$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ace01f9e-b455-383a-8169-e04c83945a5b.roa File: ace01f9e-b455-383a-8169-e04c83945a5b.roa (raw, json) Hash identifier: q64ppHMWV8V1ZzAqLuKv2xVohQ/8mVK0V4JSuVsGNWg= Subject key identifier: F3:4D:2A:C0:B1:19:2E:EE:D0:52:08:9F:17:77:F3:27:07:BD:A1:32 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A549B25D3279E2614DB0AFE80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ace01f9e-b455-383a-8169-e04c83945a5b.roa Signing time: Fri 27 Jun 2025 13:01:05 +0000 ROA not before: Fri 27 Jun 2025 13:01:05 +0000 ROA not after: Thu 25 Sep 2025 13:01:05 +0000 asID: 20940 IP address blocks: 2600:1410:3000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:54:9b:25:d3:27:9e:26:14:db:0a:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 27 13:01:05 2025 GMT Not After : Sep 25 13:01:05 2025 GMT Subject: CN=d26a0888-0b31-49d7-b4dc-2a9cf0420b49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:65:c4:1b:55:9d:4b:bc:d9:b9:6a:a8:4d:58: 76:83:2b:f7:76:40:99:5d:ad:78:7b:e1:33:b0:d4: d4:f6:7f:0b:a9:da:92:96:26:01:ec:8b:8c:a0:ea: aa:1b:dc:d9:45:d3:cd:2c:02:10:b8:fe:84:57:29: 99:5a:7d:d2:2d:f0:75:eb:1b:21:30:f7:bd:93:8e: 48:70:b0:d1:89:56:b4:29:50:31:90:63:2b:71:f8: 18:0b:ea:42:82:19:c4:be:78:9c:a3:3a:13:0b:e4: 7d:9e:78:97:49:38:fd:22:6c:ff:1f:5d:d3:f8:0d: 49:04:b8:78:e0:08:c8:de:9c:61:61:a7:6b:b7:78: 18:83:7c:f5:18:de:1a:20:4f:09:06:4f:55:13:2f: ca:05:00:45:3f:2f:1f:4b:d7:b8:2b:b2:66:03:1d: fe:86:05:22:7d:43:e9:24:83:0f:3c:fc:b6:49:f8: 7e:d7:19:ea:73:a6:25:28:86:a4:6e:a1:84:99:b0: cd:25:a6:5d:11:d6:03:79:16:af:74:b8:db:4f:e9: 04:02:8f:95:39:3c:f6:e8:cf:42:bc:79:1e:8f:12: b5:d3:35:fd:a0:95:90:dc:fe:84:16:52:76:fd:79: 10:e7:d4:8f:d3:35:a3:82:f1:ea:2a:e6:bb:d6:2a: f7:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:4D:2A:C0:B1:19:2E:EE:D0:52:08:9F:17:77:F3:27:07:BD:A1:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ace01f9e-b455-383a-8169-e04c83945a5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1410:3000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:6f:82:f5:69:72:e3:56:e4:e5:3f:a2:10:43:90:de:d3:f1: 93:5f:23:b4:7a:59:2c:e3:cf:d8:6b:6e:73:9f:37:e9:58:9f: 63:6c:99:d3:01:3f:d3:5f:04:94:e9:8c:1e:dd:ba:04:79:d9: 5f:69:5b:24:07:71:b2:0e:42:d3:cd:c5:a4:68:4f:2a:94:9f: 13:a4:84:bd:34:eb:73:17:5e:15:a2:f3:21:1f:39:0f:d1:40: 58:f2:10:fe:56:f7:b7:10:88:ba:2f:9e:2b:0d:e1:5f:7c:cd: bb:c1:36:c2:18:8d:8c:fd:64:b8:c8:88:93:d5:57:cd:53:7d: 64:51:aa:7e:ca:38:35:3c:6f:d9:58:9a:19:80:c6:af:dd:41: 8c:d6:8a:3d:98:00:e6:24:23:73:73:9e:7f:59:75:4f:8f:46: 82:3b:5d:68:d7:bc:dd:8b:f7:58:eb:ba:84:2b:85:af:14:62: 12:9c:e4:a4:01:16:94:de:56:cb:49:ed:8d:8d:a8:05:62:3e: 63:74:95:af:e1:ca:20:bc:a1:be:18:9f:c1:b3:40:6b:f3:9f: e5:cc:82:f3:51:4a:1d:fa:70:c3:2a:fe:80:51:1e:62:51:5e: 94:33:3e:42:2c:8a:5a:e6:7c:ea:f4:7c:a1:ee:d0:d9:a4:f9: 91:df:7a:78 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpUmyXTJ54mFNsK/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYyNzEzMDEwNVoXDTI1MDkyNTEzMDEwNVowLzEtMCsGA1UEAxMk ZDI2YTA4ODgtMGIzMS00OWQ3LWI0ZGMtMmE5Y2YwNDIwYjQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymXEG1WdS7zZuWqoTVh2gyv3dkCZXa14e+Ez sNTU9n8LqdqSliYB7IuMoOqqG9zZRdPNLAIQuP6EVymZWn3SLfB16xshMPe9k45I cLDRiVa0KVAxkGMrcfgYC+pCghnEvnicozoTC+R9nniXSTj9Imz/H13T+A1JBLh4 4AjI3pxhYadrt3gYg3z1GN4aIE8JBk9VEy/KBQBFPy8fS9e4K7JmAx3+hgUifUPp JIMPPPy2Sfh+1xnqc6YlKIakbqGEmbDNJaZdEdYDeRavdLjbT+kEAo+VOTz26M9C vHkejxK10zX9oJWQ3P6EFlJ2/XkQ59SP0zWjgvHqKua71ir3UwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPNNKsCxGS7u0FIInxd38ycHvaEyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWNlMDFmOWUtYjQ1NS0z ODNhLTgxNjktZTA0YzgzOTQ1YTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUEDAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADFvgvVpcuNW5OU/ohBDkN7T8ZNfI7R6WSzjz9hrbnOfN+lYn2Ns mdMBP9NfBJTpjB7dugR52V9pWyQHcbIOQtPNxaRoTyqUnxOkhL0063MXXhWi8yEf OQ/RQFjyEP5W97cQiLovnisN4V98zbvBNsIYjYz9ZLjIiJPVV81TfWRRqn7KODU8 b9lYmhmAxq/dQYzWij2YAOYkI3Nznn9ZdU+PRoI7XWjXvN2L91jruoQrha8UYhKc 5KQBFpTeVstJ7Y2NqAViPmN0la/hyiC8ob4Yn8GzQGvzn+XMgvNRSh36cMMq/oBR HmJRXpQzPkIsilrmfOr0fKHu0Nmk+ZHfeng= -----END CERTIFICATE-----Generated at Mon Jun 30 06:16:39 2025 by rpki-client