$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5da40664-6e5d-3935-a940-51a5c971376f.roa File: 5da40664-6e5d-3935-a940-51a5c971376f.roa (raw, json) Hash identifier: uHKGOegjlMXGFY6GUfZgdqnEUkHO5RGgyeY4q7Sp8ZQ= Subject key identifier: C2:29:1E:F5:87:3B:57:77:19:5A:07:A1:64:EC:24:96:B4:5C:16:88 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A4C3B2007CD91B472D43CA400 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5da40664-6e5d-3935-a940-51a5c971376f.roa Signing time: Tue 24 Jun 2025 13:01:03 +0000 ROA not before: Tue 24 Jun 2025 13:01:03 +0000 ROA not after: Mon 22 Sep 2025 13:01:03 +0000 asID: 20940 IP address blocks: 2600:140b:7000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4c:3b:20:07:cd:91:b4:72:d4:3c:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 24 13:01:03 2025 GMT Not After : Sep 22 13:01:03 2025 GMT Subject: CN=8b3f0e27-9915-46ca-a773-4d9b0bfa2802 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:7f:3f:d4:ed:cc:b6:04:d2:cd:4f:f8:fb:62: a0:32:33:0c:b7:f5:9d:1c:58:74:96:d1:e5:ea:34: 96:56:89:38:24:a5:ff:23:0c:5d:ef:53:e9:d5:a1: 93:ad:b0:17:d3:66:a0:f1:3b:7a:c5:b4:31:8d:73: e7:80:7c:84:ef:89:63:00:09:88:6d:ad:48:1a:83: 72:ad:7f:db:4b:2e:64:68:10:3f:5f:31:15:f2:35: 6d:1c:72:2d:a0:f3:72:5f:e7:8b:d2:62:50:2a:37: 73:7c:f1:3c:d1:d3:68:c5:f5:a1:a5:c7:ea:bb:e4: 36:b8:7d:77:41:80:ed:4e:8b:58:1f:ba:bd:b3:71: f7:f3:99:85:7e:b0:3a:aa:4b:a8:56:82:2b:ea:11: 2a:9c:4f:49:4b:e2:97:55:f1:82:a8:0e:30:3e:70: b6:32:f1:c5:47:a7:76:b5:e8:ea:4e:5d:12:20:0c: 39:76:0b:38:f9:04:1e:eb:00:8e:d1:fd:ee:19:53: a0:49:91:cc:7e:b6:ca:cb:25:21:f6:11:ca:0d:28: 67:91:77:0d:49:1a:03:c9:fe:ee:5f:4e:69:d8:97: c0:c5:6f:e3:bf:bb:c7:50:8c:5d:e7:d0:af:46:9e: 50:ae:91:e3:c8:e1:97:06:c6:d9:b9:cc:ac:fb:19: fc:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:29:1E:F5:87:3B:57:77:19:5A:07:A1:64:EC:24:96:B4:5C:16:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5da40664-6e5d-3935-a940-51a5c971376f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:140b:7000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:4f:1b:e8:13:11:d3:a1:91:51:24:31:68:17:c6:3e:50:7a: d4:83:0c:17:66:34:2b:b9:01:03:bf:4b:75:c0:d9:d2:a0:5b: b4:34:54:80:21:6e:e4:4a:ab:29:29:fb:17:c4:06:31:59:28: 43:bc:5b:5f:7e:56:3a:9e:77:90:32:ea:a6:a4:0e:a9:24:02: 6a:1e:eb:1c:64:e1:b3:36:78:a2:b2:58:75:09:77:80:fd:90: 14:fc:78:b1:4b:39:22:e4:95:99:bc:5a:02:e1:b5:c2:8f:ba: c3:c9:54:1d:93:f1:0f:20:1d:ab:1c:e8:92:33:21:af:75:d4: 5a:f5:78:5d:aa:2a:70:17:da:ba:c9:17:05:55:97:20:11:4b: 76:03:83:cd:ae:a3:de:7f:f9:14:c8:30:be:8e:c1:e5:83:47: 40:bd:ef:df:21:0f:c2:c3:f3:b2:46:94:8e:13:05:5b:a2:f0: fc:a1:f4:61:3b:34:34:8b:d9:d6:ca:d8:80:fe:47:70:0b:c7: 9a:eb:43:2d:5a:ac:6e:3c:44:b1:e5:85:8e:51:90:64:cc:36: 0b:63:29:fe:26:e9:3c:da:f0:84:ad:34:e1:16:93:4f:43:77: 22:2f:03:00:bd:f4:7c:bf:b1:79:23:1b:ce:bd:d9:fa:0a:a3: e8:42:e3:00 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpMOyAHzZG0ctQ8pAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYyNDEzMDEwM1oXDTI1MDkyMjEzMDEwM1owLzEtMCsGA1UEAxMk OGIzZjBlMjctOTkxNS00NmNhLWE3NzMtNGQ5YjBiZmEyODAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5n8/1O3MtgTSzU/4+2KgMjMMt/WdHFh0ltHl 6jSWVok4JKX/Iwxd71Pp1aGTrbAX02ag8Tt6xbQxjXPngHyE74ljAAmIba1IGoNy rX/bSy5kaBA/XzEV8jVtHHItoPNyX+eL0mJQKjdzfPE80dNoxfWhpcfqu+Q2uH13 QYDtTotYH7q9s3H385mFfrA6qkuoVoIr6hEqnE9JS+KXVfGCqA4wPnC2MvHFR6d2 tejqTl0SIAw5dgs4+QQe6wCO0f3uGVOgSZHMfrbKyyUh9hHKDShnkXcNSRoDyf7u X05p2JfAxW/jv7vHUIxd59CvRp5QrpHjyOGXBsbZucys+xn8lwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMIpHvWHO1d3GVoHoWTsJJa0XBaIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWRhNDA2NjQtNmU1ZC0z OTM1LWE5NDAtNTFhNWM5NzEzNzZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUC3AA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIlPG+gTEdOhkVEkMWgXxj5QetSDDBdmNCu5AQO/S3XA2dKgW7Q0 VIAhbuRKqykp+xfEBjFZKEO8W19+Vjqed5Ay6qakDqkkAmoe6xxk4bM2eKKyWHUJ d4D9kBT8eLFLOSLklZm8WgLhtcKPusPJVB2T8Q8gHasc6JIzIa911Fr1eF2qKnAX 2rrJFwVVlyARS3YDg82uo95/+RTIML6OweWDR0C9798hD8LD87JGlI4TBVui8Pyh 9GE7NDSL2dbK2ID+R3ALx5rrQy1arG48RLHlhY5RkGTMNgtjKf4m6Tza8IStNOEW k09DdyIvAwC99Hy/sXkjG8692foKo+hC4wA= -----END CERTIFICATE-----Generated at Sun Jun 29 13:48:19 2025 by rpki-client