$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/36d040ee-ad5a-3a4b-afd9-81b07b8c855e.roa File: 36d040ee-ad5a-3a4b-afd9-81b07b8c855e.roa (raw, json) Hash identifier: 63wVlWZv8xX5x1GRFhbNnuihPHUpyvI9N2snvN7Vn24= Subject key identifier: CC:6A:DA:B2:50:D4:0B:ED:8D:D5:58:5F:7A:57:32:50:F7:62:2D:BE Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B4081C7485D7522C077BC1C00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/36d040ee-ad5a-3a4b-afd9-81b07b8c855e.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 20940 IP address blocks: 2600:140a:7000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:c7:48:5d:75:22:c0:77:bc:1c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=c6df8f46-c83b-4eb5-bb44-93bd2c0cbd34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:b1:a9:6e:71:61:17:43:45:24:d6:1a:a0:ee: 55:72:77:5f:3b:74:77:cf:3d:a9:2a:8b:43:ac:e4: b5:b1:f0:e8:ad:27:6b:30:d5:c0:38:f8:d3:c4:2c: e6:a2:d3:25:1c:43:28:fa:92:59:7b:de:4d:07:ed: 00:ff:a9:f6:7a:1b:69:90:dc:0a:57:72:b5:01:a0: fc:b9:37:be:8e:a0:ed:18:a7:84:0c:ce:d5:31:42: 51:c0:94:a3:4d:5a:6b:7d:04:c6:bf:25:0e:af:83: 6f:f0:e2:31:19:28:97:3d:bc:95:03:ca:b9:f5:27: 46:28:f9:3e:ff:6d:ca:6c:88:64:ed:dc:ba:b4:49: 63:c6:02:08:8c:87:32:22:77:ab:36:e0:93:de:ec: bd:22:eb:03:0b:3f:6c:22:c8:79:b7:a7:7f:fc:1e: 3b:9d:3e:55:7d:aa:ad:9e:25:51:ac:72:94:b2:fa: fc:9d:5e:48:c9:7f:d7:63:54:f2:de:e6:5d:b5:c8: 3b:1b:07:de:ff:fa:17:15:ab:1f:78:ca:bf:ce:e2: 98:1d:9f:9a:a0:a1:49:8f:24:46:e8:b4:5b:0b:18: 5d:e9:24:d9:be:f6:68:58:5f:7b:64:4f:91:4f:e8: a4:d3:85:bb:14:a0:ce:12:f6:31:f4:a1:4f:60:0d: 1f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:6A:DA:B2:50:D4:0B:ED:8D:D5:58:5F:7A:57:32:50:F7:62:2D:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/36d040ee-ad5a-3a4b-afd9-81b07b8c855e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:140a:7000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:5e:b2:e6:16:e1:79:86:bf:03:17:d7:1e:56:d2:d7:2e:b2: 57:cb:34:a7:49:a0:08:2f:57:95:4b:5c:7e:63:7e:66:60:d4: 3a:20:27:da:dd:8d:91:04:bf:24:c5:3b:ae:e3:18:c1:23:a7: 2c:21:49:9e:93:6f:fc:b7:14:4b:64:2e:d5:82:0d:5f:92:ed: c7:33:37:ca:4a:6f:0d:6e:6d:11:7a:5e:e6:1c:1d:02:3e:10: b1:56:6b:44:bb:cd:11:bb:9a:8e:27:fa:b4:ed:48:90:65:07: de:ec:4a:68:05:e2:29:04:95:10:06:bf:2e:0a:8c:15:cd:44: 30:90:48:a1:f8:8f:88:32:62:ce:65:96:13:49:4a:04:04:dc: 2a:62:30:1a:66:5f:87:03:4a:7b:c4:2c:07:b8:b5:88:0c:0f: b1:20:aa:89:d4:75:b5:2f:63:db:f7:32:a3:dd:0c:75:75:f4: df:46:ea:bc:09:b4:4d:16:cf:94:24:fd:64:37:28:6a:20:49: 95:be:ae:f7:27:6d:6c:9b:19:42:2a:4f:5d:98:37:df:84:46: 4d:40:63:c2:67:51:59:11:09:57:5f:ed:7c:57:51:7b:06:9f: 64:1d:cf:ee:9b:c9:9a:9f:6c:ef:db:62:cf:61:fa:45:0b:dc: bb:f2:16:c0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtAgcdIXXUiwHe8HAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk YzZkZjhmNDYtYzgzYi00ZWI1LWJiNDQtOTNiZDJjMGNiZDM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA17GpbnFhF0NFJNYaoO5VcndfO3R3zz2pKotD rOS1sfDorSdrMNXAOPjTxCzmotMlHEMo+pJZe95NB+0A/6n2ehtpkNwKV3K1AaD8 uTe+jqDtGKeEDM7VMUJRwJSjTVprfQTGvyUOr4Nv8OIxGSiXPbyVA8q59SdGKPk+ /23KbIhk7dy6tEljxgIIjIcyInerNuCT3uy9IusDCz9sIsh5t6d//B47nT5Vfaqt niVRrHKUsvr8nV5IyX/XY1Ty3uZdtcg7Gwfe//oXFasfeMq/zuKYHZ+aoKFJjyRG 6LRbCxhd6STZvvZoWF97ZE+RT+ik04W7FKDOEvYx9KFPYA0fVwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMxq2rJQ1AvtjdVYX3pXMlD3Yi2+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzZkMDQwZWUtYWQ1YS0z YTRiLWFmZDktODFiMDdiOGM4NTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUCnAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEBesuYW4XmGvwMX1x5W0tcuslfLNKdJoAgvV5VLXH5jfmZg1Dog J9rdjZEEvyTFO67jGMEjpywhSZ6Tb/y3FEtkLtWCDV+S7cczN8pKbw1ubRF6XuYc HQI+ELFWa0S7zRG7mo4n+rTtSJBlB97sSmgF4ikElRAGvy4KjBXNRDCQSKH4j4gy Ys5llhNJSgQE3CpiMBpmX4cDSnvELAe4tYgMD7EgqonUdbUvY9v3MqPdDHV19N9G 6rwJtE0Wz5Qk/WQ3KGogSZW+rvcnbWybGUIqT12YN9+ERk1AY8JnUVkRCVdf7XxX UXsGn2Qdz+6byZqfbO/bYs9h+kUL3LvyFsA= -----END CERTIFICATE-----Generated at Mon Oct 20 04:55:52 2025 by rpki-client