$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/28519c29-9715-3649-b5b7-c672e6d450b2.roa File: 28519c29-9715-3649-b5b7-c672e6d450b2.roa (raw, json) Hash identifier: rbWcCnL+KTzcB1221ipME+J6HfltFqIB+4zcX53aZU4= Subject key identifier: C7:54:A1:AC:77:F9:F3:57:CC:B7:F3:F0:29:E9:F7:13:02:5A:43:21 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A549B2630E6FAA8E8FEE0B237 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/28519c29-9715-3649-b5b7-c672e6d450b2.roa Signing time: Fri 27 Jun 2025 13:01:05 +0000 ROA not before: Fri 27 Jun 2025 13:01:05 +0000 ROA not after: Thu 25 Sep 2025 13:01:05 +0000 asID: 20940 IP address blocks: 2600:1415:2000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:54:9b:26:30:e6:fa:a8:e8:fe:e0:b2:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 27 13:01:05 2025 GMT Not After : Sep 25 13:01:05 2025 GMT Subject: CN=1a42e694-7240-4d1c-b676-9f6cc93e1381 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:1c:02:af:ff:c7:fa:3d:50:2a:31:7f:8f:a2: ba:f2:6f:0e:95:09:fc:e6:a4:af:9d:30:c1:d3:b5: 0c:24:cb:14:81:04:63:df:3e:2e:8f:58:27:5c:d2: d9:8d:77:81:0f:cc:4e:d8:61:77:51:65:20:44:a0: 42:3a:b2:02:10:91:c0:44:21:08:d4:c1:78:59:7f: f9:32:2c:f2:78:a2:aa:b2:4f:28:5e:93:d3:ea:6c: 70:75:53:1c:ab:38:61:41:75:c2:d6:f6:ec:7f:5a: ce:d6:f7:a2:d8:73:09:3d:8d:3b:44:2b:74:68:f7: 44:ed:69:f6:c9:3b:80:4e:e9:e3:cc:2e:a2:ec:77: 89:6c:22:52:b6:5a:be:3a:68:df:94:1d:d6:33:bc: ef:11:4c:87:3d:46:64:6a:86:6a:ed:2a:7a:5e:a1: e5:ef:75:bf:63:46:06:78:35:e6:e7:16:2f:68:82: 00:3d:77:a5:9a:c2:7d:fc:e2:a6:cd:3b:e6:a1:c5: 2e:ba:44:77:75:e2:4d:7a:b5:69:b3:73:13:83:da: 92:b5:23:45:61:14:32:fc:fe:73:9f:bb:05:29:91: f1:7b:1e:d6:8d:fd:4f:38:3a:b7:a2:83:83:65:67: 64:93:02:5b:4c:ed:eb:b8:d2:e6:85:28:2c:12:b3: f3:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:54:A1:AC:77:F9:F3:57:CC:B7:F3:F0:29:E9:F7:13:02:5A:43:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/28519c29-9715-3649-b5b7-c672e6d450b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1415:2000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:cf:3a:91:9f:5d:14:57:4b:25:d7:13:e3:d7:c2:dc:ef:a9: 45:2a:1c:e7:51:66:73:96:24:49:68:7b:04:c1:85:74:3a:53: 7b:ed:c9:0a:d4:0e:9d:aa:ed:16:9a:dc:d0:4d:d5:11:25:cc: af:92:c8:1f:c9:fc:98:9c:07:28:ab:e2:e7:28:2b:e9:df:75: 31:cf:2c:64:fb:fe:37:cc:fb:27:df:d8:0f:db:35:b6:4b:ac: 94:61:cf:fc:d0:be:0b:5e:aa:e6:62:86:41:6a:26:9c:43:43: 1f:b7:63:26:1f:c9:27:9a:d3:fb:5d:e3:4e:cd:b1:f7:47:2a: e9:2b:24:e6:6d:5f:00:8b:66:d1:9a:08:be:4d:29:3c:5a:53: 29:e0:73:1b:1b:a3:7e:fe:d3:9a:e0:c0:50:dd:e8:c5:3d:d2: d0:79:44:b4:af:06:76:2a:8c:2a:a6:a7:81:3a:3c:7e:b1:67: 63:2c:f3:ac:43:8b:13:80:6f:77:5d:e9:5d:be:92:87:c8:e8: 83:49:90:00:38:2d:e7:93:01:bc:5e:54:54:7d:a6:a8:55:bb: 06:29:b8:40:14:d6:be:5e:93:62:ad:af:5c:cd:a7:f8:c3:44: 46:d2:ae:b1:ed:a9:d8:56:78:8b:b8:c9:4a:6c:92:e7:dc:8c: 9e:3d:32:69 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpUmyYw5vqo6P7gsjcwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYyNzEzMDEwNVoXDTI1MDkyNTEzMDEwNVowLzEtMCsGA1UEAxMk MWE0MmU2OTQtNzI0MC00ZDFjLWI2NzYtOWY2Y2M5M2UxMzgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xwCr//H+j1QKjF/j6K68m8OlQn85qSvnTDB 07UMJMsUgQRj3z4uj1gnXNLZjXeBD8xO2GF3UWUgRKBCOrICEJHARCEI1MF4WX/5 MizyeKKqsk8oXpPT6mxwdVMcqzhhQXXC1vbsf1rO1vei2HMJPY07RCt0aPdE7Wn2 yTuATunjzC6i7HeJbCJStlq+OmjflB3WM7zvEUyHPUZkaoZq7Sp6XqHl73W/Y0YG eDXm5xYvaIIAPXelmsJ9/OKmzTvmocUuukR3deJNerVps3MTg9qStSNFYRQy/P5z n7sFKZHxex7Wjf1PODq3ooODZWdkkwJbTO3ruNLmhSgsErPzjwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMdUoax3+fNXzLfz8Cnp9xMCWkMhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjg1MTljMjktOTcxNS0z NjQ5LWI1YjctYzY3MmU2ZDQ1MGIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUFSAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAI3POpGfXRRXSyXXE+PXwtzvqUUqHOdRZnOWJEloewTBhXQ6U3vt yQrUDp2q7Raa3NBN1RElzK+SyB/J/JicByir4ucoK+nfdTHPLGT7/jfM+yff2A/b NbZLrJRhz/zQvgtequZihkFqJpxDQx+3YyYfySea0/td407NsfdHKukrJOZtXwCL ZtGaCL5NKTxaUyngcxsbo37+05rgwFDd6MU90tB5RLSvBnYqjCqmp4E6PH6xZ2Ms 86xDixOAb3dd6V2+kofI6INJkAA4LeeTAbxeVFR9pqhVuwYpuEAU1r5ek2Ktr1zN p/jDREbSrrHtqdhWeIu4yUpskufcjJ49Mmk= -----END CERTIFICATE-----Generated at Sun Jun 29 13:47:17 2025 by rpki-client