$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a6f25ab9-ce71-3f9f-bdba-1ea7371f3504.roa File: a6f25ab9-ce71-3f9f-bdba-1ea7371f3504.roa (raw, json) Hash identifier: WoBZsPrxABF1VOr78MZz5lz1f5dlUfWEuPVNnoPiL+k= Subject key identifier: D3:B2:90:35:81:C2:9B:51:D5:1F:09:D0:9D:84:3D:BE:2F:DA:07:E9 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B2CF6EDC8163B679779222680 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a6f25ab9-ce71-3f9f-bdba-1ea7371f3504.roa Signing time: Sat 13 Sep 2025 01:00:33 +0000 ROA not before: Sat 13 Sep 2025 01:00:33 +0000 ROA not after: Fri 12 Dec 2025 02:00:33 +0000 asID: 20940 IP address blocks: 2600:1406:3400::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:f6:ed:c8:16:3b:67:97:79:22:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 13 01:00:33 2025 GMT Not After : Dec 12 02:00:33 2025 GMT Subject: CN=1643edbb-1521-4d1e-b7f7-555605b874b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ad:50:75:dd:12:00:7e:37:f6:a7:bf:e3:64: d4:53:99:14:4c:2a:b0:5b:de:db:46:fb:9e:73:c5: d9:f3:28:9b:40:49:07:99:14:a6:93:7b:00:d6:ae: c0:d1:fe:66:5d:eb:de:60:b7:f3:26:8c:41:c5:21: ab:84:a4:46:d8:ae:70:58:9e:18:63:c1:49:3b:e8: 69:c8:4e:2a:0a:23:b1:a7:e6:1c:d9:eb:0d:b3:f2: 42:ed:a0:40:8a:75:80:78:30:b7:12:51:04:32:9b: 1a:a2:ca:52:fb:78:6b:bf:93:80:01:da:c7:69:f8: 4c:b0:d1:41:53:42:4c:bb:84:f5:1d:ef:64:bf:c4: bc:6e:03:b5:0d:93:46:7b:b8:dd:35:d3:03:c7:25: b9:d3:2b:95:44:3e:58:67:10:eb:59:1f:cb:81:c4: b1:1c:0e:7b:58:71:e3:86:00:72:18:34:21:27:ab: ba:5e:4e:7b:63:28:2c:c8:ee:30:a3:35:84:34:dd: b0:63:a9:9e:15:32:ea:d6:69:e4:d7:e3:aa:be:6f: 21:7b:e2:50:44:42:a2:40:59:07:81:fd:f5:85:b6: 56:6a:b6:4f:cc:0a:11:2c:6b:04:a5:5b:32:5a:be: 5d:b6:0e:63:ac:b1:a5:2f:54:be:0e:1d:3f:a8:b3: 0d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:B2:90:35:81:C2:9B:51:D5:1F:09:D0:9D:84:3D:BE:2F:DA:07:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a6f25ab9-ce71-3f9f-bdba-1ea7371f3504.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1406:3400::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:75:a7:c9:0e:a5:a4:f5:86:05:08:94:92:c8:35:db:a2:af: 88:82:0e:8b:13:f3:5c:21:ae:64:d8:8d:67:b0:17:3f:63:dd: 91:c1:66:ca:b0:7f:fa:f3:93:07:de:8f:d7:4a:64:f4:49:2a: 28:d9:ac:13:22:78:23:e5:02:6b:c9:5b:61:2d:92:55:fe:28: 3a:52:71:15:b9:ab:c2:43:50:f9:0e:67:43:fd:a4:c1:66:0e: 21:90:c0:81:c6:f6:ae:3a:68:2a:71:35:25:1b:cc:5e:9e:75: 99:a6:42:0a:bb:06:78:7f:97:58:f5:cd:87:f7:61:de:34:7a: f9:fb:9d:3c:94:92:7f:91:2e:51:52:6c:8c:25:34:e2:83:06: f3:85:46:0f:c7:b6:ff:88:ee:29:55:a9:88:00:2c:aa:f7:11: c9:d5:39:2d:51:ef:2c:eb:62:b2:09:47:9c:9c:11:2e:62:4c: 99:f9:a7:20:06:cd:e4:cc:99:61:27:26:d0:54:8d:05:d4:e3: 3c:8f:c1:3b:19:e0:ea:b9:8e:01:4f:7c:cc:97:60:62:3b:c8: ef:3c:7c:8c:cd:c0:48:78:4b:dd:56:11:38:9f:12:dd:7f:01: 7a:c5:a6:2d:5a:1f:94:b8:ed:80:70:15:56:f4:35:98:e2:9f: 56:d3:9b:f8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEss9u3IFjtnl3kiJoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkxMzAxMDAzM1oXDTI1MTIxMjAyMDAzM1owLzEtMCsGA1UEAxMk MTY0M2VkYmItMTUyMS00ZDFlLWI3ZjctNTU1NjA1Yjg3NGIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAna1Qdd0SAH439qe/42TUU5kUTCqwW97bRvue c8XZ8yibQEkHmRSmk3sA1q7A0f5mXeveYLfzJoxBxSGrhKRG2K5wWJ4YY8FJO+hp yE4qCiOxp+Yc2esNs/JC7aBAinWAeDC3ElEEMpsaospS+3hrv5OAAdrHafhMsNFB U0JMu4T1He9kv8S8bgO1DZNGe7jdNdMDxyW50yuVRD5YZxDrWR/LgcSxHA57WHHj hgByGDQhJ6u6Xk57YygsyO4wozWENN2wY6meFTLq1mnk1+Oqvm8he+JQREKiQFkH gf31hbZWarZPzAoRLGsEpVsyWr5dtg5jrLGlL1S+Dh0/qLMNewIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNOykDWBwptR1R8J0J2EPb4v2gfpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTZmMjVhYjktY2U3MS0z ZjlmLWJkYmEtMWVhNzM3MWYzNTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUBjQA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFd1p8kOpaT1hgUIlJLINduir4iCDosT81whrmTYjWewFz9j3ZHB Zsqwf/rzkwfej9dKZPRJKijZrBMieCPlAmvJW2EtklX+KDpScRW5q8JDUPkOZ0P9 pMFmDiGQwIHG9q46aCpxNSUbzF6edZmmQgq7Bnh/l1j1zYf3Yd40evn7nTyUkn+R LlFSbIwlNOKDBvOFRg/Htv+I7ilVqYgALKr3EcnVOS1R7yzrYrIJR5ycES5iTJn5 pyAGzeTMmWEnJtBUjQXU4zyPwTsZ4Oq5jgFPfMyXYGI7yO88fIzNwEh4S91WETif Et1/AXrFpi1aH5S47YBwFVb0NZjin1bTm/g= -----END CERTIFICATE-----Generated at Mon Oct 20 00:27:34 2025 by rpki-client