$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ac0f2d7f-abed-38c1-8ad6-864e51d811a7.roa File: ac0f2d7f-abed-38c1-8ad6-864e51d811a7.roa (raw, json) Hash identifier: SrklAR/0Q7vD8t6PHUiPtI9gxCj8DvfJHGFi8t+8QOM= Subject key identifier: CC:44:CE:69:F9:F2:3C:0E:D4:E4:67:F3:64:9D:5A:2E:ED:EC:92:99 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B4081C6BD12A3810053659780 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ac0f2d7f-abed-38c1-8ad6-864e51d811a7.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 20940 IP address blocks: 2600:1409:3000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:c6:bd:12:a3:81:00:53:65:97:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=1cf2e3ce-53f8-4287-9bd8-2e68abcad551 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:fe:e2:e6:18:8b:a2:7f:48:51:d3:b7:31:25: 9f:c7:75:ef:09:30:e1:fb:75:68:97:24:4e:47:ea: 52:1e:e5:1d:db:5f:99:c5:40:71:e1:d2:d8:9b:d3: d7:2c:bf:40:20:8c:39:98:c5:24:da:63:da:89:82: fd:a7:11:a8:82:35:40:bd:21:f4:80:45:d4:48:70: bb:c4:21:e1:99:e7:98:f6:35:68:1b:40:fb:5d:39: 4d:40:a4:59:1a:d7:92:96:9f:ff:0e:03:14:75:23: 68:3e:3c:a7:69:5e:8c:5d:a5:1f:ae:e4:20:2a:5e: 2d:83:39:a5:60:d5:5c:64:cc:15:6c:eb:1e:7b:3e: 63:ad:c5:46:14:2d:01:e7:8e:1c:fe:25:f2:e7:18: 2e:ba:1e:7a:58:11:24:07:e7:f6:01:4e:37:9c:2b: 55:cd:b8:b8:78:06:ad:6f:b2:c8:76:4c:a0:99:4b: 89:e2:f1:b6:e0:b1:81:0a:86:5b:62:b1:02:f0:ae: ff:5a:90:de:2e:21:cf:7e:cf:4f:f4:d1:ce:f4:c3: 29:66:a8:41:17:fe:ef:4e:92:e6:78:c9:7c:25:11: 1f:09:e1:e3:19:de:54:a9:ed:25:a6:80:d8:ab:69: 36:61:9c:05:0d:0a:da:6a:ca:29:6e:32:01:37:1a: cf:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:44:CE:69:F9:F2:3C:0E:D4:E4:67:F3:64:9D:5A:2E:ED:EC:92:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ac0f2d7f-abed-38c1-8ad6-864e51d811a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1409:3000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:42:38:17:bc:32:7d:a7:42:63:56:62:72:10:aa:b7:58:3b: f1:d3:03:1e:7e:54:e0:c2:dc:5d:a6:6f:29:70:b2:2b:7c:2f: 67:c3:f5:73:8e:6c:73:d1:c6:51:5b:9d:9f:b6:fa:41:72:81: 3e:ac:72:84:5c:c6:ed:50:45:84:84:f8:85:cf:ba:7b:2c:d0: 98:ca:65:75:7e:2f:45:a8:17:30:89:b7:02:2f:44:22:0c:ba: c5:56:45:a8:ef:da:dd:ac:c3:4a:2c:88:8f:87:88:1e:f0:7d: 73:70:7c:9f:f3:c1:b9:0a:5f:1f:b3:dc:ce:02:18:44:f4:cd: 1a:69:05:63:d2:b9:ee:83:cf:36:21:18:f5:3b:2d:84:78:21: 04:36:40:e1:fb:58:13:c2:e8:64:c4:41:0b:5c:0e:66:cc:52: ae:92:0c:1b:de:1e:28:53:70:77:6f:9d:73:d7:8b:35:85:9c: b8:89:15:6b:bd:0f:12:52:e6:cc:a0:8c:16:78:df:40:6c:d9: 44:76:84:3c:9f:be:a9:ce:5a:6d:30:df:f8:c6:69:9f:9a:06: 61:e8:18:a1:51:bc:05:0b:3e:6b:0a:0c:d6:d5:52:16:68:d2: 3b:14:32:25:de:d1:fa:77:48:3e:b3:bd:ec:02:44:54:3a:5b: 29:5f:48:cd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtAgca9EqOBAFNll4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk MWNmMmUzY2UtNTNmOC00Mjg3LTliZDgtMmU2OGFiY2FkNTUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4f7i5hiLon9IUdO3MSWfx3XvCTDh+3VolyRO R+pSHuUd21+ZxUBx4dLYm9PXLL9AIIw5mMUk2mPaiYL9pxGogjVAvSH0gEXUSHC7 xCHhmeeY9jVoG0D7XTlNQKRZGteSlp//DgMUdSNoPjynaV6MXaUfruQgKl4tgzml YNVcZMwVbOseez5jrcVGFC0B544c/iXy5xguuh56WBEkB+f2AU43nCtVzbi4eAat b7LIdkygmUuJ4vG24LGBCoZbYrEC8K7/WpDeLiHPfs9P9NHO9MMpZqhBF/7vTpLm eMl8JREfCeHjGd5Uqe0lpoDYq2k2YZwFDQraasopbjIBNxrPsQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMxEzmn58jwO1ORn82SdWi7t7JKZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWMwZjJkN2YtYWJlZC0z OGMxLThhZDYtODY0ZTUxZDgxMWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUCTAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHVCOBe8Mn2nQmNWYnIQqrdYO/HTAx5+VODC3F2mbylwsit8L2fD 9XOObHPRxlFbnZ+2+kFygT6scoRcxu1QRYSE+IXPunss0JjKZXV+L0WoFzCJtwIv RCIMusVWRajv2t2sw0osiI+HiB7wfXNwfJ/zwbkKXx+z3M4CGET0zRppBWPSue6D zzYhGPU7LYR4IQQ2QOH7WBPC6GTEQQtcDmbMUq6SDBveHihTcHdvnXPXizWFnLiJ FWu9DxJS5sygjBZ430Bs2UR2hDyfvqnOWm0w3/jGaZ+aBmHoGKFRvAULPmsKDNbV UhZo0jsUMiXe0fp3SD6zvewCRFQ6WylfSM0= -----END CERTIFICATE-----Generated at Mon Oct 20 00:27:39 2025 by rpki-client