$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/98c6c35c-1fac-399d-a599-6883beec63a8.roa File: 98c6c35c-1fac-399d-a599-6883beec63a8.roa (raw, json) Hash identifier: kpGdwWhZJ2Yj1AzIYllXutiB/u3LUwLm3kV/JW81RkM= Subject key identifier: 3D:C2:E2:63:C4:F3:5B:0C:6F:BD:23:55:35:54:15:C3:84:CA:BC:20 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B4BAC604D8904B4095D78D340 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/98c6c35c-1fac-399d-a599-6883beec63a8.roa Signing time: Wed 24 Sep 2025 01:00:31 +0000 ROA not before: Wed 24 Sep 2025 01:00:31 +0000 ROA not after: Tue 23 Dec 2025 02:00:31 +0000 asID: 35994 IP address blocks: 2600:1408:6c00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4b:ac:60:4d:89:04:b4:09:5d:78:d3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 24 01:00:31 2025 GMT Not After : Dec 23 02:00:31 2025 GMT Subject: CN=be9729c1-3037-4206-a9e6-65aa771af778 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:3f:32:80:b5:eb:f1:98:6e:d1:bf:84:38:1b: b8:9b:7d:42:1c:50:7b:d0:a5:13:42:e5:07:56:32: 64:51:be:e2:83:bd:d0:27:3c:97:9b:6b:0c:39:a3: 2b:9f:c2:da:93:b0:22:57:f2:da:a9:e4:c8:27:e5: b2:38:25:86:57:ca:3e:a6:66:80:cb:57:fa:31:51: 33:0d:04:a2:39:66:7d:99:09:d9:45:be:2f:7b:4e: 11:61:7b:3e:64:e9:32:ef:1c:f3:04:34:c1:3e:9c: e2:0a:98:f3:9d:7e:94:bb:dd:4f:f7:53:bd:d0:13: 95:c8:6f:c2:df:88:f0:9d:62:30:1d:e8:46:96:84: f9:12:fd:99:eb:5b:b1:34:6f:6b:4d:f2:01:54:2d: 20:9b:e1:a7:57:7a:f7:dc:b2:32:cd:05:11:66:12: 77:13:e5:1d:f9:13:37:5b:8a:4a:3d:39:df:fb:66: 92:04:6b:b5:83:07:da:70:aa:cf:43:32:ab:6c:9d: 1c:78:9a:be:b8:60:53:98:50:ce:73:cd:b1:5f:6a: 9d:47:aa:27:58:98:b7:cf:e3:8f:77:15:31:16:8e: 24:d1:35:f3:4d:94:cb:ad:1b:4b:8c:4b:c0:d7:38: 82:e0:e6:de:42:44:99:a3:1e:e0:48:10:21:37:95: 1f:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:C2:E2:63:C4:F3:5B:0C:6F:BD:23:55:35:54:15:C3:84:CA:BC:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/98c6c35c-1fac-399d-a599-6883beec63a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1408:6c00::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:2b:68:4f:3a:7f:ad:81:1e:11:1a:47:3a:04:ec:a1:9e:39: d3:92:35:7e:3b:d2:f2:2c:18:2e:2c:c9:30:ba:b4:c0:9f:fd: 0f:9c:74:4f:5c:07:41:d9:41:f4:fa:86:02:b1:f5:8b:e6:4c: e4:4f:bd:d5:2b:78:85:a6:e0:24:c7:f4:d3:c6:9f:b5:02:94: af:8b:53:5c:d5:cc:44:89:d9:07:8e:e1:7f:e0:72:73:9f:2e: 91:14:db:37:da:de:4f:80:7b:aa:3d:3d:04:98:e8:a9:63:80: 6b:0d:21:40:1e:53:b9:ea:75:99:6f:ea:32:f4:70:8b:2b:f3: 49:8d:7a:b7:07:da:dd:66:81:da:d0:45:89:03:37:61:78:9f: ec:9c:35:d7:20:e5:3a:4e:ac:4b:6a:08:30:47:0a:4a:8f:dd: 7c:d8:80:27:44:09:97:9c:76:a1:06:29:73:30:38:d7:95:7c: 61:1c:05:70:84:e6:ae:cf:ea:0e:ae:ba:85:71:33:cf:12:3d: 94:22:d8:f1:03:c0:41:e0:cd:0b:be:2b:2f:31:d8:ce:b0:7d: 5e:7e:7c:ea:f8:2a:7c:ad:a3:db:d7:0d:38:6a:3c:16:e6:d4: bc:c6:e6:3c:dc:76:36:75:45:11:92:67:a1:4e:e3:f9:11:cf: 94:60:d1:16 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtLrGBNiQS0CV1400AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyNDAxMDAzMVoXDTI1MTIyMzAyMDAzMVowLzEtMCsGA1UEAxMk YmU5NzI5YzEtMzAzNy00MjA2LWE5ZTYtNjVhYTc3MWFmNzc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2D8ygLXr8Zhu0b+EOBu4m31CHFB70KUTQuUH VjJkUb7ig73QJzyXm2sMOaMrn8Lak7AiV/LaqeTIJ+WyOCWGV8o+pmaAy1f6MVEz DQSiOWZ9mQnZRb4ve04RYXs+ZOky7xzzBDTBPpziCpjznX6Uu91P91O90BOVyG/C 34jwnWIwHehGloT5Ev2Z61uxNG9rTfIBVC0gm+GnV3r33LIyzQURZhJ3E+Ud+RM3 W4pKPTnf+2aSBGu1gwfacKrPQzKrbJ0ceJq+uGBTmFDOc82xX2qdR6onWJi3z+OP dxUxFo4k0TXzTZTLrRtLjEvA1ziC4ObeQkSZox7gSBAhN5UfPQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFD3C4mPE81sMb70jVTVUFcOEyrwgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOThjNmMzNWMtMWZhYy0z OTlkLWE1OTktNjg4M2JlZWM2M2E4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUCGwA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAoraE86f62BHhEaRzoE7KGeOdOSNX470vIsGC4syTC6tMCf/Q+c dE9cB0HZQfT6hgKx9YvmTORPvdUreIWm4CTH9NPGn7UClK+LU1zVzESJ2QeO4X/g cnOfLpEU2zfa3k+Ae6o9PQSY6KljgGsNIUAeU7nqdZlv6jL0cIsr80mNercH2t1m gdrQRYkDN2F4n+ycNdcg5TpOrEtqCDBHCkqP3XzYgCdECZecdqEGKXMwONeVfGEc BXCE5q7P6g6uuoVxM88SPZQi2PEDwEHgzQu+Ky8x2M6wfV5+fOr4Knyto9vXDThq PBbm1LzG5jzcdjZ1RRGSZ6FO4/kRz5Rg0RY= -----END CERTIFICATE-----Generated at Mon Oct 20 17:35:07 2025 by rpki-client