$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c1c860e6-5d6e-34d8-9c7a-49b0c49d3b44.roa File: c1c860e6-5d6e-34d8-9c7a-49b0c49d3b44.roa (raw, json) Hash identifier: V5p2UpFst0Nbi7v+gverncHe3IeIRy1xCEyW+R5Gw+E= Subject key identifier: 73:0F:62:85:D3:AD:C8:AD:D3:98:A5:5F:17:F4:B7:40:A4:38:91:5F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A4C3B1FCFFD4B540C7CDFBA00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c1c860e6-5d6e-34d8-9c7a-49b0c49d3b44.roa Signing time: Tue 24 Jun 2025 13:01:03 +0000 ROA not before: Tue 24 Jun 2025 13:01:03 +0000 ROA not after: Mon 22 Sep 2025 13:01:03 +0000 asID: 20940 IP address blocks: 2600:140b:3000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4c:3b:1f:cf:fd:4b:54:0c:7c:df:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 24 13:01:03 2025 GMT Not After : Sep 22 13:01:03 2025 GMT Subject: CN=449a1489-2ba9-43d3-b378-c5f1887eea07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:a6:30:ad:52:e8:7b:02:ab:65:5c:e8:9c:54: 15:35:7e:ec:dc:6a:b4:2b:ca:7f:1e:c2:bd:4c:65: 8d:3f:cb:77:f1:57:16:e7:f2:0d:f3:e0:72:15:46: bf:2b:75:c1:69:dc:78:ed:8e:e8:a7:1d:49:0f:69: 46:0d:e8:f7:27:22:35:fb:25:28:a4:22:1c:4b:04: ce:6a:3e:7a:98:a6:a4:48:b9:6e:a9:be:35:aa:b3: 9e:a9:c5:fe:36:4a:f3:34:53:af:3b:33:79:7a:0b: 23:51:1b:b0:3c:6a:7c:09:f5:db:1d:79:d6:68:bb: 0c:d7:b8:a0:f6:d7:8f:9f:47:0e:5e:62:d0:bc:d7: 19:43:a1:2c:18:1f:d1:f3:56:64:0e:65:e8:7a:13: 17:da:d9:df:30:ff:76:19:81:cf:51:99:f1:27:43: ba:fb:c8:a6:fe:5f:35:1c:5f:de:bd:67:cf:28:fa: d3:b0:9e:88:c9:83:06:a0:fd:97:91:aa:e0:84:48: 9a:34:85:67:38:d2:cb:4d:e7:5c:32:ef:63:a2:ca: bc:53:0d:c8:e8:cb:2c:91:69:77:9a:da:7f:bd:3a: 0c:d5:11:0d:63:34:fe:13:3b:17:b5:cc:5b:89:32: 21:a6:98:3e:09:05:b5:00:77:d8:e7:4c:07:2d:bd: d6:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:0F:62:85:D3:AD:C8:AD:D3:98:A5:5F:17:F4:B7:40:A4:38:91:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c1c860e6-5d6e-34d8-9c7a-49b0c49d3b44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:140b:3000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:ec:1c:fb:6d:e5:dd:3a:d4:43:0d:66:fe:3a:cb:ae:31:b2: 8e:79:3c:56:e6:ed:f8:bf:62:a2:26:41:26:c1:ce:9f:e6:ea: 34:75:be:98:a3:6c:f2:ad:7d:a7:87:cf:a3:40:86:fb:68:05: 83:c2:c5:00:61:ca:64:82:1b:f2:34:ed:d5:1c:6b:5b:a2:68: 81:5e:b5:b1:e6:5c:44:9b:09:09:b4:a0:90:61:cc:3b:9d:2d: 9b:b2:1b:13:01:dd:c5:cf:37:99:f4:ef:4b:73:26:80:7b:08: 83:5f:3f:71:47:5a:06:3b:43:9f:cf:68:89:a1:5c:3f:d6:6a: bb:66:56:71:ce:3e:68:cb:19:05:f3:c3:94:85:9f:c8:6d:d8: 60:82:37:17:90:ab:e7:d0:16:0a:f3:c5:0d:ce:17:2f:85:1d: 40:b7:d8:7e:3e:78:a9:15:6a:a6:96:7b:3a:3f:95:ae:7d:f0: 3f:42:85:ad:c6:d8:2e:3f:d5:30:3c:83:fe:99:bb:24:c1:5e: db:cb:ae:1e:4b:3f:29:98:9a:08:14:59:a3:69:7b:82:87:3b: be:a2:44:7c:22:4c:2a:8a:aa:0d:59:1c:fe:75:42:39:2b:f8: da:cc:db:91:a9:59:89:71:6a:41:cd:c0:fc:90:40:50:8b:d4: b3:92:ef:31 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpMOx/P/UtUDHzfugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYyNDEzMDEwM1oXDTI1MDkyMjEzMDEwM1owLzEtMCsGA1UEAxMk NDQ5YTE0ODktMmJhOS00M2QzLWIzNzgtYzVmMTg4N2VlYTA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjaYwrVLoewKrZVzonFQVNX7s3Gq0K8p/HsK9 TGWNP8t38VcW5/IN8+ByFUa/K3XBadx47Y7opx1JD2lGDej3JyI1+yUopCIcSwTO aj56mKakSLluqb41qrOeqcX+NkrzNFOvOzN5egsjURuwPGp8CfXbHXnWaLsM17ig 9tePn0cOXmLQvNcZQ6EsGB/R81ZkDmXoehMX2tnfMP92GYHPUZnxJ0O6+8im/l81 HF/evWfPKPrTsJ6IyYMGoP2XkarghEiaNIVnONLLTedcMu9josq8Uw3I6MsskWl3 mtp/vToM1RENYzT+EzsXtcxbiTIhppg+CQW1AHfY50wHLb3WwwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHMPYoXTrcit05ilXxf0t0CkOJFfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzFjODYwZTYtNWQ2ZS0z NGQ4LTljN2EtNDliMGM0OWQzYjQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUCzAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIXsHPtt5d061EMNZv46y64xso55PFbm7fi/YqImQSbBzp/m6jR1 vpijbPKtfaeHz6NAhvtoBYPCxQBhymSCG/I07dUca1uiaIFetbHmXESbCQm0oJBh zDudLZuyGxMB3cXPN5n070tzJoB7CINfP3FHWgY7Q5/PaImhXD/WartmVnHOPmjL GQXzw5SFn8ht2GCCNxeQq+fQFgrzxQ3OFy+FHUC32H4+eKkVaqaWezo/la598D9C ha3G2C4/1TA8g/6ZuyTBXtvLrh5LPymYmggUWaNpe4KHO76iRHwiTCqKqg1ZHP51 Qjkr+NrM25GpWYlxakHNwPyQQFCL1LOS7zE= -----END CERTIFICATE-----Generated at Sun Jun 29 12:33:59 2025 by rpki-client