$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/519d0f6d-4ac2-38ff-8041-2ee9d91f9e14.roa File: 519d0f6d-4ac2-38ff-8041-2ee9d91f9e14.roa (raw, json) Hash identifier: F/lWOxJjtKFxLtW+YlA5sEMrFW0S1Cq7MS0y2Dt2yRo= Subject key identifier: 82:19:B1:E4:06:92:C2:02:FF:41:79:80:92:CB:03:1E:2F:68:2C:DF Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B8EACCD5A3FE4BDF926303580 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/519d0f6d-4ac2-38ff-8041-2ee9d91f9e14.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 21342 IP address blocks: 2600:1405:2000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:cd:5a:3f:e4:bd:f9:26:30:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=354f58bd-3619-4fd8-9ecc-dd6a2429905f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:08:24:d8:91:d6:99:4d:ae:65:34:aa:e5:fa: 68:e7:ab:0c:c3:fd:1a:7f:bc:e1:9c:c7:d4:52:46: 44:92:a3:41:31:3c:13:26:32:1b:f5:aa:52:72:51: ee:6e:fa:a9:ac:f9:54:29:d6:ed:6f:ee:76:a3:fc: 54:bb:56:44:ee:03:dd:e6:cb:24:87:f0:58:9e:2c: 97:6c:3c:f1:cd:79:35:06:f7:d6:00:e0:68:fd:4a: 44:88:a5:7b:4f:6c:9e:40:9c:bc:98:77:f7:3c:0b: 44:b1:94:40:86:75:f5:d0:b8:40:8e:dc:b8:f6:6d: f5:9f:7f:cc:06:c5:fc:13:99:0d:37:d5:7c:17:6d: d8:d4:6e:60:22:00:6d:ed:72:6a:1b:fc:99:47:11: 88:44:6c:1c:1a:7b:51:81:4b:6a:02:e2:20:e7:1b: ed:f0:8a:83:08:8b:fe:e8:1f:89:ef:52:8c:c4:65: 84:80:f3:d1:6e:2d:f9:33:2d:c2:53:95:12:7b:cd: c2:58:01:0f:1f:cb:2d:9f:b2:da:8c:21:e6:9a:08: 25:c8:92:32:39:1c:eb:01:fe:75:51:93:29:a7:78: 9d:3f:cc:08:d1:4e:9b:3b:17:a5:5e:d9:e3:5d:a4: b1:80:af:8c:58:74:50:ba:ad:dc:ea:85:8a:28:a1: 8b:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:19:B1:E4:06:92:C2:02:FF:41:79:80:92:CB:03:1E:2F:68:2C:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/519d0f6d-4ac2-38ff-8041-2ee9d91f9e14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1405:2000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:47:56:56:c0:6e:ae:1b:06:18:da:e5:59:fb:7b:17:2d:d6: 37:4d:dd:b4:1e:ce:b5:2a:b6:95:67:ab:c2:70:eb:cd:e4:0b: 81:09:e2:97:78:04:31:72:9e:8c:62:96:a6:8b:2d:dd:a4:08: d8:78:53:f1:85:32:cc:47:39:c0:81:42:a6:77:f7:41:89:e5: b7:6d:86:43:a6:b5:b5:6e:ae:c9:a3:de:1d:9e:c5:11:a6:f1: 7f:fa:fa:49:75:f1:52:ae:7d:d0:1d:cd:f0:33:b3:9c:28:f3: 37:dc:d0:d4:ef:2f:f2:d5:35:30:1c:54:22:db:08:46:a4:53: 94:58:91:d7:58:db:77:59:72:8c:e5:36:f4:c9:ed:5b:36:ea: 91:ef:93:4c:65:8c:64:e8:5b:30:db:e5:f4:b7:4d:bc:0c:f4: 4b:31:78:7b:bb:7d:ad:18:1f:4d:07:3a:5f:0a:71:44:2c:32: ca:db:d4:31:7f:0d:9e:c2:6c:83:60:11:9f:48:e2:4f:a8:25: 0a:3e:49:96:67:10:20:17:6c:61:e9:a4:31:58:98:af:5b:11: 86:c2:fb:f2:ff:9d:b8:59:d0:71:3d:e4:93:9b:e1:94:20:8a: 06:d3:b1:38:8d:57:04:51:d1:0e:55:7f:66:28:d5:70:04:e0: df:8e:c4:87 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuOrM1aP+S9+SYwNYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk MzU0ZjU4YmQtMzYxOS00ZmQ4LTllY2MtZGQ2YTI0Mjk5MDVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQgk2JHWmU2uZTSq5fpo56sMw/0af7zhnMfU UkZEkqNBMTwTJjIb9apSclHubvqprPlUKdbtb+52o/xUu1ZE7gPd5sskh/BYniyX bDzxzXk1BvfWAOBo/UpEiKV7T2yeQJy8mHf3PAtEsZRAhnX10LhAjty49m31n3/M BsX8E5kNN9V8F23Y1G5gIgBt7XJqG/yZRxGIRGwcGntRgUtqAuIg5xvt8IqDCIv+ 6B+J71KMxGWEgPPRbi35My3CU5USe83CWAEPH8stn7LajCHmmgglyJIyORzrAf51 UZMpp3idP8wI0U6bOxelXtnjXaSxgK+MWHRQuq3c6oWKKKGLnQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIIZseQGksIC/0F5gJLLAx4vaCzfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTE5ZDBmNmQtNGFjMi0z OGZmLTgwNDEtMmVlOWQ5MWY5ZTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUBSAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFZHVlbAbq4bBhja5Vn7exct1jdN3bQezrUqtpVnq8Jw683kC4EJ 4pd4BDFynoxilqaLLd2kCNh4U/GFMsxHOcCBQqZ390GJ5bdthkOmtbVursmj3h2e xRGm8X/6+kl18VKufdAdzfAzs5wo8zfc0NTvL/LVNTAcVCLbCEakU5RYkddY23dZ cozlNvTJ7Vs26pHvk0xljGToWzDb5fS3TbwM9EsxeHu7fa0YH00HOl8KcUQsMsrb 1DF/DZ7CbINgEZ9I4k+oJQo+SZZnECAXbGHppDFYmK9bEYbC+/L/nbhZ0HE95JOb 4ZQgigbTsTiNVwRR0Q5Vf2Yo1XAE4N+OxIc= -----END CERTIFICATE-----Generated at Mon Oct 20 17:36:54 2025 by rpki-client