$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/89f81adc-7e9d-3bb8-94e6-58b3dfca6c50.roa File: 89f81adc-7e9d-3bb8-94e6-58b3dfca6c50.roa (raw, json) Hash identifier: xWtdFUCVbPXYHGIqF+GR7xh2kHS86b0I5zeLbg3n1tw= Subject key identifier: CE:52:3B:31:3B:71:2A:1D:7B:17:5A:A6:39:6F:5D:9D:E4:D1:3A:A0 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B66320157D4E058432CA69E80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/89f81adc-7e9d-3bb8-94e6-58b3dfca6c50.roa Signing time: Fri 03 Oct 2025 13:00:40 +0000 ROA not before: Fri 03 Oct 2025 13:00:40 +0000 ROA not after: Thu 01 Jan 2026 14:00:40 +0000 asID: 21342 IP address blocks: 2600:1480:400::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:66:32:01:57:d4:e0:58:43:2c:a6:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 3 13:00:40 2025 GMT Not After : Jan 1 14:00:40 2026 GMT Subject: CN=a8ffce94-0f3e-4af4-a41a-0b60ac3aab95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:0d:21:67:db:b4:d2:49:8e:58:ba:a3:45:57: f7:2f:06:cf:09:bc:ee:57:70:35:1e:a5:1a:e6:04: ad:e5:25:94:5d:c8:d6:10:04:21:60:a2:1c:5f:c4: 0d:3e:0b:32:9a:fa:96:48:bd:37:d7:24:c2:c7:43: 2e:5e:7b:02:9b:98:71:ec:ad:38:85:b3:a9:a5:6f: 4b:fe:33:43:0d:b1:fb:2b:df:5c:3a:0d:8e:7a:a1: 18:e0:74:7d:46:65:25:cb:71:4d:03:2b:f4:bc:8c: e8:5e:d9:6d:2d:6a:72:87:8c:31:16:61:d3:70:b5: 17:9d:c5:0a:b8:85:fa:0f:34:8e:23:d9:b0:a1:1d: 7c:55:3f:57:09:8d:68:38:20:1c:25:21:96:58:41: 24:f2:36:f1:f8:7a:d3:f6:21:65:43:62:52:82:f5: ab:13:43:a6:7f:54:63:19:ab:6b:be:5a:3a:7b:66: c6:f5:e1:a9:66:56:ca:28:41:4a:39:3e:d9:5e:b8: ef:76:3a:a9:85:a2:02:46:56:11:8b:bc:e9:78:36: 5e:38:9a:37:35:10:7a:bc:6f:f0:79:96:8c:26:d6: 8a:ec:df:c6:0c:43:02:a8:bc:b4:b7:e8:aa:44:37: 80:fe:7a:2f:dc:c8:90:5c:65:14:05:22:2f:dc:92: 5f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:52:3B:31:3B:71:2A:1D:7B:17:5A:A6:39:6F:5D:9D:E4:D1:3A:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/89f81adc-7e9d-3bb8-94e6-58b3dfca6c50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1480:400::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:42:4a:7c:ba:4c:9d:0b:ba:7b:fc:0a:25:f6:44:2b:27:5d: 47:5a:28:4a:36:7a:93:be:59:8d:28:98:cd:af:c8:db:9f:15: ab:5e:b7:0c:ff:19:a4:f6:3a:61:41:67:2d:67:0f:a2:93:28: 17:32:5c:8f:db:c5:d6:a6:08:11:57:0f:d1:77:21:a6:ba:74: 53:83:37:a1:31:bc:3d:77:d9:d8:fe:86:98:59:f0:36:5b:fe: 33:ce:bb:74:fe:46:8b:83:3b:42:b4:b6:4f:7e:69:01:48:b3: 22:d9:bf:f5:12:71:02:1c:65:d4:45:2e:e9:d4:a4:4a:8a:7b: 0d:f5:bb:9e:57:77:f4:bc:65:c8:20:73:ee:03:15:31:59:6a: 84:e8:3f:ac:f3:27:42:70:29:a9:eb:92:a3:67:f1:d2:da:a6: 1d:41:e5:69:a8:16:a1:b6:ec:9e:7a:e9:dd:2b:79:94:20:ba: 07:e4:f8:f7:07:e4:e0:13:ae:31:d5:75:4e:75:9c:f4:87:43: 20:55:8f:46:69:6b:37:54:a1:e9:87:b0:0e:d8:98:22:39:6d: a6:1d:e0:95:a2:a8:32:b3:85:35:e5:ec:09:e1:9c:1b:2a:bb: a1:37:0e:52:a7:8d:3c:35:48:c6:a8:b3:0c:ea:d9:4d:b4:a7: 45:1e:8b:b8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtmMgFX1OBYQyymnoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAwMzEzMDA0MFoXDTI2MDEwMTE0MDA0MFowLzEtMCsGA1UEAxMk YThmZmNlOTQtMGYzZS00YWY0LWE0MWEtMGI2MGFjM2FhYjk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnw0hZ9u00kmOWLqjRVf3LwbPCbzuV3A1HqUa 5gSt5SWUXcjWEAQhYKIcX8QNPgsymvqWSL031yTCx0MuXnsCm5hx7K04hbOppW9L /jNDDbH7K99cOg2OeqEY4HR9RmUly3FNAyv0vIzoXtltLWpyh4wxFmHTcLUXncUK uIX6DzSOI9mwoR18VT9XCY1oOCAcJSGWWEEk8jbx+HrT9iFlQ2JSgvWrE0Omf1Rj Gatrvlo6e2bG9eGpZlbKKEFKOT7ZXrjvdjqphaICRlYRi7zpeDZeOJo3NRB6vG/w eZaMJtaK7N/GDEMCqLy0t+iqRDeA/nov3MiQXGUUBSIv3JJfBwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFM5SOzE7cSodexdapjlvXZ3k0TqgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODlmODFhZGMtN2U5ZC0z YmI4LTk0ZTYtNThiM2RmY2E2YzUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUgAQA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIZCSny6TJ0Lunv8CiX2RCsnXUdaKEo2epO+WY0omM2vyNufFate twz/GaT2OmFBZy1nD6KTKBcyXI/bxdamCBFXD9F3Iaa6dFODN6ExvD132dj+hphZ 8DZb/jPOu3T+RouDO0K0tk9+aQFIsyLZv/UScQIcZdRFLunUpEqKew31u55Xd/S8 Zcggc+4DFTFZaoToP6zzJ0JwKanrkqNn8dLaph1B5WmoFqG27J566d0reZQgugfk +PcH5OATrjHVdU51nPSHQyBVj0ZpazdUoemHsA7YmCI5baYd4JWiqDKzhTXl7Anh nBsqu6E3DlKnjTw1SMaoswzq2U20p0Uei7g= -----END CERTIFICATE-----Generated at Mon Oct 20 07:21:01 2025 by rpki-client