$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/38f89f5c-26f2-3134-b0d1-41037dc7621e.roa File: 38f89f5c-26f2-3134-b0d1-41037dc7621e.roa (raw, json) Hash identifier: GSxD1aL3ARYJQfK4tIkmSCjETZHfK9s6Xea9SV1/8C0= Subject key identifier: 7C:04:6B:48:A0:DE:7C:88:F4:8B:23:1A:E0:3A:AD:06:20:AB:1D:A4 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B48E20AD501FDAEA496DAF840 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/38f89f5c-26f2-3134-b0d1-41037dc7621e.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 35994 IP address blocks: 2600:1406:4800::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e2:0a:d5:01:fd:ae:a4:96:da:f8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=21eee658-d761-4e56-b71d-790140c6957a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:8c:22:b6:99:db:53:32:e2:05:ab:a9:8c:f5: bc:af:e3:86:a1:f2:fe:c0:d8:68:30:69:68:34:05: 9c:d5:bc:48:c5:04:79:27:d6:28:65:33:95:82:26: 74:1e:1b:d9:71:d7:44:6c:f6:3c:d6:2a:1b:3c:c1: 0b:af:26:88:ac:ed:56:ba:29:40:73:75:93:30:b4: e0:47:97:d9:31:ff:97:25:9b:5d:a1:4d:d1:f0:10: a6:9c:4b:9a:5d:0f:8c:13:37:c2:3c:05:62:4d:83: d3:54:91:b7:41:0c:16:c2:ce:e8:16:10:3d:2a:4b: 31:f0:0a:64:79:5d:66:71:84:9d:47:83:ec:fd:86: 67:51:3b:23:9f:9f:a7:6a:70:5c:63:1c:71:65:66: 15:a2:e3:cb:e0:d9:05:16:05:91:d9:5e:1a:7c:b1: 07:1d:6f:24:1c:ad:41:9c:e3:37:1a:89:fe:7d:40: 9b:3b:6a:5a:ac:a1:5f:be:eb:0e:00:ad:52:ad:e2: 16:98:ce:9c:75:71:12:5b:08:f3:63:d2:82:c9:ec: 89:1f:de:2c:f5:fd:c1:df:b4:75:31:47:22:68:36: d3:58:dd:e7:84:1a:70:ce:eb:99:9a:82:c6:3d:a2: 93:47:f5:b2:25:a4:c5:99:85:1d:f0:f5:d0:57:ed: 15:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:04:6B:48:A0:DE:7C:88:F4:8B:23:1A:E0:3A:AD:06:20:AB:1D:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/38f89f5c-26f2-3134-b0d1-41037dc7621e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1406:4800::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:69:d5:71:62:ce:54:7c:3a:78:f8:78:23:20:95:72:fb:e4: b6:75:34:b2:b9:00:2f:61:ab:ec:f8:d9:c1:5b:d1:d0:a7:35: cf:2b:92:08:5e:41:e4:67:b0:a8:22:99:73:41:15:54:54:81: 52:30:03:c3:9a:72:cb:13:82:99:14:2d:4f:6e:52:79:80:e7: d3:79:0f:d6:5d:69:d2:b4:e1:ef:2b:0c:16:63:99:25:30:a0: 1d:72:bc:36:b8:f2:48:9c:14:75:e7:26:02:b9:b2:79:73:d2: b3:86:d5:53:24:14:18:b1:d3:ce:c1:f8:d6:7a:13:45:a6:cd: 18:1e:8d:f3:dc:43:ba:8b:10:48:fa:72:bd:69:e3:dc:a0:b3: 33:c7:a2:d7:14:d2:c8:f8:69:93:54:42:a2:c2:4a:3f:6f:f0: d0:cd:91:e5:92:7c:54:44:02:d0:df:d1:59:62:0c:4e:8a:e3: 3b:37:74:2f:48:ce:d0:9a:14:15:2b:70:dd:03:41:52:fa:49: 28:20:8a:c9:ac:85:06:d6:99:2d:ac:d1:d5:26:3a:38:6d:30: a0:47:ab:20:12:fa:96:87:ca:7d:8c:45:79:56:9d:29:e8:97: b3:e8:48:dd:cb:ca:b8:db:a3:75:4c:a3:71:31:05:c5:c8:7d: f6:af:c7:7a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtI4grVAf2upJba+EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk MjFlZWU2NTgtZDc2MS00ZTU2LWI3MWQtNzkwMTQwYzY5NTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhowitpnbUzLiBaupjPW8r+OGofL+wNhoMGlo NAWc1bxIxQR5J9YoZTOVgiZ0HhvZcddEbPY81iobPMELryaIrO1WuilAc3WTMLTg R5fZMf+XJZtdoU3R8BCmnEuaXQ+MEzfCPAViTYPTVJG3QQwWws7oFhA9Kksx8Apk eV1mcYSdR4Ps/YZnUTsjn5+nanBcYxxxZWYVouPL4NkFFgWR2V4afLEHHW8kHK1B nOM3Gon+fUCbO2parKFfvusOAK1SreIWmM6cdXESWwjzY9KCyeyJH94s9f3B37R1 MUciaDbTWN3nhBpwzuuZmoLGPaKTR/WyJaTFmYUd8PXQV+0VKwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHwEa0ig3nyI9IsjGuA6rQYgqx2kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzhmODlmNWMtMjZmMi0z MTM0LWIwZDEtNDEwMzdkYzc2MjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUBkgA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIhp1XFizlR8Onj4eCMglXL75LZ1NLK5AC9hq+z42cFb0dCnNc8r kgheQeRnsKgimXNBFVRUgVIwA8OacssTgpkULU9uUnmA59N5D9ZdadK04e8rDBZj mSUwoB1yvDa48kicFHXnJgK5snlz0rOG1VMkFBix087B+NZ6E0WmzRgejfPcQ7qL EEj6cr1p49ygszPHotcU0sj4aZNUQqLCSj9v8NDNkeWSfFREAtDf0VliDE6K4zs3 dC9IztCaFBUrcN0DQVL6SSggismshQbWmS2s0dUmOjhtMKBHqyAS+paHyn2MRXlW nSnol7PoSN3Lyrjbo3VMo3ExBcXIffavx3o= -----END CERTIFICATE-----Generated at Mon Oct 20 12:30:44 2025 by rpki-client