$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3444b7f1-2a45-3533-a47f-1343fa248cca.roa File: 3444b7f1-2a45-3533-a47f-1343fa248cca.roa (raw, json) Hash identifier: OCRsBT1rMNaOQOSA65CxsAu9eyouOSl7Wst4nu+HyV0= Subject key identifier: 21:41:B8:78:E0:4B:1E:7C:21:FE:74:67:A5:22:AC:6F:0B:34:F8:70 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B4081C5C073CA806D647ACA00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3444b7f1-2a45-3533-a47f-1343fa248cca.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 20940 IP address blocks: 2600:1407:c800::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:c5:c0:73:ca:80:6d:64:7a:ca:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=9b51ebf5-00a3-4d79-8c10-e24c61efb5a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:fa:1b:e7:55:51:28:d7:be:bd:e8:d2:f2:5e: c7:f6:f6:b8:d9:fe:6d:1b:96:e6:00:49:e8:aa:cf: 0a:35:e5:bf:0f:23:ec:18:96:f5:bf:e5:09:94:6a: 51:88:81:12:55:f8:61:2f:b7:20:ab:0b:b0:7d:6c: 52:a0:76:c9:42:a1:1b:ef:fd:b0:f0:9c:0c:2a:e8: 47:56:da:71:e2:8a:9e:61:e4:36:72:6d:fd:65:d4: 51:ca:51:66:d2:b1:52:79:fb:04:02:09:1f:02:96: cf:73:77:6f:34:aa:49:4a:f6:69:9a:b6:d1:52:3c: 62:4d:3d:b9:2c:51:d6:5b:65:df:a9:8e:89:ec:e3: be:fa:24:e9:9d:e6:b8:b4:0f:ae:7e:83:d3:a5:4a: f6:31:f9:c7:6c:73:96:da:28:ea:ec:80:38:c0:99: 6d:3f:32:08:4e:bc:10:f0:bc:dd:dd:5d:dd:d3:f9: e1:6b:eb:e6:70:ed:f1:41:fb:31:9c:e5:5b:0e:9b: 12:de:02:8a:56:f3:44:35:d6:a7:ab:58:68:6f:e7: 81:79:41:86:fc:ef:49:d3:cd:62:b0:71:13:e1:9a: f4:1d:e2:9a:c3:95:d5:03:31:f4:dc:1d:5b:fd:2d: 0c:f7:07:50:97:d4:25:05:c1:1d:cd:cb:a4:aa:e0: d5:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:41:B8:78:E0:4B:1E:7C:21:FE:74:67:A5:22:AC:6F:0B:34:F8:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3444b7f1-2a45-3533-a47f-1343fa248cca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1407:c800::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:67:26:95:cb:60:b4:da:1e:4a:74:a6:cb:1b:1e:52:cd:5b: 8e:81:38:23:9e:44:a8:44:c1:2a:8d:e0:ab:81:5e:73:a0:22: 3b:c9:e5:2f:48:93:a8:96:7f:4c:20:49:26:7c:66:80:c6:8f: d5:5d:0a:38:2d:44:e2:c9:18:3f:cb:a5:d0:eb:c6:c9:7b:33: 5d:ac:29:ba:7e:cf:18:e1:c5:59:77:2f:4b:33:05:f8:66:25: 4b:90:ae:8c:13:2c:0e:55:a7:8a:64:e3:b6:26:fe:48:33:cc: 34:07:e2:a0:53:80:fb:37:4f:08:8d:4c:b7:3b:ef:9c:ce:91: 83:ad:96:1e:5a:08:63:79:39:ab:09:a7:95:06:c5:28:d7:b2: 20:eb:51:d4:5e:29:97:2a:a4:46:b5:fd:33:a3:11:cb:87:8b: 69:66:8c:b0:e3:df:99:e1:86:fe:1a:4c:6f:a8:03:d3:e7:c7: c2:54:1d:56:8c:03:7a:09:a9:d2:58:c9:63:11:43:75:77:6a: 7f:81:5b:83:cd:7c:0e:32:0e:18:75:c6:57:42:c0:62:80:16: ec:b8:8f:48:b7:37:4d:81:62:ee:23:55:fd:79:de:6e:f5:5f: 92:c6:dd:64:87:d9:a0:c1:5c:ee:5c:6e:07:ae:11:b5:b4:01: 5a:00:2d:76 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtAgcXAc8qAbWR6ygAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk OWI1MWViZjUtMDBhMy00ZDc5LThjMTAtZTI0YzYxZWZiNWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/ob51VRKNe+vejS8l7H9va42f5tG5bmAEno qs8KNeW/DyPsGJb1v+UJlGpRiIESVfhhL7cgqwuwfWxSoHbJQqEb7/2w8JwMKuhH Vtpx4oqeYeQ2cm39ZdRRylFm0rFSefsEAgkfApbPc3dvNKpJSvZpmrbRUjxiTT25 LFHWW2XfqY6J7OO++iTpnea4tA+ufoPTpUr2MfnHbHOW2ijq7IA4wJltPzIITrwQ 8Lzd3V3d0/nha+vmcO3xQfsxnOVbDpsS3gKKVvNENdanq1hob+eBeUGG/O9J081i sHET4Zr0HeKaw5XVAzH03B1b/S0M9wdQl9QlBcEdzcukquDVaQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCFBuHjgSx58If50Z6UirG8LNPhwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzQ0NGI3ZjEtMmE0NS0z NTMzLWE0N2YtMTM0M2ZhMjQ4Y2NhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUB8gA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHFnJpXLYLTaHkp0pssbHlLNW46BOCOeRKhEwSqN4KuBXnOgIjvJ 5S9Ik6iWf0wgSSZ8ZoDGj9VdCjgtROLJGD/LpdDrxsl7M12sKbp+zxjhxVl3L0sz BfhmJUuQrowTLA5Vp4pk47Ym/kgzzDQH4qBTgPs3TwiNTLc775zOkYOtlh5aCGN5 OasJp5UGxSjXsiDrUdReKZcqpEa1/TOjEcuHi2lmjLDj35nhhv4aTG+oA9Pnx8JU HVaMA3oJqdJYyWMRQ3V3an+BW4PNfA4yDhh1xldCwGKAFuy4j0i3N02BYu4jVf15 3m71X5LG3WSH2aDBXO5cbgeuEbW0AVoALXY= -----END CERTIFICATE-----Generated at Mon Oct 20 02:35:00 2025 by rpki-client