$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4027e276-11f7-3ac3-a9cc-bf461d0ba400.roa File: 4027e276-11f7-3ac3-a9cc-bf461d0ba400.roa (raw, json) Hash identifier: mbhkxeNgxlr6hSS0aRXf1wbuQxmpwTxktYlm5mLBq6o= Subject key identifier: 0B:3F:57:93:AC:AD:ED:02:6C:C9:E7:38:BD:E8:7A:65:F9:85:1F:71 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AADF111136871B9197CA91B80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4027e276-11f7-3ac3-a9cc-bf461d0ba400.roa Signing time: Tue 29 Jul 2025 13:01:04 +0000 ROA not before: Tue 29 Jul 2025 13:01:04 +0000 ROA not after: Mon 27 Oct 2025 13:01:04 +0000 asID: 20940 IP address blocks: 2600:1405:2000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ad:f1:11:13:68:71:b9:19:7c:a9:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 29 13:01:04 2025 GMT Not After : Oct 27 13:01:04 2025 GMT Subject: CN=65907fca-4835-4110-b814-513739671ed6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b0:ac:29:fc:3d:b4:d4:b4:96:3e:b8:68:17: 03:5a:a8:4f:86:f4:9c:a7:04:af:2c:37:40:bb:94: a2:86:08:93:21:07:d1:ec:9b:6a:77:22:bd:0c:f4: 29:40:1e:ce:0b:13:29:ce:61:29:86:43:08:2f:a5: a2:57:e6:c0:3f:ce:f2:3f:00:9b:d8:fb:1a:e8:52: 4f:27:4e:e8:6e:c1:55:00:82:d8:91:91:46:b7:0f: db:70:5f:20:84:50:0e:c8:dd:f8:eb:b9:fe:32:0c: 5c:20:cd:62:94:8b:ec:76:02:ad:84:32:46:c4:bb: e3:8f:2c:66:da:b4:4e:5a:df:89:6e:da:f0:16:ec: e0:2b:67:bd:d4:d0:a7:84:d9:53:c1:67:93:7b:5c: c2:31:fd:9a:32:bb:da:39:fb:fc:cb:e9:4d:33:de: 11:ca:0a:2f:10:9c:30:c4:d9:b7:48:e9:b3:da:6d: 0b:d7:12:9e:44:93:8d:c0:ec:dd:c0:e5:f2:90:92: a3:c5:8f:d7:d1:a5:2e:2d:d2:91:f0:10:3d:e8:d7: fe:d3:a8:8b:9e:07:ce:80:9f:80:83:6b:61:75:d7: 37:d1:39:80:b7:d6:99:09:6c:a3:ce:f4:e3:bc:36: 44:24:09:74:c4:af:26:4f:18:8a:5e:85:22:8c:02: 1f:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:3F:57:93:AC:AD:ED:02:6C:C9:E7:38:BD:E8:7A:65:F9:85:1F:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4027e276-11f7-3ac3-a9cc-bf461d0ba400.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1405:2000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:38:62:2c:f2:0c:a1:9e:1a:6d:63:1e:4d:20:a4:a9:10:9f: ca:99:6b:fd:67:f2:1a:b6:7b:b3:2f:76:eb:7d:36:2c:d2:58: b2:a3:97:b7:cd:12:1d:41:bf:5c:9c:69:47:c4:5c:b6:38:d3: 9d:69:16:8b:2a:0a:61:3a:14:c6:c0:3d:ae:cf:a7:b4:7a:be: 45:dd:82:39:14:7e:a0:00:57:f6:7b:45:57:03:22:f2:57:ce: cd:91:26:f1:9d:e6:e0:e4:a7:d3:64:f0:e1:c7:f0:60:19:b2: 34:02:ed:25:72:9c:92:72:d6:81:d1:63:86:a7:cd:fc:71:88: 0f:92:67:30:be:93:b8:35:27:c3:4b:e3:4f:39:7c:6c:7b:c7: 70:74:2c:9a:49:30:9f:a0:bd:d4:18:32:4a:95:2a:b8:13:45: fe:41:03:7a:6b:7d:50:09:18:ff:7a:60:4f:9d:db:f6:d3:9a: fb:52:59:15:98:9a:c2:01:95:75:40:86:88:33:f4:f9:c9:c0: 18:f5:fc:0e:d2:80:48:89:4c:42:c1:58:0c:9d:d3:d4:b9:33: 06:55:15:ad:10:10:ad:50:fa:81:95:cc:df:c5:d6:3d:44:fc: 67:9b:d0:9b:b8:77:64:80:4a:51:71:0b:26:95:4f:c8:07:0a: cd:dd:f3:74 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqt8RETaHG5GXypG4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk NjU5MDdmY2EtNDgzNS00MTEwLWI4MTQtNTEzNzM5NjcxZWQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7CsKfw9tNS0lj64aBcDWqhPhvScpwSvLDdA u5SihgiTIQfR7JtqdyK9DPQpQB7OCxMpzmEphkMIL6WiV+bAP87yPwCb2Psa6FJP J07obsFVAILYkZFGtw/bcF8ghFAOyN3467n+MgxcIM1ilIvsdgKthDJGxLvjjyxm 2rROWt+JbtrwFuzgK2e91NCnhNlTwWeTe1zCMf2aMrvaOfv8y+lNM94RygovEJww xNm3SOmz2m0L1xKeRJONwOzdwOXykJKjxY/X0aUuLdKR8BA96Nf+06iLngfOgJ+A g2thddc30TmAt9aZCWyjzvTjvDZEJAl0xK8mTxiKXoUijAIf5QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAs/V5Osre0CbMnnOL3oemX5hR9xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDAyN2UyNzYtMTFmNy0z YWMzLWE5Y2MtYmY0NjFkMGJhNDAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUBSAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD44YizyDKGeGm1jHk0gpKkQn8qZa/1n8hq2e7Mvdut9NizSWLKj l7fNEh1Bv1ycaUfEXLY4051pFosqCmE6FMbAPa7Pp7R6vkXdgjkUfqAAV/Z7RVcD IvJXzs2RJvGd5uDkp9Nk8OHH8GAZsjQC7SVynJJy1oHRY4anzfxxiA+SZzC+k7g1 J8NL4085fGx7x3B0LJpJMJ+gvdQYMkqVKrgTRf5BA3prfVAJGP96YE+d2/bTmvtS WRWYmsIBlXVAhogz9PnJwBj1/A7SgEiJTELBWAyd09S5MwZVFa0QEK1Q+oGVzN/F 1j1E/Geb0Ju4d2SASlFxCyaVT8gHCs3d83Q= -----END CERTIFICATE-----Generated at Mon Aug 4 14:42:35 2025 by rpki-client