$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e258ceb7-db0c-3f55-8200-5b59e1a724be.roa File: e258ceb7-db0c-3f55-8200-5b59e1a724be.roa (raw, json) Hash identifier: mpNhnQzq/AcsJet0NjBhdNtAFohSb62ZePWVv1wsg50= Subject key identifier: 4E:48:E4:58:DB:11:69:25:54:B0:42:C9:34:A3:01:F6:85:4D:18:3A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AC72DB5037F755F17266C9F30 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e258ceb7-db0c-3f55-8200-5b59e1a724be.roa Signing time: Thu 07 Aug 2025 13:58:43 +0000 ROA not before: Thu 07 Aug 2025 13:58:43 +0000 ROA not after: Wed 05 Nov 2025 14:58:43 +0000 asID: 20940 IP address blocks: 2600:141c:e800::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c7:2d:b5:03:7f:75:5f:17:26:6c:9f:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 7 13:58:43 2025 GMT Not After : Nov 5 14:58:43 2025 GMT Subject: CN=a8a383ea-6761-482c-9c6a-22a0ff4aa78a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ca:44:79:d1:30:7d:2b:45:f6:7f:3a:14:e7: 69:83:eb:c7:82:7a:62:29:8e:08:94:c1:ad:fa:1a: 0d:65:3f:2b:44:42:73:1f:9d:ec:d0:49:21:f7:67: 36:4a:9b:3c:11:60:43:f4:a2:55:9e:e7:5d:17:f9: e4:fd:40:6e:fe:89:12:8a:23:b0:18:bf:90:6e:7e: af:bb:de:dd:35:f8:2c:cf:34:2e:82:23:f0:db:bb: 4d:24:6a:6a:2f:e1:d3:db:0a:e8:60:88:e9:18:f6: f0:36:a5:a8:68:44:32:a4:29:54:47:2c:b7:40:f5: fd:af:1f:e4:74:16:40:c6:9c:b7:f0:fb:3d:05:2b: 59:c3:88:1f:e2:d2:c1:1b:5f:d2:fb:46:be:43:52: 30:4b:40:76:6d:dd:83:70:b6:c8:35:d3:21:d4:e8: c3:63:92:49:d7:bb:b9:f5:ae:d3:49:52:29:89:7a: 9b:b8:13:1f:06:b1:11:2d:1f:54:f8:b2:29:b4:96: 77:42:1c:d2:6c:0f:f4:64:61:bd:b3:bb:bf:0b:87: 64:96:00:1a:2b:e0:f3:1a:81:15:5d:dd:37:e2:89: fd:eb:42:c5:50:c9:61:1e:c5:70:64:72:5d:8e:b9: 71:b4:5f:47:3a:94:3e:ba:c3:4b:40:54:f2:62:fe: 5c:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:48:E4:58:DB:11:69:25:54:B0:42:C9:34:A3:01:F6:85:4D:18:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e258ceb7-db0c-3f55-8200-5b59e1a724be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:141c:e800::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:a6:52:3e:89:f9:aa:35:b1:c7:6b:d2:31:26:1c:4e:b0:e4: e1:dd:0c:74:5c:79:58:5a:35:89:9b:04:4d:e0:7e:9f:8d:ce: bc:7d:e5:b3:eb:63:9a:86:71:5d:31:ad:24:05:8b:de:ab:f7: ae:07:53:e3:9b:ca:22:08:a3:7d:5d:86:a2:20:0e:43:8a:d2: f6:4f:ca:e4:fe:1d:aa:90:03:67:d9:65:b3:9b:a8:0c:f8:f6: 04:90:af:35:3d:e5:77:f8:f0:82:84:c5:b2:8a:02:16:1e:23: 18:2a:53:a6:11:b7:b4:7c:25:dd:c2:31:9b:34:14:38:97:69: e6:2f:65:72:9c:d1:23:15:44:55:1a:24:6a:aa:3f:6a:23:cc: f6:7c:da:42:d9:54:4e:c8:10:40:e2:84:37:a9:60:c3:fb:cc: 8c:f1:41:41:c5:39:70:ee:36:f8:9f:d7:c5:78:10:6c:55:b6: af:fd:30:29:6e:d7:23:ce:ed:df:ba:81:27:85:a0:5e:fd:71: c8:26:2f:4e:af:90:93:85:45:8d:5f:a4:d9:65:19:a7:d1:25: c2:42:13:7d:b4:f2:64:81:ec:75:df:da:cb:75:e8:d5:95:09: 75:6d:ac:b2:57:27:b5:27:b1:9a:a8:a1:86:0e:32:7c:16:42: d0:3b:c9:71 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErHLbUDf3VfFyZsnzAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgwNzEzNTg0M1oXDTI1MTEwNTE0NTg0M1owLzEtMCsGA1UEAxMk YThhMzgzZWEtNjc2MS00ODJjLTljNmEtMjJhMGZmNGFhNzhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8pEedEwfStF9n86FOdpg+vHgnpiKY4IlMGt +hoNZT8rREJzH53s0Ekh92c2Sps8EWBD9KJVnuddF/nk/UBu/okSiiOwGL+Qbn6v u97dNfgszzQugiPw27tNJGpqL+HT2wroYIjpGPbwNqWoaEQypClURyy3QPX9rx/k dBZAxpy38Ps9BStZw4gf4tLBG1/S+0a+Q1IwS0B2bd2DcLbINdMh1OjDY5JJ17u5 9a7TSVIpiXqbuBMfBrERLR9U+LIptJZ3QhzSbA/0ZGG9s7u/C4dklgAaK+DzGoEV Xd034on960LFUMlhHsVwZHJdjrlxtF9HOpQ+usNLQFTyYv5cTwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFE5I5FjbEWklVLBCyTSjAfaFTRg6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTI1OGNlYjctZGIwYy0z ZjU1LTgyMDAtNWI1OWUxYTcyNGJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUHOgA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGemUj6J+ao1scdr0jEmHE6w5OHdDHRceVhaNYmbBE3gfp+Nzrx9 5bPrY5qGcV0xrSQFi96r964HU+ObyiIIo31dhqIgDkOK0vZPyuT+HaqQA2fZZbOb qAz49gSQrzU95Xf48IKExbKKAhYeIxgqU6YRt7R8Jd3CMZs0FDiXaeYvZXKc0SMV RFUaJGqqP2ojzPZ82kLZVE7IEEDihDepYMP7zIzxQUHFOXDuNvif18V4EGxVtq/9 MClu1yPO7d+6gSeFoF79ccgmL06vkJOFRY1fpNllGafRJcJCE3208mSB7HXf2st1 6NWVCXVtrLJXJ7UnsZqooYYOMnwWQtA7yXE= -----END CERTIFICATE-----Generated at Sat Aug 23 12:54:09 2025 by rpki-client