$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1f60bbd7-b0ef-3f41-838f-0e52d08fc4c7.roa File: 1f60bbd7-b0ef-3f41-838f-0e52d08fc4c7.roa (raw, json) Hash identifier: 6lryXuZsLn7ElRA7MGkljsbAtWPnZP9gQmD8dy/4NbQ= Subject key identifier: 1B:6B:D2:A6:FA:82:B7:6E:52:CE:89:F3:66:65:2B:B7:AB:74:69:AC Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B4BAC6132DF3E1E6CAE56F300 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1f60bbd7-b0ef-3f41-838f-0e52d08fc4c7.roa Signing time: Wed 24 Sep 2025 01:00:31 +0000 ROA not before: Wed 24 Sep 2025 01:00:31 +0000 ROA not after: Tue 23 Dec 2025 02:00:31 +0000 asID: 35994 IP address blocks: 2600:141b:b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4b:ac:61:32:df:3e:1e:6c:ae:56:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 24 01:00:31 2025 GMT Not After : Dec 23 02:00:31 2025 GMT Subject: CN=9ece4d33-d15b-4f80-bf7e-d5fb05e1f56a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:aa:57:37:c7:ee:70:53:c9:90:c0:42:63:05: ba:67:be:06:c6:db:2f:2e:4b:df:c1:b6:ca:ba:d6: 93:64:be:ed:a2:7e:e7:6d:d3:ee:19:de:4f:6c:41: 78:06:dc:91:ac:fd:89:19:8b:76:d4:50:e4:2c:21: 47:3a:25:19:38:3e:a0:48:99:97:a0:7f:c2:37:6d: d8:59:b4:58:fa:91:91:32:e5:06:3a:91:5e:44:78: ba:59:9e:b4:78:0b:09:89:10:64:cb:03:fc:5c:16: b8:6a:db:9d:34:76:b4:c0:fb:cc:90:9a:60:ad:97: cf:24:68:81:a2:05:13:c3:d2:1d:55:d7:c9:91:4e: 70:80:9d:fd:9a:e9:b6:2f:61:5f:92:d0:12:3d:ef: 53:28:63:08:de:ec:97:d2:eb:9b:e3:87:91:8b:14: fc:85:b8:6a:a8:28:fd:75:3d:6f:9f:12:30:1c:25: ee:44:26:98:ac:e4:79:20:45:d3:25:e0:e7:89:c4: 97:e6:d7:94:08:fc:c6:11:46:f6:46:ff:cf:7d:b2: f3:e5:77:36:c9:26:2c:7c:2b:b0:22:d0:0b:dd:3a: 1a:95:fa:d3:83:89:59:d0:4b:6a:06:ab:47:39:97: b1:9b:dc:86:92:cf:ba:10:a9:73:80:b3:4b:3c:0f: 23:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:6B:D2:A6:FA:82:B7:6E:52:CE:89:F3:66:65:2B:B7:AB:74:69:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1f60bbd7-b0ef-3f41-838f-0e52d08fc4c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:141b:b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:3c:92:47:e8:85:ab:92:93:33:13:cb:7b:a7:f0:60:23:89: 52:95:6f:e4:02:5e:8d:49:13:f3:8f:e3:89:c4:30:35:7f:37: 6c:ad:d1:ac:f3:c8:41:f5:0c:77:11:34:01:99:69:bd:cc:52: 06:6c:40:7e:4c:5c:3f:4a:65:3e:9f:cf:fc:cf:2a:02:bc:16: 34:96:3e:f9:e3:2a:76:a8:86:b5:55:f1:7c:c8:49:f2:70:05: 7d:18:ea:1c:29:21:5b:26:da:80:e2:8b:5f:c1:be:3a:ec:d3: 25:a7:65:92:fe:c5:b0:05:74:3c:24:c7:05:b5:44:45:e6:f6: 04:6d:1b:01:a0:c9:63:d6:c3:c6:3a:48:d0:f2:8c:ad:98:62: 2f:9a:4b:c2:e1:50:93:30:ad:46:29:1b:26:d7:35:83:89:d4: 7b:ae:cf:35:0f:db:b5:d9:da:d2:3c:50:e1:19:34:58:a6:7f: c2:f9:f8:57:3c:7f:78:b1:3b:1d:8e:da:7e:ab:27:d0:ab:3a: fd:47:35:9f:e0:e5:33:33:da:bf:96:99:79:54:df:44:e0:98: b6:da:3c:75:e8:52:23:0b:66:b1:6e:4d:fe:fb:74:61:45:67: 6f:8a:7f:47:9c:45:23:40:26:bd:14:d9:de:16:4d:1c:12:f0: 0e:5a:c1:0a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtLrGEy3z4ebK5W8wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyNDAxMDAzMVoXDTI1MTIyMzAyMDAzMVowLzEtMCsGA1UEAxMk OWVjZTRkMzMtZDE1Yi00ZjgwLWJmN2UtZDVmYjA1ZTFmNTZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKpXN8fucFPJkMBCYwW6Z74GxtsvLkvfwbbK utaTZL7ton7nbdPuGd5PbEF4BtyRrP2JGYt21FDkLCFHOiUZOD6gSJmXoH/CN23Y WbRY+pGRMuUGOpFeRHi6WZ60eAsJiRBkywP8XBa4atudNHa0wPvMkJpgrZfPJGiB ogUTw9IdVdfJkU5wgJ39mum2L2FfktASPe9TKGMI3uyX0uub44eRixT8hbhqqCj9 dT1vnxIwHCXuRCaYrOR5IEXTJeDnicSX5teUCPzGEUb2Rv/PfbLz5Xc2ySYsfCuw ItAL3ToalfrTg4lZ0EtqBqtHOZexm9yGks+6EKlzgLNLPA8jzQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBtr0qb6grduUs6J82ZlK7erdGmsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWY2MGJiZDctYjBlZi0z ZjQxLTgzOGYtMGU1MmQwOGZjNGM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUGwAL MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC08kkfohauSkzMTy3un8GAjiVKVb+QCXo1JE/OP44nEMDV/N2yt 0azzyEH1DHcRNAGZab3MUgZsQH5MXD9KZT6fz/zPKgK8FjSWPvnjKnaohrVV8XzI SfJwBX0Y6hwpIVsm2oDii1/Bvjrs0yWnZZL+xbAFdDwkxwW1REXm9gRtGwGgyWPW w8Y6SNDyjK2YYi+aS8LhUJMwrUYpGybXNYOJ1HuuzzUP27XZ2tI8UOEZNFimf8L5 +Fc8f3ixOx2O2n6rJ9CrOv1HNZ/g5TMz2r+WmXlU30TgmLbaPHXoUiMLZrFuTf77 dGFFZ2+Kf0ecRSNAJr0U2d4WTRwS8A5awQo= -----END CERTIFICATE-----Generated at Mon Oct 20 09:55:28 2025 by rpki-client