$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d3c802e8-805a-3e66-9b60-a8d92f05fe83.roa File: d3c802e8-805a-3e66-9b60-a8d92f05fe83.roa (raw, json) Hash identifier: 5zUAxLJrP61YiD9F4BcaSxetryebvlWTf82vQnCfzkg= Subject key identifier: 53:55:7A:D3:D3:88:7B:9B:C4:CD:CD:86:41:57:C4:58:AE:01:76:4A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A5765DA4711BB210CF0F753F0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d3c802e8-805a-3e66-9b60-a8d92f05fe83.roa Signing time: Sat 28 Jun 2025 13:01:02 +0000 ROA not before: Sat 28 Jun 2025 13:01:02 +0000 ROA not after: Fri 26 Sep 2025 13:01:02 +0000 asID: 20940 IP address blocks: 2600:1419:d400::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:57:65:da:47:11:bb:21:0c:f0:f7:53:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 28 13:01:02 2025 GMT Not After : Sep 26 13:01:02 2025 GMT Subject: CN=ee99cbf3-3de6-4816-b975-6685048d0c5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:70:b9:81:31:d3:60:62:27:a1:1a:56:bd:8b: f5:fc:f3:db:72:b1:6a:da:02:3f:35:f8:6a:62:99: 5d:7a:2b:f3:ce:da:17:8b:de:2d:8b:f9:29:ae:e3: 28:d8:bc:7d:c0:81:24:11:0e:ae:c5:63:9b:cb:b0: dc:e5:a1:9c:07:91:ab:83:38:bb:d3:e2:49:6c:03: 10:1a:13:1f:45:11:44:ee:de:a9:4a:fc:56:58:2f: d1:0f:dc:50:94:d8:c7:31:5f:9c:3e:58:ad:d0:4b: 61:88:3e:e9:b9:a4:b5:46:54:49:ba:16:b9:d0:29: ee:d7:8d:e7:2d:ec:68:db:12:c2:e9:75:14:8d:01: c7:f7:79:5b:cf:eb:30:0b:32:b8:49:72:4b:07:ca: f4:51:8f:17:14:93:e0:64:0e:11:7e:42:c4:ec:09: 28:6a:41:9c:c4:4e:18:f0:67:90:5e:e6:cc:61:a8: a3:a4:7d:0d:76:2c:8d:18:46:52:a3:d8:e7:25:c7: 0e:08:06:cd:38:18:4d:62:f1:e4:3c:b4:d8:42:d5: 0b:db:e3:3b:03:60:6d:ef:e8:fa:db:94:d3:60:75: 16:87:7c:7a:dc:c4:16:90:51:21:7c:e2:59:1f:83: bd:05:96:2f:7e:7b:da:d2:d3:b2:13:fc:48:0d:e6: df:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:55:7A:D3:D3:88:7B:9B:C4:CD:CD:86:41:57:C4:58:AE:01:76:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d3c802e8-805a-3e66-9b60-a8d92f05fe83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1419:d400::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:0e:e0:f8:28:b7:6d:a2:30:10:e6:1a:a6:e4:50:4d:52:a2: 01:95:75:5c:40:84:91:91:c2:ae:11:bc:77:74:b5:f9:8b:d2: d1:3b:61:1e:ba:3c:b6:ed:80:56:45:85:d5:ff:20:56:10:f4: 33:99:2c:f8:e4:cd:c1:8b:85:e1:4c:37:c2:d6:17:66:21:b1: 5a:cd:f9:15:4b:67:0d:63:b6:af:76:a8:40:59:05:d0:31:ba: 4f:69:d8:08:1c:b0:6d:dc:13:b8:83:a3:74:51:14:ea:c1:21: 81:dd:fd:50:c2:68:00:99:0a:bd:20:bf:fa:a9:22:a9:74:eb: 6a:c2:09:c7:e7:69:15:7b:91:59:8b:a1:a8:30:fe:c8:bc:71: d6:af:3c:45:68:17:39:ec:f4:38:f3:54:69:c4:ee:0e:e6:d8: c3:b4:a6:ab:32:c9:da:01:64:90:40:3a:c5:f2:ba:24:f2:76: 51:16:42:2e:13:1c:38:16:1b:cc:27:bc:dd:27:17:50:f1:06: 98:b6:12:ac:5b:37:49:4c:eb:58:84:ef:c9:f4:35:d2:9b:29: 0c:b9:2e:3c:de:49:de:b6:66:c0:7a:d0:97:76:86:3c:73:f1: 59:19:96:3c:a9:30:76:52:93:7f:c6:15:5a:cb:83:36:f5:d6: f3:7d:6a:c0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpXZdpHEbshDPD3U/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYyODEzMDEwMloXDTI1MDkyNjEzMDEwMlowLzEtMCsGA1UEAxMk ZWU5OWNiZjMtM2RlNi00ODE2LWI5NzUtNjY4NTA0OGQwYzVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3C5gTHTYGInoRpWvYv1/PPbcrFq2gI/Nfhq YpldeivzztoXi94ti/kpruMo2Lx9wIEkEQ6uxWOby7Dc5aGcB5Grgzi70+JJbAMQ GhMfRRFE7t6pSvxWWC/RD9xQlNjHMV+cPlit0EthiD7puaS1RlRJuha50Cnu143n Lexo2xLC6XUUjQHH93lbz+swCzK4SXJLB8r0UY8XFJPgZA4RfkLE7AkoakGcxE4Y 8GeQXubMYaijpH0NdiyNGEZSo9jnJccOCAbNOBhNYvHkPLTYQtUL2+M7A2Bt7+j6 25TTYHUWh3x63MQWkFEhfOJZH4O9BZYvfnva0tOyE/xIDebfXwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFNVetPTiHubxM3NhkFXxFiuAXZKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDNjODAyZTgtODA1YS0z ZTY2LTliNjAtYThkOTJmMDVmZTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUGdQA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACkO4Pgot22iMBDmGqbkUE1SogGVdVxAhJGRwq4RvHd0tfmL0tE7 YR66PLbtgFZFhdX/IFYQ9DOZLPjkzcGLheFMN8LWF2YhsVrN+RVLZw1jtq92qEBZ BdAxuk9p2AgcsG3cE7iDo3RRFOrBIYHd/VDCaACZCr0gv/qpIql062rCCcfnaRV7 kVmLoagw/si8cdavPEVoFzns9DjzVGnE7g7m2MO0pqsyydoBZJBAOsXyuiTydlEW Qi4THDgWG8wnvN0nF1DxBpi2EqxbN0lM61iE78n0NdKbKQy5LjzeSd62ZsB60Jd2 hjxz8VkZljypMHZSk3/GFVrLgzb11vN9asA= -----END CERTIFICATE-----Generated at Sun Jun 29 13:06:45 2025 by rpki-client