$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4a8ddabd-05f7-33a1-bc56-8a4a845b0e3b.roa File: 4a8ddabd-05f7-33a1-bc56-8a4a845b0e3b.roa (raw, json) Hash identifier: kfJD2+y/rXIYaZt3fBNTHAHAKqTJAYd1vpkjidxrI8I= Subject key identifier: 17:F2:27:94:F2:EF:84:37:D2:73:A6:A7:EB:9E:BC:22:D8:3E:88:7E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B48E1CB080A983B6D14D7A640 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4a8ddabd-05f7-33a1-bc56-8a4a845b0e3b.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 20940 IP address blocks: 2600:1488:a300::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:cb:08:0a:98:3b:6d:14:d7:a6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=5f28ef43-7887-40bb-b235-1a42ba5f249d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:1c:1d:76:70:a4:4f:e0:08:3d:32:72:9b:45: 94:80:1d:c2:a1:10:bd:69:65:f2:f1:4d:7e:1f:56: 8f:6e:94:3d:f6:ca:f4:6a:f8:bd:0f:f0:fd:02:c5: 86:73:35:ed:98:f2:a0:07:41:25:ce:98:8d:7f:94: cb:98:04:c8:91:0e:d7:1b:dd:db:38:93:b1:93:dc: 15:65:5a:e0:0c:6b:bb:1b:24:a7:94:a0:87:e1:b1: 4b:86:00:ce:98:81:0a:08:b6:b2:48:7a:49:8c:57: b7:75:29:cf:4c:64:1f:86:02:ee:1c:f3:c3:d6:c5: 8c:89:26:ee:c7:91:d5:49:ac:d4:97:5d:9e:a9:26: e9:34:4c:69:08:2b:d1:53:bd:e7:55:53:aa:e2:1c: 32:5e:02:ea:d1:dc:fb:9f:a3:65:ad:6b:05:c1:b0: bf:74:f9:21:30:ac:4d:20:de:c3:eb:ba:35:64:21: e5:fb:3b:a1:ed:f5:db:b0:aa:13:84:ef:a3:99:d6: 1e:b0:0e:7a:2c:d1:f9:16:96:c2:4e:cd:ff:64:2c: 95:9b:6f:9d:d4:3c:0e:f4:b2:91:e0:3a:35:86:99: d6:9a:38:06:be:ac:f3:fc:8c:82:d6:6b:c9:91:0e: d4:be:02:6c:07:06:68:c1:b1:b6:fb:10:47:67:39: c7:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:F2:27:94:F2:EF:84:37:D2:73:A6:A7:EB:9E:BC:22:D8:3E:88:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4a8ddabd-05f7-33a1-bc56-8a4a845b0e3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1488:a300::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:cf:c4:29:11:cd:c2:f6:69:39:96:51:18:27:6e:2e:5b:1c: 39:9b:4c:4e:d8:d8:64:ea:27:fc:37:63:c3:41:1a:3d:1e:bd: ae:81:26:61:70:11:41:84:37:dc:86:e8:a1:c5:e2:d4:da:36: 54:07:1b:a4:0d:fc:f9:32:12:ab:fd:02:82:dc:be:ce:b9:22: 3f:82:6c:5c:9b:87:29:6d:c3:86:f3:3d:ad:2b:11:20:6d:88: 9d:91:78:3e:65:99:99:b3:5f:5e:35:02:9d:cb:cb:75:5d:02: 6e:a0:92:5f:6e:29:cd:b6:72:98:31:4c:13:e3:09:08:3c:2f: 66:48:ac:e4:e5:5a:09:dc:66:11:f9:48:33:80:98:87:10:fd: 1f:ce:67:16:36:96:c1:9d:55:fa:f6:e5:bd:66:fc:c2:1c:fe: 3e:9c:45:e4:a7:22:0e:6e:49:05:34:b4:db:c1:f3:84:6c:20: 0e:eb:f2:3d:5e:1b:47:40:85:ee:e4:e0:38:0b:bb:4b:b8:a8: d1:e3:91:9d:20:03:b1:0c:c0:04:a6:29:cd:67:59:7f:f5:a7: ee:ff:78:2c:e7:50:15:df:91:35:3a:55:82:09:26:2f:8a:54: d3:d2:6f:6d:bc:c3:c8:ba:36:68:66:a7:c1:89:a9:2d:4e:c1: 8d:c7:79:34 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtI4csICpg7bRTXpkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk NWYyOGVmNDMtNzg4Ny00MGJiLWIyMzUtMWE0MmJhNWYyNDlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0BwddnCkT+AIPTJym0WUgB3CoRC9aWXy8U1+ H1aPbpQ99sr0avi9D/D9AsWGczXtmPKgB0ElzpiNf5TLmATIkQ7XG93bOJOxk9wV ZVrgDGu7GySnlKCH4bFLhgDOmIEKCLaySHpJjFe3dSnPTGQfhgLuHPPD1sWMiSbu x5HVSazUl12eqSbpNExpCCvRU73nVVOq4hwyXgLq0dz7n6NlrWsFwbC/dPkhMKxN IN7D67o1ZCHl+zuh7fXbsKoThO+jmdYesA56LNH5FpbCTs3/ZCyVm2+d1DwO9LKR 4Do1hpnWmjgGvqzz/IyC1mvJkQ7UvgJsBwZowbG2+xBHZznH9wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBfyJ5Ty74Q30nOmp+uevCLYPoh+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGE4ZGRhYmQtMDVmNy0z M2ExLWJjNTYtOGE0YTg0NWIwZTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUiKMA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE3PxCkRzcL2aTmWURgnbi5bHDmbTE7Y2GTqJ/w3Y8NBGj0eva6B JmFwEUGEN9yG6KHF4tTaNlQHG6QN/PkyEqv9AoLcvs65Ij+CbFybhyltw4bzPa0r ESBtiJ2ReD5lmZmzX141Ap3Ly3VdAm6gkl9uKc22cpgxTBPjCQg8L2ZIrOTlWgnc ZhH5SDOAmIcQ/R/OZxY2lsGdVfr25b1m/MIc/j6cReSnIg5uSQU0tNvB84RsIA7r 8j1eG0dAhe7k4DgLu0u4qNHjkZ0gA7EMwASmKc1nWX/1p+7/eCznUBXfkTU6VYIJ Ji+KVNPSb228w8i6Nmhmp8GJqS1OwY3HeTQ= -----END CERTIFICATE-----Generated at Mon Oct 20 00:28:07 2025 by rpki-client