$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5a6e11d1-dc33-3898-bbae-1ddfa850894e.roa File: 5a6e11d1-dc33-3898-bbae-1ddfa850894e.roa (raw, json) Hash identifier: jrAZDnbZD891Fabr5KaECoUqiC2o/T8O/ujfPcoO83g= Subject key identifier: A3:6D:1E:9B:D8:3F:2D:54:DD:B1:E4:4A:F0:A4:F2:B4:65:D6:C9:7A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B4BAC64A3C4A31B2F75BEA500 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5a6e11d1-dc33-3898-bbae-1ddfa850894e.roa Signing time: Wed 24 Sep 2025 01:00:31 +0000 ROA not before: Wed 24 Sep 2025 01:00:31 +0000 ROA not after: Tue 23 Dec 2025 02:00:31 +0000 asID: 35994 IP address blocks: 2600:1409:4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4b:ac:64:a3:c4:a3:1b:2f:75:be:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 24 01:00:31 2025 GMT Not After : Dec 23 02:00:31 2025 GMT Subject: CN=21e88fc5-300b-498f-ad89-a8934e53a206 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:21:98:a3:cf:b2:1f:a2:e2:43:d5:1d:7a:13: 2d:a5:61:aa:28:c2:80:e1:0b:02:2e:f9:a4:52:ec: 10:f9:19:73:1f:1a:d3:b9:a3:97:dd:78:e2:b2:67: 60:7f:be:16:4a:e3:37:39:fb:43:19:aa:74:b7:87: a4:f7:8a:40:cd:e0:5c:2f:ac:8c:8f:0a:43:56:50: 75:29:76:f5:ed:67:4c:32:3d:5c:97:51:54:10:55: ed:8f:61:91:4c:b3:68:90:79:e3:02:bd:54:0b:78: 08:e5:50:5f:fe:ee:f3:18:e7:dd:d9:12:5c:73:7b: f2:e1:63:c6:1c:85:25:aa:d0:36:e9:ee:54:e0:80: 7e:5d:ec:70:a8:27:35:1f:6a:ed:30:b5:26:01:86: f5:0a:0e:43:dd:bf:17:3d:a0:82:85:ce:f2:a9:c1: b7:36:03:49:84:4c:3f:e9:93:67:52:5b:52:0c:d0: 8c:38:cc:e9:95:9d:ab:51:13:7b:84:90:57:f4:70: d1:6a:87:4c:12:4e:4b:d4:15:ef:25:db:a3:7e:7c: 00:54:f5:67:25:b1:2e:31:ad:b3:71:3d:00:4a:27: 55:99:03:a6:03:4f:6a:89:ad:b7:ab:7d:2a:83:e2: a7:f1:e3:58:89:9f:f7:3b:61:0e:8b:a5:4a:46:12: 33:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:6D:1E:9B:D8:3F:2D:54:DD:B1:E4:4A:F0:A4:F2:B4:65:D6:C9:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5a6e11d1-dc33-3898-bbae-1ddfa850894e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1409:4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:41:47:95:7c:ce:26:1e:68:86:47:bf:4d:f5:b4:52:f7:32: b5:72:93:6e:a4:39:10:0f:de:1f:c6:7c:60:65:19:17:94:15: 99:d2:75:7d:f0:16:9c:a3:f8:88:91:ad:a5:c5:9f:49:38:95: 7d:6d:ab:55:ae:77:08:02:52:cb:c9:8f:ce:ca:88:5a:aa:c6: ce:ee:33:10:a3:e2:57:f4:8c:80:a0:b9:fe:e9:31:64:e3:31: 14:ac:b5:f6:7d:1f:24:ca:6c:ea:0c:b1:54:78:0f:57:0a:e9: 62:e1:48:67:1a:3c:61:ef:8a:9c:30:c4:5c:68:83:37:9b:fa: c1:68:19:b1:9d:d1:df:8c:d5:d9:c4:d5:0e:fc:87:86:6e:31: d1:e3:ca:30:f7:5f:67:08:99:ca:bd:e5:b8:ed:75:b2:d9:d8: cf:f7:c1:49:ae:61:5b:f8:ab:7a:f6:02:7a:93:55:29:a8:ba: cd:b1:4c:e1:52:d7:8a:6a:48:a7:d2:34:68:fa:b8:c9:9f:06: f7:d9:02:1a:1d:f3:ec:15:e6:92:83:c7:1a:92:64:e5:bc:48: 87:93:24:e0:8f:e6:e6:1c:8a:76:32:70:09:b3:47:7c:c4:5d: 20:e2:cf:51:e5:d8:3c:5e:cb:74:37:13:d0:7a:30:86:3f:f0: 7a:7b:31:aa -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtLrGSjxKMbL3W+pQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyNDAxMDAzMVoXDTI1MTIyMzAyMDAzMVowLzEtMCsGA1UEAxMk MjFlODhmYzUtMzAwYi00OThmLWFkODktYTg5MzRlNTNhMjA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgiGYo8+yH6LiQ9UdehMtpWGqKMKA4QsCLvmk UuwQ+RlzHxrTuaOX3Xjismdgf74WSuM3OftDGap0t4ek94pAzeBcL6yMjwpDVlB1 KXb17WdMMj1cl1FUEFXtj2GRTLNokHnjAr1UC3gI5VBf/u7zGOfd2RJcc3vy4WPG HIUlqtA26e5U4IB+XexwqCc1H2rtMLUmAYb1Cg5D3b8XPaCChc7yqcG3NgNJhEw/ 6ZNnUltSDNCMOMzplZ2rURN7hJBX9HDRaodMEk5L1BXvJdujfnwAVPVnJbEuMa2z cT0ASidVmQOmA09qia23q30qg+Kn8eNYiZ/3O2EOi6VKRhIzvwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKNtHpvYPy1U3bHkSvCk8rRl1sl6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWE2ZTExZDEtZGMzMy0z ODk4LWJiYWUtMWRkZmE4NTA4OTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUCQAE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAExBR5V8ziYeaIZHv031tFL3MrVyk26kORAP3h/GfGBlGReUFZnS dX3wFpyj+IiRraXFn0k4lX1tq1WudwgCUsvJj87KiFqqxs7uMxCj4lf0jICguf7p MWTjMRSstfZ9HyTKbOoMsVR4D1cK6WLhSGcaPGHvipwwxFxogzeb+sFoGbGd0d+M 1dnE1Q78h4ZuMdHjyjD3X2cImcq95bjtdbLZ2M/3wUmuYVv4q3r2AnqTVSmous2x TOFS14pqSKfSNGj6uMmfBvfZAhod8+wV5pKDxxqSZOW8SIeTJOCP5uYcinYycAmz R3zEXSDiz1Hl2Dxey3Q3E9B6MIY/8Hp7Mao= -----END CERTIFICATE-----Generated at Mon Oct 20 02:10:22 2025 by rpki-client