$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/559261fd-4f8a-3c2a-b7c4-465a1464d82c.roa File: 559261fd-4f8a-3c2a-b7c4-465a1464d82c.roa (raw, json) Hash identifier: T5KHV8p2gFmRDq2Fn/hB+DIJhntF20blwhcqUPQkw8c= Subject key identifier: D9:3F:E4:9C:7F:E3:59:FF:91:DF:5F:F1:32:CF:C1:2D:54:59:0A:54 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A49707864A84DC201CEFA8CC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/559261fd-4f8a-3c2a-b7c4-465a1464d82c.roa Signing time: Mon 23 Jun 2025 13:01:03 +0000 ROA not before: Mon 23 Jun 2025 13:01:03 +0000 ROA not after: Sun 21 Sep 2025 13:01:03 +0000 asID: 20940 IP address blocks: 2600:1402:d800::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:49:70:78:64:a8:4d:c2:01:ce:fa:8c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 23 13:01:03 2025 GMT Not After : Sep 21 13:01:03 2025 GMT Subject: CN=94865816-451e-4d97-afd5-d71bca86838f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:dc:62:da:83:c9:de:c4:20:1c:8a:63:11:77: 0b:12:6a:5d:3a:43:05:1f:de:ed:4d:53:f1:45:1a: 50:84:01:85:f5:53:e2:ce:e6:a9:bf:58:65:b7:b5: 7d:42:f1:80:bb:61:4e:48:eb:51:98:f2:6e:45:86: 7c:1e:08:85:88:69:cc:9d:21:89:64:0c:de:a5:e2: cd:67:cf:1b:fc:c6:dd:8f:b8:69:a8:b1:a9:89:29: 41:01:1a:d3:31:f7:8f:94:ce:47:81:6e:b0:cd:48: 0d:0c:98:d9:9a:64:29:a3:49:d9:a9:3e:05:64:d0: b8:8a:d8:11:b7:52:11:2f:5e:b0:f7:56:a3:e0:16: dd:77:b6:34:c9:b5:f2:66:c6:66:f9:e4:62:46:54: 38:72:99:5b:64:c0:73:61:59:69:06:c9:e7:3b:84: fd:4a:c4:4b:9e:30:81:e8:07:38:49:00:bc:40:42: 14:00:05:77:e7:71:e8:ff:0e:21:89:23:b1:be:7a: 20:8f:2e:dd:91:62:b7:d3:40:96:b2:64:63:5e:df: 6e:d8:0e:51:45:fd:dc:97:b2:66:04:5f:92:24:5c: da:fe:f4:c1:bd:1f:c2:23:f3:39:73:13:3a:73:15: 6c:d3:f0:c2:90:34:11:e8:d3:c1:c1:8f:73:bb:4c: ec:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:3F:E4:9C:7F:E3:59:FF:91:DF:5F:F1:32:CF:C1:2D:54:59:0A:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/559261fd-4f8a-3c2a-b7c4-465a1464d82c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1402:d800::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:6e:ee:dc:65:f6:fa:41:ac:4a:59:a7:49:96:fe:97:8d:ed: 71:1d:3a:11:8c:14:d9:8a:81:da:98:f4:76:07:8a:37:50:09: b7:03:56:17:a9:c3:79:8d:4a:76:52:e3:a6:39:87:e3:8a:26: 9e:87:15:8a:25:55:bc:5e:32:dc:2f:f4:2d:f6:f0:6b:33:87: 86:71:81:11:68:e4:63:8b:2f:d8:6c:f0:f9:c8:8b:81:5e:c2: 72:3b:0f:30:f1:a9:bc:5e:d9:86:1c:ce:13:1f:91:51:3d:14: f7:56:7f:5b:9a:f2:1f:33:fd:b3:cf:a5:df:d8:78:81:0c:0d: 6d:a2:bc:c9:a1:f6:c7:82:aa:b3:c6:05:4c:d9:57:97:27:d3: 06:7a:87:9a:19:e7:e6:83:94:ef:6c:d6:18:bf:3b:44:30:da: 73:c0:f6:af:fb:7f:d4:92:29:07:81:7b:86:57:70:3d:f1:c4: b5:41:d3:e1:cf:32:1d:6e:19:ae:5e:7b:c1:7e:c1:76:02:07: 0a:b3:08:96:8c:e4:aa:80:68:d1:c6:de:7d:49:72:51:2f:50: c3:0e:b8:f3:0f:28:cf:e6:d8:ae:6d:80:ce:2c:af:37:60:b6: 3b:95:af:5a:96:f4:97:42:e8:56:eb:47:79:e8:94:4e:d0:05: 64:af:b8:10 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpJcHhkqE3CAc76jMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYyMzEzMDEwM1oXDTI1MDkyMTEzMDEwM1owLzEtMCsGA1UEAxMk OTQ4NjU4MTYtNDUxZS00ZDk3LWFmZDUtZDcxYmNhODY4MzhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndxi2oPJ3sQgHIpjEXcLEmpdOkMFH97tTVPx RRpQhAGF9VPizuapv1hlt7V9QvGAu2FOSOtRmPJuRYZ8HgiFiGnMnSGJZAzepeLN Z88b/Mbdj7hpqLGpiSlBARrTMfePlM5HgW6wzUgNDJjZmmQpo0nZqT4FZNC4itgR t1IRL16w91aj4Bbdd7Y0ybXyZsZm+eRiRlQ4cplbZMBzYVlpBsnnO4T9SsRLnjCB 6Ac4SQC8QEIUAAV353Ho/w4hiSOxvnogjy7dkWK300CWsmRjXt9u2A5RRf3cl7Jm BF+SJFza/vTBvR/CI/M5cxM6cxVs0/DCkDQR6NPBwY9zu0zsbwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNk/5Jx/41n/kd9f8TLPwS1UWQpUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTU5MjYxZmQtNGY4YS0z YzJhLWI3YzQtNDY1YTE0NjRkODJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUAtgA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAlu7txl9vpBrEpZp0mW/peN7XEdOhGMFNmKgdqY9HYHijdQCbcD Vhepw3mNSnZS46Y5h+OKJp6HFYolVbxeMtwv9C328Gszh4ZxgRFo5GOLL9hs8PnI i4FewnI7DzDxqbxe2YYczhMfkVE9FPdWf1ua8h8z/bPPpd/YeIEMDW2ivMmh9seC qrPGBUzZV5cn0wZ6h5oZ5+aDlO9s1hi/O0Qw2nPA9q/7f9SSKQeBe4ZXcD3xxLVB 0+HPMh1uGa5ee8F+wXYCBwqzCJaM5KqAaNHG3n1JclEvUMMOuPMPKM/m2K5tgM4s rzdgtjuVr1qW9JdC6FbrR3nolE7QBWSvuBA= -----END CERTIFICATE-----Generated at Sun Jun 29 14:13:39 2025 by rpki-client