$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4c1aef9d-309f-3737-8f3a-95b3dffbe5c9.roa File: 4c1aef9d-309f-3737-8f3a-95b3dffbe5c9.roa (raw, json) Hash identifier: +oNLGNcE3cJtYPmkthfuvhTujtMlGjtkdqTOE2oz2u4= Subject key identifier: 79:26:B5:EA:A8:13:E8:90:10:53:40:D7:BA:C9:7D:CA:02:5D:5F:A9 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AB91B9393DD8A4C9272F0C680 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4c1aef9d-309f-3737-8f3a-95b3dffbe5c9.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 35994 IP address blocks: 2600:1406:43::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:93:93:dd:8a:4c:92:72:f0:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=c851d8d9-58a8-43e2-98d3-0dbdf601659e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:22:45:52:28:a3:47:b2:cc:6f:09:d8:b4:84: 6e:fe:79:6c:99:6c:3e:ef:af:6a:79:e5:3f:25:ed: 36:ac:36:e5:d4:97:7e:e4:16:2a:f6:d6:3b:e8:cc: 38:57:37:a7:7e:ad:a8:fd:d0:eb:43:67:56:d9:2f: 02:9f:33:b7:9a:4d:eb:34:ea:30:d4:28:a6:96:a9: ce:0c:5c:0e:4d:5b:ea:fc:00:3e:88:b6:91:0d:50: 34:81:be:a0:d7:09:63:82:72:01:61:de:a4:3e:4d: 92:a8:22:f7:56:c6:60:3b:87:0b:c3:45:f0:d7:92: 22:a6:be:38:db:7b:fe:8e:00:b8:c5:0b:0c:3a:c5: 50:73:2f:a3:81:13:d0:0b:b9:04:f2:ab:b5:08:9c: 57:9b:b9:5c:b5:98:19:fa:40:af:0d:b2:29:55:25: 6c:88:b3:6b:0c:c3:e4:40:4a:f9:82:89:b0:73:66: ac:34:65:f1:83:29:11:62:6a:18:71:67:50:ac:bc: 74:9d:9c:37:81:58:07:83:fb:34:21:f8:c5:fd:e7: 27:71:46:b7:2f:c1:42:c2:03:cd:3c:44:73:b1:f7: fb:28:ea:46:35:d6:ec:0e:f4:8f:a8:a8:c8:19:c6: fb:ad:92:8c:7a:7c:c3:d7:5b:c3:8c:cd:b4:2d:0f: 7e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:26:B5:EA:A8:13:E8:90:10:53:40:D7:BA:C9:7D:CA:02:5D:5F:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4c1aef9d-309f-3737-8f3a-95b3dffbe5c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1406:43::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:66:e0:ad:ba:7f:b7:80:bd:9b:d6:b8:41:ae:0e:35:0e:e8: 5b:1e:7f:6c:c5:bb:07:77:e0:80:db:1a:75:83:b2:a2:c2:1b: c4:8b:a9:34:2e:83:8b:75:e2:82:31:ac:f3:ee:40:52:e0:c3: 34:26:92:19:05:b0:91:91:6e:d6:8f:97:a8:d8:f0:65:ee:78: 75:b5:b5:b0:0f:74:89:f2:1d:7b:64:3e:ee:ab:c9:6c:3f:6f: 08:47:eb:ab:2c:de:cd:e3:79:f5:30:47:ac:83:58:f2:b9:44: 03:eb:da:a3:d3:6f:89:3a:07:d0:f2:c3:bb:5d:92:0a:bf:44: 75:33:03:f8:8e:00:7b:4b:b9:ac:3c:76:db:07:10:50:ba:d2: ca:41:a1:88:7b:b4:d1:43:ac:f0:29:16:78:31:95:93:19:d3: e9:0b:fe:b1:54:79:79:24:f5:70:be:4a:73:a1:7b:94:ed:f4: 6e:45:aa:56:e6:75:68:26:ef:62:9c:4e:5b:84:43:8c:21:b7: 6c:27:4e:7b:c5:04:ce:9b:c4:34:42:55:ea:ee:90:43:04:a6: c4:ab:9e:70:b6:fd:d0:d6:a8:d1:e1:c1:32:30:55:02:03:4f: f3:94:52:e3:30:2c:cb:57:15:f3:ab:d2:a3:46:14:6b:58:a1: bf:2c:96:fb -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq5G5OT3YpMknLwxoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk Yzg1MWQ4ZDktNThhOC00M2UyLTk4ZDMtMGRiZGY2MDE2NTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhyJFUiijR7LMbwnYtIRu/nlsmWw+769qeeU/ Je02rDbl1Jd+5BYq9tY76Mw4Vzenfq2o/dDrQ2dW2S8CnzO3mk3rNOow1CimlqnO DFwOTVvq/AA+iLaRDVA0gb6g1wljgnIBYd6kPk2SqCL3VsZgO4cLw0Xw15Iipr44 23v+jgC4xQsMOsVQcy+jgRPQC7kE8qu1CJxXm7lctZgZ+kCvDbIpVSVsiLNrDMPk QEr5gomwc2asNGXxgykRYmoYcWdQrLx0nZw3gVgHg/s0IfjF/ecncUa3L8FCwgPN PERzsff7KOpGNdbsDvSPqKjIGcb7rZKMenzD11vDjM20LQ9+PQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHkmteqoE+iQEFNA17rJfcoCXV+pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGMxYWVmOWQtMzA5Zi0z NzM3LThmM2EtOTViM2RmZmJlNWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUBgBD MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAINm4K26f7eAvZvWuEGuDjUO6Fsef2zFuwd34IDbGnWDsqLCG8SL qTQug4t14oIxrPPuQFLgwzQmkhkFsJGRbtaPl6jY8GXueHW1tbAPdInyHXtkPu6r yWw/bwhH66ss3s3jefUwR6yDWPK5RAPr2qPTb4k6B9Dyw7tdkgq/RHUzA/iOAHtL uaw8dtsHEFC60spBoYh7tNFDrPApFngxlZMZ0+kL/rFUeXkk9XC+SnOhe5Tt9G5F qlbmdWgm72KcTluEQ4wht2wnTnvFBM6bxDRCVerukEMEpsSrnnC2/dDWqNHhwTIw VQIDT/OUUuMwLMtXFfOr0qNGFGtYob8slvs= -----END CERTIFICATE-----Generated at Wed Aug 6 00:52:21 2025 by rpki-client