$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e9a88e06-348c-398f-a0a4-608baf3c0c50.roa File: e9a88e06-348c-398f-a0a4-608baf3c0c50.roa (raw, json) Hash identifier: lKX/2krI9DirtzOL2hoo60RSWfosvV2GtU+XCAgyrvM= Subject key identifier: A1:CA:61:1F:3B:27:CD:7A:23:3D:53:7F:42:0F:15:63:F3:EF:93:A9 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A6AF0992B5C0D3DF096D45580 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e9a88e06-348c-398f-a0a4-608baf3c0c50.roa Signing time: Sat 05 Jul 2025 13:01:04 +0000 ROA not before: Sat 05 Jul 2025 13:01:04 +0000 ROA not after: Fri 03 Oct 2025 13:01:04 +0000 asID: 35994 IP address blocks: 2600:1407:22::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6a:f0:99:2b:5c:0d:3d:f0:96:d4:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 5 13:01:04 2025 GMT Not After : Oct 3 13:01:04 2025 GMT Subject: CN=d5ccf7a9-8a6b-4bbd-bd17-d76b1f5ab220 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:aa:0d:a3:b8:41:dd:57:7d:88:49:db:76:b6: d7:cc:d7:7a:3f:e7:96:68:35:7f:7c:79:a1:05:d9: cc:0b:9c:15:c4:e4:25:4f:4d:87:01:8f:f2:90:95: 96:95:dc:ba:91:02:fb:75:8e:b1:85:92:26:5e:fd: 35:c2:7c:18:65:0a:8b:37:2b:32:9c:3f:47:70:6d: e0:a8:e1:fb:b5:d0:c3:72:b3:ff:c3:e4:47:3f:25: 3e:d6:da:a6:bf:6a:1c:69:26:bc:6c:b4:85:65:9f: 6d:1d:64:c2:4d:f5:e8:36:35:26:93:c6:77:82:53: 9f:de:ed:e6:09:ea:29:a1:b0:3b:2e:df:90:3d:86: 58:64:39:2c:7e:41:ce:59:be:49:00:ed:76:f4:c2: a7:9b:74:10:f0:84:49:50:a3:e4:62:08:31:d8:3e: 9e:70:37:5f:87:10:ac:e5:c5:7c:70:69:ee:ab:e2: b5:6c:75:9d:c4:92:16:9c:27:22:f9:aa:1c:97:52: a5:74:4b:52:16:24:35:35:80:2f:3d:ab:e5:75:80: e0:fa:e4:54:d4:c0:ad:f2:c5:24:8b:9f:c1:61:f8: 45:5a:31:8a:1f:14:b9:ce:49:9f:e5:07:39:d4:ca: 6f:a1:23:cc:a2:6a:45:67:0d:da:83:ab:a8:c1:41: af:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:CA:61:1F:3B:27:CD:7A:23:3D:53:7F:42:0F:15:63:F3:EF:93:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e9a88e06-348c-398f-a0a4-608baf3c0c50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1407:22::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:40:35:f0:f9:9c:7a:f8:d9:ae:0a:72:08:a2:92:55:c1:60: d0:b1:c4:67:3a:df:08:ef:ba:48:9d:18:22:50:7a:dd:95:0b: b9:c8:3a:6f:33:17:5d:65:87:39:16:d4:fb:6b:e2:8c:c3:ae: c4:bb:a9:43:6b:3b:6f:d1:a5:2a:52:3c:99:6b:4e:1e:9d:7d: c7:f0:2c:3c:58:6e:b3:7c:48:b8:90:c1:5f:9f:4d:62:c4:c6: fe:77:4c:47:cd:4c:1e:03:fa:1e:f1:3b:6e:86:11:85:62:81: 88:08:7f:f4:b7:75:79:0e:19:56:cc:c0:3a:ad:90:18:6d:21: 9e:7c:46:3b:b2:e0:c5:c6:16:f8:52:45:f8:5c:a7:de:ed:94: 17:a6:3e:fa:18:4a:51:4f:0a:d7:11:a0:e4:7f:53:f9:ea:7d: a2:a2:2f:5d:0c:0f:c9:34:77:92:75:3a:2a:cc:76:60:83:43: e5:62:71:4f:17:6c:88:49:be:c7:37:e5:49:72:e8:07:ca:c3: 5b:67:56:70:36:16:30:06:dc:97:c1:ce:c5:24:5f:bd:ac:f6: 3f:45:28:4b:3f:1d:4f:60:92:b6:78:c1:05:90:bd:cf:14:98: e5:e5:f7:22:b9:01:35:95:f0:83:81:dc:04:7f:aa:e6:c6:4c: d5:ae:c7:6c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpq8JkrXA098JbUVYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcwNTEzMDEwNFoXDTI1MTAwMzEzMDEwNFowLzEtMCsGA1UEAxMk ZDVjY2Y3YTktOGE2Yi00YmJkLWJkMTctZDc2YjFmNWFiMjIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6oNo7hB3Vd9iEnbdrbXzNd6P+eWaDV/fHmh BdnMC5wVxOQlT02HAY/ykJWWldy6kQL7dY6xhZImXv01wnwYZQqLNysynD9HcG3g qOH7tdDDcrP/w+RHPyU+1tqmv2ocaSa8bLSFZZ9tHWTCTfXoNjUmk8Z3glOf3u3m CeopobA7Lt+QPYZYZDksfkHOWb5JAO129MKnm3QQ8IRJUKPkYggx2D6ecDdfhxCs 5cV8cGnuq+K1bHWdxJIWnCci+aocl1KldEtSFiQ1NYAvPavldYDg+uRU1MCt8sUk i5/BYfhFWjGKHxS5zkmf5Qc51MpvoSPMompFZw3ag6uowUGvmQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKHKYR87J816Iz1Tf0IPFWPz75OpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTlhODhlMDYtMzQ4Yy0z OThmLWEwYTQtNjA4YmFmM2MwYzUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUBwAi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAABANfD5nHr42a4KcgiiklXBYNCxxGc63wjvukidGCJQet2VC7nI Om8zF11lhzkW1Ptr4ozDrsS7qUNrO2/RpSpSPJlrTh6dfcfwLDxYbrN8SLiQwV+f TWLExv53TEfNTB4D+h7xO26GEYVigYgIf/S3dXkOGVbMwDqtkBhtIZ58Rjuy4MXG FvhSRfhcp97tlBemPvoYSlFPCtcRoOR/U/nqfaKiL10MD8k0d5J1OirMdmCDQ+Vi cU8XbIhJvsc35Uly6AfKw1tnVnA2FjAG3JfBzsUkX72s9j9FKEs/HU9gkrZ4wQWQ vc8UmOXl9yK5ATWV8IOB3AR/qubGTNWux2w= -----END CERTIFICATE-----Generated at Tue Jul 22 19:33:19 2025 by rpki-client