$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/aaa241b2-0e20-3965-af75-6d9f126290e3.roa File: aaa241b2-0e20-3965-af75-6d9f126290e3.roa (raw, json) Hash identifier: nDHOGfTs2KrqQGgvGQumDXqPBlOsCoXAFsoksqc7mTs= Subject key identifier: A2:A8:BC:E0:5B:C3:E9:78:FC:9C:31:43:80:B6:26:70:96:A5:B8:72 Certificate issuer: /CN=01586a37-c709-480e-ac0d-b07d855c615b Certificate serial: 010D0C9F43285849D42FB093036D472FE8427F80 Authority key identifier: 40:B8:69:3F:C9:14:9F:5C:2B:7B:FA:88:B8:C7:FF:62:32:EB:9B:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/aaa241b2-0e20-3965-af75-6d9f126290e3.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 207990 IP address blocks: 2600:2900::/30 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/01586a37-c709-480e-ac0d-b07d855c615b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/01586a37-c709-480e-ac0d-b07d855c615b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:2f:b0:93:03:6d:47:2f:e8:42:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01586a37-c709-480e-ac0d-b07d855c615b Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=26c06913-35cd-468d-8463-898f78ecb25a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:df:41:1a:04:ea:7a:ba:f9:bb:bc:9c:73:6e: e8:0e:f5:6a:99:d1:0f:8e:d7:2c:cd:60:c0:97:cc: 50:c5:4d:0b:77:78:6f:95:af:6f:49:1d:03:95:c5: 21:31:11:d1:3a:e9:b4:a9:d9:c9:60:19:4c:dc:7e: c2:47:dc:7f:63:f5:1b:af:76:f5:8e:77:42:4a:02: 1a:43:8b:d5:17:6d:42:41:30:ba:cc:2c:58:12:e3: cb:dd:43:75:2a:61:73:ef:ea:13:c8:1e:aa:3e:ba: bb:9a:35:4a:d5:78:69:37:c5:45:fd:4f:4d:cb:83: d1:da:b6:fa:40:8c:f5:49:fe:29:db:68:4f:c8:c0: 92:83:74:b2:ca:58:7f:7c:dc:bb:99:0b:45:91:5d: fb:33:4c:ee:fa:1b:3a:40:ec:ce:f1:1a:c5:d3:f6: 35:bc:ae:ce:53:b5:56:a6:ae:26:10:dd:d0:14:06: ea:08:2d:92:7a:c8:bc:82:55:f0:31:49:45:85:41: 65:81:ae:d7:48:80:46:89:51:a9:02:c4:95:b2:e1: fa:f7:2f:82:32:14:52:36:7d:12:03:2a:61:7e:21: 7a:3a:15:6d:6e:92:13:c3:e1:c9:bd:da:c9:58:fd: dc:06:ca:ce:c0:42:c7:3d:ce:50:5d:78:21:34:43: 17:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:A8:BC:E0:5B:C3:E9:78:FC:9C:31:43:80:B6:26:70:96:A5:B8:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/aaa241b2-0e20-3965-af75-6d9f126290e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/01586a37-c709-480e-ac0d-b07d855c615b.crl X509v3 Authority Key Identifier: keyid:40:B8:69:3F:C9:14:9F:5C:2B:7B:FA:88:B8:C7:FF:62:32:EB:9B:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b.cer sbgp-ipAddrBlock: critical IPv6: 2600:2900::/30 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:28:ed:91:40:62:83:d8:ba:96:e5:f9:0f:ad:cb:38:fc:ec: dd:28:39:36:bf:8f:8c:af:61:14:37:f7:9f:64:00:15:b3:ab: bb:59:1f:56:52:e7:6e:c3:79:9b:4a:77:dc:4f:82:63:f1:c0: 1d:6d:44:9e:78:2c:b3:4d:4a:b7:60:bf:cd:e0:e1:e4:49:00: cb:71:57:17:f9:09:9e:5e:3d:57:9b:88:af:d6:6a:a1:6e:52: b9:6d:0a:56:49:b0:d2:3a:05:f8:f2:1f:cc:d0:77:f6:74:ec: 82:82:2a:79:dc:d8:c5:c8:ee:c8:e4:44:65:54:4c:49:1e:fc: 1d:78:20:cc:fb:21:fb:c1:e1:d5:a3:9d:60:dc:e9:2b:72:47: 6b:44:11:ad:4c:0d:09:d3:ae:48:d9:ed:f0:0c:12:ca:bc:86: 28:5f:fb:6d:fe:fa:54:8f:cc:bb:db:83:73:6d:54:64:e7:44: ad:81:f8:e9:94:e8:b4:9f:89:23:12:f7:a1:7c:6d:2b:38:12: e5:a2:3b:8b:59:1e:4a:89:1d:b7:a0:9f:55:e0:f6:59:97:2d: 3c:f8:38:8e:ec:5b:d6:68:b9:e3:ac:8d:1f:9e:4c:ca:ff:b1: d6:54:74:aa:f8:fc:77:3d:87:13:55:96:6e:71:82:14:0c:7e: d5:25:25:ee -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEnUL7CTA21HL+hCf4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDE1ODZhMzctYzcwOS00ODBlLWFjMGQtYjA3ZDg1NWM2 MTViMB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk MjZjMDY5MTMtMzVjZC00NjhkLTg0NjMtODk4Zjc4ZWNiMjVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhd9BGgTqerr5u7ycc27oDvVqmdEPjtcszWDA l8xQxU0Ld3hvla9vSR0DlcUhMRHROum0qdnJYBlM3H7CR9x/Y/Ubr3b1jndCSgIa Q4vVF21CQTC6zCxYEuPL3UN1KmFz7+oTyB6qPrq7mjVK1XhpN8VF/U9Ny4PR2rb6 QIz1Sf4p22hPyMCSg3Syylh/fNy7mQtFkV37M0zu+hs6QOzO8RrF0/Y1vK7OU7VW pq4mEN3QFAbqCC2Sesi8glXwMUlFhUFlga7XSIBGiVGpAsSVsuH69y+CMhRSNn0S AyphfiF6OhVtbpITw+HJvdrJWP3cBsrOwELHPc5QXXghNEMXnQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKKovOBbw+l4/JwxQ4C2JnCWpbhyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wMTU4 NmEzNy1jNzA5LTQ4MGUtYWMwZC1iMDdkODU1YzYxNWIvYWFhMjQxYjItMGUyMC0z OTY1LWFmNzUtNmQ5ZjEyNjI5MGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDE1ODZhMzctYzcwOS00ODBlLWFj MGQtYjA3ZDg1NWM2MTViLzAxNTg2YTM3LWM3MDktNDgwZS1hYzBkLWIwN2Q4NTVj NjE1Yi5jcmwwHwYDVR0jBBgwFoAUQLhpP8kUn1wre/qIuMf/YjLrm6kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wMTU4NmEzNy1jNzA5LTQ4MGUtYWMwZC1iMDdk ODU1YzYxNWIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUCJgApADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA0KO2RQGKD2LqW5fkPrcs4/OzdKDk2v4+Mr2EUN/efZAAVs6u7WR9W Uuduw3mbSnfcT4Jj8cAdbUSeeCyzTUq3YL/N4OHkSQDLcVcX+QmeXj1Xm4iv1mqh blK5bQpWSbDSOgX48h/M0Hf2dOyCgip53NjFyO7I5ERlVExJHvwdeCDM+yH7weHV o51g3OkrckdrRBGtTA0J065I2e3wDBLKvIYoX/tt/vpUj8y724NzbVRk50Stgfjp lOi0n4kjEvehfG0rOBLlojuLWR5KiR23oJ9V4PZZly08+DiO7FvWaLnjrI0fnkzK /7HWVHSq+Px3PYcTVZZucYIUDH7VJSXu -----END CERTIFICATE-----Generated at Tue Jul 1 00:34:18 2025 by rpki-client