$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/35c02588-ef9a-32cb-8f98-53e462f32b95.roa File: 35c02588-ef9a-32cb-8f98-53e462f32b95.roa (raw, json) Hash identifier: E7/Rn98TwoESbvRibTrUEPt12FtvQUHlJkS1iV83/QY= Subject key identifier: E8:A7:CB:09:E6:8E:50:66:05:B1:34:8D:1B:CD:D5:58:95:AD:5B:7B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B3821AC6FFE4801C90F3CC3C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/35c02588-ef9a-32cb-8f98-53e462f32b95.roa Signing time: Wed 17 Sep 2025 01:00:33 +0000 ROA not before: Wed 17 Sep 2025 01:00:33 +0000 ROA not after: Tue 16 Dec 2025 02:00:33 +0000 asID: 20940 IP address blocks: 2600:141c:c000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:38:21:ac:6f:fe:48:01:c9:0f:3c:c3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 17 01:00:33 2025 GMT Not After : Dec 16 02:00:33 2025 GMT Subject: CN=3a5fe66e-88b5-4e4e-9615-65c93c122824 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:fa:49:92:35:8d:7c:bb:c2:08:02:88:8b:86: a9:90:03:5c:78:7e:2f:62:8a:14:ba:86:75:ca:c1: af:84:86:6a:4c:31:e3:c6:88:a7:40:3d:e9:e5:1e: e3:d0:e7:08:10:2f:8a:cc:4f:24:1e:57:f6:d3:45: 81:43:cb:b6:33:8b:63:51:a7:0a:e6:9f:7b:28:10: 93:1f:6a:4c:91:89:c5:0b:8c:1b:9d:e9:63:9a:9a: 76:a3:a6:4d:3a:26:bb:05:ac:20:3c:b0:92:c5:87: 6a:51:e4:53:c5:08:d5:17:92:b9:a1:fb:7d:a6:df: 87:35:d3:47:d6:e3:9d:4d:83:fa:9f:a7:57:f9:44: 8d:4e:fb:25:c0:a7:5f:5e:ec:5d:53:11:6e:16:7d: 88:25:f7:15:e3:c5:0a:7f:99:15:0c:0a:71:92:d9: 2b:27:87:c1:f3:20:ec:c3:13:ff:f4:98:66:22:5f: 55:b7:7c:ca:0a:28:b8:63:a3:6a:56:e2:77:26:54: 9a:b0:c0:e4:53:b8:ca:c2:67:38:52:41:eb:c7:d7: ce:4b:11:35:7e:03:9e:01:da:54:38:55:dd:63:b5: 3c:66:be:b0:9d:1a:31:c8:81:08:57:e1:5d:bb:73: 7c:af:df:62:d8:cf:70:0b:d3:e3:f4:d7:a4:60:d3: ac:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:A7:CB:09:E6:8E:50:66:05:B1:34:8D:1B:CD:D5:58:95:AD:5B:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/35c02588-ef9a-32cb-8f98-53e462f32b95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:141c:c000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:13:d7:fc:9c:20:ea:8f:91:53:57:f4:f2:32:31:71:35:38: a3:71:75:fe:fe:71:a5:55:78:03:a4:a1:87:81:47:a0:c2:30: 96:0e:d9:20:90:e8:9f:68:72:29:82:72:06:f6:d9:7f:4e:db: 52:5e:2d:a8:77:0b:0d:7a:fc:45:ab:e5:7d:97:37:13:fc:36: 2a:72:40:bb:db:cb:03:b6:6d:cc:15:59:02:1d:52:26:70:30: bf:7e:11:62:e0:08:73:71:31:b4:a0:0d:cd:4a:37:fd:d4:63: 02:3d:e6:ff:4a:c4:d1:ef:81:e3:ff:00:c5:24:3e:68:cf:9f: 48:bd:91:13:1b:f8:4e:65:ae:e0:0f:09:52:00:6c:83:a5:43: 3a:70:e7:86:4c:2f:60:17:9a:cd:6b:13:3f:9d:a3:f7:94:3a: a7:80:0e:e2:c3:71:1d:26:3c:dd:df:1e:53:e9:1e:e8:53:4f: ac:14:7e:35:2a:27:c9:f2:96:78:5c:49:a1:c2:db:22:c6:85: 88:db:a7:af:d8:55:00:19:b7:12:81:f7:bc:61:1d:35:28:de: 02:f9:18:82:e0:31:cb:22:ca:04:06:22:db:9f:0d:5a:1b:a0: 4c:b3:ac:f5:1a:1a:ba:1f:66:30:73:50:0c:e2:4c:5f:4f:33: f0:3f:d4:e1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs4Iaxv/kgByQ88w8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkxNzAxMDAzM1oXDTI1MTIxNjAyMDAzM1owLzEtMCsGA1UEAxMk M2E1ZmU2NmUtODhiNS00ZTRlLTk2MTUtNjVjOTNjMTIyODI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfpJkjWNfLvCCAKIi4apkANceH4vYooUuoZ1 ysGvhIZqTDHjxoinQD3p5R7j0OcIEC+KzE8kHlf200WBQ8u2M4tjUacK5p97KBCT H2pMkYnFC4wbneljmpp2o6ZNOia7BawgPLCSxYdqUeRTxQjVF5K5oft9pt+HNdNH 1uOdTYP6n6dX+USNTvslwKdfXuxdUxFuFn2IJfcV48UKf5kVDApxktkrJ4fB8yDs wxP/9JhmIl9Vt3zKCii4Y6NqVuJ3JlSasMDkU7jKwmc4UkHrx9fOSxE1fgOeAdpU OFXdY7U8Zr6wnRoxyIEIV+Fdu3N8r99i2M9wC9Pj9NekYNOsUQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOinywnmjlBmBbE0jRvN1ViVrVt7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzVjMDI1ODgtZWY5YS0z MmNiLThmOTgtNTNlNDYyZjMyYjk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUHMAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABgT1/ycIOqPkVNX9PIyMXE1OKNxdf7+caVVeAOkoYeBR6DCMJYO 2SCQ6J9ocimCcgb22X9O21JeLah3Cw16/EWr5X2XNxP8NipyQLvbywO2bcwVWQId UiZwML9+EWLgCHNxMbSgDc1KN/3UYwI95v9KxNHvgeP/AMUkPmjPn0i9kRMb+E5l ruAPCVIAbIOlQzpw54ZML2AXms1rEz+do/eUOqeADuLDcR0mPN3fHlPpHuhTT6wU fjUqJ8nylnhcSaHC2yLGhYjbp6/YVQAZtxKB97xhHTUo3gL5GILgMcsiygQGItuf DVoboEyzrPUaGrofZjBzUAziTF9PM/A/1OE= -----END CERTIFICATE-----Generated at Mon Oct 20 05:28:37 2025 by rpki-client