$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1da56e3f-8147-3bef-ba1c-76e88b88b0f0.roa File: 1da56e3f-8147-3bef-ba1c-76e88b88b0f0.roa (raw, json) Hash identifier: 7rd4jI40fAb+EMrKgtjckxuoDmo+M+54IBgvXGqDcrg= Subject key identifier: 52:2E:FD:7F:41:99:9A:98:8D:7C:E8:B5:E2:5A:70:0D:97:59:FE:CA Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B4D11E6B33A7F2D31E5040180 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1da56e3f-8147-3bef-ba1c-76e88b88b0f0.roa Signing time: Wed 24 Sep 2025 13:00:41 +0000 ROA not before: Wed 24 Sep 2025 13:00:41 +0000 ROA not after: Tue 23 Dec 2025 14:00:41 +0000 asID: 9498 IP address blocks: 2600:140f:4200::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:11:e6:b3:3a:7f:2d:31:e5:04:01:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 24 13:00:41 2025 GMT Not After : Dec 23 14:00:41 2025 GMT Subject: CN=df3d01bc-2e64-4274-a19a-390a785a138e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:57:2f:e2:e7:dc:3d:fa:53:47:02:a9:29:80: 1a:4a:ac:e7:95:4c:15:25:aa:e4:e1:eb:a6:9d:3a: 4b:15:cf:ed:fc:8f:4e:21:44:7b:45:87:3e:84:f8: e4:ba:21:d8:97:56:db:12:22:6c:6c:93:eb:8c:4c: f0:39:61:76:7f:98:47:9b:10:b6:a1:d6:9f:a5:78: d2:a8:ce:2c:f7:b9:a5:c1:ae:0e:d6:52:31:42:52: 19:df:8a:1d:e7:17:f9:15:46:c1:4e:c1:09:1f:e8: 73:b8:b9:65:1c:f0:c3:57:7f:d0:f5:34:aa:44:d4: 9d:f4:bf:87:32:de:6d:e5:6a:55:03:6b:57:c0:96: 18:78:e4:c9:4a:d6:9b:92:7b:1b:8a:d0:01:d4:0e: a3:7c:e1:90:07:4e:ba:e7:3e:47:ec:30:57:2c:07: 91:4d:6a:04:1c:d0:54:2a:1c:f9:a3:69:c8:26:33: a3:f1:13:ca:cd:ea:f9:b2:a6:36:ea:46:a1:e9:64: 9f:38:5e:f8:99:a6:fa:88:96:4b:95:53:b1:f6:d7: e8:cd:94:e2:0c:fd:a1:86:a2:f1:bf:01:61:3d:30: 57:dd:ee:52:1e:47:b4:32:0a:8f:6f:45:71:b8:9f: 76:9e:b9:6f:96:60:88:e2:bb:50:e9:b2:b4:b6:47: cb:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:2E:FD:7F:41:99:9A:98:8D:7C:E8:B5:E2:5A:70:0D:97:59:FE:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1da56e3f-8147-3bef-ba1c-76e88b88b0f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:140f:4200::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:cf:02:83:20:4c:62:45:8b:f3:9f:f5:d9:85:73:c9:43:f5: d7:92:0a:e8:3d:01:a0:f2:22:2e:71:c7:bc:0a:35:16:e0:59: 3e:0a:14:48:7a:60:43:1c:d9:be:73:e5:7e:4f:2d:c6:a0:bb: 44:a1:6a:21:9c:ac:17:49:7c:7a:d6:32:9f:11:56:b2:55:55: 66:5e:93:67:c9:c8:81:b9:ba:06:98:0a:cc:95:40:62:fc:95: 0b:e4:7b:68:06:6f:b6:36:9e:59:31:05:6c:f5:6f:7d:4c:3b: 7b:ec:fe:99:a5:35:9f:ac:d8:b7:94:f2:d8:89:fd:59:dd:f0: 5c:56:4a:fe:1d:4a:5d:b2:a0:7d:04:a8:0b:09:ab:7f:e0:de: 0b:c8:79:93:29:4c:fa:7a:b1:10:f0:05:c6:90:5b:27:03:72: 2b:99:74:0f:e5:73:3d:aa:ef:4b:7c:ac:d7:2a:a1:19:bf:ee: 91:f6:46:46:3a:bc:e1:ec:63:65:9b:c4:8d:5a:76:78:e1:a3: 96:c2:88:74:b4:8f:8a:2e:28:2c:53:a9:5c:1e:e3:07:91:18: f3:ef:71:ee:37:09:3d:02:23:ef:3f:50:82:09:4e:d0:52:8d: b1:c5:0a:c5:66:47:3f:7f:13:77:e6:33:d1:d1:e4:4c:76:22: e9:88:29:a3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtNEeazOn8tMeUEAYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk ZGYzZDAxYmMtMmU2NC00Mjc0LWExOWEtMzkwYTc4NWExMzhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Vcv4ufcPfpTRwKpKYAaSqznlUwVJark4eum nTpLFc/t/I9OIUR7RYc+hPjkuiHYl1bbEiJsbJPrjEzwOWF2f5hHmxC2odafpXjS qM4s97mlwa4O1lIxQlIZ34od5xf5FUbBTsEJH+hzuLllHPDDV3/Q9TSqRNSd9L+H Mt5t5WpVA2tXwJYYeOTJStabknsbitAB1A6jfOGQB0665z5H7DBXLAeRTWoEHNBU Khz5o2nIJjOj8RPKzer5sqY26kah6WSfOF74mab6iJZLlVOx9tfozZTiDP2hhqLx vwFhPTBX3e5SHke0MgqPb0VxuJ92nrlvlmCI4rtQ6bK0tkfLDwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFIu/X9BmZqYjXzoteJacA2XWf7KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWRhNTZlM2YtODE0Ny0z YmVmLWJhMWMtNzZlODhiODhiMGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUD0IA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADzPAoMgTGJFi/Of9dmFc8lD9deSCug9AaDyIi5xx7wKNRbgWT4K FEh6YEMc2b5z5X5PLcagu0ShaiGcrBdJfHrWMp8RVrJVVWZek2fJyIG5ugaYCsyV QGL8lQvke2gGb7Y2nlkxBWz1b31MO3vs/pmlNZ+s2LeU8tiJ/Vnd8FxWSv4dSl2y oH0EqAsJq3/g3gvIeZMpTPp6sRDwBcaQWycDciuZdA/lcz2q70t8rNcqoRm/7pH2 RkY6vOHsY2WbxI1adnjho5bCiHS0j4ouKCxTqVwe4weRGPPvce43CT0CI+8/UIIJ TtBSjbHFCsVmRz9/E3fmM9HR5Ex2IumIKaM= -----END CERTIFICATE-----Generated at Mon Oct 20 15:40:15 2025 by rpki-client