$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4e90b7e5-62f3-3307-b2f5-0d7536f76bde.roa File: 4e90b7e5-62f3-3307-b2f5-0d7536f76bde.roa (raw, json) Hash identifier: dgzaz5n0O6XJ+2I4l/3H13dq2tcTTW0rsI4VC3n+PNg= Subject key identifier: D2:0A:3F:51:A3:3F:4F:78:A0:91:82:24:B5:8E:4E:E2:64:B5:7C:C6 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A549B2A62D3AB39BB21B893C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4e90b7e5-62f3-3307-b2f5-0d7536f76bde.roa Signing time: Fri 27 Jun 2025 13:01:05 +0000 ROA not before: Fri 27 Jun 2025 13:01:05 +0000 ROA not after: Thu 25 Sep 2025 13:01:05 +0000 asID: 20940 IP address blocks: 2600:1417:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:54:9b:2a:62:d3:ab:39:bb:21:b8:93:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 27 13:01:05 2025 GMT Not After : Sep 25 13:01:05 2025 GMT Subject: CN=0ea1df99-7a4f-4049-abc7-cc536ac11a2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:3d:f9:36:6d:0a:58:b1:01:35:e8:2b:72:b4: c6:b8:79:6f:24:8b:24:ec:cd:91:b4:9d:67:43:38: 1d:fc:dd:e3:95:fe:ac:f3:0d:33:44:85:a3:b7:08: a2:a4:ba:9a:b9:4d:7e:9c:36:fa:79:6e:0e:94:ec: 26:23:47:6d:73:47:35:93:79:21:d1:49:70:e7:c4: 1e:8f:d1:13:9e:0c:6f:77:e1:e5:51:23:0f:1b:7b: e3:5b:bd:35:08:5e:a6:a2:60:56:47:7e:c6:f3:5e: 69:a4:d1:29:83:9a:92:24:0e:2f:bc:f9:87:bf:b4: bd:d4:fa:fd:76:68:93:cb:c9:ec:6c:89:76:b8:d6: 5b:40:32:b9:86:63:f4:dd:4e:0a:c7:73:e7:f2:a9: cd:55:fd:ed:f8:5b:84:8a:7d:91:63:93:db:c0:82: 8d:06:17:09:58:90:b3:b5:3d:e0:da:79:51:7b:45: 9a:f8:ff:65:9d:ef:fd:38:41:13:e7:2b:56:f5:4b: bf:7a:0f:17:fe:3d:e3:26:39:ee:5a:17:88:5d:7b: a3:48:d5:86:ff:43:30:a9:e1:22:ad:70:fb:2f:81: 30:85:cb:b9:89:a5:97:78:61:c5:3d:06:10:02:36: e1:ec:1e:10:be:73:87:00:c1:61:d5:cc:d7:08:04: 73:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:0A:3F:51:A3:3F:4F:78:A0:91:82:24:B5:8E:4E:E2:64:B5:7C:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4e90b7e5-62f3-3307-b2f5-0d7536f76bde.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1417:3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:bb:6f:7d:d4:c6:77:cb:bf:a7:05:6f:6f:40:ed:cf:fe:a4: cf:82:38:30:cd:31:fd:4e:1d:8f:52:1a:97:0a:ce:73:d3:2a: f9:76:e2:8b:61:94:cf:c7:f8:e0:40:a3:a0:66:2d:88:27:bb: bf:62:1e:eb:ee:ad:96:10:c1:3d:60:77:66:3f:3b:7b:c1:28: d8:f0:33:44:cc:8a:20:19:e6:a5:0c:6f:7f:ef:d9:f4:b6:ac: 6d:04:15:de:f3:45:cf:c4:64:15:85:b6:69:0f:7d:72:cb:e2: 9c:fe:9d:b7:6d:46:8e:fe:25:4e:59:d9:f3:39:5e:17:ff:98: 9c:b2:f9:6b:89:ff:bd:13:92:96:6d:1b:2c:6a:83:d2:0c:73: 55:9c:ec:89:56:9d:09:3f:f5:83:8e:fc:bc:25:31:aa:0b:32: f7:c2:d1:27:17:35:15:c0:58:c1:d4:5f:f7:05:5a:e6:62:d9: 80:86:ad:2c:93:1c:06:ad:9a:57:a7:79:b7:2f:20:bf:6b:2a: dd:6a:ee:ff:3a:c5:fd:dd:ea:a0:95:23:da:6d:03:21:b4:c1: 5f:e0:59:5a:7b:cd:ed:d7:89:7e:67:31:60:11:81:86:98:ba: a9:66:2d:df:ce:e5:c2:85:8e:b4:05:8e:a3:93:95:95:54:0d: 27:97:71:f4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpUmypi06s5uyG4k8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYyNzEzMDEwNVoXDTI1MDkyNTEzMDEwNVowLzEtMCsGA1UEAxMk MGVhMWRmOTktN2E0Zi00MDQ5LWFiYzctY2M1MzZhYzExYTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArj35Nm0KWLEBNegrcrTGuHlvJIsk7M2RtJ1n Qzgd/N3jlf6s8w0zRIWjtwiipLqauU1+nDb6eW4OlOwmI0dtc0c1k3kh0Ulw58Qe j9ETngxvd+HlUSMPG3vjW701CF6momBWR37G815ppNEpg5qSJA4vvPmHv7S91Pr9 dmiTy8nsbIl2uNZbQDK5hmP03U4Kx3Pn8qnNVf3t+FuEin2RY5PbwIKNBhcJWJCz tT3g2nlRe0Wa+P9lne/9OEET5ytW9Uu/eg8X/j3jJjnuWheIXXujSNWG/0MwqeEi rXD7L4Ewhcu5iaWXeGHFPQYQAjbh7B4QvnOHAMFh1czXCARz1QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNIKP1GjP094oJGCJLWOTuJktXzGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGU5MGI3ZTUtNjJmMy0z MzA3LWIyZjUtMGQ3NTM2Zjc2YmRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUFwAD MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEq7b33UxnfLv6cFb29A7c/+pM+CODDNMf1OHY9SGpcKznPTKvl2 4othlM/H+OBAo6BmLYgnu79iHuvurZYQwT1gd2Y/O3vBKNjwM0TMiiAZ5qUMb3/v 2fS2rG0EFd7zRc/EZBWFtmkPfXLL4pz+nbdtRo7+JU5Z2fM5Xhf/mJyy+WuJ/70T kpZtGyxqg9IMc1Wc7IlWnQk/9YOO/LwlMaoLMvfC0ScXNRXAWMHUX/cFWuZi2YCG rSyTHAatmlenebcvIL9rKt1q7v86xf3d6qCVI9ptAyG0wV/gWVp7ze3XiX5nMWAR gYaYuqlmLd/O5cKFjrQFjqOTlZVUDSeXcfQ= -----END CERTIFICATE-----Generated at Sun Jun 29 12:51:25 2025 by rpki-client