$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3d48bcbd-ac1f-3bf2-baf1-e2dc87faa467.roa File: 3d48bcbd-ac1f-3bf2-baf1-e2dc87faa467.roa (raw, json) Hash identifier: mKoETMD0cXN8a1yuK61b6rpP7jApmX69pfXRqLCNXds= Subject key identifier: BA:27:9F:DC:FA:5B:EE:AA:8E:CA:09:86:F6:C6:55:BF:BE:E4:AB:D1 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B79BCB4FFB9D3DCE71BFABE00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3d48bcbd-ac1f-3bf2-baf1-e2dc87faa467.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 21342 IP address blocks: 2600:1405:9400::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:b4:ff:b9:d3:dc:e7:1b:fa:be:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=4b4431fe-d98f-46ea-b5ce-13fd7af45fb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a5:39:51:c8:6a:8d:7b:bb:81:d4:60:42:40: 33:35:3a:eb:d2:a8:e0:c4:87:b5:0d:b8:df:23:e3: a3:1f:0d:52:7e:56:26:f3:55:8c:f4:17:38:c7:c4: 0d:57:60:cb:17:a3:a0:c2:52:ed:4f:2d:72:9d:5b: a3:bc:66:6e:c2:40:bc:f4:7e:d0:64:aa:09:89:ca: fb:b4:60:1c:c2:9c:62:c1:f2:cf:66:c9:68:37:92: fc:af:34:8e:ae:f8:36:3b:62:92:3a:c0:e9:9b:b9: 8e:47:bc:27:f0:71:71:83:25:fa:66:9d:8d:e5:5e: f7:6e:24:78:6f:5a:63:f5:a0:50:60:ae:fe:18:b3: 14:ca:40:42:34:d1:93:3f:70:f2:8e:f9:7b:a7:79: 94:25:72:e6:5e:d1:29:3b:34:9b:da:a7:7d:c6:0e: 8e:59:bd:4c:dd:58:5e:16:d9:8b:dd:27:38:83:8c: 89:c2:8e:48:47:53:01:7a:b7:62:d9:f9:e3:c2:d0: 5c:44:4d:93:18:21:8e:d7:44:4e:39:b2:01:36:f0: 27:2b:41:d7:5e:91:ba:95:25:a2:8b:3c:a9:f3:e1: 3d:c2:b5:48:16:a8:8a:99:1e:14:b7:07:0b:c5:7b: 69:5c:53:bb:e3:d9:68:77:05:04:d1:b2:d3:eb:d3: 07:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:27:9F:DC:FA:5B:EE:AA:8E:CA:09:86:F6:C6:55:BF:BE:E4:AB:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3d48bcbd-ac1f-3bf2-baf1-e2dc87faa467.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1405:9400::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:96:cd:02:e3:93:d4:35:1b:00:72:2a:f1:54:ba:b2:ee:a3: 8f:6c:a5:20:2f:88:8b:f5:5e:24:a5:3c:44:6e:42:37:7e:b9: c8:c0:5e:7e:db:9f:06:de:15:f1:f1:1b:31:e0:49:dd:15:01: 69:df:ae:60:e5:71:ba:3f:ce:76:79:d8:71:e0:c6:c4:45:8f: 7c:4a:c6:11:5f:b9:11:31:41:a6:35:ab:86:44:96:65:25:42: 8f:49:8e:15:70:dd:f5:9a:bc:17:a0:81:eb:30:fa:df:1b:8c: d3:5a:c0:0e:8d:5f:0c:dd:10:4e:2c:25:59:0e:c1:a8:b3:15: dd:00:12:8e:a1:92:71:e9:9d:53:a6:24:d3:fe:88:26:0a:fe: c9:08:57:bc:46:bc:5b:b2:c9:c0:5c:ef:13:49:53:e2:1e:de: 9f:d7:bc:97:79:39:15:ad:7d:7a:14:e7:2f:70:92:b9:82:99: 8d:ef:d1:00:b3:8c:c6:62:fe:d5:f7:2a:d5:8e:3a:f8:b6:d1: 6f:b0:27:24:39:b8:4b:e3:99:70:b7:15:bc:be:74:78:c3:4f: 63:67:be:27:a2:dd:67:f3:f2:c6:dd:55:d9:c2:05:75:1d:79: f1:0d:fd:fa:e5:dd:15:98:35:79:02:37:b3:74:10:0c:c3:e3: 5b:26:2f:41 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt5vLT/udPc5xv6vgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk NGI0NDMxZmUtZDk4Zi00NmVhLWI1Y2UtMTNmZDdhZjQ1ZmI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6U5UchqjXu7gdRgQkAzNTrr0qjgxIe1Dbjf I+OjHw1SflYm81WM9Bc4x8QNV2DLF6OgwlLtTy1ynVujvGZuwkC89H7QZKoJicr7 tGAcwpxiwfLPZsloN5L8rzSOrvg2O2KSOsDpm7mOR7wn8HFxgyX6Zp2N5V73biR4 b1pj9aBQYK7+GLMUykBCNNGTP3Dyjvl7p3mUJXLmXtEpOzSb2qd9xg6OWb1M3Vhe FtmL3Sc4g4yJwo5IR1MBerdi2fnjwtBcRE2TGCGO10ROObIBNvAnK0HXXpG6lSWi izyp8+E9wrVIFqiKmR4UtwcLxXtpXFO749lodwUE0bLT69MHtwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLonn9z6W+6qjsoJhvbGVb++5KvRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2Q0OGJjYmQtYWMxZi0z YmYyLWJhZjEtZTJkYzg3ZmFhNDY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUBZQA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAASWzQLjk9Q1GwByKvFUurLuo49spSAviIv1XiSlPERuQjd+ucjA Xn7bnwbeFfHxGzHgSd0VAWnfrmDlcbo/znZ52HHgxsRFj3xKxhFfuRExQaY1q4ZE lmUlQo9JjhVw3fWavBeggesw+t8bjNNawA6NXwzdEE4sJVkOwaizFd0AEo6hknHp nVOmJNP+iCYK/skIV7xGvFuyycBc7xNJU+Ie3p/XvJd5ORWtfXoU5y9wkrmCmY3v 0QCzjMZi/tX3KtWOOvi20W+wJyQ5uEvjmXC3Fby+dHjDT2Nnviei3Wfz8sbdVdnC BXUdefEN/frl3RWYNXkCN7N0EAzD41smL0E= -----END CERTIFICATE-----Generated at Mon Oct 20 12:34:20 2025 by rpki-client