$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/af0280e8-b3ec-386c-938c-ee6f1cb4365f.roa File: af0280e8-b3ec-386c-938c-ee6f1cb4365f.roa (raw, json) Hash identifier: EC5wtaLl1p6nTGn2dpn2UyANEZbWmxgmwAcFZ2ymJ9s= Subject key identifier: 39:CE:CE:74:45:15:A7:C2:8D:CA:87:6C:BC:2B:08:3E:91:E9:99:6B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AC0164C85AD51E9306454F3C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/af0280e8-b3ec-386c-938c-ee6f1cb4365f.roa Signing time: Tue 05 Aug 2025 01:00:32 +0000 ROA not before: Tue 05 Aug 2025 01:00:32 +0000 ROA not after: Mon 03 Nov 2025 02:00:32 +0000 asID: 20940 IP address blocks: 2600:1488:5fc3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c0:16:4c:85:ad:51:e9:30:64:54:f3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 5 01:00:32 2025 GMT Not After : Nov 3 02:00:32 2025 GMT Subject: CN=c0fe083b-3172-4d9c-8763-1fb1acbf38f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c0:ba:63:da:7f:fb:41:8d:ce:5e:8d:07:f7: eb:64:fb:87:ed:2e:bb:dc:85:ea:11:1c:11:35:33: d5:81:dd:11:ab:82:e3:7f:c5:40:66:0f:fb:36:c7: 93:e7:24:0a:ae:31:f0:2c:41:6b:bf:20:22:32:06: 09:31:ea:32:89:5a:ae:67:53:bb:5d:6b:ec:5f:38: ac:e3:2f:2e:ec:30:8d:69:33:8d:ca:23:d5:ea:42: 51:43:1d:e9:01:ca:8b:d8:9f:cd:57:e4:92:c9:84: cb:60:f8:6f:16:18:47:b4:b8:b0:29:88:86:b0:d3: c0:02:8d:f6:81:68:6a:92:04:80:a0:ed:14:cb:0a: 62:70:97:2d:6c:ca:82:36:c7:03:f9:55:4a:14:a8: b3:d0:27:2e:08:4a:87:b4:da:29:b2:22:8c:27:17: 58:64:a1:ce:9d:eb:80:3e:0f:22:a5:a0:4f:7f:68: 80:cd:58:e3:59:65:e6:38:ba:4b:94:d0:14:5b:cc: 71:b1:80:92:c3:85:28:0c:bc:09:27:01:60:4f:70: 19:fa:f6:40:0b:4d:7c:cc:c8:fa:b5:92:d1:0a:b1: c2:da:cc:0d:3d:c5:8c:bd:06:f0:ba:b7:9a:e6:9a: b9:9a:83:c6:91:13:57:f4:58:19:cb:0c:69:e0:c3: 8b:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:CE:CE:74:45:15:A7:C2:8D:CA:87:6C:BC:2B:08:3E:91:E9:99:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/af0280e8-b3ec-386c-938c-ee6f1cb4365f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1488:5fc3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:56:9f:c7:f2:f8:eb:53:ea:eb:47:3d:e7:34:00:64:6c:f8: 67:98:12:36:d8:e2:68:0e:be:72:14:27:b2:15:c5:97:77:7d: 94:92:a9:40:77:7d:72:bd:ec:6b:39:50:75:35:0e:6e:43:10: d5:5c:0c:00:cf:0a:a3:86:f1:ac:ea:aa:42:4d:b5:de:5d:38: 13:25:94:ea:bf:82:85:eb:28:b9:98:8b:46:c6:56:59:24:ea: 71:68:72:83:ff:5a:fb:c0:c8:94:c0:4e:05:d0:0c:b4:47:1e: 09:31:b9:ef:26:4f:0f:17:32:bc:5c:a7:98:ad:26:59:76:95: 6e:62:62:0e:91:59:12:69:7f:1b:24:d4:4d:d1:96:f7:23:25: c3:de:5b:6b:51:95:92:f3:21:6d:94:a5:c3:14:69:50:2a:0d: 45:d3:42:f6:36:e9:f1:11:6b:12:b4:f0:f8:d4:7c:24:cf:7f: 8c:2e:b8:ae:aa:da:bc:ab:95:b5:cd:e2:88:10:6e:11:46:b1: 9f:a4:4d:92:ad:3f:d4:0a:92:bb:29:d8:e6:69:6e:17:16:e1: e1:31:71:d8:fc:7a:c5:2b:06:0d:7b:35:d5:a2:14:99:94:f7: b3:33:5c:1b:2d:82:26:55:e5:9c:80:c0:88:a6:6d:92:59:80: 38:97:0a:68 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErAFkyFrVHpMGRU88AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgwNTAxMDAzMloXDTI1MTEwMzAyMDAzMlowLzEtMCsGA1UEAxMk YzBmZTA4M2ItMzE3Mi00ZDljLTg3NjMtMWZiMWFjYmYzOGY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscC6Y9p/+0GNzl6NB/frZPuH7S673IXqERwR NTPVgd0Rq4Ljf8VAZg/7NseT5yQKrjHwLEFrvyAiMgYJMeoyiVquZ1O7XWvsXzis 4y8u7DCNaTONyiPV6kJRQx3pAcqL2J/NV+SSyYTLYPhvFhhHtLiwKYiGsNPAAo32 gWhqkgSAoO0UywpicJctbMqCNscD+VVKFKiz0CcuCEqHtNopsiKMJxdYZKHOneuA Pg8ipaBPf2iAzVjjWWXmOLpLlNAUW8xxsYCSw4UoDLwJJwFgT3AZ+vZAC018zMj6 tZLRCrHC2swNPcWMvQbwurea5pq5moPGkRNX9FgZywxp4MOLowIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDnOznRFFafCjcqHbLwrCD6R6ZlrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWYwMjgwZTgtYjNlYy0z ODZjLTkzOGMtZWU2ZjFjYjQzNjVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUiF/D MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH5Wn8fy+OtT6utHPec0AGRs+GeYEjbY4mgOvnIUJ7IVxZd3fZSS qUB3fXK97Gs5UHU1Dm5DENVcDADPCqOG8azqqkJNtd5dOBMllOq/goXrKLmYi0bG Vlkk6nFocoP/WvvAyJTATgXQDLRHHgkxue8mTw8XMrxcp5itJll2lW5iYg6RWRJp fxsk1E3RlvcjJcPeW2tRlZLzIW2UpcMUaVAqDUXTQvY26fERaxK08PjUfCTPf4wu uK6q2ryrlbXN4ogQbhFGsZ+kTZKtP9QKkrsp2OZpbhcW4eExcdj8esUrBg17NdWi FJmU97MzXBstgiZV5ZyAwIimbZJZgDiXCmg= -----END CERTIFICATE-----Generated at Sun Aug 24 00:40:17 2025 by rpki-client