$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8e02ec53-0d72-3de6-80a9-1899ae723515.roa File: 8e02ec53-0d72-3de6-80a9-1899ae723515.roa (raw, json) Hash identifier: 1z9CLQ9wWcRa7WyFlntYEuu4wPOMg3+POUX/gjq7czM= Subject key identifier: 0F:52:35:B1:AF:67:03:55:FA:DF:4F:C8:72:6A:BC:E3:C9:1F:5F:76 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B48E1CA6AD342C04A41568100 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8e02ec53-0d72-3de6-80a9-1899ae723515.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 20940 IP address blocks: 2600:1488:a000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:ca:6a:d3:42:c0:4a:41:56:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=28a13b54-0ad1-4751-9780-026642b307f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:0d:54:b2:48:d4:fb:75:bb:b6:f5:7a:75:fa: 65:cd:c3:e8:0c:01:cc:b3:a4:f6:71:04:a4:75:04: 1e:69:41:6a:c4:8f:9e:35:6a:5e:41:9d:38:83:56: 58:26:27:da:61:07:88:c6:06:ee:44:d5:e0:dd:07: fe:99:c8:63:a1:f3:be:ba:55:da:75:f2:fa:f0:79: 43:2c:73:19:24:02:7b:68:66:19:c1:96:1c:16:0c: c2:31:63:c1:48:0e:2c:b1:e2:dc:bb:ee:2b:4f:68: 20:7c:fa:17:d2:ce:09:18:63:d6:72:2c:e0:5e:e7: 63:62:a3:e7:59:f0:02:62:c2:73:55:ca:40:1d:ce: 2c:70:27:8b:d0:23:2a:bc:9f:01:34:92:57:eb:52: c7:c7:ab:e6:64:db:de:a4:22:ec:cc:b7:55:57:30: 2f:b5:04:e7:5a:bb:58:dc:4e:60:d7:5b:94:08:e4: 05:d7:58:81:fe:fe:8a:68:7e:1d:98:18:62:2f:39: ce:57:af:27:f7:54:f3:2c:2d:7f:67:c0:d0:47:e0: 38:e8:a3:85:91:c6:4d:b8:bd:0e:8b:52:0b:96:3c: 2a:fd:1c:f4:2c:94:38:d8:a4:0b:ce:02:a3:c2:b3: 18:29:6f:29:4c:15:d1:6c:26:73:f9:ee:9d:a7:72: 36:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:52:35:B1:AF:67:03:55:FA:DF:4F:C8:72:6A:BC:E3:C9:1F:5F:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8e02ec53-0d72-3de6-80a9-1899ae723515.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1488:a000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:78:b3:ff:27:08:68:bc:ed:c7:21:62:c3:9c:18:17:e9:bb: df:29:3e:eb:38:7b:df:a8:13:74:6a:6f:6d:45:ae:92:14:d0: 9e:8f:11:fe:d1:fb:c9:1d:a5:13:dc:34:83:b6:02:9e:a7:4c: 83:bd:31:5d:8a:3b:08:ba:a5:5f:b1:fd:7a:77:d4:db:f5:58: e1:7d:f1:8c:12:60:b8:62:a7:6d:62:a6:79:34:a5:f0:06:9e: 66:93:ad:43:08:0c:60:15:59:ae:05:f7:c1:59:b8:47:45:44: 9d:3d:9a:99:0b:c8:54:83:52:73:fb:b5:23:b5:e2:6e:5b:7f: d6:a0:f7:40:d1:d9:dd:4f:80:1f:b8:70:5f:c9:fb:c5:a4:43: c5:bd:c1:a2:1c:e1:bd:ff:e8:64:7b:00:f7:bf:57:78:18:9b: 70:f9:49:6e:97:93:94:44:1c:4d:e9:09:3f:ef:f1:cd:fe:d7: 83:7b:93:bd:43:de:f9:e1:7b:0b:f0:44:f0:a0:79:56:f2:e8: ca:b3:f0:2f:70:a8:ef:24:ea:b9:7a:9f:cd:21:a0:fc:2a:d0: 8d:18:66:62:63:5e:80:eb:64:18:1e:28:26:ad:32:6d:f1:88: be:07:01:98:4f:be:67:e6:88:1f:c9:a7:0e:3d:b6:23:54:36: 5a:96:f9:51 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtI4cpq00LASkFWgQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk MjhhMTNiNTQtMGFkMS00NzUxLTk3ODAtMDI2NjQyYjMwN2Y0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQ1UskjU+3W7tvV6dfplzcPoDAHMs6T2cQSk dQQeaUFqxI+eNWpeQZ04g1ZYJifaYQeIxgbuRNXg3Qf+mchjofO+ulXadfL68HlD LHMZJAJ7aGYZwZYcFgzCMWPBSA4sseLcu+4rT2ggfPoX0s4JGGPWcizgXudjYqPn WfACYsJzVcpAHc4scCeL0CMqvJ8BNJJX61LHx6vmZNvepCLszLdVVzAvtQTnWrtY 3E5g11uUCOQF11iB/v6KaH4dmBhiLznOV68n91TzLC1/Z8DQR+A46KOFkcZNuL0O i1ILljwq/Rz0LJQ42KQLzgKjwrMYKW8pTBXRbCZz+e6dp3I2SwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFA9SNbGvZwNV+t9PyHJqvOPJH192MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGUwMmVjNTMtMGQ3Mi0z ZGU2LTgwYTktMTg5OWFlNzIzNTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUiKAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACF4s/8nCGi87cchYsOcGBfpu98pPus4e9+oE3Rqb21FrpIU0J6P Ef7R+8kdpRPcNIO2Ap6nTIO9MV2KOwi6pV+x/Xp31Nv1WOF98YwSYLhip21ipnk0 pfAGnmaTrUMIDGAVWa4F98FZuEdFRJ09mpkLyFSDUnP7tSO14m5bf9ag90DR2d1P gB+4cF/J+8WkQ8W9waIc4b3/6GR7APe/V3gYm3D5SW6Xk5REHE3pCT/v8c3+14N7 k71D3vnhewvwRPCgeVby6Mqz8C9wqO8k6rl6n80hoPwq0I0YZmJjXoDrZBgeKCat Mm3xiL4HAZhPvmfmiB/Jpw49tiNUNlqW+VE= -----END CERTIFICATE-----Generated at Mon Oct 20 05:07:45 2025 by rpki-client