$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4aa86a68-10cb-370d-8d42-0b0e1703b041.roa File: 4aa86a68-10cb-370d-8d42-0b0e1703b041.roa (raw, json) Hash identifier: qHlOu5koDRsmu9O6ISiDCjAmc/cRvb6U8vzfeXT+5lY= Subject key identifier: 1C:24:9C:6A:91:8B:6E:7E:DB:99:E3:28:06:45:0E:0C:94:C9:10:47 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B48E1C97B3F08F8C8B926AC00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4aa86a68-10cb-370d-8d42-0b0e1703b041.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 20940 IP address blocks: 2600:1488:60c2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:c9:7b:3f:08:f8:c8:b9:26:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=22820246-71e9-4d4b-a5cc-1000746842ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:fd:bf:d9:4d:17:bb:22:d6:1f:85:2c:11:4f: 88:02:96:c5:da:90:0c:25:6f:ff:cd:8f:0a:3f:31: e8:ca:77:35:db:81:b0:a4:c2:b6:55:6e:32:ed:a7: 33:7f:2a:9b:f0:27:5d:32:e7:4b:51:2b:63:d1:8c: 1b:b5:7a:ec:ea:64:7a:65:97:2f:b8:84:aa:63:24: 92:7f:61:bc:4f:4f:68:d0:09:79:f0:63:fb:d5:26: 57:2c:c1:17:0d:16:dc:28:7b:b0:3d:fd:42:f3:f5: 35:fd:a1:35:77:4b:4f:81:c8:db:b1:8b:20:48:15: 45:26:47:a7:ad:63:ee:97:98:61:a9:aa:c4:40:68: cc:93:70:0d:ec:75:c7:68:2d:06:63:92:55:3e:70: 39:37:03:a6:b1:13:41:a3:c5:ad:0e:b8:56:20:96: 34:e6:3c:fc:24:3e:03:5e:e9:f2:d4:a6:87:6f:75: d7:60:09:65:32:84:27:5d:bb:7a:52:d1:9c:84:da: b3:f6:c7:fa:b0:9f:dc:d6:9c:d7:ac:4e:8a:b3:c2: 43:06:b7:5e:82:0f:19:df:df:19:a7:a7:04:eb:8c: 3d:70:b0:95:29:59:ed:3a:bc:4b:5a:8a:4b:72:15: c2:35:2d:88:ee:c4:b3:de:91:16:1c:7c:7f:5d:c4: 3d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:24:9C:6A:91:8B:6E:7E:DB:99:E3:28:06:45:0E:0C:94:C9:10:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4aa86a68-10cb-370d-8d42-0b0e1703b041.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1488:60c2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:b4:29:c7:b8:1d:38:81:b3:a6:8b:bc:be:dc:04:1c:81:7b: aa:c1:ef:52:34:83:c9:f0:d6:10:ba:bd:84:74:dc:f7:d1:88: 30:3e:9b:9b:51:8b:45:72:0a:5e:2c:de:78:f8:4d:ea:c7:2a: a7:ff:c7:da:51:ba:f1:48:09:47:61:6d:a6:d1:fa:78:26:29: 81:5f:56:aa:93:c6:27:aa:5e:59:90:4c:41:63:1b:dd:9d:e2: 55:c6:ca:3d:53:59:57:97:fe:b8:b1:c3:3c:2d:a7:8e:bc:5f: c4:57:8e:a6:dd:86:4b:7a:d9:b7:3a:2b:73:df:ee:95:a9:bb: ec:b0:cf:67:fd:be:58:dc:2f:1f:36:bc:03:ee:22:d0:0f:c0: 31:16:a9:5e:c1:60:a6:50:4d:e0:20:02:ca:13:69:7e:22:85: ee:39:48:10:2c:f8:bb:9b:a4:61:f6:ce:d4:25:3c:1e:07:27: 05:b3:10:2e:1a:d6:be:a8:1a:91:c9:20:e2:b4:0e:b0:66:24: 2f:e6:c8:62:55:6e:b0:db:08:ee:18:d5:9a:33:8d:4f:34:95: 2a:6e:b8:08:34:87:b1:43:f0:17:cf:3f:12:50:e8:6c:f3:34: 34:6a:10:e8:05:ab:b6:c8:ca:c1:db:41:6d:f6:fb:67:3a:ea: 40:45:e4:9d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtI4cl7Pwj4yLkmrAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk MjI4MjAyNDYtNzFlOS00ZDRiLWE1Y2MtMTAwMDc0Njg0MmVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2P2/2U0XuyLWH4UsEU+IApbF2pAMJW//zY8K PzHoync124GwpMK2VW4y7aczfyqb8CddMudLUStj0YwbtXrs6mR6ZZcvuISqYySS f2G8T09o0Al58GP71SZXLMEXDRbcKHuwPf1C8/U1/aE1d0tPgcjbsYsgSBVFJken rWPul5hhqarEQGjMk3AN7HXHaC0GY5JVPnA5NwOmsRNBo8WtDrhWIJY05jz8JD4D Xuny1KaHb3XXYAllMoQnXbt6UtGchNqz9sf6sJ/c1pzXrE6Ks8JDBrdegg8Z398Z p6cE64w9cLCVKVntOrxLWopLchXCNS2I7sSz3pEWHHx/XcQ92wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBwknGqRi25+25njKAZFDgyUyRBHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGFhODZhNjgtMTBjYi0z NzBkLThkNDItMGIwZTE3MDNiMDQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUiGDC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHq0Kce4HTiBs6aLvL7cBByBe6rB71I0g8nw1hC6vYR03PfRiDA+ m5tRi0VyCl4s3nj4TerHKqf/x9pRuvFICUdhbabR+ngmKYFfVqqTxieqXlmQTEFj G92d4lXGyj1TWVeX/rixwzwtp468X8RXjqbdhkt62bc6K3Pf7pWpu+ywz2f9vljc Lx82vAPuItAPwDEWqV7BYKZQTeAgAsoTaX4ihe45SBAs+LubpGH2ztQlPB4HJwWz EC4a1r6oGpHJIOK0DrBmJC/myGJVbrDbCO4Y1ZozjU80lSpuuAg0h7FD8BfPPxJQ 6GzzNDRqEOgFq7bIysHbQW32+2c66kBF5J0= -----END CERTIFICATE-----Generated at Mon Oct 20 02:36:16 2025 by rpki-client