$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3a30e941-752e-3588-9cac-303d21a0333e.roa File: 3a30e941-752e-3588-9cac-303d21a0333e.roa (raw, json) Hash identifier: /wn6TRw9OcoVggQiIqWLVAuE3PjyxcLZAcU5uOcZ+0k= Subject key identifier: 18:38:03:49:39:F1:30:C0:05:BE:BC:4C:2D:61:1B:18:D1:40:85:D5 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B48E206AC4F2B85947A04BDC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3a30e941-752e-3588-9cac-303d21a0333e.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 20940 IP address blocks: 2600:1488:4100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e2:06:ac:4f:2b:85:94:7a:04:bd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=afe925a4-7b87-4394-be73-eb2dbb7840db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:c6:02:6d:25:00:ed:d1:a8:f3:23:fd:3f:ee: 4b:52:9f:dd:1d:6a:02:8f:0a:cd:d4:28:59:88:30: 5f:f2:59:1d:8e:cc:e9:4d:ce:9a:5f:72:66:33:29: 2d:bd:e3:eb:64:2d:53:bd:77:ed:94:3e:2b:dc:37: 9f:2c:20:18:7a:ca:8a:52:6b:02:26:f0:26:87:53: 53:f4:15:9f:89:82:49:e1:11:90:65:54:42:07:45: bb:07:92:9a:bc:11:bd:c5:e7:df:e7:f2:60:53:77: 98:06:a1:76:94:69:d1:bc:49:d3:83:fc:97:1c:de: ce:18:d9:fb:7c:0b:ca:e6:45:95:05:64:ce:ce:f2: c4:3b:19:a0:58:da:a5:d0:45:9b:1e:5c:f6:7b:e4: 5f:34:a3:ab:f5:33:9e:20:b6:6a:13:07:72:c0:25: 47:a7:3c:4f:00:66:5c:68:10:98:4b:b7:89:8b:8a: b4:f1:88:89:4c:f6:18:2e:88:04:e0:16:3e:18:78: 86:a0:da:55:20:f5:e9:0e:86:9c:73:e1:a3:2b:7e: c6:23:ba:ae:37:d5:13:1d:7f:e0:22:c4:1c:7b:86: 5b:f3:88:e9:fd:50:8a:14:7b:68:11:1e:e4:41:d2: be:e1:56:93:ec:22:25:50:e4:94:71:7b:f7:59:4f: 1a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:38:03:49:39:F1:30:C0:05:BE:BC:4C:2D:61:1B:18:D1:40:85:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3a30e941-752e-3588-9cac-303d21a0333e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1488:4100::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:6a:e2:04:28:05:bb:6e:ee:eb:90:e9:d7:ca:ed:de:c2:23: da:ea:4d:da:e2:ad:91:68:c9:29:be:94:a8:5e:3b:7b:38:c6: 27:c9:51:91:ad:c2:f6:5d:2a:7d:99:77:f8:60:97:54:26:2e: d8:c8:08:42:cf:68:69:af:9f:fb:45:d3:1c:f5:82:9d:8d:6c: fa:9c:b0:e7:e0:90:7f:83:a5:78:ff:4e:3f:87:dd:bb:c8:ae: 4f:12:40:dd:30:36:9b:99:1a:6d:7d:ed:50:8b:38:af:88:8a: 94:20:b3:9d:ad:62:38:64:3a:e7:d1:75:cf:29:dc:13:3b:05: 4b:7d:0a:21:1d:ad:e8:8e:79:34:4f:97:0b:52:12:d1:e7:fb: 35:a3:9d:64:d6:a3:ac:20:e9:34:9b:c0:35:d9:b6:f4:bc:55: ba:40:0a:86:d9:9f:69:f7:7b:83:1a:58:4c:b3:fc:fb:86:9c: 9a:dc:4c:3a:c5:4b:85:29:68:2e:c9:41:1f:f5:fd:13:28:0b: f3:1a:0f:1b:61:6b:d9:10:16:04:ba:dc:9e:35:04:32:2b:10: f3:a1:ad:98:ac:48:80:92:3d:a5:34:10:21:cf:b8:55:ed:f5: f8:ce:af:e6:bc:4f:ea:d1:18:a7:0e:0f:34:9a:d0:c9:85:34: 9b:5a:35:9b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtI4gasTyuFlHoEvcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk YWZlOTI1YTQtN2I4Ny00Mzk0LWJlNzMtZWIyZGJiNzg0MGRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8YCbSUA7dGo8yP9P+5LUp/dHWoCjwrN1ChZ iDBf8lkdjszpTc6aX3JmMyktvePrZC1TvXftlD4r3DefLCAYesqKUmsCJvAmh1NT 9BWfiYJJ4RGQZVRCB0W7B5KavBG9xeff5/JgU3eYBqF2lGnRvEnTg/yXHN7OGNn7 fAvK5kWVBWTOzvLEOxmgWNql0EWbHlz2e+RfNKOr9TOeILZqEwdywCVHpzxPAGZc aBCYS7eJi4q08YiJTPYYLogE4BY+GHiGoNpVIPXpDoacc+GjK37GI7quN9UTHX/g IsQce4Zb84jp/VCKFHtoER7kQdK+4VaT7CIlUOSUcXv3WU8aNwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBg4A0k58TDABb68TC1hGxjRQIXVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2EzMGU5NDEtNzUyZS0z NTg4LTljYWMtMzAzZDIxYTAzMzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUiEEA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACdq4gQoBbtu7uuQ6dfK7d7CI9rqTdrirZFoySm+lKheO3s4xifJ UZGtwvZdKn2Zd/hgl1QmLtjICELPaGmvn/tF0xz1gp2NbPqcsOfgkH+DpXj/Tj+H 3bvIrk8SQN0wNpuZGm197VCLOK+IipQgs52tYjhkOufRdc8p3BM7BUt9CiEdreiO eTRPlwtSEtHn+zWjnWTWo6wg6TSbwDXZtvS8VbpACobZn2n3e4MaWEyz/PuGnJrc TDrFS4UpaC7JQR/1/RMoC/MaDxtha9kQFgS63J41BDIrEPOhrZisSICSPaU0ECHP uFXt9fjOr+a8T+rRGKcODzSa0MmFNJtaNZs= -----END CERTIFICATE-----Generated at Mon Oct 20 05:26:35 2025 by rpki-client