$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/422af647-4df6-3b69-89b9-aa6b968da52d.roa File: 422af647-4df6-3b69-89b9-aa6b968da52d.roa (raw, json) Hash identifier: STIJX6Xgl/+uqt0D3PGjcNLdJlk7wkNwk9QJc1r5hZw= Subject key identifier: 48:44:F0:01:A2:E6:3F:77:E8:46:D3:21:6F:1B:4F:A4:37:21:D0:AC Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B4081C2195311262C60E76880 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/422af647-4df6-3b69-89b9-aa6b968da52d.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 20940 IP address blocks: 2600:1415:5400::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:c2:19:53:11:26:2c:60:e7:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=918ec35d-607d-49d1-ad83-1b6892ca14fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d2:fc:25:93:31:6e:1e:17:5d:86:c9:1a:b3: e3:53:19:41:ae:aa:e4:60:f2:5d:c4:2f:5a:32:ec: 2b:d6:34:5b:62:77:d2:ba:40:24:6f:48:58:35:a7: 4c:e8:09:59:be:69:ff:f2:77:03:a9:ea:6e:65:d5: 8c:0c:e5:7f:3b:4d:60:ee:55:ec:d8:3b:89:9c:c7: 92:af:28:d9:1d:9a:97:dd:b4:fc:b3:14:1c:ab:84: c9:70:be:71:bd:ef:04:93:b2:2e:65:e2:41:fe:a6: aa:ad:ca:dd:07:7e:d2:5b:69:56:38:9d:71:76:11: f3:02:6f:41:ea:97:98:08:dc:91:8c:14:a6:98:a8: b7:8c:27:88:de:af:4b:72:e0:fe:ee:1d:ee:ee:8c: 91:60:98:bf:8a:ce:e5:57:39:d6:bc:d8:ed:38:c2: f3:df:d4:e2:17:ea:00:5e:b6:a5:91:95:a3:69:40: a1:8f:98:b4:1d:0d:e7:f3:81:95:bf:9c:71:6e:7c: 77:17:14:05:98:67:f1:bd:7f:85:77:93:c7:8f:94: e1:bd:75:fd:79:76:cc:55:7a:38:3e:22:20:b9:78: 6b:67:28:88:5f:cb:c3:40:9e:86:03:1e:d0:58:ae: b8:e8:ad:73:23:e2:96:af:2b:49:f3:90:ea:87:a7: 56:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:44:F0:01:A2:E6:3F:77:E8:46:D3:21:6F:1B:4F:A4:37:21:D0:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/422af647-4df6-3b69-89b9-aa6b968da52d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1415:5400::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:d0:db:f3:67:66:c5:4a:20:e7:ff:2f:3c:7e:b1:7c:5b:ab: 70:e9:4a:33:cd:c8:07:5e:37:8b:0b:cd:2e:3a:b1:11:09:4c: 52:be:5f:9a:2f:cb:46:8b:8c:25:13:bc:92:e9:1b:d4:52:0e: 32:99:45:5d:3b:87:15:0c:9f:84:38:5c:16:28:dd:f7:4f:44: 46:93:1d:06:fe:e3:1d:3b:6d:c1:f3:01:49:3d:bf:41:69:68: 3d:ab:88:34:a3:c8:26:ea:77:34:ff:28:69:9d:a5:91:4b:1f: 12:d4:6a:d2:d9:50:9e:65:90:b3:e0:11:47:f4:ce:54:89:bd: 3c:ac:fb:e6:8d:98:65:85:73:1d:8b:c3:e0:60:c8:a6:d5:9f: e1:69:28:d3:4c:74:8c:15:94:3b:d0:c8:90:98:fe:ad:b2:2a: 77:11:f6:15:73:2d:8a:8d:53:fb:54:07:2d:f6:fe:bb:47:c7: 2b:b1:b6:5c:c2:74:0c:dc:b5:10:d0:da:ce:66:fc:b1:3e:e0: 97:28:19:7d:e4:9b:e0:d4:37:c9:ed:0e:53:e1:d3:9a:8e:66: 49:3c:25:80:40:ee:ab:f4:c6:c7:72:33:59:bd:d2:20:1e:68: 60:d9:b0:e1:b9:fa:2c:ca:de:94:9d:20:ec:f9:8d:f8:6a:ba: 11:92:08:03 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtAgcIZUxEmLGDnaIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk OTE4ZWMzNWQtNjA3ZC00OWQxLWFkODMtMWI2ODkyY2ExNGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndL8JZMxbh4XXYbJGrPjUxlBrqrkYPJdxC9a Muwr1jRbYnfSukAkb0hYNadM6AlZvmn/8ncDqepuZdWMDOV/O01g7lXs2DuJnMeS ryjZHZqX3bT8sxQcq4TJcL5xve8Ek7IuZeJB/qaqrcrdB37SW2lWOJ1xdhHzAm9B 6peYCNyRjBSmmKi3jCeI3q9LcuD+7h3u7oyRYJi/is7lVznWvNjtOMLz39TiF+oA XralkZWjaUChj5i0HQ3n84GVv5xxbnx3FxQFmGfxvX+Fd5PHj5ThvXX9eXbMVXo4 PiIguXhrZyiIX8vDQJ6GAx7QWK646K1zI+KWrytJ85Dqh6dW3wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEhE8AGi5j936EbTIW8bT6Q3IdCsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDIyYWY2NDctNGRmNi0z YjY5LTg5YjktYWE2Yjk2OGRhNTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUFVQA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACbQ2/NnZsVKIOf/Lzx+sXxbq3DpSjPNyAdeN4sLzS46sREJTFK+ X5ovy0aLjCUTvJLpG9RSDjKZRV07hxUMn4Q4XBYo3fdPREaTHQb+4x07bcHzAUk9 v0FpaD2riDSjyCbqdzT/KGmdpZFLHxLUatLZUJ5lkLPgEUf0zlSJvTys++aNmGWF cx2Lw+BgyKbVn+FpKNNMdIwVlDvQyJCY/q2yKncR9hVzLYqNU/tUBy32/rtHxyux tlzCdAzctRDQ2s5m/LE+4JcoGX3km+DUN8ntDlPh05qOZkk8JYBA7qv0xsdyM1m9 0iAeaGDZsOG5+izK3pSdIOz5jfhquhGSCAM= -----END CERTIFICATE-----Generated at Mon Oct 20 00:26:48 2025 by rpki-client