$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/e2dbc839-1878-3592-8929-a116e0b99a2b.roa File: e2dbc839-1878-3592-8929-a116e0b99a2b.roa (raw, json) Hash identifier: xLD6Gtt70/B5r85Dg+RjbzGhA4AN8HvTkH7kBy7yOQ0= Subject key identifier: 50:5E:C6:F9:56:04:11:18:7A:13:90:31:FE:1E:4F:C2:60:7C:7C:18 Certificate issuer: /CN=01586a37-c709-480e-ac0d-b07d855c615b Certificate serial: 010D0C9F4328584A411063521557EFDDC35DE400 Authority key identifier: 40:B8:69:3F:C9:14:9F:5C:2B:7B:FA:88:B8:C7:FF:62:32:EB:9B:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/e2dbc839-1878-3592-8929-a116e0b99a2b.roa Signing time: Fri 20 Jun 2025 13:01:05 +0000 ROA not before: Fri 20 Jun 2025 13:01:05 +0000 ROA not after: Thu 18 Sep 2025 13:01:05 +0000 asID: 207990 IP address blocks: 2600:2904::/30 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/01586a37-c709-480e-ac0d-b07d855c615b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/01586a37-c709-480e-ac0d-b07d855c615b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:41:10:63:52:15:57:ef:dd:c3:5d:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01586a37-c709-480e-ac0d-b07d855c615b Validity Not Before: Jun 20 13:01:05 2025 GMT Not After : Sep 18 13:01:05 2025 GMT Subject: CN=5335d599-3e17-438c-9e0c-03c91058d33a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:11:76:db:e5:b5:d1:bd:16:a2:1a:e2:7c:a9: 43:f9:e4:57:dd:2f:22:a7:e0:4a:ef:9c:a7:6c:ad: 15:dd:8f:e9:cf:c1:a8:b3:e3:93:8d:ad:a2:d1:09: 52:fe:53:e0:21:34:19:9f:4b:98:81:1a:43:9c:b7: 3c:b1:5b:21:47:2b:a0:e0:87:37:f2:21:b2:27:c6: 8b:e7:02:c0:e9:53:28:45:a6:c8:5b:6d:09:4c:c1: 3c:60:a0:45:6b:be:b8:a8:60:b0:60:3c:28:06:4e: 05:f0:7f:d4:7c:35:23:28:5f:55:af:47:93:61:6e: dd:0b:df:cc:bb:17:e1:48:26:9c:53:75:87:d2:9e: 82:8d:5e:cf:b3:6d:fb:1b:b6:5d:35:e2:4e:87:1d: 05:1f:40:33:ef:da:db:4b:d5:86:ef:29:31:26:3c: fb:3e:23:4f:81:ae:d5:c8:dc:93:05:bf:2b:28:fe: ec:a6:eb:d3:a9:ee:04:6b:46:02:4a:68:86:a1:6c: ed:44:54:f4:01:f9:66:87:e3:eb:a0:ad:ca:68:c1: 95:bc:36:1e:8a:46:e2:ad:db:dc:ec:94:db:d5:a6: 3b:1f:c4:26:40:50:f0:49:01:49:d0:53:b5:87:7f: 83:9f:bc:47:e2:f7:4b:c6:2f:47:03:ca:2d:6a:92: 81:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:5E:C6:F9:56:04:11:18:7A:13:90:31:FE:1E:4F:C2:60:7C:7C:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/e2dbc839-1878-3592-8929-a116e0b99a2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/01586a37-c709-480e-ac0d-b07d855c615b.crl X509v3 Authority Key Identifier: keyid:40:B8:69:3F:C9:14:9F:5C:2B:7B:FA:88:B8:C7:FF:62:32:EB:9B:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b.cer sbgp-ipAddrBlock: critical IPv6: 2600:2904::/30 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:6b:b5:de:dc:0c:27:f9:5d:bd:d5:9e:c5:74:a3:05:63:49: 5e:ed:44:c5:e4:0b:1c:7a:be:04:01:7c:2d:c2:aa:8d:e2:bb: 5f:d2:72:f6:1d:2f:27:10:9e:fb:e4:8c:3b:9a:e4:66:af:37: c7:1a:74:01:52:11:d0:c7:13:00:32:9a:0a:a2:86:fe:18:3b: eb:37:ae:4e:fb:21:9d:a0:e1:59:16:26:5d:a2:90:f0:87:0a: 57:82:59:d5:fc:6d:5d:19:8f:bf:fc:ad:ad:19:de:67:dd:87: 80:4c:fd:a6:b2:04:84:05:0f:af:0a:49:01:e3:1e:72:35:c3: 8b:f0:60:d5:19:58:d7:b8:f8:1e:46:96:60:73:9f:f1:a6:f4: 48:5a:51:b3:f6:85:ec:6b:3d:f6:b4:23:59:13:54:f7:fc:5e: 51:2f:45:b8:e1:62:7b:6a:0b:7b:df:ba:b0:9b:c7:4d:d3:41: 70:bd:8d:b0:a9:e3:ee:4b:f4:43:50:79:7b:e0:95:dc:3c:9c: 58:60:c5:64:16:f9:11:4d:96:6b:f1:a0:48:79:e9:e3:6e:49: d0:de:81:61:c7:44:d4:ae:a9:54:2b:33:cb:50:c6:3d:e4:b0: 86:5b:2e:99:f6:77:d9:bd:57:06:a5:f3:34:cc:6a:58:be:80: ef:ed:d7:3d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpBEGNSFVfv3cNd5AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDE1ODZhMzctYzcwOS00ODBlLWFjMGQtYjA3ZDg1NWM2 MTViMB4XDTI1MDYyMDEzMDEwNVoXDTI1MDkxODEzMDEwNVowLzEtMCsGA1UEAxMk NTMzNWQ1OTktM2UxNy00MzhjLTllMGMtMDNjOTEwNThkMzNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxF22+W10b0WohrifKlD+eRX3S8ip+BK75yn bK0V3Y/pz8Gos+OTja2i0QlS/lPgITQZn0uYgRpDnLc8sVshRyug4Ic38iGyJ8aL 5wLA6VMoRabIW20JTME8YKBFa764qGCwYDwoBk4F8H/UfDUjKF9Vr0eTYW7dC9/M uxfhSCacU3WH0p6CjV7Ps237G7ZdNeJOhx0FH0Az79rbS9WG7ykxJjz7PiNPga7V yNyTBb8rKP7spuvTqe4Ea0YCSmiGoWztRFT0Aflmh+ProK3KaMGVvDYeikbirdvc 7JTb1aY7H8QmQFDwSQFJ0FO1h3+Dn7xH4vdLxi9HA8otapKB9wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFBexvlWBBEYehOQMf4eT8JgfHwYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wMTU4 NmEzNy1jNzA5LTQ4MGUtYWMwZC1iMDdkODU1YzYxNWIvZTJkYmM4MzktMTg3OC0z NTkyLTg5MjktYTExNmUwYjk5YTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDE1ODZhMzctYzcwOS00ODBlLWFj MGQtYjA3ZDg1NWM2MTViLzAxNTg2YTM3LWM3MDktNDgwZS1hYzBkLWIwN2Q4NTVj NjE1Yi5jcmwwHwYDVR0jBBgwFoAUQLhpP8kUn1wre/qIuMf/YjLrm6kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wMTU4NmEzNy1jNzA5LTQ4MGUtYWMwZC1iMDdk ODU1YzYxNWIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUCJgApBDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBRa7Xe3Awn+V291Z7FdKMFY0le7UTF5Ascer4EAXwtwqqN4rtf0nL2 HS8nEJ775Iw7muRmrzfHGnQBUhHQxxMAMpoKoob+GDvrN65O+yGdoOFZFiZdopDw hwpXglnV/G1dGY+//K2tGd5n3YeATP2msgSEBQ+vCkkB4x5yNcOL8GDVGVjXuPge RpZgc5/xpvRIWlGz9oXsaz32tCNZE1T3/F5RL0W44WJ7agt737qwm8dN00FwvY2w qePuS/RDUHl74JXcPJxYYMVkFvkRTZZr8aBIeenjbknQ3oFhx0TUrqlUKzPLUMY9 5LCGWy6Z9nfZvVcGpfM0zGpYvoDv7dc9 -----END CERTIFICATE-----Generated at Tue Jul 1 16:18:52 2025 by rpki-client