$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b5ecdf00-75ad-3ac7-8fe0-1f988083b3b7.roa File: b5ecdf00-75ad-3ac7-8fe0-1f988083b3b7.roa (raw, json) Hash identifier: vRoCJizhFgIsEoGj8ZnUpzLZmkaKn/nY5IjfUWOz8O8= Subject key identifier: 44:2D:60:58:D1:D2:35:CF:7E:69:6D:BB:1B:C6:5D:5C:FF:7E:94:77 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A549B25A2E3E2861B91132AC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b5ecdf00-75ad-3ac7-8fe0-1f988083b3b7.roa Signing time: Fri 27 Jun 2025 13:01:05 +0000 ROA not before: Fri 27 Jun 2025 13:01:05 +0000 ROA not after: Thu 25 Sep 2025 13:01:05 +0000 asID: 20940 IP address blocks: 2600:140f:5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:54:9b:25:a2:e3:e2:86:1b:91:13:2a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 27 13:01:05 2025 GMT Not After : Sep 25 13:01:05 2025 GMT Subject: CN=e7a7b4ff-3eaf-4dd7-8ba2-a8217bee76c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:5c:ea:00:0b:e1:a3:31:a9:f5:2b:a5:e9:ec: 92:0d:dd:10:de:60:da:68:34:7e:37:21:b7:15:3f: 7d:21:4b:d8:14:53:20:fc:b6:f4:b0:a7:18:08:8d: bb:19:d1:c1:7b:54:f9:46:72:78:83:b4:d5:a5:57: 97:fd:65:90:f9:2c:1e:f6:61:7e:81:12:82:6f:e1: a1:25:53:13:ab:d5:05:b7:ed:fc:90:dd:c1:8b:6c: ca:8f:ad:99:5c:5d:b4:15:58:22:32:7f:9b:30:65: ad:d6:5b:87:97:fc:c5:7a:43:a9:99:8f:67:7d:bf: d1:98:df:bd:8e:d8:04:5a:7b:f6:11:d8:ec:2e:18: 84:66:83:31:46:05:0d:c1:96:16:6c:08:3d:dd:7d: f8:73:0f:55:46:65:a6:86:fd:d4:52:1d:09:3c:83: c8:93:ef:43:0d:e6:52:f2:72:d6:85:d3:28:8d:fb: 8b:f0:ff:59:fa:d5:5a:c5:a6:85:79:25:e4:05:cd: bf:8c:cb:4a:af:d8:4d:57:0c:c6:e2:2c:dc:3e:a0: 23:a0:a7:41:77:ab:e9:d3:dc:a3:cc:2a:c1:db:31: 44:8e:3e:b1:91:41:9c:73:fd:03:4e:85:7e:77:2a: e2:f7:60:86:ca:f3:00:3e:f9:28:97:50:d5:64:41: 0c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:2D:60:58:D1:D2:35:CF:7E:69:6D:BB:1B:C6:5D:5C:FF:7E:94:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b5ecdf00-75ad-3ac7-8fe0-1f988083b3b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:140f:5::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:13:b0:23:ef:b8:ac:1e:a2:82:06:ef:6b:1a:b4:bf:99:1b: 15:a4:26:d8:e8:ac:68:98:5f:a8:9d:22:3e:69:c3:62:8a:fe: 78:d3:b0:30:a3:a2:e5:93:bd:5f:86:65:2e:10:71:12:cb:bf: 9a:2e:7a:e4:ce:70:d3:cc:21:3a:2a:34:a5:b9:f7:81:33:8a: bd:d7:9c:45:95:15:70:22:92:2f:a4:67:b7:b7:7a:95:c7:8c: 7b:02:5a:a6:c4:81:d7:91:ae:c1:88:ae:0c:de:91:bd:93:d4: 3a:65:61:4a:f8:80:e5:15:bf:f1:bc:dd:64:e6:dc:e1:9e:49: a4:c2:1a:a0:2f:ab:21:2e:b2:86:cb:d0:37:75:b5:e0:c3:c5: dc:19:71:a0:e0:d0:4f:44:b1:f3:66:64:dd:f0:f3:6a:d9:56: 57:0a:c6:9f:7c:7c:20:9f:14:4f:31:66:55:dc:83:b2:ca:5d: 8c:32:8c:c7:c5:2e:eb:2e:5d:24:d7:5c:f1:b7:ca:5b:9e:ab: 3f:db:fa:2f:0b:6d:a6:77:1e:15:e1:dd:7f:20:1f:c6:bd:2f: fe:aa:ed:ac:fb:16:be:af:70:a3:a2:08:83:3b:dd:08:5f:24: 33:54:2a:bc:06:9d:01:2a:25:8d:5e:ef:bd:d2:02:70:ad:7d: b0:0f:34:73 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpUmyWi4+KGG5ETKsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYyNzEzMDEwNVoXDTI1MDkyNTEzMDEwNVowLzEtMCsGA1UEAxMk ZTdhN2I0ZmYtM2VhZi00ZGQ3LThiYTItYTgyMTdiZWU3NmM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFzqAAvhozGp9Sul6eySDd0Q3mDaaDR+NyG3 FT99IUvYFFMg/Lb0sKcYCI27GdHBe1T5RnJ4g7TVpVeX/WWQ+Swe9mF+gRKCb+Gh JVMTq9UFt+38kN3Bi2zKj62ZXF20FVgiMn+bMGWt1luHl/zFekOpmY9nfb/RmN+9 jtgEWnv2EdjsLhiEZoMxRgUNwZYWbAg93X34cw9VRmWmhv3UUh0JPIPIk+9DDeZS 8nLWhdMojfuL8P9Z+tVaxaaFeSXkBc2/jMtKr9hNVwzG4izcPqAjoKdBd6vp09yj zCrB2zFEjj6xkUGcc/0DToV+dyri92CGyvMAPvkol1DVZEEMFQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEQtYFjR0jXPfmltuxvGXVz/fpR3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjVlY2RmMDAtNzVhZC0z YWM3LThmZTAtMWY5ODgwODNiM2I3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUDwAF MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABMTsCPvuKweooIG72satL+ZGxWkJtjorGiYX6idIj5pw2KK/njT sDCjouWTvV+GZS4QcRLLv5oueuTOcNPMIToqNKW594Ezir3XnEWVFXAiki+kZ7e3 epXHjHsCWqbEgdeRrsGIrgzekb2T1DplYUr4gOUVv/G83WTm3OGeSaTCGqAvqyEu sobL0Dd1teDDxdwZcaDg0E9EsfNmZN3w82rZVlcKxp98fCCfFE8xZlXcg7LKXYwy jMfFLusuXSTXXPG3ylueqz/b+i8LbaZ3HhXh3X8gH8a9L/6q7az7Fr6vcKOiCIM7 3QhfJDNUKrwGnQEqJY1e773SAnCtfbAPNHM= -----END CERTIFICATE-----Generated at Sun Jun 29 19:20:56 2025 by rpki-client