$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a37d3462-f756-3b6b-a807-22c3f937f7a5.roa File: a37d3462-f756-3b6b-a807-22c3f937f7a5.roa (raw, json) Hash identifier: Mx/TqALWKyURvWjQrxbk4sz1Unnd7Mm4xlTfgXJn0pA= Subject key identifier: D7:37:A6:03:EC:11:D8:FE:88:50:38:40:B6:A5:CC:78:A8:6F:C8:26 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B4081BAA5229930F7FB915500 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a37d3462-f756-3b6b-a807-22c3f937f7a5.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 20940 IP address blocks: 2600:140b:c00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:ba:a5:22:99:30:f7:fb:91:55:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=1c36d3fd-4612-44e0-94ef-8334dc1c4c01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:9d:f7:59:24:96:60:89:d3:05:4e:37:67:fa: 0a:92:9e:cd:48:56:45:34:d8:b1:92:4f:f4:7c:8f: ce:d5:92:9f:4a:29:1d:a2:18:14:a8:f0:37:be:17: 06:66:21:73:ec:30:ac:a5:56:3f:d8:73:19:6a:b2: f0:ec:58:f5:5f:d6:ba:3f:83:88:7a:24:30:8c:8d: 6d:79:bd:95:79:49:ec:1c:43:ce:f8:57:ed:6e:15: f5:78:fd:04:df:c9:2b:83:c6:bf:d5:67:df:e3:3c: 56:27:09:99:40:bc:94:0b:9f:f6:4a:39:5a:ab:a2: 1c:4d:b8:c0:6c:1f:0e:b1:85:96:9c:bf:e1:b0:ae: 62:60:f0:d2:0c:9d:53:08:50:f6:7c:e8:4b:0a:75: b5:08:80:a5:44:43:f9:ce:d3:95:03:1b:fd:60:a9: 83:6d:75:89:38:b2:99:af:ad:48:ca:10:52:61:1d: 81:95:5f:b0:ab:c8:57:37:ed:f2:70:38:e1:67:9f: 8e:00:47:33:d7:0b:01:fb:d4:59:be:e2:51:bd:47: 53:69:9a:ad:2b:14:18:fc:39:cc:0c:9a:74:49:ec: 25:a1:f2:91:63:f0:2c:17:c9:ef:ba:85:09:72:49: ef:3b:bf:8a:cd:ad:3a:57:f8:f2:0e:58:4e:52:c6: 2b:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:37:A6:03:EC:11:D8:FE:88:50:38:40:B6:A5:CC:78:A8:6F:C8:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a37d3462-f756-3b6b-a807-22c3f937f7a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:140b:c00::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:2e:ce:8d:b5:e2:59:9d:cd:65:e8:35:08:70:d8:ed:e1:ea: 8f:a3:30:12:07:f5:2d:16:09:36:ba:b2:ac:41:a5:b1:11:20: 29:0a:8f:db:49:ed:2e:8a:48:88:27:8e:82:0a:3d:e7:04:c6: aa:28:42:fd:cb:e5:57:ac:f5:b3:11:90:76:c8:74:bd:86:f4: ff:a3:38:53:fe:43:21:4f:39:3c:7c:4b:1e:aa:40:77:3d:bc: 56:e4:cd:bb:3b:cf:8a:51:2a:7c:7a:f5:d5:0e:fc:d8:7e:ed: 6d:a1:8e:47:79:6c:d2:3d:33:88:ba:86:ce:37:ec:40:c3:22: b6:67:54:23:0d:aa:46:cc:a5:47:c6:22:b2:22:20:ff:e1:58: ca:6c:27:9d:00:72:7a:48:29:20:39:bb:61:9f:1f:76:3f:f0: b7:88:3d:e0:f8:f1:d4:79:bb:34:93:6d:21:36:c1:bf:df:52: 2c:32:5f:cc:37:86:d1:ef:0b:32:12:ff:82:1a:5b:3f:9b:fc: a3:8b:18:84:80:29:37:9d:9f:71:97:d9:37:a8:6c:8e:da:8e: d6:87:19:6b:6c:fe:57:58:01:81:ea:a1:4d:79:c1:ab:7b:b2: 99:54:92:b3:95:ef:e2:18:90:86:25:8f:58:01:ed:8f:d0:77: 52:c7:e7:33 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtAgbqlIpkw9/uRVQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk MWMzNmQzZmQtNDYxMi00NGUwLTk0ZWYtODMzNGRjMWM0YzAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZ33WSSWYInTBU43Z/oKkp7NSFZFNNixkk/0 fI/O1ZKfSikdohgUqPA3vhcGZiFz7DCspVY/2HMZarLw7Fj1X9a6P4OIeiQwjI1t eb2VeUnsHEPO+FftbhX1eP0E38krg8a/1Wff4zxWJwmZQLyUC5/2Sjlaq6IcTbjA bB8OsYWWnL/hsK5iYPDSDJ1TCFD2fOhLCnW1CIClREP5ztOVAxv9YKmDbXWJOLKZ r61IyhBSYR2BlV+wq8hXN+3ycDjhZ5+OAEcz1wsB+9RZvuJRvUdTaZqtKxQY/DnM DJp0SewlofKRY/AsF8nvuoUJcknvO7+Kza06V/jyDlhOUsYrqwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNc3pgPsEdj+iFA4QLalzHiob8gmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTM3ZDM0NjItZjc1Ni0z YjZiLWE4MDctMjJjM2Y5MzdmN2E1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUCwwA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAI4uzo214lmdzWXoNQhw2O3h6o+jMBIH9S0WCTa6sqxBpbERICkK j9tJ7S6KSIgnjoIKPecExqooQv3L5Ves9bMRkHbIdL2G9P+jOFP+QyFPOTx8Sx6q QHc9vFbkzbs7z4pRKnx69dUO/Nh+7W2hjkd5bNI9M4i6hs437EDDIrZnVCMNqkbM pUfGIrIiIP/hWMpsJ50AcnpIKSA5u2GfH3Y/8LeIPeD48dR5uzSTbSE2wb/fUiwy X8w3htHvCzIS/4IaWz+b/KOLGISAKTedn3GX2TeobI7ajtaHGWts/ldYAYHqoU15 wat7splUkrOV7+IYkIYlj1gB7Y/Qd1LH5zM= -----END CERTIFICATE-----Generated at Mon Oct 20 00:27:35 2025 by rpki-client