$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/559261fd-4f8a-3c2a-b7c4-465a1464d82c.roa File: 559261fd-4f8a-3c2a-b7c4-465a1464d82c.roa (raw, json) Hash identifier: DYPcVQ84OFYcdnSpQNFoAJ2gJK6cINGGwpepW3823gA= Subject key identifier: BE:86:3D:1A:04:31:71:72:BD:E8:07:FB:BE:D4:B9:41:CD:B9:6E:21 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B2A2C44EB9891645933C36580 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/559261fd-4f8a-3c2a-b7c4-465a1464d82c.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 20940 IP address blocks: 2600:1402:d800::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:44:eb:98:91:64:59:33:c3:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=5056afbd-79f0-4b38-aab1-4468d82141d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:4b:5b:9d:e0:cd:17:cc:d1:11:ce:19:e9:13: 45:76:1b:c8:43:b0:e8:e9:03:7a:af:0a:8f:f0:20: be:c1:3a:da:e4:a5:b1:d5:1f:9c:07:07:c1:db:ca: a8:bc:5f:74:2d:08:b2:2d:5e:97:e4:72:86:56:b8: 43:a1:fa:27:8f:c2:0b:98:4e:6d:6f:24:a6:bc:24: 1c:be:1f:7e:5c:e9:59:af:e8:85:69:10:47:d3:5b: d7:e0:10:96:4f:92:f7:23:ba:d6:3e:c0:f6:6f:8d: 2b:43:87:c6:af:dc:68:b3:59:af:9e:9c:2c:2b:10: 51:4d:ad:54:b1:c8:22:ca:4a:6b:07:65:c5:34:9f: b7:28:8f:62:ce:fc:c1:79:7a:52:1e:18:95:01:15: 35:09:10:4f:83:9e:a7:93:2c:c5:62:c1:50:35:df: 39:12:fd:53:46:0b:9c:fa:92:20:a5:27:f3:cc:5a: 79:cd:22:ff:d7:ee:7c:c1:7b:6d:41:64:4c:a0:ba: 97:96:ad:ba:9b:09:ab:44:21:d2:21:af:44:d6:ce: 76:68:48:d2:24:a6:b2:93:ee:73:83:39:6e:c8:61: 2f:a0:79:d0:c5:f6:6e:a4:ac:57:74:9f:67:73:4a: 7b:5a:ab:c8:53:b7:36:d2:9c:b8:d9:6b:8b:73:e2: 54:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:86:3D:1A:04:31:71:72:BD:E8:07:FB:BE:D4:B9:41:CD:B9:6E:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/559261fd-4f8a-3c2a-b7c4-465a1464d82c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1402:d800::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:89:85:64:c9:70:2a:6c:fe:6e:f6:4f:57:62:64:d1:33:82: 64:d8:aa:5e:45:aa:5a:6e:d2:12:aa:9e:4d:6d:16:4b:f2:d2: c4:00:6f:36:f2:21:75:ed:1c:f2:0b:47:95:f2:f8:7f:05:92: 86:c4:33:72:c6:15:cd:93:17:7f:23:b1:8a:3f:ca:ab:58:b5: 82:31:38:78:6b:ea:26:1a:d7:02:24:53:6c:40:4d:91:56:1f: dd:8f:91:48:e0:dc:ba:43:09:70:02:68:72:a1:85:16:9f:ca: 2b:36:5c:46:05:49:19:4a:e6:d7:b2:3f:17:e5:f1:64:bc:9d: 0f:4d:f2:2c:63:05:17:31:9c:51:a3:f9:fd:62:fd:cc:5c:46: 51:33:f2:dc:6c:e7:1c:73:80:8c:d7:39:48:98:9d:0c:4a:aa: 54:81:c4:f4:16:ab:96:6e:17:61:b3:40:60:61:b2:45:dd:73: b4:ff:2c:8b:f3:1e:73:22:29:62:13:d9:78:1d:a2:38:0c:f4: 6c:64:36:ce:28:da:0f:44:58:45:bf:63:e5:6d:95:47:1b:5e: 96:3b:9c:a6:5a:15:88:d2:ac:64:39:ed:a0:90:f6:52:49:84: aa:23:fc:13:77:97:d0:d0:76:ff:2f:30:3e:70:65:1d:d6:48: 39:6a:ae:b5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsqLETrmJFkWTPDZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk NTA1NmFmYmQtNzlmMC00YjM4LWFhYjEtNDQ2OGQ4MjE0MWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEtbneDNF8zREc4Z6RNFdhvIQ7Do6QN6rwqP 8CC+wTra5KWx1R+cBwfB28qovF90LQiyLV6X5HKGVrhDofonj8ILmE5tbySmvCQc vh9+XOlZr+iFaRBH01vX4BCWT5L3I7rWPsD2b40rQ4fGr9xos1mvnpwsKxBRTa1U scgiykprB2XFNJ+3KI9izvzBeXpSHhiVARU1CRBPg56nkyzFYsFQNd85Ev1TRguc +pIgpSfzzFp5zSL/1+58wXttQWRMoLqXlq26mwmrRCHSIa9E1s52aEjSJKayk+5z gzluyGEvoHnQxfZupKxXdJ9nc0p7WqvIU7c20py42WuLc+JU7wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFL6GPRoEMXFyvegH+77UuUHNuW4hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTU5MjYxZmQtNGY4YS0z YzJhLWI3YzQtNDY1YTE0NjRkODJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUAtgA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEyJhWTJcCps/m72T1diZNEzgmTYql5Fqlpu0hKqnk1tFkvy0sQA bzbyIXXtHPILR5Xy+H8FkobEM3LGFc2TF38jsYo/yqtYtYIxOHhr6iYa1wIkU2xA TZFWH92PkUjg3LpDCXACaHKhhRafyis2XEYFSRlK5teyPxfl8WS8nQ9N8ixjBRcx nFGj+f1i/cxcRlEz8txs5xxzgIzXOUiYnQxKqlSBxPQWq5ZuF2GzQGBhskXdc7T/ LIvzHnMiKWIT2XgdojgM9GxkNs4o2g9EWEW/Y+VtlUcbXpY7nKZaFYjSrGQ57aCQ 9lJJhKoj/BN3l9DQdv8vMD5wZR3WSDlqrrU= -----END CERTIFICATE-----Generated at Mon Oct 20 02:36:27 2025 by rpki-client