$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d313e9e4-39c1-3faf-b7be-8701a554f354.roa File: d313e9e4-39c1-3faf-b7be-8701a554f354.roa (raw, json) Hash identifier: crJjPHGfZXooFaz7YjHF3XFI2hxzImw2TPQtA1nE0u0= Subject key identifier: 47:5E:9F:C6:5C:59:8C:E7:3F:D8:26:E3:03:B5:2E:3A:67:17:8F:30 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A4C3B1F4DE0B78C5E064BB380 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d313e9e4-39c1-3faf-b7be-8701a554f354.roa Signing time: Tue 24 Jun 2025 13:01:03 +0000 ROA not before: Tue 24 Jun 2025 13:01:03 +0000 ROA not after: Mon 22 Sep 2025 13:01:03 +0000 asID: 20940 IP address blocks: 2600:1408:20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4c:3b:1f:4d:e0:b7:8c:5e:06:4b:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 24 13:01:03 2025 GMT Not After : Sep 22 13:01:03 2025 GMT Subject: CN=5a3217b2-3630-45d9-806b-5d5aef1fedd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:5e:7d:66:9b:87:75:37:14:2a:99:bb:f4:95: 90:56:8b:bf:0e:6e:f9:d9:be:cc:db:4f:34:4e:10: e2:c9:1e:57:8f:60:b9:fa:e5:fd:0f:97:91:2e:9e: b9:07:df:e7:9f:95:bc:0b:dc:e0:f4:12:0d:ca:04: b7:d3:0f:29:19:d2:69:7a:20:e8:93:c8:56:2e:82: d6:b3:73:41:fc:c0:4a:61:3b:93:b2:b1:45:ee:51: 36:d7:e9:de:ff:c9:0e:3c:66:26:3a:24:51:d4:ac: cd:62:2b:76:e5:ea:50:8d:63:8d:d4:c2:bc:01:62: 9d:0c:66:67:ae:07:0f:76:91:21:33:55:d4:09:c0: f5:d3:be:cf:ad:3e:73:e6:f7:3b:95:c7:91:aa:ba: c1:22:67:69:4a:36:17:59:e8:e0:5d:90:2b:2a:99: 6d:6a:f8:fd:20:4e:b1:d8:f7:71:8d:99:a1:ce:be: dc:4c:76:ae:e5:c1:b5:b5:be:41:d9:aa:a7:4c:99: 97:c2:91:05:dd:a6:e7:70:83:6e:bc:83:2d:42:99: 2b:31:c1:5f:7c:b3:06:24:7a:f5:2b:de:ef:cb:7c: ad:7d:2c:6b:6c:77:7a:9a:4e:5d:77:87:72:69:1b: 5f:e0:af:a7:fc:5e:d0:50:0c:04:66:9d:98:77:21: 39:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:5E:9F:C6:5C:59:8C:E7:3F:D8:26:E3:03:B5:2E:3A:67:17:8F:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d313e9e4-39c1-3faf-b7be-8701a554f354.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1408:20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:ea:56:17:1b:7f:17:08:40:9d:5d:f1:a5:1d:83:4a:72:60: 08:9c:87:2a:3e:e1:63:f8:a8:0a:49:c2:43:06:e0:ff:52:79: 8d:0b:c7:b9:82:0b:bc:19:84:da:b9:81:cb:fe:3a:8d:f6:f0: 30:e3:2f:35:82:7a:49:ca:53:35:37:9b:ca:bf:03:4d:ae:b8: bf:80:5d:43:04:a7:86:09:9a:52:d9:24:38:fe:24:c8:e5:7e: 07:4f:75:cc:01:52:31:d5:fc:6f:ed:b0:e6:6b:8c:45:0b:0c: c5:9a:e3:72:a6:37:33:87:ab:7b:78:2e:0d:78:37:43:0e:6f: 26:25:e4:d3:8a:57:a8:5b:52:07:1c:04:15:73:cb:fa:57:f7: ca:93:8f:62:99:df:2c:6d:39:ec:70:ae:45:00:20:ca:06:9d: 29:12:47:44:4d:7e:d4:83:9a:f9:32:ee:fb:12:77:17:9b:ee: cc:0b:bc:9e:17:f4:ff:6f:b1:5b:bf:17:3f:19:d1:c0:70:d3: f3:5d:21:6f:f8:0a:b9:80:8b:e2:02:d1:b8:d6:c0:f2:62:9c: ba:8d:6c:bc:a5:dd:3d:75:da:3e:7d:c6:d5:e3:6a:60:e7:91: fd:ca:61:69:5c:c9:2d:ee:4f:f5:a8:f9:f4:fb:32:21:d5:5c: e6:ab:85:5c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpMOx9N4LeMXgZLs4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYyNDEzMDEwM1oXDTI1MDkyMjEzMDEwM1owLzEtMCsGA1UEAxMk NWEzMjE3YjItMzYzMC00NWQ5LTgwNmItNWQ1YWVmMWZlZGQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsV59ZpuHdTcUKpm79JWQVou/Dm752b7M2080 ThDiyR5Xj2C5+uX9D5eRLp65B9/nn5W8C9zg9BINygS30w8pGdJpeiDok8hWLoLW s3NB/MBKYTuTsrFF7lE21+ne/8kOPGYmOiRR1KzNYit25epQjWON1MK8AWKdDGZn rgcPdpEhM1XUCcD1077PrT5z5vc7lceRqrrBImdpSjYXWejgXZArKpltavj9IE6x 2PdxjZmhzr7cTHau5cG1tb5B2aqnTJmXwpEF3abncINuvIMtQpkrMcFffLMGJHr1 K97vy3ytfSxrbHd6mk5dd4dyaRtf4K+n/F7QUAwEZp2YdyE5pQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEden8ZcWYznP9gm4wO1LjpnF48wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDMxM2U5ZTQtMzljMS0z ZmFmLWI3YmUtODcwMWE1NTRmMzU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUCAAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGbqVhcbfxcIQJ1d8aUdg0pyYAichyo+4WP4qApJwkMG4P9SeY0L x7mCC7wZhNq5gcv+Oo328DDjLzWCeknKUzU3m8q/A02uuL+AXUMEp4YJmlLZJDj+ JMjlfgdPdcwBUjHV/G/tsOZrjEULDMWa43KmNzOHq3t4Lg14N0MObyYl5NOKV6hb UgccBBVzy/pX98qTj2KZ3yxtOexwrkUAIMoGnSkSR0RNftSDmvky7vsSdxeb7swL vJ4X9P9vsVu/Fz8Z0cBw0/NdIW/4CrmAi+IC0bjWwPJinLqNbLyl3T112j59xtXj amDnkf3KYWlcyS3uT/Wo+fT7MiHVXOarhVw= -----END CERTIFICATE-----Generated at Sun Jun 29 13:56:07 2025 by rpki-client