$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5f2a89fa-630b-3b53-85b8-4cd3445d4b0c.roa File: 5f2a89fa-630b-3b53-85b8-4cd3445d4b0c.roa (raw, json) Hash identifier: k0VaQlgev7NRt0nCoDB8+LBRFFnNQVQD7Zsl44VmjhE= Subject key identifier: C2:59:F5:BE:AE:0B:03:99:B2:11:4D:6F:93:2B:FD:4C:38:77:6F:67 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B48E20833BB7F877F9067C500 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5f2a89fa-630b-3b53-85b8-4cd3445d4b0c.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 20940 IP address blocks: 2600:1488:a001::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e2:08:33:bb:7f:87:7f:90:67:c5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=49cf3782-e104-48b9-9ca5-6c056849d07b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:9b:59:0e:1f:51:0f:f1:08:aa:f7:27:fb:84: 39:67:87:f5:19:6a:61:c5:b7:99:06:8b:fa:c2:91: 0f:8f:0c:92:2a:85:3e:8f:7f:fd:8c:b4:01:ec:f4: b3:2e:70:aa:2d:5d:55:42:6d:5e:63:a4:57:ab:bf: f0:56:53:a8:ef:b4:f1:c7:cf:9d:4f:3f:2a:77:f5: cf:f6:18:65:c6:23:02:ec:98:c9:ab:63:a2:c8:88: a9:6e:31:b5:63:79:f2:ee:1b:0f:51:60:71:8d:71: 3a:b6:f4:e0:ed:6a:4a:8d:85:7e:af:96:d7:af:c0: c9:4c:60:5e:4f:48:6a:82:9d:58:81:c3:72:19:04: c0:15:fb:d2:30:2a:99:0e:de:cb:d8:6d:03:0e:6f: e8:4d:f8:3c:4b:6d:24:88:93:2f:13:3d:88:68:8c: 5c:70:5b:fb:58:ae:c9:55:1d:80:db:18:21:bd:47: ee:87:72:e3:2d:19:2e:58:e6:96:a9:3c:2e:a5:df: ae:9e:12:3f:9d:b9:9d:5f:91:e6:49:3d:3d:12:a7: 58:63:53:7a:74:b4:1c:09:73:16:69:51:59:49:21: ec:71:df:b9:44:b1:81:99:21:66:b8:bd:e6:be:72: 9e:8c:7f:52:d4:49:9c:98:7b:19:27:23:c0:5d:32: d1:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:59:F5:BE:AE:0B:03:99:B2:11:4D:6F:93:2B:FD:4C:38:77:6F:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5f2a89fa-630b-3b53-85b8-4cd3445d4b0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1488:a001::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:6e:9d:d2:f5:bb:54:c1:81:f2:47:f9:4b:c3:93:ad:68:b2: 69:ee:17:ba:07:24:48:da:7b:73:ea:52:d3:12:01:0f:17:96: b4:03:08:f0:b8:35:90:df:6b:e9:2d:38:22:49:e0:7a:83:df: 18:57:3c:82:39:bd:1b:39:85:8e:d3:d9:55:37:98:88:9e:2a: b2:33:50:2b:de:55:aa:3f:65:e0:02:03:66:31:12:20:5c:12: cd:e9:8d:49:c9:e9:44:75:fe:ab:dd:d9:23:1f:94:11:bb:82: c1:20:cc:b2:49:c4:de:60:61:af:c3:31:48:89:42:52:70:85: 84:11:7e:07:32:88:91:bf:5d:83:7f:71:ae:af:4a:f2:56:cb: e4:d2:f1:21:48:24:d3:17:3c:a0:db:05:7a:04:49:fc:81:ab: 3b:83:46:48:86:73:93:2b:f7:b2:25:50:8e:fa:74:5b:9f:93: a0:07:4d:02:63:69:63:c1:3e:12:3e:29:22:23:6b:68:5f:5d: eb:b5:70:d4:05:53:ef:df:af:15:d8:09:1d:4c:76:09:c4:c9: 5e:49:5c:3e:ba:25:15:27:1f:13:f8:75:07:98:7d:69:4f:fd: 56:ae:16:97:2e:8d:fd:b6:1d:1b:32:66:48:7c:5c:2e:7c:b5: ee:8d:3c:4b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtI4ggzu3+Hf5BnxQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk NDljZjM3ODItZTEwNC00OGI5LTljYTUtNmMwNTY4NDlkMDdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJtZDh9RD/EIqvcn+4Q5Z4f1GWphxbeZBov6 wpEPjwySKoU+j3/9jLQB7PSzLnCqLV1VQm1eY6RXq7/wVlOo77Txx8+dTz8qd/XP 9hhlxiMC7JjJq2OiyIipbjG1Y3ny7hsPUWBxjXE6tvTg7WpKjYV+r5bXr8DJTGBe T0hqgp1YgcNyGQTAFfvSMCqZDt7L2G0DDm/oTfg8S20kiJMvEz2IaIxccFv7WK7J VR2A2xghvUfuh3LjLRkuWOaWqTwupd+unhI/nbmdX5HmST09EqdYY1N6dLQcCXMW aVFZSSHscd+5RLGBmSFmuL3mvnKejH9S1EmcmHsZJyPAXTLR6wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMJZ9b6uCwOZshFNb5Mr/Uw4d29nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWYyYTg5ZmEtNjMwYi0z YjUzLTg1YjgtNGNkMzQ0NWQ0YjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUiKAB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF1undL1u1TBgfJH+UvDk61osmnuF7oHJEjae3PqUtMSAQ8XlrQD CPC4NZDfa+ktOCJJ4HqD3xhXPII5vRs5hY7T2VU3mIieKrIzUCveVao/ZeACA2Yx EiBcEs3pjUnJ6UR1/qvd2SMflBG7gsEgzLJJxN5gYa/DMUiJQlJwhYQRfgcyiJG/ XYN/ca6vSvJWy+TS8SFIJNMXPKDbBXoESfyBqzuDRkiGc5Mr97IlUI76dFufk6AH TQJjaWPBPhI+KSIja2hfXeu1cNQFU+/frxXYCR1MdgnEyV5JXD66JRUnHxP4dQeY fWlP/VauFpcujf22HRsyZkh8XC58te6NPEs= -----END CERTIFICATE-----Generated at Mon Oct 20 02:30:23 2025 by rpki-client