$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/68f1479d-d3e9-3acc-b993-de49cf153069.roa File: 68f1479d-d3e9-3acc-b993-de49cf153069.roa (raw, json) Hash identifier: St2pWy3BydQGv0S+IySKVr8i/clXVysgGBgDCGz+z1c= Subject key identifier: 2E:BB:40:B8:2A:92:06:9A:F3:46:72:FE:09:1C:26:4E:CD:78:0C:67 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B4D11E884E52BB4A4F777CE00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/68f1479d-d3e9-3acc-b993-de49cf153069.roa Signing time: Wed 24 Sep 2025 13:00:41 +0000 ROA not before: Wed 24 Sep 2025 13:00:41 +0000 ROA not after: Tue 23 Dec 2025 14:00:41 +0000 asID: 24319 IP address blocks: 2600:1417:4d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:11:e8:84:e5:2b:b4:a4:f7:77:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 24 13:00:41 2025 GMT Not After : Dec 23 14:00:41 2025 GMT Subject: CN=eb1204b5-eabc-4aa7-b39e-93786f57733d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:1e:6f:d0:a7:8c:84:40:d2:33:92:a3:35:ed: 6b:63:ad:fb:38:99:67:7a:e2:42:fd:f1:48:c2:58: 6a:4d:72:b8:f8:87:34:14:73:e0:97:5f:91:8c:e0: 51:d2:7b:bb:f1:37:f8:03:e8:5b:ea:da:7e:1e:f8: 5f:bc:e9:74:fb:41:3c:32:25:2d:19:bb:43:65:ec: e9:75:92:cf:c5:e2:2f:d6:20:d9:87:1c:d8:b6:09: 1a:82:c8:65:96:7f:95:b3:8e:ef:bc:4f:0f:fa:0c: e6:f4:16:02:ff:e5:f9:eb:79:0e:64:16:0e:c1:19: 35:91:2f:51:54:98:44:55:e5:5c:1a:29:7a:e1:74: 6b:da:52:45:72:e6:94:0f:5b:4a:33:b8:9c:5a:4f: a4:3a:49:99:dd:f0:de:13:31:68:f4:eb:09:55:5b: b1:a9:d6:0b:cc:b8:e8:00:60:19:93:40:e8:ed:75: d4:30:ab:5f:8c:af:76:c3:b1:75:83:fc:a1:89:bd: dd:6b:b5:35:3b:fe:dc:95:43:d6:8c:99:4d:0f:85: c5:62:ef:9b:55:0e:27:25:c3:b2:16:a1:51:35:77: c2:7c:01:58:e9:b9:9a:83:8e:53:d9:6e:4e:56:47: c1:79:35:cf:bd:58:31:fe:f5:a1:9a:39:58:77:bb: 29:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:BB:40:B8:2A:92:06:9A:F3:46:72:FE:09:1C:26:4E:CD:78:0C:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/68f1479d-d3e9-3acc-b993-de49cf153069.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1417:4d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:38:8e:cb:c5:d9:47:b8:bb:64:bf:d9:6b:d0:5f:82:bf:66: e7:d3:73:a7:0e:43:a3:38:83:5c:16:08:93:5b:0b:9a:7c:e2: e0:7b:75:c5:cf:59:c8:25:a3:a1:83:89:c1:7f:a7:5d:73:b8: ba:d9:bc:50:42:72:f4:fe:9f:0f:9f:0d:46:af:76:20:43:b0: 6f:a5:e3:80:b6:0b:bf:88:ea:6a:bc:bc:cd:7a:e2:2f:57:c5: 10:59:20:4a:ec:4b:e1:77:8e:d5:b2:36:c0:ec:4b:35:f7:ba: 63:18:ec:ea:b6:cd:b0:1d:57:f6:eb:e7:8d:76:ea:44:5c:11: 95:04:35:4a:3a:c4:2e:4f:4a:04:70:96:12:77:84:4d:37:74: 94:20:5c:82:94:1b:19:24:24:ac:1f:d9:11:ff:c1:cc:b9:21: df:38:de:74:49:57:bd:bc:48:41:86:7a:d4:ce:d8:d8:df:38: e5:f5:fb:a5:80:ab:8d:b7:de:b8:59:9d:20:81:1e:fb:37:55: ea:d5:f4:be:3b:41:9f:c0:6b:70:7c:7e:03:3a:39:04:1f:fb: 88:6c:18:5a:1d:4e:03:fd:b2:c7:97:56:5b:25:0f:fb:47:72: 59:61:2b:4d:2f:b7:95:d6:0a:80:7a:be:c8:9a:81:a2:13:18: d0:9f:64:0a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtNEeiE5Su0pPd3zgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk ZWIxMjA0YjUtZWFiYy00YWE3LWIzOWUtOTM3ODZmNTc3MzNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoR5v0KeMhEDSM5KjNe1rY637OJlneuJC/fFI wlhqTXK4+Ic0FHPgl1+RjOBR0nu78Tf4A+hb6tp+HvhfvOl0+0E8MiUtGbtDZezp dZLPxeIv1iDZhxzYtgkagshlln+Vs47vvE8P+gzm9BYC/+X563kOZBYOwRk1kS9R VJhEVeVcGil64XRr2lJFcuaUD1tKM7icWk+kOkmZ3fDeEzFo9OsJVVuxqdYLzLjo AGAZk0Do7XXUMKtfjK92w7F1g/yhib3da7U1O/7clUPWjJlND4XFYu+bVQ4nJcOy FqFRNXfCfAFY6bmag45T2W5OVkfBeTXPvVgx/vWhmjlYd7spuwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFC67QLgqkgaa80Zy/gkcJk7NeAxnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjhmMTQ3OWQtZDNlOS0z YWNjLWI5OTMtZGU0OWNmMTUzMDY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUFwBN MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG44jsvF2Ue4u2S/2WvQX4K/ZufTc6cOQ6M4g1wWCJNbC5p84uB7 dcXPWcglo6GDicF/p11zuLrZvFBCcvT+nw+fDUavdiBDsG+l44C2C7+I6mq8vM16 4i9XxRBZIErsS+F3jtWyNsDsSzX3umMY7Oq2zbAdV/br54126kRcEZUENUo6xC5P SgRwlhJ3hE03dJQgXIKUGxkkJKwf2RH/wcy5Id843nRJV728SEGGetTO2NjfOOX1 +6WAq4233rhZnSCBHvs3VerV9L47QZ/Aa3B8fgM6OQQf+4hsGFodTgP9sseXVlsl D/tHcllhK00vt5XWCoB6vsiagaITGNCfZAo= -----END CERTIFICATE-----Generated at Tue Oct 21 04:45:35 2025 by rpki-client