$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7d641512-a933-3238-a070-f7808ba5e0f1.roa File: 7d641512-a933-3238-a070-f7808ba5e0f1.roa (raw, json) Hash identifier: rHYa5/OZnaykt/+7Mu98FAK/QEmWokiQRoB1UIhtH4s= Subject key identifier: FA:78:11:66:71:CB:C2:08:35:13:52:56:C4:04:BE:59:DC:15:ED:27 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B4081C3744192DFB642BEC980 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7d641512-a933-3238-a070-f7808ba5e0f1.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 20940 IP address blocks: 2600:1402:a800::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:c3:74:41:92:df:b6:42:be:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=b31bd5b5-6bea-4736-8e73-e91fde98fd33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:16:0f:8b:2f:b4:50:2d:e5:a7:77:74:ef:84: ba:fb:fc:64:6b:47:ec:08:28:92:2f:ed:ed:e7:5b: a4:70:8a:d5:b8:10:db:84:3b:25:9e:23:85:52:32: bc:4e:06:df:ad:ca:7e:3f:61:e0:56:97:4a:b5:fc: 99:dd:28:ba:57:b4:ed:0f:0e:dd:56:da:e8:2b:03: f7:c1:59:57:a0:bd:35:2f:85:78:6c:92:fe:c0:85: c3:25:9c:7e:ee:2c:c8:20:c8:17:38:26:8c:a8:68: 13:64:83:74:31:11:27:bc:e0:f6:70:62:d1:5d:3b: b8:fb:0f:fe:a3:01:1a:e4:60:93:28:b6:84:09:09: d4:8d:36:89:b8:d1:39:17:b0:ef:d3:69:b1:b3:a2: c6:09:3e:e2:2b:44:c9:6c:af:fa:5e:84:b6:7f:e5: f0:42:9f:b6:84:9e:0b:0d:dc:32:50:f8:67:f8:e9: 0c:1b:2b:1e:e0:30:7f:32:b1:08:67:40:4a:4f:61: 85:5f:b8:93:dd:d3:5c:d0:2e:95:44:0b:04:35:c5: fb:52:81:64:ab:89:7a:e7:1e:eb:2b:8b:9f:3b:0a: 82:ac:ef:7b:c6:e1:20:fb:30:fb:a0:3a:6d:64:24: 41:dd:06:05:48:6c:bb:8a:c6:ff:21:ad:12:7d:c0: 14:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:78:11:66:71:CB:C2:08:35:13:52:56:C4:04:BE:59:DC:15:ED:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7d641512-a933-3238-a070-f7808ba5e0f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1402:a800::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:cc:85:e7:ea:2f:cb:40:c3:ef:6e:a5:89:6f:3c:ab:54:1e: c5:01:d9:3b:35:63:5f:a0:cf:a0:6a:d9:ea:d0:16:ce:9e:fd: c1:f7:46:79:97:62:46:08:c2:00:97:fa:16:72:5e:3a:be:8c: 3f:f7:75:86:72:ce:d2:d9:54:48:ca:fc:06:ad:91:4b:c8:fb: 02:ae:fb:45:35:59:a7:4e:57:29:77:45:ac:30:93:af:e4:3a: f5:74:fd:b6:0e:30:d5:0c:57:25:b0:bf:a7:ec:03:6e:8e:75: 63:82:20:9c:f9:c9:f0:0a:74:f3:c3:51:88:7e:69:8e:a2:03: 35:15:dd:2c:51:bb:4f:ca:78:fa:c9:69:94:4a:e3:67:38:e7: aa:a6:b9:08:0f:a6:60:7d:02:d4:05:e9:3d:37:40:14:18:92: 2a:df:2e:81:3e:66:fc:e3:fd:c2:cb:57:f2:f3:be:29:16:fb: 09:db:8e:2d:7a:a6:9d:70:0e:54:05:58:af:8c:1e:8a:35:63: 1e:c4:2a:35:7b:a7:ed:e2:5a:c1:13:b6:cc:ed:03:39:63:4b: 25:69:58:66:90:2b:69:47:9d:78:5b:fa:d9:39:35:d5:8e:b2: 46:24:ad:02:7b:b9:69:53:8a:39:37:20:06:4d:d1:a1:a4:8a: 67:d6:1e:2c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtAgcN0QZLftkK+yYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk YjMxYmQ1YjUtNmJlYS00NzM2LThlNzMtZTkxZmRlOThmZDMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2xYPiy+0UC3lp3d074S6+/xka0fsCCiSL+3t 51ukcIrVuBDbhDslniOFUjK8Tgbfrcp+P2HgVpdKtfyZ3Si6V7TtDw7dVtroKwP3 wVlXoL01L4V4bJL+wIXDJZx+7izIIMgXOCaMqGgTZIN0MREnvOD2cGLRXTu4+w/+ owEa5GCTKLaECQnUjTaJuNE5F7Dv02mxs6LGCT7iK0TJbK/6XoS2f+XwQp+2hJ4L DdwyUPhn+OkMGyse4DB/MrEIZ0BKT2GFX7iT3dNc0C6VRAsENcX7UoFkq4l65x7r K4ufOwqCrO97xuEg+zD7oDptZCRB3QYFSGy7isb/Ia0SfcAUVQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPp4EWZxy8IINRNSVsQEvlncFe0nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvN2Q2NDE1MTItYTkzMy0z MjM4LWEwNzAtZjc4MDhiYTVlMGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUAqgA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGDMhefqL8tAw+9upYlvPKtUHsUB2Ts1Y1+gz6Bq2erQFs6e/cH3 RnmXYkYIwgCX+hZyXjq+jD/3dYZyztLZVEjK/AatkUvI+wKu+0U1WadOVyl3Raww k6/kOvV0/bYOMNUMVyWwv6fsA26OdWOCIJz5yfAKdPPDUYh+aY6iAzUV3SxRu0/K ePrJaZRK42c456qmuQgPpmB9AtQF6T03QBQYkirfLoE+Zvzj/cLLV/LzvikW+wnb ji16pp1wDlQFWK+MHoo1Yx7EKjV7p+3iWsETtsztAzljSyVpWGaQK2lHnXhb+tk5 NdWOskYkrQJ7uWlTijk3IAZN0aGkimfWHiw= -----END CERTIFICATE-----Generated at Mon Oct 20 00:26:17 2025 by rpki-client