$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/894c2056-e2e2-3940-b1f8-91e29f89c34c.roa File: 894c2056-e2e2-3940-b1f8-91e29f89c34c.roa (raw, json) Hash identifier: zXIoSyaInT/tkdmTxStF4Zo2inD6sNEfcm03mHDyxfw= Subject key identifier: BE:A6:6C:93:02:87:94:78:9A:B6:23:B6:00:4E:8D:F3:81:77:1B:68 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B48E2085553E6399635A43B40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/894c2056-e2e2-3940-b1f8-91e29f89c34c.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 20940 IP address blocks: 2600:1488:a003::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e2:08:55:53:e6:39:96:35:a4:3b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=594eecdd-be59-462e-9280-c6daf222e130 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:7c:87:25:68:04:0e:ca:0d:a0:a1:eb:46:ed: 02:8b:c0:90:d8:58:00:44:7e:7b:02:27:e1:6c:cc: 24:28:c3:9d:18:41:9f:43:0b:17:d6:79:70:85:78: 13:2e:80:b8:fa:55:d9:27:c0:5d:22:5b:4f:8b:ff: 5f:9e:9a:b9:d5:f2:52:7f:a7:d7:9f:43:8e:11:c6: 8b:2b:9b:82:27:aa:dd:16:c8:9e:0a:e7:22:09:3c: 50:fe:ab:9c:f7:00:0b:a9:07:56:de:5a:e9:c1:63: 5e:85:07:3a:c8:b9:df:c3:49:d0:a3:5c:36:62:dd: 79:f4:b2:66:4c:b9:6e:d9:3a:4a:f3:e1:e3:d3:59: 2e:c2:01:a6:37:bf:b9:93:87:26:77:d9:b9:51:cd: 33:0a:be:00:eb:82:7f:f0:1e:8b:f3:6e:25:19:82: cd:be:25:f9:30:35:84:31:10:a2:c1:08:da:19:5d: 7f:5f:fe:38:b7:8b:3a:c2:60:1d:ec:f5:09:75:91: c4:a5:81:60:8b:88:5c:81:c8:78:14:12:86:a9:79: 91:5c:b9:e2:79:7d:16:a2:40:bb:20:9b:65:80:84: 09:b9:eb:65:c5:2b:5d:68:31:74:3d:46:68:41:de: 6a:5c:56:09:6d:e5:26:6a:58:89:45:05:6b:db:5f: d4:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:A6:6C:93:02:87:94:78:9A:B6:23:B6:00:4E:8D:F3:81:77:1B:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/894c2056-e2e2-3940-b1f8-91e29f89c34c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1488:a003::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:f4:44:56:cd:50:64:44:3f:87:36:a6:39:95:23:7f:f2:a4: a0:62:0a:0f:81:ae:10:fb:66:7d:67:4a:de:90:e1:91:3a:3a: 7e:76:bb:c8:6e:e9:71:a2:83:a0:e6:3f:f8:a5:12:4e:ce:e6: dc:be:b0:90:f0:ae:92:ce:52:49:1e:4b:f2:80:e7:6f:c5:64: 86:b0:79:79:dd:6c:1b:bc:0d:0e:5b:fb:06:60:5a:9c:54:84: db:dc:d8:69:6f:3e:bd:37:9a:b9:5d:44:08:41:c5:59:e8:70: 61:04:f0:f2:73:aa:b1:d7:78:6a:fe:b1:2a:68:8b:9d:9b:a5: 84:67:62:be:3d:94:88:cb:4a:64:6a:59:4a:d1:0a:17:c7:ea: ce:2e:4e:12:86:12:3d:07:4b:96:d2:a9:87:0c:e1:f5:f0:fa: 62:9c:c4:58:bb:3e:ea:3f:42:46:a0:32:45:c7:38:27:2e:d8: d9:bc:9a:b0:25:97:6a:dc:0f:03:e8:7e:6c:75:a9:96:a9:e8: 54:7c:82:f8:19:a4:7d:52:3a:92:91:21:c5:82:d2:4b:48:49: 91:ce:a3:ca:5d:6b:a2:5b:70:99:4a:ad:99:a1:5e:9f:aa:af: e9:47:2c:8e:8d:38:e4:85:57:d2:eb:19:c5:99:44:ad:06:93: 2a:92:a3:a7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtI4ghVU+Y5ljWkO0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk NTk0ZWVjZGQtYmU1OS00NjJlLTkyODAtYzZkYWYyMjJlMTMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7nyHJWgEDsoNoKHrRu0Ci8CQ2FgARH57Aifh bMwkKMOdGEGfQwsX1nlwhXgTLoC4+lXZJ8BdIltPi/9fnpq51fJSf6fXn0OOEcaL K5uCJ6rdFsieCuciCTxQ/quc9wALqQdW3lrpwWNehQc6yLnfw0nQo1w2Yt159LJm TLlu2TpK8+Hj01kuwgGmN7+5k4cmd9m5Uc0zCr4A64J/8B6L824lGYLNviX5MDWE MRCiwQjaGV1/X/44t4s6wmAd7PUJdZHEpYFgi4hcgch4FBKGqXmRXLnieX0WokC7 IJtlgIQJuetlxStdaDF0PUZoQd5qXFYJbeUmaliJRQVr21/ULQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFL6mbJMCh5R4mrYjtgBOjfOBdxtoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODk0YzIwNTYtZTJlMi0z OTQwLWIxZjgtOTFlMjlmODljMzRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUiKAD MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGb0RFbNUGREP4c2pjmVI3/ypKBiCg+BrhD7Zn1nSt6Q4ZE6On52 u8hu6XGig6DmP/ilEk7O5ty+sJDwrpLOUkkeS/KA52/FZIaweXndbBu8DQ5b+wZg WpxUhNvc2GlvPr03mrldRAhBxVnocGEE8PJzqrHXeGr+sSpoi52bpYRnYr49lIjL SmRqWUrRChfH6s4uThKGEj0HS5bSqYcM4fXw+mKcxFi7Puo/QkagMkXHOCcu2Nm8 mrAll2rcDwPofmx1qZap6FR8gvgZpH1SOpKRIcWC0ktISZHOo8pda6JbcJlKrZmh Xp+qr+lHLI6NOOSFV9LrGcWZRK0GkyqSo6c= -----END CERTIFICATE-----Generated at Mon Oct 20 10:08:33 2025 by rpki-client