$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/e239f5a3-1376-3dea-9101-a7a67a437145.roa File: e239f5a3-1376-3dea-9101-a7a67a437145.roa (raw, json) Hash identifier: JkH6hbAwRMGoZ1Llps/Y/0En99475X5xyQGdzdyknS4= Subject key identifier: BB:E4:A1:58:87:B4:A4:09:51:73:A8:39:E6:34:C8:1E:93:FA:A4:FA Certificate issuer: /CN=d5df2e7f-8e83-432a-8c27-5546944dda4b Certificate serial: 010D0C9F4328584AADF0FF03D01716C458C0DB80 Authority key identifier: F7:4D:4B:DE:0E:79:7B:FF:3E:5D:21:D7:B9:1A:A9:CB:AF:14:17:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/e239f5a3-1376-3dea-9101-a7a67a437145.roa Signing time: Tue 29 Jul 2025 13:01:04 +0000 ROA not before: Tue 29 Jul 2025 13:01:04 +0000 ROA not after: Mon 27 Oct 2025 13:01:04 +0000 asID: 46408 IP address blocks: 2600:1e00::/28 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/d5df2e7f-8e83-432a-8c27-5546944dda4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/d5df2e7f-8e83-432a-8c27-5546944dda4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ad:f0:ff:03:d0:17:16:c4:58:c0:db:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5df2e7f-8e83-432a-8c27-5546944dda4b Validity Not Before: Jul 29 13:01:04 2025 GMT Not After : Oct 27 13:01:04 2025 GMT Subject: CN=66bb978d-6adb-49a4-bf6a-638eb2a0ce49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:93:7e:fd:99:2e:f0:51:2d:40:c3:e5:21:56: 74:20:21:ac:12:4b:94:6d:79:cf:f9:9b:72:13:28: 3d:b5:48:07:de:2c:7d:68:59:e8:ca:2f:50:7e:37: 6b:c6:b5:16:3b:40:35:a2:0a:58:27:17:6d:2b:5e: 6d:6d:d0:a6:3e:e0:d5:dc:b2:88:0b:dd:54:fc:0c: b8:a6:7d:78:c4:40:ed:e4:35:6b:c9:f0:0b:d7:57: ba:e2:9d:39:d1:dd:95:4a:12:27:9c:cb:11:48:2f: db:17:2e:5d:75:87:2d:fb:5f:78:9b:6f:b3:2d:39: a0:48:13:86:13:cc:89:d5:9e:9e:d4:f3:23:7c:49: 2c:bf:ef:e6:26:7e:7e:ea:4d:77:5f:79:cc:25:fb: a4:98:ed:3d:43:2f:9f:0f:f1:d5:cb:e3:96:c0:d4: 38:f9:ec:ea:80:cd:f0:b5:5b:d6:2a:5c:a1:40:f3: 46:e8:f3:24:e2:4f:70:f6:6b:04:3a:fd:e3:66:b4: fc:92:99:df:4d:ea:c3:75:fc:40:e3:21:16:9d:53: c7:9a:0c:08:ac:f8:69:6c:9f:97:56:80:71:76:a2: 77:93:05:ec:58:64:12:c7:d5:13:72:8f:9b:21:99: 63:29:a6:9e:bd:b3:75:33:99:d1:62:e6:b0:cf:fc: 58:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:E4:A1:58:87:B4:A4:09:51:73:A8:39:E6:34:C8:1E:93:FA:A4:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/e239f5a3-1376-3dea-9101-a7a67a437145.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/d5df2e7f-8e83-432a-8c27-5546944dda4b.crl X509v3 Authority Key Identifier: keyid:F7:4D:4B:DE:0E:79:7B:FF:3E:5D:21:D7:B9:1A:A9:CB:AF:14:17:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b.cer sbgp-ipAddrBlock: critical IPv6: 2600:1e00::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:c5:33:7a:08:eb:6b:76:df:35:e5:7b:be:a5:5b:a4:56:35: af:ba:be:8d:cf:71:43:c7:88:fd:a0:a4:6c:68:fb:6f:f5:31: 9e:ec:f7:12:45:d8:f9:f0:f9:41:80:34:b8:c9:e4:02:11:28: 5c:d5:bc:b9:c4:fe:62:8c:f8:09:53:f6:19:fc:3f:d6:45:8f: 81:fe:f8:97:6d:a0:7f:e4:0f:06:9d:1c:6b:58:d1:4b:1f:0e: 09:67:5e:22:c9:ef:bf:ed:9d:b1:5e:e7:4a:86:1c:43:17:0b: 86:04:20:92:7e:55:24:90:8a:0f:d1:82:16:fd:6c:85:7e:55: 5b:9a:af:09:ba:07:82:da:6c:ae:f0:bd:ff:53:21:25:37:61: 0a:71:48:fd:41:77:b2:1a:23:b0:22:12:5c:da:86:79:a1:ef: a1:9b:7a:80:0c:63:2e:7c:29:41:7b:85:23:5d:59:ea:ce:8b: 29:6d:23:75:88:73:59:14:e6:2b:f3:76:54:83:d3:31:ef:50: 29:bb:88:dc:ca:21:50:53:0c:68:fe:ff:07:d9:63:13:e0:70: af:9a:a3:d2:69:52:35:48:b5:94:fc:75:08:5f:c2:8b:57:8c: 9f:81:66:0b:11:05:0f:b6:cc:05:c7:ac:42:ab:a3:d1:ac:a5: 87:57:1c:43 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqt8P8D0BcWxFjA24AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDVkZjJlN2YtOGU4My00MzJhLThjMjctNTU0Njk0NGRk YTRiMB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk NjZiYjk3OGQtNmFkYi00OWE0LWJmNmEtNjM4ZWIyYTBjZTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZN+/Zku8FEtQMPlIVZ0ICGsEkuUbXnP+Zty Eyg9tUgH3ix9aFnoyi9QfjdrxrUWO0A1ogpYJxdtK15tbdCmPuDV3LKIC91U/Ay4 pn14xEDt5DVryfAL11e64p050d2VShInnMsRSC/bFy5ddYct+194m2+zLTmgSBOG E8yJ1Z6e1PMjfEksv+/mJn5+6k13X3nMJfukmO09Qy+fD/HVy+OWwNQ4+ezqgM3w tVvWKlyhQPNG6PMk4k9w9msEOv3jZrT8kpnfTerDdfxA4yEWnVPHmgwIrPhpbJ+X VoBxdqJ3kwXsWGQSx9UTco+bIZljKaaevbN1M5nRYuawz/xYkQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLvkoViHtKQJUXOoOeY0yB6T+qT6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kNWRm MmU3Zi04ZTgzLTQzMmEtOGMyNy01NTQ2OTQ0ZGRhNGIvZTIzOWY1YTMtMTM3Ni0z ZGVhLTkxMDEtYTdhNjdhNDM3MTQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDVkZjJlN2YtOGU4My00MzJhLThj MjctNTU0Njk0NGRkYTRiL2Q1ZGYyZTdmLThlODMtNDMyYS04YzI3LTU1NDY5NDRk ZGE0Yi5jcmwwHwYDVR0jBBgwFoAU901L3g55e/8+XSHXuRqpy68UFwwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kNWRmMmU3Zi04ZTgzLTQzMmEtOGMyNy01NTQ2 OTQ0ZGRhNGIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgAeADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBFxTN6COtrdt815Xu+pVukVjWvur6Nz3FDx4j9oKRsaPtv9TGe7PcS Rdj58PlBgDS4yeQCEShc1by5xP5ijPgJU/YZ/D/WRY+B/viXbaB/5A8GnRxrWNFL Hw4JZ14iye+/7Z2xXudKhhxDFwuGBCCSflUkkIoP0YIW/WyFflVbmq8JugeC2myu 8L3/UyElN2EKcUj9QXeyGiOwIhJc2oZ5oe+hm3qADGMufClBe4UjXVnqzospbSN1 iHNZFOYr83ZUg9Mx71Apu4jcyiFQUwxo/v8H2WMT4HCvmqPSaVI1SLWU/HUIX8KL V4yfgWYLEQUPtswFx6xCq6PRrKWHVxxD -----END CERTIFICATE-----Generated at Mon Aug 4 19:02:47 2025 by rpki-client