$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3ebbcb68-49e8-31e1-a0e4-c17314688a87.roa File: 3ebbcb68-49e8-31e1-a0e4-c17314688a87.roa (raw, json) Hash identifier: C8k7Mx+Ske9lgPeViVO6ycw6R4FPhIt8VxEQnw6fS8I= Subject key identifier: 27:D7:7A:C2:A9:32:71:91:CD:B1:80:42:00:9B:71:3A:13:CB:04:FB Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B4081C5AD711B08F2253586C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3ebbcb68-49e8-31e1-a0e4-c17314688a87.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 20940 IP address blocks: 2600:1407:7c00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:c5:ad:71:1b:08:f2:25:35:86:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=d0d73b28-60fd-4ab6-bb21-d5a0fc5756ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ef:20:d7:99:00:88:f3:8e:ad:90:ca:58:27: 8a:d6:6b:d7:22:f5:fa:ff:45:41:e8:50:da:2d:16: de:28:33:d2:2f:9c:5f:84:18:9a:93:f1:eb:6b:ab: c1:e7:0c:fd:07:ff:61:68:90:14:2c:60:d0:9e:ba: 2d:77:4e:1b:76:d5:66:4c:bd:42:06:dd:3d:79:00: 83:c2:f6:cb:31:25:31:c3:70:a0:e4:4a:c6:86:80: 40:08:d3:b3:46:27:a9:bf:3c:5a:54:52:e0:13:56: 84:f8:7e:1c:a8:af:2f:32:57:9c:bb:9d:31:4c:91: f5:d9:95:18:4b:36:19:a9:73:f8:fb:1f:2a:c3:22: d1:cc:38:23:dc:98:29:db:03:37:39:0c:1c:45:ed: eb:b3:c0:f1:43:41:37:c2:0f:bf:5e:90:bb:d6:a8: aa:d4:d1:54:6f:7a:19:26:47:1d:80:57:8e:33:19: 78:9e:88:02:bb:32:fd:9a:17:ca:6c:00:96:d5:88: 88:52:e4:49:99:cd:82:50:c7:a6:d4:f6:67:1a:33: f6:72:24:f6:06:07:7f:df:ce:19:88:61:f1:e0:47: fa:19:ab:a5:83:37:ac:50:6a:5c:b3:5c:dd:a7:ba: 79:a8:9a:af:0d:a2:16:af:6b:89:1a:ce:2b:54:10: 83:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:D7:7A:C2:A9:32:71:91:CD:B1:80:42:00:9B:71:3A:13:CB:04:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3ebbcb68-49e8-31e1-a0e4-c17314688a87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1407:7c00::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:a4:95:03:6c:c4:e2:b9:d6:95:e5:02:48:36:c5:ec:66:d3: 55:25:c4:e5:52:bc:bf:e6:df:e5:64:ea:69:72:2f:07:53:a2: 8d:bb:08:16:36:a8:da:3f:97:82:92:e0:10:49:e5:a5:d2:4a: a3:5d:ca:79:14:22:bf:c7:15:a1:27:14:10:cf:83:c2:2c:9a: bd:76:ad:b0:5c:22:81:c0:d8:7a:92:89:1d:43:cc:47:d4:d7: 95:34:5e:ab:4b:66:34:13:13:5d:b4:cd:22:76:d0:53:b3:26: 56:6b:6d:be:4a:e7:8d:00:ce:b8:ef:8d:3c:71:93:2a:c4:56: d6:3a:0c:d7:54:23:72:79:93:9c:b9:80:90:30:e5:ca:31:15: ab:94:9e:da:ce:db:02:f1:b2:3d:fa:52:8a:ab:5f:19:6a:25: 99:9b:8f:5a:ab:3e:f1:a7:17:69:b7:ed:ad:9c:ab:5f:bb:0c: e9:f7:9a:b6:2c:c4:22:cf:36:91:d1:4f:c7:cb:36:e5:af:25: 3a:30:92:5b:9a:fa:9c:57:4c:83:74:2d:1c:81:05:88:b9:aa: 3e:a0:72:09:00:30:79:1e:4e:41:a4:73:ca:22:3f:f0:1c:ba: 74:7c:01:d7:33:ad:d0:dc:41:0c:b1:f6:31:c5:9e:e1:bc:6f: 7a:d0:55:54 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtAgcWtcRsI8iU1hsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk ZDBkNzNiMjgtNjBmZC00YWI2LWJiMjEtZDVhMGZjNTc1NmFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwu8g15kAiPOOrZDKWCeK1mvXIvX6/0VB6FDa LRbeKDPSL5xfhBiak/Hra6vB5wz9B/9haJAULGDQnrotd04bdtVmTL1CBt09eQCD wvbLMSUxw3Cg5ErGhoBACNOzRiepvzxaVFLgE1aE+H4cqK8vMlecu50xTJH12ZUY SzYZqXP4+x8qwyLRzDgj3Jgp2wM3OQwcRe3rs8DxQ0E3wg+/XpC71qiq1NFUb3oZ JkcdgFeOMxl4nogCuzL9mhfKbACW1YiIUuRJmc2CUMem1PZnGjP2ciT2Bgd/384Z iGHx4Ef6GaulgzesUGpcs1zdp7p5qJqvDaIWr2uJGs4rVBCDZwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCfXesKpMnGRzbGAQgCbcToTywT7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2ViYmNiNjgtNDllOC0z MWUxLWEwZTQtYzE3MzE0Njg4YTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUB3wA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJSklQNsxOK51pXlAkg2xexm01UlxOVSvL/m3+Vk6mlyLwdToo27 CBY2qNo/l4KS4BBJ5aXSSqNdynkUIr/HFaEnFBDPg8Ismr12rbBcIoHA2HqSiR1D zEfU15U0XqtLZjQTE120zSJ20FOzJlZrbb5K540AzrjvjTxxkyrEVtY6DNdUI3J5 k5y5gJAw5coxFauUntrO2wLxsj36UoqrXxlqJZmbj1qrPvGnF2m37a2cq1+7DOn3 mrYsxCLPNpHRT8fLNuWvJTowklua+pxXTIN0LRyBBYi5qj6gcgkAMHkeTkGkc8oi P/AcunR8AdczrdDcQQyx9jHFnuG8b3rQVVQ= -----END CERTIFICATE-----Generated at Mon Oct 20 02:36:36 2025 by rpki-client