92:4d:d9: 3b:85:1e:b6:9f:7e:69:b7:07:c5:5a:25:0a:33:82: 4e:9c:77:27:57:76:81:e8:a1:b2:f4:1e:d7:5b:cd: 88:29:35:d0:3f:0c:ab:b9:ac:8c:0a:43:d0:60:56: b2:9e:0a:38:4c:7b:ba:d8:70:82:4b:65:21:f2:73: 36:33:83:7e:93:f5:74:23:a9:24:ba:d7:74:48:de: 69:a5:5b:b3:82:3b:57:87:3e:05:07:64:9c:c6:1b: 94:46:1e:5d:66:11:3d:4b:42:fd:d1:9a:6b:48:48: 8a:a5:bc:34:7c:a8:22:01:42:62:66:17:88:fa:ac: fb:81:08:91:9e:e6:79:bd:fd:48:f4:5d:61:43:fa: 1a:2c:81:9c:af:b7:34:f5:db:84:1a:b0:71:f2:c9: 13:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:65:83:A8:B3:13:8D:94:CA:E8:7D:58:57:22:25:09:18:D6:3E:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b72ead9e-ed9a-3146-a601-dbc182a5e50e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:140f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:f6:d9:b9:f5:f8:74:90:c3:71:48:6c:df:b6:61:1e:ce:d3: 3e:c0:ab:ba:bc:33:de:74:2e:9e:5a:b9:43:64:e0:45:0d:e5: 67:bb:12:9a:f2:25:18:b4:b8:76:f3:32:79:4b:6f:13:19:92: 03:20:5d:73:ce:e0:54:c7:13:a6:2e:bb:de:94:49:11:e6:9c: df:29:4e:00:b0:fb:f9:4b:d3:36:87:62:25:03:5b:ca:33:75: 8d:0b:c8:24:b1:00:0c:4f:01:32:5a:d4:67:e1:42:4a:0a:64: 28:e1:80:ea:74:06:5c:87:b4:6e:96:2a:9a:27:d5:0f:ad:63: a1:93:89:46:f9:7e:f4:28:e2:bb:dc:8c:ad:69:83:b1:f8:aa: 09:e2:2d:4b:e5:6d:b7:c5:83:4b:dc:46:cd:b7:b0:85:b4:1d: 47:00:5a:64:43:b5:10:72:f9:c2:63:e5:83:b3:37:05:61:aa: d7:a4:c1:3c:ee:19:e8:94:16:a0:cc:26:45:f8:62:6f:1d:40: a8:16:30:86:dd:28:f3:00:30:98:67:d7:80:d1:9c:05:fb:2b: 81:2e:78:f0:25:31:4c:4c:09:ce:3a:c2:39:6a:00:20:e4:d6: 63:89:de:1d:1b:15:f4:d4:2b:e1:39:ba:84:5e:5a:c9:e6:1b: f7:02:c5:95 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqEELsxMdsg2YkAnwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk OTg2OGEwZGEtNDJhOC00MjBhLWI2YWMtMGI2ZjhjNjE5MzJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9A/410pjvcCD27gdCLjKkqJ/k4MRyZWUGVH nq74kQ/blWV1zNr4ynMVprv70R4/dDydHOci3NeTQyFe3r8H+OZmv8bgP38S0oC7 hr/g/cUMqcoMYd4/2j5rLrdh4FIHFQ6CF4qSTdk7hR62n35ptwfFWiUKM4JOnHcn V3aB6KGy9B7XW82IKTXQPwyruayMCkPQYFayngo4THu62HCCS2Uh8nM2M4N+k/V0 I6kkutd0SN5ppVuzgjtXhz4FB2ScxhuURh5dZhE9S0L90ZprSEiKpbw0fKgiAUJi ZheI+qz7gQiRnuZ5vf1I9F1hQ/oaLIGcr7c09duEGrBx8skTPwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFA1lg6izE42Uyuh9WFciJQkY1j7QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjcyZWFkOWUtZWQ5YS0z MTQ2LWE2MDEtZGJjMTgyYTVlNTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUDwAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB/22bn1+HSQw3FIbN+2YR7O0z7Aq7q8M950Lp5auUNk4EUN5We7 EpryJRi0uHbzMnlLbxMZkgMgXXPO4FTHE6Yuu96USRHmnN8pTgCw+/lL0zaHYiUD W8ozdY0LyCSxAAxPATJa1GfhQkoKZCjhgOp0BlyHtG6WKpon1Q+tY6GTiUb5fvQo 4rvcjK1pg7H4qgniLUvlbbfFg0vcRs23sIW0HUcAWmRDtRBy+cJj5YOzNwVhqtek wTzuGeiUFqDMJkX4Ym8dQKgWMIbdKPMAMJhn14DRnAX7K4EuePAlMUxMCc46wjlq ACDk1mOJ3h0bFfTUK+E5uoReWsnmG/cCxZU= -----END CERTIFICATE-----Generated at Tue Jul 22 19:32:51 2025 by rpki-client