$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/894e774d-ff2a-36b0-904d-2281a53bc1dc.roa File: 894e774d-ff2a-36b0-904d-2281a53bc1dc.roa (raw, json) Hash identifier: mf3PzKr4P1RbSvokRpNTm90coSDw9xrDqH7h0wjdcAQ= Subject key identifier: 80:C1:C4:BB:72:E5:10:FB:4F:15:08:C8:5B:0D:7A:32:25:7E:3C:5B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B4081B9758E69C1B4812EF680 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/894e774d-ff2a-36b0-904d-2281a53bc1dc.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 20940 IP address blocks: 2600:1406:dc00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:b9:75:8e:69:c1:b4:81:2e:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=30d6cd83-7a69-410d-85c6-f23fc975879f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:33:32:98:77:37:92:2a:96:9a:c4:44:25:1f: 9f:ef:6c:1e:23:00:17:d7:67:78:be:e6:53:aa:6e: 00:63:9b:f6:f2:e3:2e:ae:7b:39:41:ec:67:db:53: 8f:75:26:cf:72:da:f3:a7:8b:e1:b9:5f:4f:cc:ba: d8:52:93:03:7e:bc:1c:90:0e:af:db:33:ff:18:ac: 8b:ac:4b:f4:85:cc:e5:cf:43:8c:18:3b:2d:c2:08: 11:0c:4c:92:6e:e7:cb:06:59:35:1d:2c:e1:d9:38: b6:ed:1b:5d:7d:7a:06:b6:1f:3c:73:7a:1f:5e:9c: 92:c5:61:9c:dd:3c:d7:1a:6c:7e:79:b0:f2:be:b2: 0e:09:87:59:77:b2:72:c3:65:02:eb:f4:9a:68:dc: 22:36:4d:3e:65:43:3f:f3:09:35:c3:29:a0:a9:d0: ca:73:ff:2e:ef:c6:4f:0d:62:a2:22:6c:09:f7:a4: 90:8b:49:98:29:eb:d8:86:2a:07:89:3e:31:05:7a: d9:ba:ee:66:84:f6:3e:9a:1e:53:14:03:94:13:96: 04:9f:b8:71:70:22:88:5f:cf:71:82:b0:ea:72:8b: 89:58:f5:a2:7d:65:a4:6b:71:7c:83:0d:23:e2:98: 48:5c:6d:3e:6e:f0:08:14:1a:fc:21:b2:97:10:72: 2b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:C1:C4:BB:72:E5:10:FB:4F:15:08:C8:5B:0D:7A:32:25:7E:3C:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/894e774d-ff2a-36b0-904d-2281a53bc1dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1406:dc00::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:7a:7e:87:72:fd:45:7a:25:7f:91:98:bc:88:83:0b:83:9e: f6:0a:fd:95:bf:98:42:a4:f9:f4:91:9c:8f:ac:02:61:76:63: 57:6d:b9:0f:e9:6a:6c:d2:e1:97:13:b5:fa:f0:1f:15:3f:63: bf:82:ce:43:50:b2:7e:61:1d:1a:e8:89:75:23:84:80:e0:71: ea:52:b2:e4:2d:f9:f6:6f:a4:11:87:ad:e5:ce:fe:6a:97:5a: 95:0c:1b:b7:c3:97:80:8e:29:dc:23:78:0f:4b:d1:a9:d1:26: 29:7b:b5:79:1c:d7:80:b5:fd:a3:d1:fe:5c:d1:6f:17:b5:c0: bd:a2:20:e9:ed:2d:d7:37:fd:4e:06:27:cb:01:cc:f6:86:9f: 64:0e:c5:7c:22:be:a8:cd:1e:45:78:a6:8a:04:11:8a:c2:40: 16:f7:e9:25:af:ad:18:72:fd:54:c8:49:3f:c5:33:72:bc:8a: cc:ed:7f:f4:b2:86:18:e4:1e:8f:35:89:ce:d7:42:23:82:e4: 39:65:8e:f2:21:6f:47:aa:20:b2:a8:88:2d:ec:40:97:e9:f4: cb:11:10:f1:bf:57:5d:37:7c:08:9b:b5:0c:31:f4:e9:45:88: 3e:0c:05:50:62:48:d0:41:8d:15:f6:07:62:14:ce:c2:b7:21: 70:a9:c6:62 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtAgbl1jmnBtIEu9oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk MzBkNmNkODMtN2E2OS00MTBkLTg1YzYtZjIzZmM5NzU4NzlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTMymHc3kiqWmsREJR+f72weIwAX12d4vuZT qm4AY5v28uMurns5Qexn21OPdSbPctrzp4vhuV9PzLrYUpMDfrwckA6v2zP/GKyL rEv0hczlz0OMGDstwggRDEySbufLBlk1HSzh2Ti27RtdfXoGth88c3ofXpySxWGc 3TzXGmx+ebDyvrIOCYdZd7Jyw2UC6/SaaNwiNk0+ZUM/8wk1wymgqdDKc/8u78ZP DWKiImwJ96SQi0mYKevYhioHiT4xBXrZuu5mhPY+mh5TFAOUE5YEn7hxcCKIX89x grDqcouJWPWifWWka3F8gw0j4phIXG0+bvAIFBr8IbKXEHIrkwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIDBxLty5RD7TxUIyFsNejIlfjxbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODk0ZTc3NGQtZmYyYS0z NmIwLTkwNGQtMjI4MWE1M2JjMWRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUBtwA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHF6fody/UV6JX+RmLyIgwuDnvYK/ZW/mEKk+fSRnI+sAmF2Y1dt uQ/pamzS4ZcTtfrwHxU/Y7+CzkNQsn5hHRroiXUjhIDgcepSsuQt+fZvpBGHreXO /mqXWpUMG7fDl4COKdwjeA9L0anRJil7tXkc14C1/aPR/lzRbxe1wL2iIOntLdc3 /U4GJ8sBzPaGn2QOxXwivqjNHkV4pooEEYrCQBb36SWvrRhy/VTIST/FM3K8iszt f/SyhhjkHo81ic7XQiOC5DlljvIhb0eqILKoiC3sQJfp9MsREPG/V103fAibtQwx 9OlFiD4MBVBiSNBBjRX2B2IUzsK3IXCpxmI= -----END CERTIFICATE-----Generated at Mon Oct 20 02:32:05 2025 by rpki-client