$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a7eec214-f1a2-3c35-8e51-5bca0959ef9e.roa File: a7eec214-f1a2-3c35-8e51-5bca0959ef9e.roa (raw, json) Hash identifier: +SrTDmB2Vd1LcCJKAsJ3xMUEDtnjMTnJvJ8rJoNwZSM= Subject key identifier: 47:50:10:58:3F:D3:EC:5C:46:38:76:DB:DF:F4:9F:27:16:A8:67:91 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B4081B963A30C6F2DD3F16E80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a7eec214-f1a2-3c35-8e51-5bca0959ef9e.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 20940 IP address blocks: 2600:1406:c800::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:b9:63:a3:0c:6f:2d:d3:f1:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=9f2a88c5-271e-4e3f-b4b7-e6473a2bb916 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:82:aa:11:e7:16:3a:bc:4c:2d:cb:fe:74:64: 54:f1:c9:ca:7f:92:52:59:51:90:d9:4d:f6:42:71: 1d:eb:44:43:12:b2:25:11:2b:1d:33:5c:d4:5e:8e: d6:ff:42:69:24:41:f7:e8:90:ee:cc:9f:3a:84:91: 55:66:03:c1:1e:9a:73:cf:98:bc:69:16:10:4c:1e: 3d:5b:a9:20:48:5f:27:02:d3:ab:71:d8:08:39:f3: e2:81:5f:28:d2:19:87:b2:e8:cc:a7:90:b7:b4:cf: 3c:0a:95:e2:22:6c:d2:9a:d6:14:80:ac:05:22:81: 75:4c:5a:ca:2b:c1:41:91:18:5f:21:8c:d1:51:be: 42:38:6e:2b:b5:fd:f4:12:97:12:26:42:a6:ee:1b: f4:4b:5f:e7:3f:d5:c6:bd:c1:0e:83:66:7d:98:64: 00:95:6a:49:5e:e0:e1:13:fa:e5:ca:7d:e0:b4:58: 7d:74:3c:67:01:50:2f:62:d7:4f:a8:20:18:ac:5d: 55:c2:02:13:1e:bc:73:90:a1:70:24:e5:b9:30:35: 93:b1:c1:89:0b:f4:51:8b:d4:e3:b8:7d:6d:32:a8: 8e:b1:6a:6e:2b:4e:19:56:82:27:01:c6:00:8e:47: 4c:07:cb:42:33:42:1f:38:12:d5:bc:20:ca:c7:f6: ef:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:50:10:58:3F:D3:EC:5C:46:38:76:DB:DF:F4:9F:27:16:A8:67:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a7eec214-f1a2-3c35-8e51-5bca0959ef9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1406:c800::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:79:47:d5:c4:a8:1f:c0:e4:77:a9:3a:d4:6e:aa:9d:57:07: ee:d8:81:c2:58:06:30:68:b3:16:d7:78:c8:6b:3a:27:1c:6c: 38:f8:2c:58:9b:f2:c0:dc:f5:53:d7:90:89:1b:d8:2a:02:98: 23:a2:42:a7:2f:a9:d8:78:ec:59:e9:26:af:de:8a:fc:32:4b: c1:cd:29:bf:5b:35:53:4c:2a:80:35:1e:ce:46:72:96:d0:46: 41:c3:bf:e2:ab:45:6f:3c:06:8c:5f:97:11:6e:e7:7b:b0:50: c9:90:22:ed:4f:0c:6e:80:1c:92:d9:21:6f:3a:9a:00:06:f2: d5:8c:1f:52:40:a9:76:3e:30:b4:f5:4f:dd:07:15:0d:58:ee: 2c:73:04:cb:3a:cc:e2:3c:cc:b3:5c:4b:8a:39:2f:f6:af:f2: 2d:ad:47:37:d2:b2:d0:8a:b8:18:b3:31:69:0f:21:b7:05:93: 7b:2d:99:12:5e:97:1a:38:0f:39:3b:aa:2b:05:f7:ba:a1:41: bc:c0:ae:4e:b0:35:8e:65:7a:c8:2d:37:ce:43:1a:86:23:1a: 6e:b1:fb:a1:1c:f4:9f:23:7c:3e:56:23:3c:c4:fd:6d:87:58: 13:15:dc:06:1f:f1:c4:d5:56:f9:d8:b2:5a:46:94:72:e1:9f: 4d:c9:0b:fc -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtAgbljowxvLdPxboAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk OWYyYTg4YzUtMjcxZS00ZTNmLWI0YjctZTY0NzNhMmJiOTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmoKqEecWOrxMLcv+dGRU8cnKf5JSWVGQ2U32 QnEd60RDErIlESsdM1zUXo7W/0JpJEH36JDuzJ86hJFVZgPBHppzz5i8aRYQTB49 W6kgSF8nAtOrcdgIOfPigV8o0hmHsujMp5C3tM88CpXiImzSmtYUgKwFIoF1TFrK K8FBkRhfIYzRUb5COG4rtf30EpcSJkKm7hv0S1/nP9XGvcEOg2Z9mGQAlWpJXuDh E/rlyn3gtFh9dDxnAVAvYtdPqCAYrF1VwgITHrxzkKFwJOW5MDWTscGJC/RRi9Tj uH1tMqiOsWpuK04ZVoInAcYAjkdMB8tCM0IfOBLVvCDKx/bvOwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEdQEFg/0+xcRjh229/0nycWqGeRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTdlZWMyMTQtZjFhMi0z YzM1LThlNTEtNWJjYTA5NTllZjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUBsgA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHZ5R9XEqB/A5HepOtRuqp1XB+7YgcJYBjBosxbXeMhrOiccbDj4 LFib8sDc9VPXkIkb2CoCmCOiQqcvqdh47FnpJq/eivwyS8HNKb9bNVNMKoA1Hs5G cpbQRkHDv+KrRW88BoxflxFu53uwUMmQIu1PDG6AHJLZIW86mgAG8tWMH1JAqXY+ MLT1T90HFQ1Y7ixzBMs6zOI8zLNcS4o5L/av8i2tRzfSstCKuBizMWkPIbcFk3st mRJelxo4Dzk7qisF97qhQbzArk6wNY5lesgtN85DGoYjGm6x+6Ec9J8jfD5WIzzE /W2HWBMV3AYf8cTVVvnYslpGlHLhn03JC/w= -----END CERTIFICATE-----Generated at Mon Oct 20 02:36:08 2025 by rpki-client