$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1ec31afd-a22c-3cfe-aa09-ae1a728c92f7.roa File: 1ec31afd-a22c-3cfe-aa09-ae1a728c92f7.roa (raw, json) Hash identifier: 3HpxE6IgsB2E57X4B9XnL+r3xeYgx1irTORPiuMqGQw= Subject key identifier: 71:3E:06:C4:8A:00:61:F3:C6:98:73:49:EC:B6:21:0B:4D:CD:A3:1E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B4D11ED125DE24F3BB0F8B800 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1ec31afd-a22c-3cfe-aa09-ae1a728c92f7.roa Signing time: Wed 24 Sep 2025 13:00:41 +0000 ROA not before: Wed 24 Sep 2025 13:00:41 +0000 ROA not after: Tue 23 Dec 2025 14:00:41 +0000 asID: 9498 IP address blocks: 2600:1417:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:11:ed:12:5d:e2:4f:3b:b0:f8:b8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 24 13:00:41 2025 GMT Not After : Dec 23 14:00:41 2025 GMT Subject: CN=4b8856be-d786-4d74-a4c1-7c24fab04c85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:7d:f1:3d:28:83:9f:dd:35:dc:00:00:7b:52: 17:ec:86:72:32:81:a6:5d:4c:87:bc:00:51:cf:11: ab:4c:30:81:43:5f:74:55:6c:a3:95:7d:a5:c5:b6: 4c:af:62:3d:b8:44:e2:53:45:2a:d0:bb:b7:77:d4: 22:f0:59:c0:ca:58:66:e0:69:5c:b3:b1:00:c7:bf: 64:43:e9:a3:8b:c7:c6:c6:17:d9:ba:88:66:5d:2f: 47:62:d0:04:0b:c5:38:1d:0f:49:9f:a1:3b:78:e8: a3:b1:9f:55:f9:c9:18:f6:ea:d3:e4:33:e4:37:8a: 33:cb:42:47:ad:01:34:ad:eb:ce:23:5e:d7:2a:b9: 24:5a:48:04:8e:af:cd:80:21:74:50:49:6a:d0:b2: bb:fc:b8:4d:d4:3f:1c:42:7a:71:a1:ae:dd:0e:cf: 9e:a8:8d:29:a2:ee:44:93:c3:e1:f0:93:ec:5c:59: ad:bb:42:28:a8:da:d5:97:40:a6:28:33:ba:1c:39: 85:13:86:f2:18:9d:7d:bb:7f:f6:8d:5f:ac:5a:b1: 57:aa:de:e6:02:3c:f0:a0:e9:6d:8c:cf:d5:75:d2: c9:65:26:9b:cc:02:b5:11:1f:5e:18:0d:fb:80:df: 7a:bb:d8:93:d2:a2:7e:f4:1b:2e:2c:c4:27:43:6e: 12:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:3E:06:C4:8A:00:61:F3:C6:98:73:49:EC:B6:21:0B:4D:CD:A3:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1ec31afd-a22c-3cfe-aa09-ae1a728c92f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1417:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:82:52:07:cd:77:80:0b:53:e4:9c:2d:aa:cb:53:c2:e9:8c: 59:02:ee:6b:37:53:4f:15:aa:fc:21:69:02:8a:15:96:fd:aa: 30:a7:13:c8:69:ea:a0:57:1f:d3:08:3d:85:f1:2b:a2:4e:3e: 63:61:97:05:eb:be:38:c0:4b:72:8a:08:56:63:5f:ab:44:14: df:e1:d0:53:4e:74:67:1a:0d:4b:3f:a3:9b:8f:6b:52:ea:68: 99:52:26:0a:08:75:9c:a9:11:32:59:86:86:3a:f3:7d:5f:05: 48:ff:c7:61:cf:fa:59:1e:ff:77:3c:f4:8d:3b:1f:88:97:e3: 95:13:67:27:28:63:aa:4a:5d:df:e2:c9:ee:b9:59:5e:e9:a1: d4:98:77:aa:2e:83:bd:90:73:ef:2b:38:fd:b2:29:5c:b4:0c: 0e:54:a2:71:25:8e:50:25:9a:0d:8a:27:60:29:d9:64:f5:a4: 7d:35:d2:75:9e:5c:4c:d7:ad:8d:78:94:fd:cb:91:17:de:bf: e0:f7:12:a9:29:44:7f:e1:d5:2e:ee:d1:40:f7:3b:2f:63:9b: 1b:a5:58:ce:50:87:e7:78:04:63:fa:60:63:d4:65:b5:1a:2b: fc:34:4c:28:07:5c:97:85:5b:3a:89:84:4a:96:5f:a6:4e:85: e8:25:74:83 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtNEe0SXeJPO7D4uAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk NGI4ODU2YmUtZDc4Ni00ZDc0LWE0YzEtN2MyNGZhYjA0Yzg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx33xPSiDn9013AAAe1IX7IZyMoGmXUyHvABR zxGrTDCBQ190VWyjlX2lxbZMr2I9uETiU0Uq0Lu3d9Qi8FnAylhm4Glcs7EAx79k Q+mji8fGxhfZuohmXS9HYtAEC8U4HQ9Jn6E7eOijsZ9V+ckY9urT5DPkN4ozy0JH rQE0revOI17XKrkkWkgEjq/NgCF0UElq0LK7/LhN1D8cQnpxoa7dDs+eqI0pou5E k8Ph8JPsXFmtu0IoqNrVl0CmKDO6HDmFE4byGJ19u3/2jV+sWrFXqt7mAjzwoOlt jM/VddLJZSabzAK1ER9eGA37gN96u9iT0qJ+9BsuLMQnQ24SZwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHE+BsSKAGHzxphzSey2IQtNzaMeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWVjMzFhZmQtYTIyYy0z Y2ZlLWFhMDktYWUxYTcyOGM5MmY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUFwAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEGCUgfNd4ALU+ScLarLU8LpjFkC7ms3U08VqvwhaQKKFZb9qjCn E8hp6qBXH9MIPYXxK6JOPmNhlwXrvjjAS3KKCFZjX6tEFN/h0FNOdGcaDUs/o5uP a1LqaJlSJgoIdZypETJZhoY6831fBUj/x2HP+lke/3c89I07H4iX45UTZycoY6pK Xd/iye65WV7podSYd6oug72Qc+8rOP2yKVy0DA5UonEljlAlmg2KJ2Ap2WT1pH01 0nWeXEzXrY14lP3LkRfev+D3EqkpRH/h1S7u0UD3Oy9jmxulWM5Qh+d4BGP6YGPU ZbUaK/w0TCgHXJeFWzqJhEqWX6ZOhegldIM= -----END CERTIFICATE-----Generated at Mon Oct 20 18:08:02 2025 by rpki-client