$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/313c82c6-d14f-368a-b93c-a1b48f61f3dd.roa File: 313c82c6-d14f-368a-b93c-a1b48f61f3dd.roa (raw, json) Hash identifier: DkqG1okaPj8A7Cvc4GRlnf+cJtI88+JgrSr5VCLZGvs= Subject key identifier: AC:BA:8C:40:73:B6:60:E5:F3:2C:FF:F7:D3:9D:DF:89:58:BF:11:F9 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B48E2071D17191561DF6A4880 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/313c82c6-d14f-368a-b93c-a1b48f61f3dd.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 20940 IP address blocks: 2600:1488:6081::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e2:07:1d:17:19:15:61:df:6a:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=87549117-2059-4fa3-a552-4b171c4559ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b9:39:ef:68:7f:7e:99:e9:a9:d5:05:ca:2e: 9b:ae:ca:ab:e0:6e:2d:0e:55:18:84:a0:9c:e3:97: c0:2e:4d:61:06:90:b9:6e:10:b7:85:b8:bc:b6:70: a7:4b:49:ed:de:af:8f:23:25:30:8a:54:fc:d4:c9: bb:5f:88:fb:b0:7e:c2:8c:1a:83:34:87:e6:f6:95: 78:8d:c9:ea:e6:8a:8b:4d:6b:e8:67:a4:ec:62:d9: 86:34:45:d1:8b:d5:98:26:14:56:87:a2:f7:c7:da: 76:7a:85:46:40:b8:9c:fd:d2:c7:0d:34:cf:df:97: f4:e0:46:b6:a3:80:d4:67:f9:57:2a:37:14:8c:53: c5:01:f5:ba:66:a0:ac:87:d4:bf:f8:39:fc:33:4f: 0d:c8:b0:ff:21:62:54:b1:48:a7:96:87:3d:e4:32: a9:bb:1c:42:11:ba:4b:3c:28:24:01:0a:dd:5e:da: cb:4d:d0:f3:e5:ea:d9:58:b0:16:fc:24:9c:0a:4c: 7f:a8:da:66:e6:d4:0b:0d:20:c2:25:b8:7c:8a:a0: 95:5e:09:4b:9c:69:73:73:7f:8b:6d:b4:a6:93:ae: 57:7d:14:68:bf:8c:2d:04:9b:19:3f:53:c2:4c:da: 52:4c:65:41:f1:d3:10:99:3a:e2:d6:dc:e9:1d:a6: fd:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:BA:8C:40:73:B6:60:E5:F3:2C:FF:F7:D3:9D:DF:89:58:BF:11:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/313c82c6-d14f-368a-b93c-a1b48f61f3dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1488:6081::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:c2:22:e9:3e:95:22:50:6d:83:9c:aa:b3:c8:5a:4d:c6:51: 0b:1a:56:1b:29:b6:9e:0f:1b:44:68:bb:03:1f:ff:02:da:aa: b8:39:46:9e:83:bd:a3:85:6f:dc:a0:7f:37:47:a7:e9:1c:6a: 9e:2b:4c:6f:86:68:cb:e2:a9:2e:f5:c9:90:2b:b0:79:63:40: 6a:6b:e8:eb:94:91:53:88:91:3a:9a:19:cd:6b:63:87:74:05: 48:e1:f2:9b:2d:f3:71:14:9c:dd:56:61:a6:58:1d:77:db:9e: 02:4e:95:92:76:ad:d2:b2:22:51:68:cd:e8:fd:7a:6e:2b:94: 92:48:16:d4:ca:6c:e4:d5:7a:7b:6b:96:6a:d7:f3:0b:37:b3: c9:09:38:ad:b2:84:a9:94:43:ef:4e:60:47:74:89:d1:df:c1: a3:43:37:71:2f:ee:e9:a8:0b:b3:87:f3:2e:b8:6b:cf:10:1d: 77:14:11:90:b2:c2:5a:80:f7:aa:0f:9d:66:62:f1:9b:5e:ea: 62:62:46:c3:a1:ed:6a:b4:19:20:fb:af:4c:ee:bf:22:94:91: dc:13:a3:ba:b1:d1:f3:47:e6:fe:29:fc:9d:aa:0b:87:73:4e: 2f:5c:29:30:19:29:4d:5b:81:26:54:58:5e:34:98:3d:0c:78: 87:bd:a8:27 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtI4gcdFxkVYd9qSIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk ODc1NDkxMTctMjA1OS00ZmEzLWE1NTItNGIxNzFjNDU1OWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrk572h/fpnpqdUFyi6brsqr4G4tDlUYhKCc 45fALk1hBpC5bhC3hbi8tnCnS0nt3q+PIyUwilT81Mm7X4j7sH7CjBqDNIfm9pV4 jcnq5oqLTWvoZ6TsYtmGNEXRi9WYJhRWh6L3x9p2eoVGQLic/dLHDTTP35f04Ea2 o4DUZ/lXKjcUjFPFAfW6ZqCsh9S/+Dn8M08NyLD/IWJUsUinloc95DKpuxxCEbpL PCgkAQrdXtrLTdDz5erZWLAW/CScCkx/qNpm5tQLDSDCJbh8iqCVXglLnGlzc3+L bbSmk65XfRRov4wtBJsZP1PCTNpSTGVB8dMQmTri1tzpHab9GwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKy6jEBztmDl8yz/99Od34lYvxH5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzEzYzgyYzYtZDE0Zi0z NjhhLWI5M2MtYTFiNDhmNjFmM2RkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUiGCB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABvCIuk+lSJQbYOcqrPIWk3GUQsaVhsptp4PG0RouwMf/wLaqrg5 Rp6DvaOFb9ygfzdHp+kcap4rTG+GaMviqS71yZArsHljQGpr6OuUkVOIkTqaGc1r Y4d0BUjh8pst83EUnN1WYaZYHXfbngJOlZJ2rdKyIlFozej9em4rlJJIFtTKbOTV entrlmrX8ws3s8kJOK2yhKmUQ+9OYEd0idHfwaNDN3Ev7umoC7OH8y64a88QHXcU EZCywlqA96oPnWZi8Zte6mJiRsOh7Wq0GSD7r0zuvyKUkdwTo7qx0fNH5v4p/J2q C4dzTi9cKTAZKU1bgSZUWF40mD0MeIe9qCc= -----END CERTIFICATE-----Generated at Mon Oct 20 04:54:49 2025 by rpki-client