$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3fbde4f3-07b6-32d1-91b1-a79fa32c2c21.roa File: 3fbde4f3-07b6-32d1-91b1-a79fa32c2c21.roa (raw, json) Hash identifier: eNbnwDx/xEPfyjlOgd331FR3zZg1ZcQL+pt+yRadkOE= Subject key identifier: 43:16:1B:1A:18:18:1C:06:F1:4F:36:E4:9B:54:C1:97:88:8D:26:AA Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B2CF6FF8D5CF6D11C775097E0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3fbde4f3-07b6-32d1-91b1-a79fa32c2c21.roa Signing time: Sat 13 Sep 2025 01:00:33 +0000 ROA not before: Sat 13 Sep 2025 01:00:33 +0000 ROA not after: Fri 12 Dec 2025 02:00:33 +0000 asID: 20940 IP address blocks: 2600:1406:1a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:f6:ff:8d:5c:f6:d1:1c:77:50:97:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 13 01:00:33 2025 GMT Not After : Dec 12 02:00:33 2025 GMT Subject: CN=3eddefe2-af25-4a61-91ae-e0710a0cc3b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:2a:22:ef:6e:7a:22:a9:d3:d9:57:55:eb:b7: f1:a7:b9:11:d5:6c:fc:11:83:fc:e0:8f:7d:8e:b2: 54:7a:9b:1f:cb:15:1c:26:8a:1a:5b:a2:e4:98:08: 0b:61:ec:7e:c4:47:29:2b:76:df:97:74:f0:c7:4a: bc:eb:ae:23:e9:c1:29:a7:99:bb:de:a1:fb:ff:61: 84:16:ba:7b:6d:06:bf:a2:98:b9:f9:33:d8:58:2b: 12:db:11:b4:df:ed:12:02:6e:27:5b:88:31:94:54: c4:2d:27:18:34:6f:8f:11:0d:1d:e1:01:3b:f6:e9: f5:21:fb:09:74:07:9c:9d:80:a8:a6:18:07:18:a7: e2:52:37:4d:49:0d:05:ae:6a:d3:e8:c6:c2:b2:06: 1d:87:c8:d0:a6:6b:1a:9a:0d:68:47:6f:59:a1:0e: 7c:5e:66:f4:0c:70:94:fb:69:04:00:71:10:b4:dd: 69:b5:af:28:19:21:dd:1a:97:ca:75:8a:6b:6f:d9: ba:69:3f:c6:10:ac:2a:21:b6:8b:af:fc:3a:f0:ca: 84:29:69:08:fe:37:13:70:96:3a:28:51:64:88:ba: 45:be:09:0e:c4:27:32:e7:2e:d3:9b:7d:bf:a1:0b: a8:3e:33:84:53:4b:af:73:7a:e9:d6:7b:6e:34:45: 58:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:16:1B:1A:18:18:1C:06:F1:4F:36:E4:9B:54:C1:97:88:8D:26:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3fbde4f3-07b6-32d1-91b1-a79fa32c2c21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1406:1a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:bd:15:e3:33:37:40:98:8f:ee:9f:f2:78:c9:80:31:e2:12: d2:48:e2:b2:c3:3f:3a:ff:5f:ea:88:c4:6b:a8:69:8b:8d:2f: e8:da:13:0a:1b:59:78:a4:87:2b:40:d2:97:54:08:fb:e1:55: 61:a7:d9:bf:de:ec:63:bf:5b:9d:fa:4c:46:c3:22:3b:bc:14: 2a:5d:e7:b6:cb:3e:df:13:26:bd:b0:cd:53:cb:b4:35:ef:94: 38:9a:c1:4d:c2:06:5e:1f:94:fa:dd:dd:da:89:cc:56:83:31: 0a:99:37:de:1f:44:c8:1e:c1:d9:e6:56:28:e3:98:ee:41:8d: fe:82:e0:ff:a8:f5:d7:f0:8a:c5:8a:e1:74:d9:a9:e0:61:4c: f6:7e:23:d3:df:53:28:18:bd:18:6f:87:98:96:7d:3d:fe:43: fe:a9:df:33:b0:0c:72:e5:b8:f1:f8:92:ce:29:7a:88:a8:ac: 89:80:fa:23:73:a8:f5:5a:cf:dd:53:6a:4d:8c:b7:e7:3f:3f: c1:c3:83:c4:e8:40:9f:1f:e4:5e:86:73:66:42:40:f7:de:15: ba:7e:a1:81:33:6f:54:72:d9:0e:15:89:8e:36:6e:2a:e1:df: 4d:2f:76:95:7f:0f:61:28:d4:00:91:36:9a:c5:4a:30:9c:c4: 28:e6:e3:9e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEss9v+NXPbRHHdQl+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkxMzAxMDAzM1oXDTI1MTIxMjAyMDAzM1owLzEtMCsGA1UEAxMk M2VkZGVmZTItYWYyNS00YTYxLTkxYWUtZTA3MTBhMGNjM2IwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCoi7256IqnT2VdV67fxp7kR1Wz8EYP84I99 jrJUepsfyxUcJooaW6LkmAgLYex+xEcpK3bfl3Twx0q8664j6cEpp5m73qH7/2GE Frp7bQa/opi5+TPYWCsS2xG03+0SAm4nW4gxlFTELScYNG+PEQ0d4QE79un1IfsJ dAecnYCophgHGKfiUjdNSQ0FrmrT6MbCsgYdh8jQpmsamg1oR29ZoQ58Xmb0DHCU +2kEAHEQtN1pta8oGSHdGpfKdYprb9m6aT/GEKwqIbaLr/w68MqEKWkI/jcTcJY6 KFFkiLpFvgkOxCcy5y7Tm32/oQuoPjOEU0uvc3rp1ntuNEVYrQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEMWGxoYGBwG8U825JtUwZeIjSaqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2ZiZGU0ZjMtMDdiNi0z MmQxLTkxYjEtYTc5ZmEzMmMyYzIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUBgAa MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGi9FeMzN0CYj+6f8njJgDHiEtJI4rLDPzr/X+qIxGuoaYuNL+ja EwobWXikhytA0pdUCPvhVWGn2b/e7GO/W536TEbDIju8FCpd57bLPt8TJr2wzVPL tDXvlDiawU3CBl4flPrd3dqJzFaDMQqZN94fRMgewdnmVijjmO5Bjf6C4P+o9dfw isWK4XTZqeBhTPZ+I9PfUygYvRhvh5iWfT3+Q/6p3zOwDHLluPH4ks4peoiorImA +iNzqPVaz91Tak2Mt+c/P8HDg8ToQJ8f5F6Gc2ZCQPfeFbp+oYEzb1Ry2Q4ViY42 birh300vdpV/D2Eo1ACRNprFSjCcxCjm454= -----END CERTIFICATE-----Generated at Mon Oct 20 04:55:33 2025 by rpki-client