$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/954c3732-e312-3cdc-af0c-fd0854ad4583.roa File: 954c3732-e312-3cdc-af0c-fd0854ad4583.roa (raw, json) Hash identifier: MujIiVnQLQYvxpZJtHC6R3e/x9EG6iju7PB5CFliKeY= Subject key identifier: 07:EA:36:CB:C0:EB:EE:34:CB:6A:CF:A5:2B:BF:BE:B9:F0:BB:5C:2B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AA42B8FD25407F5C586D04840 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/954c3732-e312-3cdc-af0c-fd0854ad4583.roa Signing time: Sat 26 Jul 2025 01:00:49 +0000 ROA not before: Sat 26 Jul 2025 01:00:49 +0000 ROA not after: Fri 24 Oct 2025 01:00:49 +0000 asID: 20940 IP address blocks: 2600:1401:d000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a4:2b:8f:d2:54:07:f5:c5:86:d0:48:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 26 01:00:49 2025 GMT Not After : Oct 24 01:00:49 2025 GMT Subject: CN=ab00c826-eb54-438a-9fd5-ae7961c5e21b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:a5:5c:79:88:4b:93:20:30:0a:67:20:3b:00: eb:96:dc:6c:73:2f:47:33:71:31:3f:65:55:2f:7d: dc:d0:f6:db:f5:90:ad:bc:f3:b9:9d:e5:9f:08:15: ac:20:28:a8:49:0f:de:1f:a9:36:2d:89:f5:c2:c7: ab:f1:9f:5f:7d:c1:c6:5c:99:6a:00:47:73:8d:cf: 59:ab:10:20:6a:9a:fb:92:04:1e:72:81:65:be:4f: f0:49:75:94:4d:38:ab:9c:fe:c6:28:3c:ed:9b:df: 4d:cf:89:64:02:89:4b:25:b7:04:90:0d:a1:1d:36: 85:42:44:65:6b:08:b1:84:9b:0d:da:21:41:10:f6: eb:74:c9:1d:64:20:ce:c5:32:18:90:37:af:ed:9b: b7:01:dc:43:fa:e5:78:6a:0e:1b:0d:53:30:0c:7d: c1:e2:77:68:4d:eb:b5:2b:8a:10:8e:8e:20:59:5a: 10:58:33:d6:ae:43:65:7a:68:94:45:a8:d4:28:2d: a4:c3:82:5d:36:62:73:47:3e:8f:68:6d:d1:09:d3: 80:04:e3:13:63:2a:29:07:aa:50:fa:23:0e:43:ff: a7:f3:eb:3b:fb:52:92:9f:0d:f7:04:e1:6c:1c:3f: 56:c6:42:e0:18:e9:0f:c7:76:7f:8d:53:e1:02:e1: a0:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:EA:36:CB:C0:EB:EE:34:CB:6A:CF:A5:2B:BF:BE:B9:F0:BB:5C:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/954c3732-e312-3cdc-af0c-fd0854ad4583.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1401:d000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:21:33:e9:41:0c:79:3b:33:ae:f1:77:2e:71:6f:48:ee:43: 33:40:d7:9e:dd:e1:e4:46:c6:fe:71:d0:0f:cd:e2:0d:dd:09: 2e:c2:61:f9:77:04:ed:de:9d:6b:46:86:3a:35:cd:bc:9e:7e: bd:d6:24:9f:d0:21:65:70:65:28:33:4d:b1:52:ab:d1:b5:26: 6a:a2:86:ca:29:e1:7d:5a:1d:5a:8a:8c:fb:55:28:fd:9f:0c: 1f:3c:0d:0b:3d:ab:38:9e:04:2f:14:6f:bd:a8:3f:f4:16:bb: 11:de:dd:8f:bb:cf:70:eb:ac:e8:ab:93:4c:61:01:68:6d:8a: 24:5e:f3:61:da:6b:35:c5:30:4e:d1:c2:c2:c8:b7:4e:a7:ee: be:36:e1:ba:59:c9:d7:dd:4f:36:37:dd:80:48:2d:c1:da:2a: e3:54:78:6e:d9:46:8e:a9:6b:58:f5:82:62:5d:a2:e0:d2:8b: 11:8e:c6:f6:da:67:3a:14:62:b4:03:ef:6f:b7:bc:6c:84:60: 9e:29:36:1c:9c:b5:4f:02:de:44:a7:23:be:ea:66:e9:fe:cf: ff:74:12:5e:8e:8d:f9:81:53:bd:d2:73:02:98:ae:e7:46:33: 8c:56:8d:3b:68:77:fd:f5:d5:ab:8f:00:f3:6c:f4:eb:9e:84: 03:76:f1:89 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqkK4/SVAf1xYbQSEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk YWIwMGM4MjYtZWI1NC00MzhhLTlmZDUtYWU3OTYxYzVlMjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqVceYhLkyAwCmcgOwDrltxscy9HM3ExP2VV L33c0Pbb9ZCtvPO5neWfCBWsICioSQ/eH6k2LYn1wser8Z9ffcHGXJlqAEdzjc9Z qxAgapr7kgQecoFlvk/wSXWUTTirnP7GKDztm99Nz4lkAolLJbcEkA2hHTaFQkRl awixhJsN2iFBEPbrdMkdZCDOxTIYkDev7Zu3AdxD+uV4ag4bDVMwDH3B4ndoTeu1 K4oQjo4gWVoQWDPWrkNlemiURajUKC2kw4JdNmJzRz6PaG3RCdOABOMTYyopB6pQ +iMOQ/+n8+s7+1KSnw33BOFsHD9WxkLgGOkPx3Z/jVPhAuGgtwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAfqNsvA6+40y2rPpSu/vrnwu1wrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTU0YzM3MzItZTMxMi0z Y2RjLWFmMGMtZmQwODU0YWQ0NTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUAdAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACQhM+lBDHk7M67xdy5xb0juQzNA157d4eRGxv5x0A/N4g3dCS7C Yfl3BO3enWtGhjo1zbyefr3WJJ/QIWVwZSgzTbFSq9G1Jmqihsop4X1aHVqKjPtV KP2fDB88DQs9qzieBC8Ub72oP/QWuxHe3Y+7z3DrrOirk0xhAWhtiiRe82HaazXF ME7RwsLIt06n7r424bpZydfdTzY33YBILcHaKuNUeG7ZRo6pa1j1gmJdouDSixGO xvbaZzoUYrQD72+3vGyEYJ4pNhyctU8C3kSnI77qZun+z/90El6OjfmBU73ScwKY rudGM4xWjTtod/311auPAPNs9OuehAN28Yk= -----END CERTIFICATE-----Generated at Mon Aug 4 14:57:38 2025 by rpki-client