$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/806ea646-8ad2-3552-baa9-1bf986cab708.roa File: 806ea646-8ad2-3552-baa9-1bf986cab708.roa (raw, json) Hash identifier: tpvugPCIzA09gQ7+PthRyQOqqwVqqbp6PdHTAnexRlk= Subject key identifier: AB:32:F2:7F:4C:07:86:8A:CB:69:62:A8:F0:C1:8F:D1:D5:BB:E6:37 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B41E71F0191434E126915FA40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/806ea646-8ad2-3552-baa9-1bf986cab708.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 20940 IP address blocks: 2600:14a0:80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:1f:01:91:43:4e:12:69:15:fa:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=8fd8fdad-cd9a-4a3e-81b7-c124459b2462 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:7d:70:3d:2f:7a:0d:5b:5a:2d:47:54:81:d1: 4e:68:04:c1:6e:b2:10:04:0b:49:80:80:e9:f0:83: 01:fd:f4:66:fc:fb:cb:18:b4:c7:a4:63:d7:c6:b3: 23:11:fe:49:5f:a4:65:8d:b6:83:51:8a:50:4e:17: 61:11:ac:5e:b9:72:16:b9:a6:6e:db:09:9c:e3:e3: 5a:cd:17:1e:c3:d0:92:da:ef:b4:6b:f7:77:44:de: 36:65:11:65:fa:86:72:9d:20:08:0f:e2:3c:f1:e3: 33:73:bb:79:3b:51:38:6e:60:69:22:e2:ee:9c:c2: 58:c7:36:cc:39:b8:41:6d:f7:c1:a1:a5:62:5d:b5: 75:0a:89:e3:8a:6b:c2:96:e6:e5:2f:4d:af:d5:fb: c3:7a:7b:ce:2c:db:b6:a0:e6:ce:43:44:93:83:69: cd:27:3f:e3:22:6d:11:42:5d:75:26:09:a5:10:d8: db:2e:55:4f:7d:9b:2c:ca:50:7c:8d:4e:b9:27:35: cf:60:be:6f:b1:dd:89:2b:9f:60:ac:d8:e4:d4:69: 18:4b:57:95:97:3d:23:60:49:ed:58:78:f4:6e:3f: c2:1e:1d:d0:51:d5:ae:f2:35:4f:a3:cc:eb:f8:20: 25:71:0c:c8:da:79:82:61:da:87:34:3b:34:0e:74: c9:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:32:F2:7F:4C:07:86:8A:CB:69:62:A8:F0:C1:8F:D1:D5:BB:E6:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/806ea646-8ad2-3552-baa9-1bf986cab708.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:14a0:80::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:c2:27:16:e9:ab:9f:33:2a:9e:d3:d1:12:19:8a:f9:c2:19: de:59:c0:a3:38:5b:33:3f:5c:9e:21:02:59:da:9e:a9:40:36: 03:aa:4f:97:96:0c:31:ec:50:58:1a:7f:a8:9d:e4:58:6c:dd: 5c:89:b7:3c:89:67:c7:be:80:f8:c7:77:15:7e:15:29:ca:e4: 68:f9:06:cb:83:1e:24:db:97:16:66:50:55:ca:e3:14:41:fa: bb:b5:14:3d:e4:75:bc:a6:0d:0f:a4:29:fe:3f:31:e8:fc:fc: bc:f4:fe:a8:c1:84:62:c9:e0:98:09:24:67:88:85:1b:e6:31: 5b:25:6b:93:f0:a5:a9:29:4a:9a:af:e5:d4:d4:e3:0b:56:38: c3:94:31:0e:20:c2:30:b5:f6:65:02:83:04:2e:cf:5c:3d:ce: a2:cf:54:78:e1:a4:ea:ac:f1:29:21:9b:36:76:c6:cd:09:27: a4:a2:c9:2f:42:7d:22:e0:92:92:4d:fd:66:d1:d7:0e:db:f2: 38:ec:b2:13:42:39:5f:25:c0:a7:ad:73:fa:d4:05:a8:d8:be: 27:37:df:c7:18:bb:6a:89:13:08:75:55:2f:de:df:3a:95:84: fd:f3:77:1e:51:d5:3f:26:5e:c6:85:c0:6b:98:d1:96:a4:a4: 37:e0:69:de -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtB5x8BkUNOEmkV+kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk OGZkOGZkYWQtY2Q5YS00YTNlLTgxYjctYzEyNDQ1OWIyNDYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwn1wPS96DVtaLUdUgdFOaATBbrIQBAtJgIDp 8IMB/fRm/PvLGLTHpGPXxrMjEf5JX6RljbaDUYpQThdhEaxeuXIWuaZu2wmc4+Na zRcew9CS2u+0a/d3RN42ZRFl+oZynSAID+I88eMzc7t5O1E4bmBpIuLunMJYxzbM ObhBbffBoaViXbV1ConjimvClublL02v1fvDenvOLNu2oObOQ0STg2nNJz/jIm0R Ql11JgmlENjbLlVPfZssylB8jU65JzXPYL5vsd2JK59grNjk1GkYS1eVlz0jYEnt WHj0bj/CHh3QUdWu8jVPo8zr+CAlcQzI2nmCYdqHNDs0DnTJZQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKsy8n9MB4aKy2liqPDBj9HVu+Y3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODA2ZWE2NDYtOGFkMi0z NTUyLWJhYTktMWJmOTg2Y2FiNzA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUoACA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADTCJxbpq58zKp7T0RIZivnCGd5ZwKM4WzM/XJ4hAlnanqlANgOq T5eWDDHsUFgaf6id5Fhs3VyJtzyJZ8e+gPjHdxV+FSnK5Gj5BsuDHiTblxZmUFXK 4xRB+ru1FD3kdbymDQ+kKf4/Mej8/Lz0/qjBhGLJ4JgJJGeIhRvmMVsla5Pwpakp Spqv5dTU4wtWOMOUMQ4gwjC19mUCgwQuz1w9zqLPVHjhpOqs8SkhmzZ2xs0JJ6Si yS9CfSLgkpJN/WbR1w7b8jjsshNCOV8lwKetc/rUBajYvic338cYu2qJEwh1VS/e 3zqVhP3zdx5R1T8mXsaFwGuY0ZakpDfgad4= -----END CERTIFICATE-----Generated at Mon Oct 20 00:22:46 2025 by rpki-client