$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fd8caa2a-8539-35e4-a96f-e382b9b47737.roa File: fd8caa2a-8539-35e4-a96f-e382b9b47737.roa (raw, json) Hash identifier: 28zM+8c9ow6JUXEjJUIVvxAWmFI8gxXOUfFvRQ2BD5Y= Subject key identifier: 9C:AD:C9:94:A6:53:ED:1C:E0:61:A8:4C:04:72:98:DE:DA:46:BE:3A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AC01635503DBC8392F70BFB40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fd8caa2a-8539-35e4-a96f-e382b9b47737.roa Signing time: Tue 05 Aug 2025 01:00:32 +0000 ROA not before: Tue 05 Aug 2025 01:00:32 +0000 ROA not after: Mon 03 Nov 2025 02:00:32 +0000 asID: 35994 IP address blocks: 2600:1401:7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c0:16:35:50:3d:bc:83:92:f7:0b:fb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 5 01:00:32 2025 GMT Not After : Nov 3 02:00:32 2025 GMT Subject: CN=31a39008-7623-4124-912f-a0a59a5a6357 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:af:c5:61:9a:ed:57:73:fb:56:bb:f8:75:8c: 1c:a9:cb:e9:8b:d4:de:05:69:88:76:b6:19:b3:6a: 7e:c6:a4:0e:b7:b3:ce:b4:a5:f2:98:a3:32:0a:60: 49:e7:4e:05:e7:05:b0:d0:cf:05:95:ec:70:3b:df: d2:14:bf:df:46:5a:4a:c9:69:18:f7:09:83:07:24: 4e:20:8c:07:cd:8c:79:62:ea:c9:f2:38:14:a8:e0: 26:b9:ac:b7:8e:b8:ee:c3:44:0c:cf:bf:71:99:95: ea:57:b7:e3:3e:fc:1f:44:6b:51:39:6d:c9:c2:0d: b9:d5:f7:ee:e6:72:23:c4:22:7a:f1:57:3c:14:29: e1:0e:50:6d:01:74:4e:20:09:51:6e:7d:44:2b:0d: b0:f4:9d:6a:d1:02:24:0e:45:49:ad:7f:67:b2:c8: 07:6b:7e:7e:b6:3f:6c:3c:25:06:c1:09:b4:28:c2: 8c:59:37:ad:d5:f8:c4:4a:7c:af:1b:44:56:2f:64: b3:65:c8:ce:63:de:2d:a0:d9:6d:f5:b5:02:0b:64: 69:b1:0a:b8:26:5d:a8:b4:90:68:25:06:1b:14:75: 66:c5:9e:40:e7:2f:83:4d:d2:ee:40:06:ca:f7:9b: 47:a0:24:2a:aa:4d:78:f6:62:ee:f9:04:92:53:dd: ec:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:AD:C9:94:A6:53:ED:1C:E0:61:A8:4C:04:72:98:DE:DA:46:BE:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fd8caa2a-8539-35e4-a96f-e382b9b47737.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1401:7::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:e4:15:c2:05:c0:b6:e7:40:da:c1:31:38:ab:5e:36:ec:a8: a9:0a:8b:00:e8:60:2f:04:e8:d5:bd:36:8f:f4:56:5c:9e:e6: dd:57:57:e9:71:8d:f4:32:07:6b:cb:77:a0:26:44:bc:b4:c2: c4:7f:79:c3:95:d7:59:02:17:d1:07:8b:97:31:7a:7b:42:14: fb:3d:5d:0f:1b:2f:37:fa:f3:89:8f:b1:1e:95:eb:e0:2f:e5: c3:94:78:c4:38:13:da:57:1d:f4:00:1c:b9:db:91:96:1d:81: 13:ba:03:64:fb:59:16:15:ee:e6:11:6d:ba:c8:56:65:73:7c: 0f:50:15:89:cd:80:46:b2:42:65:78:c3:ab:65:06:e6:73:a7: a7:77:dd:b8:39:68:7a:26:5e:d8:ee:5a:0a:5b:e6:9f:a3:63: 7a:05:6e:5d:bc:44:4d:97:00:85:78:ef:f1:c6:7e:39:61:d7: 19:c3:71:5d:12:ce:f8:81:9a:1d:41:43:5f:25:76:e7:ed:d7: 1d:e0:3b:c6:5a:d4:72:6a:9a:ee:c6:16:ae:25:76:a5:c4:67: cb:4d:e0:45:72:86:9a:b8:0b:83:69:d8:28:bb:7a:86:3d:f8: 7d:c2:d7:e5:23:46:6d:c8:0b:58:8c:36:60:a0:07:f3:21:69: e2:a8:70:b7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErAFjVQPbyDkvcL+0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgwNTAxMDAzMloXDTI1MTEwMzAyMDAzMlowLzEtMCsGA1UEAxMk MzFhMzkwMDgtNzYyMy00MTI0LTkxMmYtYTBhNTlhNWE2MzU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArq/FYZrtV3P7Vrv4dYwcqcvpi9TeBWmIdrYZ s2p+xqQOt7POtKXymKMyCmBJ504F5wWw0M8FlexwO9/SFL/fRlpKyWkY9wmDByRO IIwHzYx5YurJ8jgUqOAmuay3jrjuw0QMz79xmZXqV7fjPvwfRGtROW3Jwg251ffu 5nIjxCJ68Vc8FCnhDlBtAXROIAlRbn1EKw2w9J1q0QIkDkVJrX9nssgHa35+tj9s PCUGwQm0KMKMWTet1fjESnyvG0RWL2SzZcjOY94toNlt9bUCC2RpsQq4Jl2otJBo JQYbFHVmxZ5A5y+DTdLuQAbK95tHoCQqqk149mLu+QSSU93sSQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJytyZSmU+0c4GGoTARymN7aRr46MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZmQ4Y2FhMmEtODUzOS0z NWU0LWE5NmYtZTM4MmI5YjQ3NzM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUAQAH MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGvkFcIFwLbnQNrBMTirXjbsqKkKiwDoYC8E6NW9No/0Vlye5t1X V+lxjfQyB2vLd6AmRLy0wsR/ecOV11kCF9EHi5cxentCFPs9XQ8bLzf684mPsR6V 6+Av5cOUeMQ4E9pXHfQAHLnbkZYdgRO6A2T7WRYV7uYRbbrIVmVzfA9QFYnNgEay QmV4w6tlBuZzp6d33bg5aHomXtjuWgpb5p+jY3oFbl28RE2XAIV47/HGfjlh1xnD cV0SzviBmh1BQ18lduft1x3gO8Za1HJqmu7GFq4ldqXEZ8tN4EVyhpq4C4Np2Ci7 eoY9+H3C1+UjRm3IC1iMNmCgB/MhaeKocLc= -----END CERTIFICATE-----Generated at Sat Aug 23 12:57:25 2025 by rpki-client