$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/689b1f82-c2e0-37ad-a894-b8b3337a4f2b.roa File: 689b1f82-c2e0-37ad-a894-b8b3337a4f2b.roa (raw, json) Hash identifier: +JeCQ7oxSRs5iBW5pSREsafLybzMkqmhQoqa/5NwKL8= Subject key identifier: 8B:59:38:53:9C:E0:D6:43:CA:89:A9:06:76:30:64:48:9D:88:9A:D8 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B48E20889EE31D47548174500 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/689b1f82-c2e0-37ad-a894-b8b3337a4f2b.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 20940 IP address blocks: 2600:1488:a140::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e2:08:89:ee:31:d4:75:48:17:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=57adf98c-c544-4053-9820-9eff701fd245 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:40:6b:a6:19:d2:ac:2f:bc:eb:d6:3a:01:fe: 40:79:4f:fa:20:89:68:42:b8:19:98:3a:ce:c2:b2: df:1e:a9:40:9e:dc:b0:11:30:67:4e:7e:b6:70:6f: 61:8f:41:43:c2:ef:df:7a:c0:95:8e:e1:0f:f8:f1: 79:35:40:92:9e:02:49:b7:fa:ed:c5:6c:b7:5c:38: f7:f8:3e:89:7c:11:f9:04:3b:7f:f1:93:13:08:96: c4:46:4b:9c:0f:b9:10:56:04:ad:1a:6e:fe:aa:1b: 15:9c:3a:ab:10:85:f2:c4:c4:6a:df:8f:e6:d5:a4: 41:bf:73:b1:2f:9e:04:8b:6a:3b:aa:13:64:51:1c: 84:20:39:8a:17:96:da:1c:4a:09:72:eb:e2:dd:7f: 44:24:68:ba:ab:7e:b6:b4:3b:f3:05:06:9e:a7:6e: f9:00:53:5d:75:1c:da:27:b8:17:3c:a7:8f:8d:3d: 5b:f2:a0:c6:c3:aa:dc:c1:69:c5:86:2c:a2:af:c4: af:34:30:90:78:b8:39:8c:2e:db:e0:d4:ac:eb:1b: 84:2d:83:86:8f:ae:76:fb:25:73:6b:de:f6:3a:ac: 96:d9:00:44:96:25:1d:24:b3:a3:f0:9a:73:1f:79: 2d:eb:1f:10:0c:39:9f:a2:c8:d5:01:c8:8d:32:73: 86:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:59:38:53:9C:E0:D6:43:CA:89:A9:06:76:30:64:48:9D:88:9A:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/689b1f82-c2e0-37ad-a894-b8b3337a4f2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1488:a140::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:88:fd:9e:dd:e9:45:81:96:a8:bb:8b:5c:1e:d7:35:79:cf: 0b:1c:68:ca:a9:45:79:63:13:45:51:be:8b:bc:60:e6:83:39: 75:6a:b4:1a:99:fc:96:4b:b7:d7:f3:38:37:cf:41:f5:91:97: a3:b4:cc:d7:85:9a:d5:87:b9:c7:2c:79:51:05:e1:79:05:06: 97:f0:a8:2c:01:b5:20:10:d6:b8:98:fd:fa:bb:79:7b:3c:0d: 0c:cf:a4:d0:8f:f6:12:70:b9:03:ed:4b:1e:25:7c:93:e8:26: b4:9c:5a:51:48:4f:e0:b4:2c:39:fc:bf:16:ec:af:7f:75:6a: c5:01:9e:57:db:ca:f5:02:8c:3c:cf:b9:0f:80:7e:bd:cf:69: bb:0b:62:17:ae:24:f5:f8:0c:00:36:e5:40:99:6c:ba:6e:67: bc:29:d9:64:00:f8:34:ad:22:59:2f:0f:01:e3:00:90:65:60: 79:d4:79:37:b6:ad:b6:b6:9f:6a:84:c3:75:7b:66:b3:32:bc: b4:8c:5c:53:50:ac:d7:ca:b1:5e:68:7b:f5:1c:62:90:9d:4a: 41:e5:67:b0:a2:e0:d8:61:e4:f7:df:f4:ca:12:47:7c:2d:d0: 10:25:eb:78:f2:7f:64:42:d3:55:51:7f:fb:92:34:67:ae:be: 84:da:40:cb -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtI4giJ7jHUdUgXRQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk NTdhZGY5OGMtYzU0NC00MDUzLTk4MjAtOWVmZjcwMWZkMjQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0BrphnSrC+869Y6Af5AeU/6IIloQrgZmDrO wrLfHqlAntywETBnTn62cG9hj0FDwu/fesCVjuEP+PF5NUCSngJJt/rtxWy3XDj3 +D6JfBH5BDt/8ZMTCJbERkucD7kQVgStGm7+qhsVnDqrEIXyxMRq34/m1aRBv3Ox L54Ei2o7qhNkURyEIDmKF5baHEoJcuvi3X9EJGi6q362tDvzBQaep275AFNddRza J7gXPKePjT1b8qDGw6rcwWnFhiyir8SvNDCQeLg5jC7b4NSs6xuELYOGj652+yVz a972OqyW2QBEliUdJLOj8JpzH3kt6x8QDDmfosjVAciNMnOGmwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFItZOFOc4NZDyompBnYwZEidiJrYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjg5YjFmODItYzJlMC0z N2FkLWE4OTQtYjhiMzMzN2E0ZjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUiKFA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB6I/Z7d6UWBlqi7i1we1zV5zwscaMqpRXljE0VRvou8YOaDOXVq tBqZ/JZLt9fzODfPQfWRl6O0zNeFmtWHuccseVEF4XkFBpfwqCwBtSAQ1riY/fq7 eXs8DQzPpNCP9hJwuQPtSx4lfJPoJrScWlFIT+C0LDn8vxbsr391asUBnlfbyvUC jDzPuQ+Afr3PabsLYheuJPX4DAA25UCZbLpuZ7wp2WQA+DStIlkvDwHjAJBlYHnU eTe2rba2n2qEw3V7ZrMyvLSMXFNQrNfKsV5oe/UcYpCdSkHlZ7Ci4Nhh5Pff9MoS R3wt0BAl63jyf2RC01VRf/uSNGeuvoTaQMs= -----END CERTIFICATE-----Generated at Mon Oct 20 00:26:05 2025 by rpki-client