$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ac7f8204-8d86-3451-b859-3bdf52d540d6.roa File: ac7f8204-8d86-3451-b859-3bdf52d540d6.roa (raw, json) Hash identifier: ygGMyaIcBlleReMRWeTQ2wms4EApT+MxcbybhRpxb2k= Subject key identifier: 38:CB:2A:86:2A:6C:5D:9A:2D:66:FB:B9:9C:EB:CB:9F:C8:E6:50:9B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B4081BD7AFC6E9C321074F600 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ac7f8204-8d86-3451-b859-3bdf52d540d6.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 20940 IP address blocks: 2600:1419:7a00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:bd:7a:fc:6e:9c:32:10:74:f6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=be88cff0-c690-474c-8004-8709056c2667 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:d5:9d:e5:74:8c:df:3e:fd:93:66:b0:dc:b6: 2c:78:fb:d5:39:3d:63:bc:06:b9:60:d6:db:52:5a: d6:81:38:ec:9e:ef:d2:77:68:6d:ab:4c:29:ed:18: 37:72:f1:a1:b2:50:05:e8:06:79:f1:bf:f9:d0:99: 68:9c:2c:a1:a6:a8:9a:03:2a:f0:28:64:91:d8:78: 23:16:ad:e0:1a:17:e2:07:b6:93:2c:55:cf:43:74: f5:c6:20:9f:6b:20:89:95:1e:df:90:37:bc:86:4d: c9:4f:04:85:cc:60:cb:89:20:28:06:cc:0c:f6:25: 90:51:97:09:e6:71:ec:61:9f:e2:d5:f7:70:df:d3: 77:56:b4:03:17:fd:5b:79:b2:43:1e:9b:d1:01:d8: c5:99:2a:6d:9e:29:c1:cf:f1:ba:78:a7:34:96:59: 45:55:d9:cb:05:61:63:f0:69:d1:04:f9:34:12:7a: b3:e4:61:53:4c:2f:f3:a5:95:ec:2f:97:a6:d5:46: 1c:d2:4a:1d:07:a8:c4:03:06:32:4e:1d:b6:a2:59: 7e:36:85:22:8d:af:9d:68:3b:c8:cc:6e:98:eb:24: 84:c2:76:44:79:96:64:33:b4:b9:98:e7:da:7b:6d: 02:13:75:79:b8:4b:2c:68:da:a9:ab:8e:cd:6e:2f: 0d:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:CB:2A:86:2A:6C:5D:9A:2D:66:FB:B9:9C:EB:CB:9F:C8:E6:50:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ac7f8204-8d86-3451-b859-3bdf52d540d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1419:7a00::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:65:d7:54:23:53:4c:c5:01:aa:63:65:ae:82:cb:bb:ea:98: a2:c9:b8:ff:a5:ab:ad:75:2f:8c:ea:54:49:a0:d1:fe:6d:19: a2:85:be:04:de:41:e5:a4:e0:a9:18:c8:be:62:45:3a:e2:46: 5f:f0:26:b0:76:e9:64:95:75:62:73:39:3f:c1:30:36:46:d5: 1b:fd:75:6a:01:42:24:f1:47:f0:0d:26:05:0a:2a:28:26:12: 1b:fd:c9:d4:39:bf:bd:c4:c2:75:6f:7c:11:b5:15:26:06:a8: 3b:ea:ec:e2:52:b8:c6:e0:09:09:32:b8:bd:68:43:1a:78:e5: 5a:f6:ea:a0:82:6b:62:e9:2c:ea:bb:66:2d:2b:bc:84:f5:95: 41:80:1a:2c:1b:17:ba:f8:85:ca:a2:69:cb:4c:a3:5e:9e:45: 9a:d7:a6:78:f5:86:d5:ec:ec:ab:81:80:61:ab:09:30:7e:48: 05:9f:b0:56:0d:26:9a:93:a0:8a:eb:1f:8c:92:76:88:5b:b7: 5a:f5:4a:68:07:80:87:23:68:25:d5:9a:93:9d:d1:df:28:6f: 62:4f:dc:b4:43:5b:6b:c2:19:12:39:ec:71:3b:b7:87:bf:82: f6:98:df:56:9b:b4:9b:66:1d:5d:47:52:f5:d3:57:7c:0d:b5: 54:c2:e3:e6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtAgb16/G6cMhB09gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk YmU4OGNmZjAtYzY5MC00NzRjLTgwMDQtODcwOTA1NmMyNjY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9Wd5XSM3z79k2aw3LYsePvVOT1jvAa5YNbb UlrWgTjsnu/Sd2htq0wp7Rg3cvGhslAF6AZ58b/50JlonCyhpqiaAyrwKGSR2Hgj Fq3gGhfiB7aTLFXPQ3T1xiCfayCJlR7fkDe8hk3JTwSFzGDLiSAoBswM9iWQUZcJ 5nHsYZ/i1fdw39N3VrQDF/1bebJDHpvRAdjFmSptninBz/G6eKc0lllFVdnLBWFj 8GnRBPk0Enqz5GFTTC/zpZXsL5em1UYc0kodB6jEAwYyTh22oll+NoUija+daDvI zG6Y6ySEwnZEeZZkM7S5mOfae20CE3V5uEssaNqpq47Nbi8NFwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDjLKoYqbF2aLWb7uZzry5/I5lCbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWM3ZjgyMDQtOGQ4Ni0z NDUxLWI4NTktM2JkZjUyZDU0MGQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUGXoA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIVl11QjU0zFAapjZa6Cy7vqmKLJuP+lq611L4zqVEmg0f5tGaKF vgTeQeWk4KkYyL5iRTriRl/wJrB26WSVdWJzOT/BMDZG1Rv9dWoBQiTxR/ANJgUK KigmEhv9ydQ5v73EwnVvfBG1FSYGqDvq7OJSuMbgCQkyuL1oQxp45Vr26qCCa2Lp LOq7Zi0rvIT1lUGAGiwbF7r4hcqiactMo16eRZrXpnj1htXs7KuBgGGrCTB+SAWf sFYNJpqToIrrH4ySdohbt1r1SmgHgIcjaCXVmpOd0d8ob2JP3LRDW2vCGRI57HE7 t4e/gvaY31abtJtmHV1HUvXTV3wNtVTC4+Y= -----END CERTIFICATE-----Generated at Mon Oct 20 02:35:17 2025 by rpki-client