$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/853c1aa1-1fc0-3639-b52e-955d1420a50c.roa File: 853c1aa1-1fc0-3639-b52e-955d1420a50c.roa (raw, json) Hash identifier: s2pUtHUZdj7CRqhvDTfRA17cb/xl9/u/H4pj7S4Tuds= Subject key identifier: E0:0C:71:FA:71:F1:41:82:FD:F4:88:67:F6:A3:B7:BF:FA:86:8B:79 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B4D11E671114DB11CDF142980 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/853c1aa1-1fc0-3639-b52e-955d1420a50c.roa Signing time: Wed 24 Sep 2025 13:00:41 +0000 ROA not before: Wed 24 Sep 2025 13:00:41 +0000 ROA not after: Tue 23 Dec 2025 14:00:41 +0000 asID: 9498 IP address blocks: 2600:140f:3c00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:11:e6:71:11:4d:b1:1c:df:14:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 24 13:00:41 2025 GMT Not After : Dec 23 14:00:41 2025 GMT Subject: CN=d1ec3495-865e-495a-bb95-8361eb0175bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:1e:9f:98:b4:65:7d:55:6f:32:25:8c:c3:29: 21:86:98:9e:eb:46:12:80:fa:0a:63:49:88:61:56: 62:b6:3d:96:29:d1:12:73:20:22:b3:b1:45:e9:4f: 47:11:64:1a:71:97:eb:8a:fc:b8:79:e9:e4:9c:31: ca:1b:6f:ad:27:9e:7d:52:b4:d5:87:54:88:ff:d1: 33:22:b0:da:25:1a:1f:88:83:61:90:07:7c:92:64: 7d:eb:a0:1e:85:f9:f2:c2:40:b9:ed:f6:0c:eb:26: a3:16:14:cb:6d:ca:ed:f3:c5:37:63:24:75:77:19: b9:72:43:b8:ef:1e:ba:ea:c6:c9:fd:42:62:96:d6: fc:3e:06:5e:dc:a2:88:6f:9a:df:74:ef:1f:cd:42: 10:07:e6:6c:69:45:3a:d2:0e:4f:5c:29:0b:e4:c2: f1:4c:df:f5:7a:09:36:51:f5:aa:b3:f4:8e:06:01: 96:d3:7a:a3:fb:3c:9d:0f:4a:ab:1a:9e:1f:af:a1: 84:95:3d:f8:a9:71:9f:cd:d4:a8:b9:57:85:82:4e: 38:a2:2e:37:70:b9:8e:3a:63:35:50:71:fa:5b:b8: 24:dd:71:82:43:f9:53:99:b3:0e:80:e5:1c:19:bd: e1:1f:ba:9e:b0:7e:b5:3c:3f:6d:f7:dc:6f:4a:ed: 28:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:0C:71:FA:71:F1:41:82:FD:F4:88:67:F6:A3:B7:BF:FA:86:8B:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/853c1aa1-1fc0-3639-b52e-955d1420a50c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:140f:3c00::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:fc:dd:9a:73:14:c3:dc:49:c1:1e:3f:3a:38:66:5d:68:b6: 19:bc:e9:79:1e:d9:f6:b8:19:b4:38:12:77:9a:d3:d0:27:6b: a2:f6:1d:c2:b5:4e:42:80:49:c9:84:93:25:9e:35:9a:5e:b4: 4a:1a:84:de:84:ef:75:f9:2f:f5:e5:e3:d8:38:f6:fd:4c:4f: 68:fa:c1:0d:ef:74:58:f3:f7:71:63:b0:77:e1:8a:77:6c:d2: 1f:82:6a:c1:c0:cb:98:1c:e4:0a:95:5a:9b:8c:71:1b:7f:25: 6d:f4:e8:7d:c8:5e:95:f9:ac:a5:9f:c6:3c:8b:4e:1b:e4:8c: 51:b3:6b:ad:ec:96:80:71:da:00:4c:59:00:de:67:c9:91:4d: 7d:ba:32:2b:56:76:72:64:e3:f6:ac:21:bc:7b:2a:4b:09:9b: a6:9b:5e:26:31:25:0a:28:fe:1f:4b:d3:16:1b:3e:cc:3a:30: b5:6e:c0:52:df:a1:fd:db:9d:75:ca:f0:8a:6d:fa:11:02:d4: 71:c5:00:8a:b3:d3:73:bf:1c:39:2d:5e:ef:38:0d:45:0d:0c: 7f:3c:a5:69:10:11:ff:22:d6:c7:27:be:71:28:7e:b2:7d:df: d2:b9:a3:85:88:8d:c9:a7:db:cf:8f:00:bd:e5:70:b8:44:fa: ff:a7:4c:e6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtNEeZxEU2xHN8UKYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk ZDFlYzM0OTUtODY1ZS00OTVhLWJiOTUtODM2MWViMDE3NWJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkB6fmLRlfVVvMiWMwykhhpie60YSgPoKY0mI YVZitj2WKdEScyAis7FF6U9HEWQacZfrivy4eenknDHKG2+tJ559UrTVh1SI/9Ez IrDaJRofiINhkAd8kmR966AehfnywkC57fYM6yajFhTLbcrt88U3YyR1dxm5ckO4 7x666sbJ/UJiltb8PgZe3KKIb5rfdO8fzUIQB+ZsaUU60g5PXCkL5MLxTN/1egk2 UfWqs/SOBgGW03qj+zydD0qrGp4fr6GElT34qXGfzdSouVeFgk44oi43cLmOOmM1 UHH6W7gk3XGCQ/lTmbMOgOUcGb3hH7qesH61PD9t99xvSu0oLQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOAMcfpx8UGC/fSIZ/ajt7/6hot5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODUzYzFhYTEtMWZjMC0z NjM5LWI1MmUtOTU1ZDE0MjBhNTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUDzwA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACL83ZpzFMPcScEePzo4Zl1othm86Xke2fa4GbQ4Enea09Ana6L2 HcK1TkKAScmEkyWeNZpetEoahN6E73X5L/Xl49g49v1MT2j6wQ3vdFjz93FjsHfh inds0h+CasHAy5gc5AqVWpuMcRt/JW306H3IXpX5rKWfxjyLThvkjFGza63sloBx 2gBMWQDeZ8mRTX26MitWdnJk4/asIbx7KksJm6abXiYxJQoo/h9L0xYbPsw6MLVu wFLfof3bnXXK8Ipt+hEC1HHFAIqz03O/HDktXu84DUUNDH88pWkQEf8i1scnvnEo frJ939K5o4WIjcmn28+PAL3lcLhE+v+nTOY= -----END CERTIFICATE-----Generated at Mon Oct 20 18:19:11 2025 by rpki-client