$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3264c058-dda0-3144-8991-a11761f6a836.roa File: 3264c058-dda0-3144-8991-a11761f6a836.roa (raw, json) Hash identifier: Ams2lcvDvk1z391D46v3sA34lvv1VMi/aR4FbOwv4yU= Subject key identifier: B3:2E:2D:4D:D2:2C:5E:1F:DF:BA:EB:DC:08:A9:51:52:93:FF:21:F0 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A4C3B2E7A8F89FC22C2C3C640 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3264c058-dda0-3144-8991-a11761f6a836.roa Signing time: Tue 24 Jun 2025 13:01:03 +0000 ROA not before: Tue 24 Jun 2025 13:01:03 +0000 ROA not after: Mon 22 Sep 2025 13:01:03 +0000 asID: 20940 IP address blocks: 2600:140b:1200::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4c:3b:2e:7a:8f:89:fc:22:c2:c3:c6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 24 13:01:03 2025 GMT Not After : Sep 22 13:01:03 2025 GMT Subject: CN=3587e12c-b0b7-4ed9-b3bc-8f13b7e168e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:9d:9b:63:3c:30:da:ab:3a:fa:70:69:4c:40: 31:1c:b5:81:5d:28:98:4f:14:7a:95:d7:0a:84:07: b3:f4:be:aa:cf:00:64:aa:2d:48:97:66:d0:aa:2d: b2:e1:3a:2d:d9:e3:35:b8:7e:c8:ab:19:87:1c:5a: 81:36:36:ce:7f:f4:1f:50:cd:db:d6:d1:62:60:63: 08:c0:63:d4:5f:cf:ff:a2:b1:ff:93:b5:ac:c1:cf: f6:2e:16:e6:65:95:ed:21:2d:03:b0:38:46:c6:42: 1e:f7:5c:00:dd:86:a1:f4:23:22:94:12:67:43:e9: 2e:77:e3:a5:6e:93:98:28:02:5a:0a:7f:2d:c7:b3: 3e:9e:d9:28:ca:e2:d1:8c:31:44:eb:66:6b:4e:df: 8d:0f:0a:31:1f:3b:08:63:b0:cc:ac:a9:05:9d:17: 0b:78:e9:cf:0b:cc:62:52:25:5e:3a:03:69:c4:85: 5a:ca:71:f7:3e:9b:ab:76:17:e4:ca:c0:c7:fa:e7: 90:6a:d5:17:d8:5f:52:84:9d:c8:3c:e6:12:57:00: 20:b2:56:68:95:a8:87:91:86:76:a7:ab:b6:42:1b: d1:d8:0a:93:ff:2c:38:09:55:f4:83:6e:1b:c8:99: 71:99:23:1f:02:07:0e:08:e5:29:0b:f5:bb:74:5d: e0:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:2E:2D:4D:D2:2C:5E:1F:DF:BA:EB:DC:08:A9:51:52:93:FF:21:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3264c058-dda0-3144-8991-a11761f6a836.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:140b:1200::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:92:d7:ae:1b:4b:0a:d8:9b:e4:59:ca:c5:1b:e7:03:b1:a7: 63:72:95:d9:62:b5:c3:f3:6f:c3:6c:82:04:49:b2:eb:62:a5: 47:15:bc:0a:3c:2a:a4:9b:ed:89:fc:7e:49:30:ef:c6:8d:36: 3c:c3:61:82:f4:b4:ec:e1:a8:7c:03:11:66:7f:73:54:bf:d6: 42:5a:da:85:42:85:dd:0f:3d:55:f5:38:ec:78:ab:25:33:87: b8:56:10:1f:94:7d:99:07:ef:65:97:eb:16:23:0b:e1:ac:b3: 96:a6:25:bb:a8:04:71:b6:34:db:d4:9f:d8:cf:26:ce:d7:02: 3e:81:ea:a9:39:a8:a9:51:b8:79:f7:bd:4b:5a:56:52:7c:2b: 50:56:9e:e5:80:be:aa:f1:53:30:fc:ed:c2:68:74:65:02:10: 25:13:b5:1c:e2:b0:3b:36:67:bb:1d:5e:52:1e:c1:9c:6a:ee: 16:1b:85:3e:ce:46:46:04:38:c8:ba:a9:98:be:46:04:8e:98: da:50:d4:07:8a:cd:74:5c:cd:cd:62:21:6b:4f:9d:c9:8a:7c: 2e:1f:a9:c9:6a:43:4d:a8:2e:e5:70:77:bd:83:5a:bd:51:d6: 35:6e:03:ea:ab:ae:d0:9e:c5:81:4a:6f:b4:76:35:3e:a0:2e: 73:82:ed:08 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpMOy56j4n8IsLDxkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYyNDEzMDEwM1oXDTI1MDkyMjEzMDEwM1owLzEtMCsGA1UEAxMk MzU4N2UxMmMtYjBiNy00ZWQ5LWIzYmMtOGYxM2I3ZTE2OGU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJ2bYzww2qs6+nBpTEAxHLWBXSiYTxR6ldcK hAez9L6qzwBkqi1Il2bQqi2y4Tot2eM1uH7IqxmHHFqBNjbOf/QfUM3b1tFiYGMI wGPUX8//orH/k7Wswc/2LhbmZZXtIS0DsDhGxkIe91wA3Yah9CMilBJnQ+kud+Ol bpOYKAJaCn8tx7M+ntkoyuLRjDFE62ZrTt+NDwoxHzsIY7DMrKkFnRcLeOnPC8xi UiVeOgNpxIVaynH3PpurdhfkysDH+ueQatUX2F9ShJ3IPOYSVwAgslZolaiHkYZ2 p6u2QhvR2AqT/yw4CVX0g24byJlxmSMfAgcOCOUpC/W7dF3gHwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLMuLU3SLF4f37rr3AipUVKT/yHwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzI2NGMwNTgtZGRhMC0z MTQ0LTg5OTEtYTExNzYxZjZhODM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUCxIA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACGS164bSwrYm+RZysUb5wOxp2NyldlitcPzb8NsggRJsutipUcV vAo8KqSb7Yn8fkkw78aNNjzDYYL0tOzhqHwDEWZ/c1S/1kJa2oVChd0PPVX1OOx4 qyUzh7hWEB+UfZkH72WX6xYjC+Gss5amJbuoBHG2NNvUn9jPJs7XAj6B6qk5qKlR uHn3vUtaVlJ8K1BWnuWAvqrxUzD87cJodGUCECUTtRzisDs2Z7sdXlIewZxq7hYb hT7ORkYEOMi6qZi+RgSOmNpQ1AeKzXRczc1iIWtPncmKfC4fqclqQ02oLuVwd72D Wr1R1jVuA+qrrtCexYFKb7R2NT6gLnOC7Qg= -----END CERTIFICATE-----Generated at Sun Jun 29 13:49:54 2025 by rpki-client