$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1dd181a6-d432-387f-ab7b-b8cbe74ffb4c.roa File: 1dd181a6-d432-387f-ab7b-b8cbe74ffb4c.roa (raw, json) Hash identifier: CgetGJqjX9q8HvCBkCJfSqvIBgp0s8y8gM22hetQ6+w= Subject key identifier: 05:0F:4F:3C:AF:42:68:53:20:80:52:F1:B2:20:E8:2B:51:4C:66:0D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B4081C4E9C526EE5239188A80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1dd181a6-d432-387f-ab7b-b8cbe74ffb4c.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 20940 IP address blocks: 2600:1406:34::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:c4:e9:c5:26:ee:52:39:18:8a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=aaa3235d-563c-4344-a2c8-7c4806568fdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:60:c5:cf:4b:4e:0f:f2:cc:a7:63:d3:89:26: a0:4c:ab:17:4b:ab:5e:90:ea:61:39:de:ca:06:f1: b0:85:55:ab:7e:e7:3b:87:08:9c:61:49:4d:39:82: f0:cd:54:aa:11:8f:5e:34:a2:6b:46:49:12:90:a4: e0:6d:90:6a:82:ae:5b:bf:6c:b2:64:1b:44:d8:cd: 37:eb:db:34:13:c1:7c:42:3b:31:95:8c:e8:37:06: 6c:98:e4:48:d9:5c:50:4d:24:af:9b:f4:79:a7:bb: 8c:11:d1:61:74:37:cf:6b:10:8c:33:4d:be:d2:d4: f4:4d:be:f7:75:51:13:c7:83:68:c2:26:c3:f8:79: a5:21:53:23:24:75:36:f6:67:b8:07:57:d1:63:33: 5e:ff:86:fa:83:87:c6:87:6b:9f:05:47:aa:7c:a2: d6:ce:6c:c0:ea:97:07:2f:00:64:36:08:02:76:e2: ab:9a:8f:f1:d9:72:2e:02:54:c4:21:2b:a3:e1:69: e4:7b:03:80:68:ba:bc:52:42:91:93:ac:3f:c2:92: 22:82:04:fe:39:f4:06:b5:40:5c:60:25:d7:63:56: 46:80:0a:d1:08:bc:f8:0e:9d:2d:c3:62:fd:38:37: 09:f3:ff:fb:e4:da:17:f0:2b:e4:e6:0a:9b:23:01: 9b:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:0F:4F:3C:AF:42:68:53:20:80:52:F1:B2:20:E8:2B:51:4C:66:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1dd181a6-d432-387f-ab7b-b8cbe74ffb4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1406:34::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:ac:72:50:91:09:f7:11:b0:6f:09:99:96:dc:68:70:bb:39: 6a:43:e2:25:e7:3f:ef:b5:65:97:42:99:ea:24:1c:a6:62:f0: 9f:95:6f:68:34:d6:ec:92:2b:26:94:ed:02:6e:96:56:f3:27: 7b:f5:f1:08:00:f0:c6:77:44:c4:4a:62:74:1a:91:43:b0:19: c3:59:1d:4e:8c:0e:31:7b:e7:d0:f9:62:ee:ea:1b:90:cf:f3: e8:dc:c5:34:a5:ad:0e:ec:12:fc:a1:25:f1:28:50:38:1e:8c: d0:f9:4c:75:a9:25:c8:42:23:d1:5d:db:85:24:46:3e:ef:55: d2:49:77:40:0b:63:53:fa:94:d1:ac:93:96:ac:c1:c0:77:a7: ce:8c:ff:7d:f4:a0:ac:01:9d:4d:df:84:32:3b:71:cd:71:59: 01:30:4b:ae:ea:5e:f3:3f:23:15:5c:5f:c6:7c:1a:c0:38:0b: 7c:b1:2c:34:33:a6:26:12:a0:1c:43:98:ea:bf:55:e7:f0:d5: 70:df:3d:ed:99:d4:3e:cd:84:fc:c7:33:8e:99:bb:b2:75:71: 54:2c:45:77:32:c9:e0:1f:b3:3c:a6:21:88:78:bd:e6:71:f7: 6a:65:0a:d4:41:60:6b:ca:eb:bd:48:fa:0e:a9:64:61:aa:36: d2:a8:b1:36 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtAgcTpxSbuUjkYioAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk YWFhMzIzNWQtNTYzYy00MzQ0LWEyYzgtN2M0ODA2NTY4ZmRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGDFz0tOD/LMp2PTiSagTKsXS6tekOphOd7K BvGwhVWrfuc7hwicYUlNOYLwzVSqEY9eNKJrRkkSkKTgbZBqgq5bv2yyZBtE2M03 69s0E8F8QjsxlYzoNwZsmORI2VxQTSSvm/R5p7uMEdFhdDfPaxCMM02+0tT0Tb73 dVETx4NowibD+HmlIVMjJHU29me4B1fRYzNe/4b6g4fGh2ufBUeqfKLWzmzA6pcH LwBkNggCduKrmo/x2XIuAlTEISuj4WnkewOAaLq8UkKRk6w/wpIiggT+OfQGtUBc YCXXY1ZGgArRCLz4Dp0tw2L9ODcJ8//75NoX8Cvk5gqbIwGbdQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAUPTzyvQmhTIIBS8bIg6CtRTGYNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWRkMTgxYTYtZDQzMi0z ODdmLWFiN2ItYjhjYmU3NGZmYjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUBgA0 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACisclCRCfcRsG8JmZbcaHC7OWpD4iXnP++1ZZdCmeokHKZi8J+V b2g01uySKyaU7QJullbzJ3v18QgA8MZ3RMRKYnQakUOwGcNZHU6MDjF759D5Yu7q G5DP8+jcxTSlrQ7sEvyhJfEoUDgejND5THWpJchCI9Fd24UkRj7vVdJJd0ALY1P6 lNGsk5aswcB3p86M/330oKwBnU3fhDI7cc1xWQEwS67qXvM/IxVcX8Z8GsA4C3yx LDQzpiYSoBxDmOq/Vefw1XDfPe2Z1D7NhPzHM46Zu7J1cVQsRXcyyeAfszymIYh4 veZx92plCtRBYGvK671I+g6pZGGqNtKosTY= -----END CERTIFICATE-----Generated at Mon Oct 20 00:27:55 2025 by rpki-client