$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5ae8d069-51b9-321a-86ca-e763e30e9468.roa File: 5ae8d069-51b9-321a-86ca-e763e30e9468.roa (raw, json) Hash identifier: Mc8Yqa1M7CGMLZEZnc7jIUXtXUvs/JvnMe4IcQt8sbo= Subject key identifier: 5C:DC:C5:D3:13:F5:A9:CC:1B:09:B1:3F:78:CE:2D:37:0C:79:1C:B6 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A4C3B1F92B0E6A0519F06EC78 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5ae8d069-51b9-321a-86ca-e763e30e9468.roa Signing time: Tue 24 Jun 2025 13:01:03 +0000 ROA not before: Tue 24 Jun 2025 13:01:03 +0000 ROA not after: Mon 22 Sep 2025 13:01:03 +0000 asID: 20940 IP address blocks: 2600:1409:12::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4c:3b:1f:92:b0:e6:a0:51:9f:06:ec:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 24 13:01:03 2025 GMT Not After : Sep 22 13:01:03 2025 GMT Subject: CN=17cbfcf0-9739-43b4-8e26-2aee93e28bb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:8d:44:2a:3e:42:03:5b:1b:60:1f:e1:29:a7: bf:cd:a7:b8:70:39:fe:0d:6a:ef:14:0f:44:dd:6a: 9b:56:3d:52:d0:51:48:17:76:e0:47:27:87:a1:b4: 2f:b1:58:1d:ff:c5:04:14:03:7a:3b:ad:25:ef:4c: b0:54:90:16:71:57:59:78:e0:d0:fa:12:86:98:b4: 57:26:d5:5d:97:bb:d3:73:88:00:3d:f5:4b:dd:5a: fe:10:f0:6c:27:f1:10:75:7d:57:8b:81:34:68:eb: 99:50:8a:81:b6:6c:7e:64:68:76:98:ad:c1:2f:d4: b8:2f:d2:60:30:6a:bd:78:db:10:23:7a:dc:cb:45: eb:ce:fd:fe:d1:61:76:35:18:00:d0:e1:73:b1:48: c7:04:6c:9d:2a:eb:43:a1:b5:4b:17:a6:c2:cb:67: d6:ed:32:36:eb:26:d5:bd:5f:59:ce:8a:9a:e6:9c: da:f6:60:b0:68:8f:41:d4:c2:11:67:a8:0d:7d:eb: d5:b2:d4:67:03:cf:b2:2d:ba:6a:f7:8b:14:36:5c: be:26:2f:c0:80:cf:10:38:ee:0d:b7:ff:70:da:1e: 92:83:80:67:e4:e8:6a:d7:71:f1:32:5d:23:22:2a: 14:ec:48:82:14:d3:24:e7:9a:32:6e:85:be:26:70: c3:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:DC:C5:D3:13:F5:A9:CC:1B:09:B1:3F:78:CE:2D:37:0C:79:1C:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5ae8d069-51b9-321a-86ca-e763e30e9468.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1409:12::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:2a:0b:40:f8:38:b0:44:a1:7b:c9:b9:69:bf:01:f9:0c:30: 2a:15:70:3d:89:4b:0f:99:9c:84:68:e5:5d:1e:ce:4c:3d:64: 76:1a:62:3b:aa:96:29:f3:d2:4b:9f:b1:c5:28:b8:02:a4:91: 86:6e:9f:f6:58:d6:74:3d:95:0e:20:ad:6c:a9:61:61:11:97: 51:0d:cb:d7:d1:db:15:9a:3b:1b:17:5a:ad:99:18:38:da:40: bc:e3:9e:82:70:f0:b3:4f:ba:77:89:b8:2f:3e:94:2e:2a:d6: 7e:0e:13:0f:ea:f7:06:92:a3:5a:16:33:a6:29:5f:af:24:ef: 0f:8e:5c:12:12:73:d9:46:1b:e3:64:f9:5f:6b:8e:12:66:de: 88:52:38:bf:c9:b7:e9:a6:12:a2:a9:8e:9f:d1:4c:fd:3b:09: 0d:be:9e:5c:bd:da:56:51:6a:4b:23:c9:df:81:77:7d:35:29: 09:da:81:2e:c3:9a:74:97:f7:bf:16:4a:d4:09:ae:86:15:0c: 65:3e:85:98:98:2d:f9:39:66:30:f7:c2:ca:d9:cf:5c:9b:f0: a9:5c:e0:19:2e:9a:ce:9d:5f:10:2e:73:72:9e:10:d0:e4:4f: 8a:a0:bc:a1:7d:cb:2b:d1:97:5e:34:5e:02:e7:c5:42:0a:9f: 69:27:5e:4b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpMOx+SsOagUZ8G7HgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYyNDEzMDEwM1oXDTI1MDkyMjEzMDEwM1owLzEtMCsGA1UEAxMk MTdjYmZjZjAtOTczOS00M2I0LThlMjYtMmFlZTkzZTI4YmI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq41EKj5CA1sbYB/hKae/zae4cDn+DWrvFA9E 3WqbVj1S0FFIF3bgRyeHobQvsVgd/8UEFAN6O60l70ywVJAWcVdZeODQ+hKGmLRX JtVdl7vTc4gAPfVL3Vr+EPBsJ/EQdX1Xi4E0aOuZUIqBtmx+ZGh2mK3BL9S4L9Jg MGq9eNsQI3rcy0Xrzv3+0WF2NRgA0OFzsUjHBGydKutDobVLF6bCy2fW7TI26ybV vV9Zzoqa5pza9mCwaI9B1MIRZ6gNfevVstRnA8+yLbpq94sUNly+Ji/AgM8QOO4N t/9w2h6Sg4Bn5Ohq13HxMl0jIioU7EiCFNMk55oyboW+JnDD9wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFzcxdMT9anMGwmxP3jOLTcMeRy2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWFlOGQwNjktNTFiOS0z MjFhLTg2Y2EtZTc2M2UzMGU5NDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUCQAS MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFAqC0D4OLBEoXvJuWm/AfkMMCoVcD2JSw+ZnIRo5V0ezkw9ZHYa Yjuqlinz0kufscUouAKkkYZun/ZY1nQ9lQ4grWypYWERl1ENy9fR2xWaOxsXWq2Z GDjaQLzjnoJw8LNPuneJuC8+lC4q1n4OEw/q9waSo1oWM6YpX68k7w+OXBISc9lG G+Nk+V9rjhJm3ohSOL/Jt+mmEqKpjp/RTP07CQ2+nly92lZRaksjyd+Bd301KQna gS7DmnSX978WStQJroYVDGU+hZiYLfk5ZjD3wsrZz1yb8Klc4Bkums6dXxAuc3Ke ENDkT4qgvKF9yyvRl140XgLnxUIKn2knXks= -----END CERTIFICATE-----Generated at Sun Jun 29 21:04:01 2025 by rpki-client