$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/10a2e75c-d1fd-3f69-808a-9239a53dd08f.roa File: 10a2e75c-d1fd-3f69-808a-9239a53dd08f.roa (raw, json) Hash identifier: XjWkCYGCJvfg3O5EC9+Zs+nWKKf7h8m1rDEsY9kNxrk= Subject key identifier: 28:3F:94:D2:0B:93:3D:75:A7:D1:11:1A:AB:CA:C6:E2:23:E1:93:3A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B715D0758C53CA2A37014A840 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/10a2e75c-d1fd-3f69-808a-9239a53dd08f.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 20940 IP address blocks: 2600:1409:4c00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5d:07:58:c5:3c:a2:a3:70:14:a8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=9c3a7c86-d3cf-4d7b-aea7-5f4d69516e36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e7:a2:e6:e6:13:12:eb:87:54:36:7a:02:0b: bd:c9:be:ea:c2:b7:80:76:91:92:32:65:67:17:09: bc:36:8f:f0:cf:19:c8:00:d5:cb:f3:35:5f:c2:fd: ab:49:c6:50:cb:39:4b:b3:8e:64:ee:02:e0:e6:91: 78:39:8f:c7:59:cc:06:5b:0b:18:08:18:50:3b:bb: fd:bb:6c:b3:ab:4e:3a:e7:13:06:bc:ae:d6:d1:11: a5:4b:1a:b6:17:e2:de:88:78:b1:44:51:97:57:39: c1:62:94:ef:62:db:3f:6f:63:c7:f2:db:46:1c:56: 27:e8:fd:7f:b9:d0:65:d4:35:95:22:fb:ba:1b:2d: 33:d7:96:3c:58:85:bd:a9:1e:d4:90:7d:d9:c7:48: 92:d8:14:f6:c9:5f:47:56:91:75:35:bd:cf:43:90: 4a:dd:c2:65:43:9a:13:4c:d9:59:66:b3:86:dc:62: 75:cb:88:f2:08:1a:6b:9f:67:22:f5:d2:2e:7c:c5: a4:85:5a:4e:43:c4:d7:c2:3d:20:ae:fd:4c:0f:f8: d0:bf:9d:75:04:82:3c:dd:a6:7a:17:b3:48:0c:06: 45:8b:60:3c:fa:48:86:66:c4:6e:89:58:5b:dc:fb: 7c:8f:73:f0:54:0a:61:2f:fa:79:ea:f4:8d:a0:f4: 83:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:3F:94:D2:0B:93:3D:75:A7:D1:11:1A:AB:CA:C6:E2:23:E1:93:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/10a2e75c-d1fd-3f69-808a-9239a53dd08f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1409:4c00::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:59:14:3b:15:3d:ec:5b:9d:e7:f9:bc:49:98:f8:9e:53:12: 29:48:61:3e:15:74:e4:78:31:0e:2e:bb:58:75:c3:e9:c2:05: 5f:64:f3:1f:63:c6:92:12:e5:05:e1:45:1d:42:fa:4a:1e:48: 8c:e2:b8:1e:50:85:c5:ea:76:4b:81:4a:f9:6b:df:df:39:57: 82:0f:68:41:08:b4:f8:e7:e5:da:0b:8a:d1:42:ce:4c:56:fb: b3:e5:34:55:43:40:df:4f:72:e3:54:1b:8f:96:9f:90:5f:6b: fd:e7:7b:92:33:40:ce:65:17:de:e6:44:ae:ea:87:5a:f4:7b: d8:58:7d:0d:4a:f7:f6:85:a7:72:b9:25:ed:97:64:e6:a5:6b: 04:88:8d:62:48:e4:15:dc:ea:63:75:81:a4:c9:7e:98:40:69: b6:b6:f5:50:6a:3d:b3:6d:31:11:49:32:f0:ad:e0:b2:25:94: d8:86:6e:66:fc:d8:59:b0:f3:65:b3:de:f0:c9:f5:60:e6:f8: 9b:af:5f:9b:7e:41:01:52:38:fc:a0:40:ee:cd:7c:01:f0:f2: 73:1f:1e:ad:d8:63:a9:3e:75:be:3f:f0:f7:33:7d:15:04:33: 7d:44:4a:9d:60:c3:fd:8f:90:89:66:68:0b:e7:54:cf:28:51: 75:63:f4:54 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtxXQdYxTyio3AUqEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk OWMzYTdjODYtZDNjZi00ZDdiLWFlYTctNWY0ZDY5NTE2ZTM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuei5uYTEuuHVDZ6Agu9yb7qwreAdpGSMmVn Fwm8No/wzxnIANXL8zVfwv2rScZQyzlLs45k7gLg5pF4OY/HWcwGWwsYCBhQO7v9 u2yzq0465xMGvK7W0RGlSxq2F+LeiHixRFGXVznBYpTvYts/b2PH8ttGHFYn6P1/ udBl1DWVIvu6Gy0z15Y8WIW9qR7UkH3Zx0iS2BT2yV9HVpF1Nb3PQ5BK3cJlQ5oT TNlZZrOG3GJ1y4jyCBprn2ci9dIufMWkhVpOQ8TXwj0grv1MD/jQv511BII83aZ6 F7NIDAZFi2A8+kiGZsRuiVhb3Pt8j3PwVAphL/p56vSNoPSD1QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCg/lNILkz11p9ERGqvKxuIj4ZM6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTBhMmU3NWMtZDFmZC0z ZjY5LTgwOGEtOTIzOWE1M2RkMDhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUCUwA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFJZFDsVPexbnef5vEmY+J5TEilIYT4VdOR4MQ4uu1h1w+nCBV9k 8x9jxpIS5QXhRR1C+koeSIziuB5QhcXqdkuBSvlr3985V4IPaEEItPjn5doLitFC zkxW+7PlNFVDQN9PcuNUG4+Wn5Bfa/3ne5IzQM5lF97mRK7qh1r0e9hYfQ1K9/aF p3K5Je2XZOalawSIjWJI5BXc6mN1gaTJfphAaba29VBqPbNtMRFJMvCt4LIllNiG bmb82Fmw82Wz3vDJ9WDm+JuvX5t+QQFSOPygQO7NfAHw8nMfHq3YY6k+db4/8Pcz fRUEM31ESp1gw/2PkIlmaAvnVM8oUXVj9FQ= -----END CERTIFICATE-----Generated at Mon Oct 20 10:08:10 2025 by rpki-client