$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/650336cc-ded6-3253-91ad-8caabac4a1e2.roa File: 650336cc-ded6-3253-91ad-8caabac4a1e2.roa (raw, json) Hash identifier: xMFrOzuWBrK7aZyO0O2i2Ia4L6XfcNEiWbS//fWL3U0= Subject key identifier: E6:DB:31:21:3C:5E:F0:DA:C1:5B:F6:22:25:CA:2E:18:33:C5:94:6E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A5765DA260B9B9DE7F8905500 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/650336cc-ded6-3253-91ad-8caabac4a1e2.roa Signing time: Sat 28 Jun 2025 13:01:02 +0000 ROA not before: Sat 28 Jun 2025 13:01:02 +0000 ROA not after: Fri 26 Sep 2025 13:01:02 +0000 asID: 20940 IP address blocks: 2600:1419:a400::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:57:65:da:26:0b:9b:9d:e7:f8:90:55:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 28 13:01:02 2025 GMT Not After : Sep 26 13:01:02 2025 GMT Subject: CN=909d9741-11be-42e0-9752-bb348aff4472 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:85:75:c7:ba:6b:98:dc:69:52:60:89:ce:78: ce:31:03:c5:9b:6e:94:1d:85:4c:3d:e6:0f:23:f3: 62:f8:f7:0c:c6:98:08:92:f1:2f:84:d1:50:20:37: e0:50:da:53:42:f1:3c:d7:7a:11:5b:7c:04:c1:9d: 35:8d:c4:92:21:9c:2c:ca:85:e8:f4:c2:4c:09:c3: 52:d8:fe:80:16:1e:d5:fd:fa:3c:f1:ca:e3:07:e4: 03:b8:ea:ec:aa:2c:f1:da:a2:9f:d5:a6:c4:3d:37: e1:30:df:2d:ab:8f:c6:a0:9d:09:4e:e8:8a:18:4e: 4f:43:e1:e6:ad:f7:2b:96:95:8f:ab:00:58:ed:74: 82:dc:c7:42:82:0c:13:e4:e6:a9:75:eb:48:7e:28: 88:37:56:eb:2c:fd:6c:0a:fb:de:58:40:2d:db:5e: 74:cb:e5:e3:3e:09:8a:22:a8:06:63:7c:00:df:dc: 3e:6b:d6:96:71:30:eb:ac:47:00:b5:ba:54:b7:ef: 13:c4:6d:8a:09:22:07:58:72:8a:02:4b:79:8e:0e: 2f:ae:d4:b2:3e:fe:e4:94:9d:f8:b7:92:33:fa:5a: 83:7a:b1:4c:f6:a1:65:2c:56:25:16:9e:23:be:d8: cf:f8:b6:64:67:c9:7b:bf:75:5f:66:62:da:5f:fd: 32:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:DB:31:21:3C:5E:F0:DA:C1:5B:F6:22:25:CA:2E:18:33:C5:94:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/650336cc-ded6-3253-91ad-8caabac4a1e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1419:a400::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:e2:9b:b6:64:a2:bc:00:82:12:c8:d0:21:6f:db:b5:ff:81: f7:d5:47:98:eb:72:d1:49:c3:9d:75:a6:41:7c:d5:ac:af:70: 65:ca:57:33:68:7b:b0:fb:21:35:fa:4b:60:26:1f:91:9d:84: 65:ef:a2:c3:89:30:17:0a:72:d9:8d:c0:48:63:ca:bc:be:5f: 15:b1:f8:10:ef:6c:44:4c:27:89:6f:87:0d:42:d9:76:c7:b2: 56:eb:b1:b7:7b:24:93:96:28:f7:ef:74:09:19:d3:e0:81:69: 94:9f:42:b7:de:89:18:08:d5:d3:09:ca:a0:fc:5b:c5:8c:d6: 83:db:2e:e0:fc:e5:6f:70:cc:19:54:6e:f0:a1:c8:e1:49:14: 84:80:30:49:51:53:17:8b:06:70:34:bb:41:e5:61:17:75:65: a1:95:b6:f4:56:d9:12:ea:b8:d7:74:b9:16:2d:ce:b4:f5:72: 7d:f2:a5:99:d1:d8:bb:4d:7e:3c:aa:ae:c7:e0:42:40:3e:9a: ed:dd:3d:56:4d:6b:30:f9:9b:3d:32:e8:21:59:5f:33:77:5b: d3:21:56:6d:85:1b:10:3e:e4:36:16:7d:05:1a:26:04:f9:a0: a3:64:13:e7:22:7b:e3:96:ba:f0:2d:41:fb:91:d5:86:1a:49: 19:fd:be:8d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpXZdomC5ud5/iQVQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYyODEzMDEwMloXDTI1MDkyNjEzMDEwMlowLzEtMCsGA1UEAxMk OTA5ZDk3NDEtMTFiZS00MmUwLTk3NTItYmIzNDhhZmY0NDcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIV1x7prmNxpUmCJznjOMQPFm26UHYVMPeYP I/Ni+PcMxpgIkvEvhNFQIDfgUNpTQvE813oRW3wEwZ01jcSSIZwsyoXo9MJMCcNS 2P6AFh7V/fo88crjB+QDuOrsqizx2qKf1abEPTfhMN8tq4/GoJ0JTuiKGE5PQ+Hm rfcrlpWPqwBY7XSC3MdCggwT5OapdetIfiiIN1brLP1sCvveWEAt2150y+XjPgmK IqgGY3wA39w+a9aWcTDrrEcAtbpUt+8TxG2KCSIHWHKKAkt5jg4vrtSyPv7klJ34 t5Iz+lqDerFM9qFlLFYlFp4jvtjP+LZkZ8l7v3VfZmLaX/0yRwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFObbMSE8XvDawVv2IiXKLhgzxZRuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjUwMzM2Y2MtZGVkNi0z MjUzLTkxYWQtOGNhYWJhYzRhMWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUGaQA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACrim7ZkorwAghLI0CFv27X/gffVR5jrctFJw511pkF81ayvcGXK VzNoe7D7ITX6S2AmH5GdhGXvosOJMBcKctmNwEhjyry+XxWx+BDvbERMJ4lvhw1C 2XbHslbrsbd7JJOWKPfvdAkZ0+CBaZSfQrfeiRgI1dMJyqD8W8WM1oPbLuD85W9w zBlUbvChyOFJFISAMElRUxeLBnA0u0HlYRd1ZaGVtvRW2RLquNd0uRYtzrT1cn3y pZnR2LtNfjyqrsfgQkA+mu3dPVZNazD5mz0y6CFZXzN3W9MhVm2FGxA+5DYWfQUa JgT5oKNkE+cie+OWuvAtQfuR1YYaSRn9vo0= -----END CERTIFICATE-----Generated at Tue Jul 1 07:05:27 2025 by rpki-client