$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c321112e-ab08-311c-a6b9-8d6f5c7453f6.roa File: c321112e-ab08-311c-a6b9-8d6f5c7453f6.roa (raw, json) Hash identifier: EEhmSCVVng9LqkJDUxNrjfohDZByOtJVzsS8J9XPOIU= Subject key identifier: EB:74:22:BE:87:11:50:90:AC:BF:22:02:E0:37:22:4E:6C:3C:DA:8B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A5D46A984BA95E19B2B7B4EC8 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c321112e-ab08-311c-a6b9-8d6f5c7453f6.roa Signing time: Mon 30 Jun 2025 15:33:19 +0000 ROA not before: Mon 30 Jun 2025 15:33:19 +0000 ROA not after: Sun 28 Sep 2025 15:33:19 +0000 asID: 63949 IP address blocks: 2600:3c1a::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5d:46:a9:84:ba:95:e1:9b:2b:7b:4e:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 30 15:33:19 2025 GMT Not After : Sep 28 15:33:19 2025 GMT Subject: CN=81c6ce28-91fd-4ee2-a521-d15042e8d5a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:06:63:be:bc:9f:90:0a:d9:ad:fd:9c:0e:7d: 1a:38:46:f2:c7:8f:d3:42:9f:cb:7a:72:a3:ce:f8: bd:cc:be:7f:bb:04:99:88:15:46:f0:fd:34:d4:7c: 7f:5e:9a:73:d6:a0:52:40:c1:26:b0:d4:a1:89:e3: 93:7c:0c:42:6e:ef:50:64:41:2e:0f:e7:03:f0:0c: 80:8e:38:a2:02:b7:c7:2c:cf:5d:3f:96:f8:cb:9e: f3:3f:c2:36:b9:c8:be:a1:0e:9b:82:97:f3:b8:d2: cf:be:27:3d:8f:23:45:cf:20:eb:13:c1:d7:dc:b4: be:98:2b:ed:33:11:a6:ee:0f:f4:cb:da:ad:8e:21: 50:ac:75:e0:d1:dc:6d:1f:8b:2f:d1:94:0b:89:fd: fe:ac:8b:0b:a0:28:45:cc:0f:02:37:73:81:01:34: 84:f9:33:03:44:40:05:e4:c4:64:a9:25:e8:9f:a8: 68:c7:d7:d8:c2:d2:09:8c:cf:da:09:3d:a4:fc:e8: df:0a:54:ac:bc:1b:95:53:42:2c:b8:d9:d6:de:b8: e4:94:ee:fc:c8:d7:a4:d2:89:1d:b5:d7:cb:e0:7f: d7:2b:3f:1b:a7:7a:38:a8:a6:84:78:43:1f:a2:da: e4:fa:9b:46:fe:c0:e0:75:9d:66:93:01:d8:ab:dd: fe:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:74:22:BE:87:11:50:90:AC:BF:22:02:E0:37:22:4E:6C:3C:DA:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c321112e-ab08-311c-a6b9-8d6f5c7453f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:3c1a::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:31:d4:30:c9:0a:e6:c6:fe:ae:23:8d:43:78:b6:fd:d8:55: c8:5c:41:96:a3:be:31:b5:27:aa:96:a9:f7:c4:15:3b:09:4f: 4e:40:c5:d2:7e:f6:20:87:6b:a6:fc:0b:02:14:5b:4e:6a:7c: a5:f0:34:af:8b:36:3a:bc:42:75:32:f1:35:bb:b8:c2:13:88: 48:61:a0:45:72:ab:30:85:a1:bc:89:fc:f0:f3:68:90:f7:03: f3:6c:f5:20:2b:6a:4e:bb:79:fa:d7:61:e8:b5:59:1e:7e:32: 79:ad:fb:bc:55:74:74:f0:a1:28:eb:91:77:7f:20:a1:b8:70: 07:8c:da:e7:53:f5:d1:91:72:00:49:f4:3c:c6:f6:fa:65:ef: a9:ec:b0:d7:5d:4a:52:de:2f:55:87:ba:e8:03:1b:ba:c8:86: bb:19:93:3b:de:fb:7f:fb:0a:64:e4:99:4d:e0:14:6e:28:0c: a8:ab:5f:28:14:85:50:4d:35:ad:97:56:9a:07:00:30:93:ab: 0a:59:d1:ba:14:41:99:86:9c:64:dd:79:fa:69:c2:b8:66:db: 38:3e:ac:ec:eb:80:7e:8d:53:5a:a3:ae:78:8a:ff:61:2d:5c: 87:87:5d:61:d6:16:9c:41:70:f6:fc:87:43:c7:18:c7:58:9e: 6e:a8:5d:d3 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpdRqmEupXhmyt7TsgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYzMDE1MzMxOVoXDTI1MDkyODE1MzMxOVowLzEtMCsGA1UEAxMk ODFjNmNlMjgtOTFmZC00ZWUyLWE1MjEtZDE1MDQyZThkNWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwZjvryfkArZrf2cDn0aOEbyx4/TQp/LenKj zvi9zL5/uwSZiBVG8P001Hx/Xppz1qBSQMEmsNShieOTfAxCbu9QZEEuD+cD8AyA jjiiArfHLM9dP5b4y57zP8I2uci+oQ6bgpfzuNLPvic9jyNFzyDrE8HX3LS+mCvt MxGm7g/0y9qtjiFQrHXg0dxtH4sv0ZQLif3+rIsLoChFzA8CN3OBATSE+TMDREAF 5MRkqSXon6hox9fYwtIJjM/aCT2k/OjfClSsvBuVU0IsuNnW3rjklO78yNek0okd tdfL4H/XKz8bp3o4qKaEeEMfotrk+ptG/sDgdZ1mkwHYq93+JQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOt0Ir6HEVCQrL8iAuA3Ik5sPNqLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzMyMTExMmUtYWIwOC0z MTFjLWE2YjktOGQ2ZjVjNzQ1M2Y2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgA8GjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB0MdQwyQrmxv6uI41DeLb92FXIXEGWo74xtSeqlqn3xBU7CU9OQMXS fvYgh2um/AsCFFtOanyl8DSvizY6vEJ1MvE1u7jCE4hIYaBFcqswhaG8ifzw82iQ 9wPzbPUgK2pOu3n612HotVkefjJ5rfu8VXR08KEo65F3fyChuHAHjNrnU/XRkXIA SfQ8xvb6Ze+p7LDXXUpS3i9Vh7roAxu6yIa7GZM73vt/+wpk5JlN4BRuKAyoq18o FIVQTTWtl1aaBwAwk6sKWdG6FEGZhpxk3Xn6acK4Zts4Pqzs64B+jVNao654iv9h LVyHh11h1hacQXD2/IdDxxjHWJ5uqF3T -----END CERTIFICATE-----Generated at Tue Jul 22 19:33:01 2025 by rpki-client