$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/55bf1873-5ade-3523-8e00-e54e7ad73358.roa File: 55bf1873-5ade-3523-8e00-e54e7ad73358.roa (raw, json) Hash identifier: qx0PIfKqPS1z0bJNAAdqF0yuDlPu+k6uqkibYk7CbAE= Subject key identifier: 1E:A8:35:AD:E1:7D:85:42:90:9C:22:19:68:3B:5F:0E:82:71:D7:B0 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B4081BA100959B47807E7EC40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/55bf1873-5ade-3523-8e00-e54e7ad73358.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 20940 IP address blocks: 2600:1408:8400::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:ba:10:09:59:b4:78:07:e7:ec:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=ba6af183-c9c5-43a2-83f1-557bdee152b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:65:e4:68:ce:4f:b2:8e:f3:44:08:10:5c:06: e8:52:71:f0:7f:d0:84:9c:2a:ed:cf:cb:3f:71:5e: c5:fc:a9:53:c0:ef:a9:a8:27:09:e0:f7:b4:d4:cf: 6a:2f:78:e3:c6:73:92:0b:ae:ec:f0:e3:29:26:34: fe:ca:5d:c3:bd:f2:c4:b9:d2:53:83:f8:67:16:07: d2:b5:12:67:dc:fb:30:01:bd:92:1c:77:d6:5d:0b: 45:ac:56:7e:51:a0:82:82:0a:60:86:b8:48:55:95: 49:75:5f:6c:b3:d7:ca:24:51:3b:9d:9d:0a:c1:0a: d0:7e:89:00:c9:be:4c:81:4e:7e:f9:83:31:04:b9: 99:65:0d:08:bc:97:bd:4e:1a:4a:69:ec:29:9f:a4: 7d:84:d4:5b:97:cc:82:e8:34:e1:4a:db:41:e9:f0: e1:d5:01:a7:d5:25:10:85:0a:96:e6:62:d4:4b:e6: ab:b2:40:6d:52:b5:fa:39:88:37:20:aa:eb:37:dc: a9:0a:42:4c:b1:0b:f0:24:2c:0c:a4:53:83:11:c1: d6:43:41:a5:3f:b6:36:9a:81:9c:ea:e9:8f:60:81: 38:ce:0e:1c:9e:82:c2:11:47:e8:35:70:5c:bd:2b: 86:ec:ca:ea:70:1a:cb:0a:a6:28:d4:ef:b0:59:16: 6b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:A8:35:AD:E1:7D:85:42:90:9C:22:19:68:3B:5F:0E:82:71:D7:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/55bf1873-5ade-3523-8e00-e54e7ad73358.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1408:8400::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:eb:98:91:d0:3e:59:9e:ae:45:5e:1b:40:f3:a8:cb:a2:66: ae:13:a6:f8:e2:da:33:6f:32:b8:33:f6:49:2e:df:9f:dc:f4: ba:c7:18:74:d2:21:eb:66:13:4e:09:23:04:bc:0d:4f:38:e3: 60:df:0a:3c:bf:3f:6c:bc:d4:4d:b1:06:54:51:84:48:f8:84: 2b:1f:3f:d6:a7:34:20:0d:56:de:64:63:94:1a:a3:66:14:29: b8:f4:13:77:8f:91:b2:43:f4:5e:49:86:d3:ce:6d:22:7d:c5: 98:c2:2d:ee:0f:b1:5c:a0:89:de:7b:c7:e8:b9:eb:7b:5b:a9: 3d:a9:1c:1d:f8:36:12:fe:bd:80:51:ea:b4:23:a7:11:a6:cd: 74:91:09:05:18:7c:3c:c8:b9:6b:dd:c7:6d:27:5a:52:14:a0: 08:f9:e5:7d:4d:9b:eb:b6:b5:81:9f:83:67:52:d1:02:8b:8e: e3:97:9c:f1:57:0f:a7:37:ae:f1:62:d0:72:56:47:81:74:07: 23:09:e3:80:d9:bc:20:c0:a8:bd:a5:98:57:28:38:85:27:c1: d1:e2:10:25:32:fd:8f:3f:9f:a4:9e:5e:71:1e:41:b9:9e:3a: 26:7b:91:82:30:b4:e6:eb:32:b8:39:01:41:27:ce:d7:22:07: b6:d2:11:69 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtAgboQCVm0eAfn7EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk YmE2YWYxODMtYzljNS00M2EyLTgzZjEtNTU3YmRlZTE1MmIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWXkaM5Pso7zRAgQXAboUnHwf9CEnCrtz8s/ cV7F/KlTwO+pqCcJ4Pe01M9qL3jjxnOSC67s8OMpJjT+yl3DvfLEudJTg/hnFgfS tRJn3PswAb2SHHfWXQtFrFZ+UaCCggpghrhIVZVJdV9ss9fKJFE7nZ0KwQrQfokA yb5MgU5++YMxBLmZZQ0IvJe9ThpKaewpn6R9hNRbl8yC6DThSttB6fDh1QGn1SUQ hQqW5mLUS+arskBtUrX6OYg3IKrrN9ypCkJMsQvwJCwMpFODEcHWQ0GlP7Y2moGc 6umPYIE4zg4cnoLCEUfoNXBcvSuG7MrqcBrLCqYo1O+wWRZr/wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFB6oNa3hfYVCkJwiGWg7Xw6CcdewMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTViZjE4NzMtNWFkZS0z NTIzLThlMDAtZTU0ZTdhZDczMzU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUCIQA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACDrmJHQPlmerkVeG0DzqMuiZq4Tpvji2jNvMrgz9kku35/c9LrH GHTSIetmE04JIwS8DU8442DfCjy/P2y81E2xBlRRhEj4hCsfP9anNCANVt5kY5Qa o2YUKbj0E3ePkbJD9F5JhtPObSJ9xZjCLe4PsVygid57x+i563tbqT2pHB34NhL+ vYBR6rQjpxGmzXSRCQUYfDzIuWvdx20nWlIUoAj55X1Nm+u2tYGfg2dS0QKLjuOX nPFXD6c3rvFi0HJWR4F0ByMJ44DZvCDAqL2lmFcoOIUnwdHiECUy/Y8/n6SeXnEe QbmeOiZ7kYIwtObrMrg5AUEnztciB7bSEWk= -----END CERTIFICATE-----Generated at Mon Oct 20 10:40:01 2025 by rpki-client