$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8d6c8b2f-5007-39c9-b1b8-a162818d2a5c.roa File: 8d6c8b2f-5007-39c9-b1b8-a162818d2a5c.roa (raw, json) Hash identifier: LOausUdm+/b0wQSZEZFRkOc9uwFKJYm0soE4hlw/bsQ= Subject key identifier: 00:08:95:5F:60:55:7E:22:98:45:47:08:BA:77:89:89:B5:75:D9:81 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B41E71EE33690C2EE37917060 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8d6c8b2f-5007-39c9-b1b8-a162818d2a5c.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 20940 IP address blocks: 2600:14a0:100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:1e:e3:36:90:c2:ee:37:91:70:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=3a7a7487-b75c-4ecb-8b05-660e571784a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:4a:2e:ee:fd:cd:75:fc:10:a8:e1:24:b3:32: 20:1e:84:6b:ae:dd:1a:8d:67:ec:c4:6f:5a:eb:cf: 1e:40:5a:1d:5f:c0:ca:cf:a2:21:c7:91:42:1f:b1: ed:87:90:de:74:a8:9c:15:55:00:5f:a8:0d:0d:f6: ef:f5:06:05:ca:03:db:bb:e2:12:87:64:4d:ce:cf: 41:1e:06:aa:cf:43:23:04:0c:ba:56:19:e4:f8:19: 34:47:72:77:5f:0e:4d:6c:92:d1:0e:cb:88:d5:40: 16:f7:26:93:19:92:f2:96:c6:55:1f:c6:ab:6a:53: 94:15:5c:5f:d9:74:77:c5:ee:e9:19:93:f0:03:a2: fa:32:28:90:4e:3d:f8:30:b5:5c:b0:58:a1:ce:1f: b3:96:17:5f:1e:b7:01:ca:33:e9:35:70:fb:56:eb: 8b:2e:bb:25:1f:50:1a:3d:03:e6:5b:9f:db:7c:f1: a3:8a:cc:f3:d8:f0:52:57:8e:2c:d2:6f:64:d4:64: c5:89:c6:74:d0:4a:7b:3d:d7:ea:09:59:5a:96:d8: 56:5f:16:21:ee:f3:41:ed:8d:fd:94:10:9c:9c:9a: 34:ab:6e:b1:54:40:5d:cc:c9:47:63:47:ab:8f:6c: 58:4b:e4:95:79:22:33:07:d1:0c:24:30:16:14:0a: 04:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:08:95:5F:60:55:7E:22:98:45:47:08:BA:77:89:89:B5:75:D9:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8d6c8b2f-5007-39c9-b1b8-a162818d2a5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:14a0:100::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:c9:3b:46:94:a2:5c:f8:ec:8a:b3:ee:66:fe:8a:52:9a:d1: 07:41:c4:ae:15:77:29:6b:ae:95:7b:6f:be:90:4b:f3:96:c6: 7a:1b:76:dd:f4:ea:a2:25:36:2a:71:4f:4a:9e:17:20:f0:ed: ad:c6:4a:4e:73:e7:72:1a:53:3c:cf:4f:af:bd:61:c3:75:8e: cf:a6:d6:28:40:c7:f5:b8:3d:d1:00:61:5c:87:ae:83:1c:cb: 5f:11:d3:dd:f8:06:d3:86:e2:78:f0:09:c4:b1:82:c7:c2:7b: 1e:a0:23:15:b2:95:58:d7:e6:fa:01:1b:38:0d:2a:4c:ff:0e: 87:35:fe:8f:3d:27:9c:ca:ff:f5:41:9f:f3:2f:4e:dc:d7:7a: 48:52:72:f5:0d:94:8c:b1:81:f6:23:28:58:09:3d:d4:27:48: 3c:65:18:af:19:6e:53:c7:49:e5:bd:3d:53:a8:de:5e:92:a6: 47:45:68:4e:c0:08:1f:67:0b:1b:fa:39:1c:2f:a3:29:a3:0f: 23:86:e0:57:87:cf:3c:58:c5:44:ba:de:a7:50:87:c6:4b:da: fa:eb:dc:83:d0:e9:f3:08:af:d0:66:2d:a4:69:22:90:23:73: 73:87:bc:61:19:aa:0f:0e:73:cd:23:b9:4a:a5:c9:32:64:cf: a4:5b:81:49 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtB5x7jNpDC7jeRcGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk M2E3YTc0ODctYjc1Yy00ZWNiLThiMDUtNjYwZTU3MTc4NGE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0kou7v3NdfwQqOEkszIgHoRrrt0ajWfsxG9a 688eQFodX8DKz6Ihx5FCH7Hth5DedKicFVUAX6gNDfbv9QYFygPbu+ISh2RNzs9B Hgaqz0MjBAy6Vhnk+Bk0R3J3Xw5NbJLRDsuI1UAW9yaTGZLylsZVH8aralOUFVxf 2XR3xe7pGZPwA6L6MiiQTj34MLVcsFihzh+zlhdfHrcByjPpNXD7VuuLLrslH1Aa PQPmW5/bfPGjiszz2PBSV44s0m9k1GTFicZ00Ep7PdfqCVlalthWXxYh7vNB7Y39 lBCcnJo0q26xVEBdzMlHY0erj2xYS+SVeSIzB9EMJDAWFAoEywIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAAIlV9gVX4imEVHCLp3iYm1ddmBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGQ2YzhiMmYtNTAwNy0z OWM5LWIxYjgtYTE2MjgxOGQyYTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUoAEA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEXJO0aUolz47Iqz7mb+ilKa0QdBxK4VdylrrpV7b76QS/OWxnob dt306qIlNipxT0qeFyDw7a3GSk5z53IaUzzPT6+9YcN1js+m1ihAx/W4PdEAYVyH roMcy18R0934BtOG4njwCcSxgsfCex6gIxWylVjX5voBGzgNKkz/Doc1/o89J5zK //VBn/MvTtzXekhScvUNlIyxgfYjKFgJPdQnSDxlGK8ZblPHSeW9PVOo3l6SpkdF aE7ACB9nCxv6ORwvoymjDyOG4FeHzzxYxUS63qdQh8ZL2vrr3IPQ6fMIr9BmLaRp IpAjc3OHvGEZqg8Oc80juUqlyTJkz6RbgUk= -----END CERTIFICATE-----Generated at Mon Oct 20 00:27:30 2025 by rpki-client