$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3e0b67eb-b5e4-3fca-a532-e436cccd05fc.roa File: 3e0b67eb-b5e4-3fca-a532-e436cccd05fc.roa (raw, json) Hash identifier: Q0gorGKQT1dlfOKZjBIm1Xf7zxhdtai96zI7ZbrlMN0= Subject key identifier: 4B:C2:FF:A3:82:BE:A8:A6:52:D5:F5:0F:FD:00:F0:F7:62:64:F7:95 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B2CF6EF038ECF5EBF4CD9AF40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3e0b67eb-b5e4-3fca-a532-e436cccd05fc.roa Signing time: Sat 13 Sep 2025 01:00:33 +0000 ROA not before: Sat 13 Sep 2025 01:00:33 +0000 ROA not after: Fri 12 Dec 2025 02:00:33 +0000 asID: 20940 IP address blocks: 2600:140b:10::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:f6:ef:03:8e:cf:5e:bf:4c:d9:af:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 13 01:00:33 2025 GMT Not After : Dec 12 02:00:33 2025 GMT Subject: CN=f4c3dbd3-09f7-4f10-993f-700f4abb2400 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:db:88:24:33:23:22:a0:cf:aa:81:0e:05:f2: af:91:e6:0c:d2:fa:d9:a4:ee:95:92:80:27:85:4b: 4b:75:aa:8b:ac:62:b3:8d:5d:56:bb:5a:8f:a6:fc: b7:e6:83:08:7d:a5:0d:16:cd:6d:7f:4e:c8:5e:38: ab:e1:8d:d6:8c:48:ae:d7:48:c7:b8:ba:3e:5b:a3: d3:9a:62:d2:c3:79:a9:73:8f:66:71:70:0e:7f:55: d1:53:6f:1a:71:57:34:7f:b5:3e:a9:fc:bb:8a:e4: 10:96:30:5f:4c:fb:91:69:8f:78:98:19:60:99:bd: 6c:39:d3:a5:f0:88:44:20:8d:dd:f5:4e:38:14:20: 66:ed:9e:c9:9c:0b:25:84:b8:d1:44:83:c0:07:6a: 71:96:e7:9e:c0:ba:88:0f:3c:35:fb:ef:4a:f5:0c: 53:4e:94:91:75:a3:97:48:93:9b:e2:78:7d:02:ba: 51:87:58:96:d7:38:35:8f:5c:e4:cf:5c:02:e7:ef: 88:e2:44:3a:87:01:28:46:ad:7f:35:a5:06:27:20: 8e:74:3f:55:47:63:09:7b:65:2c:b7:c7:50:5c:ef: 4d:ef:92:1a:a8:b4:08:48:4e:32:7c:5f:ca:34:70: f8:33:64:a4:cc:93:ae:46:26:2c:01:75:90:7e:66: 20:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:C2:FF:A3:82:BE:A8:A6:52:D5:F5:0F:FD:00:F0:F7:62:64:F7:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3e0b67eb-b5e4-3fca-a532-e436cccd05fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:140b:10::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:a4:5d:93:79:e4:0a:2b:39:9a:d5:28:15:33:b0:cb:97:d9: c2:d4:08:d8:84:4d:75:c0:62:c0:e6:0a:4f:59:a9:a7:23:fc: ae:e2:53:19:e2:7a:b4:5a:3f:3b:ff:d1:07:d0:d2:b9:90:d9: 3e:f0:63:40:29:45:b0:41:69:f8:d3:1a:df:d8:9a:75:7d:b0: aa:b8:2d:00:f8:80:7d:7c:7f:64:74:89:87:3f:86:23:78:93: d4:33:70:31:65:1d:fa:2e:29:06:b0:a0:db:4b:ca:81:4e:34: ea:cf:31:66:22:99:11:e1:8c:b8:95:6f:4d:c1:1a:d8:ed:c9: 92:b9:e1:04:e8:e5:66:c1:c0:70:ee:03:15:32:f2:50:4b:23: ee:54:ed:f4:4e:87:8e:9b:e0:a5:51:8c:e0:db:5e:67:9e:0b: e6:41:64:53:a3:2e:32:1d:0b:e3:95:9a:6b:c5:c4:da:78:44: 37:8f:e3:be:e7:1c:82:9b:a0:56:a2:40:77:89:a9:8e:b1:6d: 6f:c1:b9:32:2c:72:6f:9c:32:0d:4c:1d:4c:8f:f7:40:21:5e: e3:6b:76:31:28:0e:30:82:42:b4:4f:e5:d1:e8:b2:ef:2a:9e: 29:63:aa:94:9f:bc:5b:58:8f:37:1f:0b:db:e4:4b:14:c9:ca: 7e:90:71:9c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEss9u8Djs9ev0zZr0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkxMzAxMDAzM1oXDTI1MTIxMjAyMDAzM1owLzEtMCsGA1UEAxMk ZjRjM2RiZDMtMDlmNy00ZjEwLTk5M2YtNzAwZjRhYmIyNDAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNuIJDMjIqDPqoEOBfKvkeYM0vrZpO6VkoAn hUtLdaqLrGKzjV1Wu1qPpvy35oMIfaUNFs1tf07IXjir4Y3WjEiu10jHuLo+W6PT mmLSw3mpc49mcXAOf1XRU28acVc0f7U+qfy7iuQQljBfTPuRaY94mBlgmb1sOdOl 8IhEII3d9U44FCBm7Z7JnAslhLjRRIPAB2pxlueewLqIDzw1++9K9QxTTpSRdaOX SJOb4nh9ArpRh1iW1zg1j1zkz1wC5++I4kQ6hwEoRq1/NaUGJyCOdD9VR2MJe2Us t8dQXO9N75IaqLQISE4yfF/KNHD4M2SkzJOuRiYsAXWQfmYgcQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEvC/6OCvqimUtX1D/0A8PdiZPeVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2UwYjY3ZWItYjVlNC0z ZmNhLWE1MzItZTQzNmNjY2QwNWZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUCwAQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJakXZN55AorOZrVKBUzsMuX2cLUCNiETXXAYsDmCk9Zqacj/K7i UxnierRaPzv/0QfQ0rmQ2T7wY0ApRbBBafjTGt/YmnV9sKq4LQD4gH18f2R0iYc/ hiN4k9QzcDFlHfouKQawoNtLyoFONOrPMWYimRHhjLiVb03BGtjtyZK54QTo5WbB wHDuAxUy8lBLI+5U7fROh46b4KVRjODbXmeeC+ZBZFOjLjIdC+OVmmvFxNp4RDeP 477nHIKboFaiQHeJqY6xbW/BuTIscm+cMg1MHUyP90AhXuNrdjEoDjCCQrRP5dHo su8qniljqpSfvFtYjzcfC9vkSxTJyn6QcZw= -----END CERTIFICATE-----Generated at Mon Oct 20 02:36:19 2025 by rpki-client