$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/28519c29-9715-3649-b5b7-c672e6d450b2.roa File: 28519c29-9715-3649-b5b7-c672e6d450b2.roa (raw, json) Hash identifier: LJdMjNtBdU9ed0tJS5iPFuc2izp1IEqPYnyBoUpMYRU= Subject key identifier: A7:8A:EA:B8:43:B9:AB:52:4F:98:3B:6A:7B:96:AC:AA:77:02:CF:DA Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B3556F3B50396B94872F80980 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/28519c29-9715-3649-b5b7-c672e6d450b2.roa Signing time: Tue 16 Sep 2025 01:00:33 +0000 ROA not before: Tue 16 Sep 2025 01:00:33 +0000 ROA not after: Mon 15 Dec 2025 02:00:33 +0000 asID: 20940 IP address blocks: 2600:1415:2000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:56:f3:b5:03:96:b9:48:72:f8:09:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 16 01:00:33 2025 GMT Not After : Dec 15 02:00:33 2025 GMT Subject: CN=9d982c02-37c0-42ff-b213-863bf6a6e5f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ed:4e:a9:9c:f4:8d:7e:4f:87:e8:23:f4:d3: 1a:67:fd:49:1a:7f:52:d2:79:b7:fb:8f:9d:25:ec: 48:25:a7:3b:15:8d:c7:e6:dc:ab:52:9e:0f:64:7a: d4:03:f9:2f:00:a3:ec:d9:40:6a:97:bb:02:2e:ae: a2:4b:50:1f:45:82:75:e0:90:7c:2b:50:a2:45:70: e5:09:3b:88:e3:27:f8:a4:ac:bc:e0:21:68:13:eb: ef:51:5c:56:22:f9:66:38:bd:26:c0:71:f8:5e:43: 24:68:b4:e3:f4:f2:6d:98:1c:ad:6c:76:bd:ab:7a: 08:e9:f6:6d:4a:f7:66:a2:46:9f:a4:2b:e7:2f:f7: 2e:e6:47:38:95:eb:62:0d:a8:3a:5b:5f:d0:1d:48: 57:f2:de:39:fc:ab:69:47:af:60:f2:bc:9e:b3:6d: 4b:e3:4f:c8:3d:cc:a4:40:7b:d4:64:cd:c2:3a:c1: 38:4e:d6:7c:19:b2:fd:18:30:17:82:91:c4:8d:54: 5f:bb:2d:75:c7:52:7e:c7:aa:9e:55:e6:ca:5b:2d: 92:e4:e3:da:62:59:b5:09:b6:54:e9:bf:d7:49:1f: b4:36:4e:47:63:16:69:ad:35:51:97:d5:cc:a6:36: a0:9d:ef:5e:1e:60:ea:bc:03:a1:db:d2:0b:3d:4f: 9b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:8A:EA:B8:43:B9:AB:52:4F:98:3B:6A:7B:96:AC:AA:77:02:CF:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/28519c29-9715-3649-b5b7-c672e6d450b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1415:2000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:ea:9c:14:e3:93:0e:25:25:2d:aa:39:d4:a2:e5:a9:13:53: dd:cb:30:8e:cc:c0:dc:51:a4:ac:8d:10:d9:26:6c:bb:3d:12: d3:08:e4:75:87:d6:1d:04:da:8a:db:d3:ef:53:18:57:02:ac: f4:61:e8:9e:d8:ab:fb:43:ae:d1:bd:b7:6a:f0:bb:51:c2:ac: 42:ce:72:56:7f:e5:64:9f:02:9c:18:5b:00:d5:ec:3e:c8:2b: b5:0f:2f:f5:a7:8e:91:6e:de:2d:a1:4c:17:44:c3:35:37:59: a6:e3:a2:04:7e:9a:24:f4:9f:67:ef:60:b6:ed:43:77:a4:67: c4:e3:24:71:d8:8b:5a:79:43:7e:a5:90:10:87:72:02:7f:5c: f3:0b:ec:ee:07:cd:1d:16:0f:db:3f:47:cf:cc:7a:e2:9a:d0: 5e:c2:c5:30:7f:69:ed:16:4e:30:3a:14:45:83:51:b8:e6:49: 37:f0:3f:55:14:49:33:9c:99:e2:38:3c:dc:c0:4e:94:bf:2c: d8:d2:c3:88:03:9e:a5:19:fc:97:13:91:b0:3e:5a:bc:a6:09: b9:3a:cc:0c:bb:02:39:e5:c1:2f:6f:a1:cd:68:40:d4:8a:73: f2:a6:00:65:e4:eb:fc:7b:4c:6d:03:6a:3f:c4:28:ee:74:b1: 31:6b:b3:a9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs1VvO1A5a5SHL4CYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk OWQ5ODJjMDItMzdjMC00MmZmLWIyMTMtODYzYmY2YTZlNWYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiu1OqZz0jX5Ph+gj9NMaZ/1JGn9S0nm3+4+d JexIJac7FY3H5tyrUp4PZHrUA/kvAKPs2UBql7sCLq6iS1AfRYJ14JB8K1CiRXDl CTuI4yf4pKy84CFoE+vvUVxWIvlmOL0mwHH4XkMkaLTj9PJtmBytbHa9q3oI6fZt SvdmokafpCvnL/cu5kc4letiDag6W1/QHUhX8t45/KtpR69g8ryes21L40/IPcyk QHvUZM3COsE4TtZ8GbL9GDAXgpHEjVRfuy11x1J+x6qeVebKWy2S5OPaYlm1CbZU 6b/XSR+0Nk5HYxZprTVRl9XMpjagne9eHmDqvAOh29ILPU+b3QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKeK6rhDuatST5g7anuWrKp3As/aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjg1MTljMjktOTcxNS0z NjQ5LWI1YjctYzY3MmU2ZDQ1MGIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUFSAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADDqnBTjkw4lJS2qOdSi5akTU93LMI7MwNxRpKyNENkmbLs9EtMI 5HWH1h0E2orb0+9TGFcCrPRh6J7Yq/tDrtG9t2rwu1HCrELOclZ/5WSfApwYWwDV 7D7IK7UPL/WnjpFu3i2hTBdEwzU3WabjogR+miT0n2fvYLbtQ3ekZ8TjJHHYi1p5 Q36lkBCHcgJ/XPML7O4HzR0WD9s/R8/MeuKa0F7CxTB/ae0WTjA6FEWDUbjmSTfw P1UUSTOcmeI4PNzATpS/LNjSw4gDnqUZ/JcTkbA+WrymCbk6zAy7AjnlwS9voc1o QNSKc/KmAGXk6/x7TG0Daj/EKO50sTFrs6k= -----END CERTIFICATE-----Generated at Mon Oct 20 00:26:36 2025 by rpki-client