$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bd85ff48-f188-31df-8d0c-118e66d9fbcf.roa File: bd85ff48-f188-31df-8d0c-118e66d9fbcf.roa (raw, json) Hash identifier: Qkgkkm8gO5Vm9Pxl2wWqX5Xj0Ks7QKfA2AUy3n5ttbw= Subject key identifier: B3:75:10:59:78:93:61:66:1B:80:18:17:45:5B:C4:97:C5:0D:4A:27 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B4081C813A4AE0442369541A0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bd85ff48-f188-31df-8d0c-118e66d9fbcf.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 20940 IP address blocks: 2600:1415:2c00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:c8:13:a4:ae:04:42:36:95:41:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=0a454f1e-f9e0-4bda-a554-a26fb1433b55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:92:17:38:3f:38:1e:7b:8d:21:82:01:42:2e: ae:d9:18:d1:90:ec:cd:e2:90:92:a9:a4:9b:71:85: 60:4d:67:af:21:94:b9:a0:5c:cd:a9:8a:64:44:6a: 1c:86:ef:50:30:50:0a:fe:0d:60:3d:b4:b4:54:44: c9:d3:7d:8b:13:8f:86:51:54:eb:21:b8:22:b7:2e: ce:55:47:10:2f:90:58:f1:8d:cb:f7:17:47:bb:db: 64:5c:6f:aa:17:d6:15:cf:53:31:fe:30:cf:ad:fa: 92:14:92:09:63:bb:54:9c:7a:78:a8:1c:bd:bd:31: 6b:d8:de:64:f2:3f:dd:3b:19:9c:28:c2:b2:2d:ae: 1e:d9:49:05:46:d4:81:cb:ba:af:36:c7:5c:23:c5: dc:a7:76:81:55:4b:ea:5f:d9:43:6d:34:0e:6b:89: df:25:43:6c:16:54:e2:8b:a0:5b:c7:5f:b9:ab:60: 37:17:79:9b:43:ac:73:5d:1b:de:a1:8a:63:74:a9: 59:e4:ab:10:e7:a6:ff:47:e8:db:e1:cd:1d:e2:0b: 85:0e:f0:9c:d8:46:a5:29:bd:ca:5d:f0:f3:27:85: 73:1a:e1:fa:f2:31:94:a6:89:0a:65:64:f5:02:f1: 42:31:12:99:98:4f:8d:25:ea:30:4c:a2:90:19:50: cc:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:75:10:59:78:93:61:66:1B:80:18:17:45:5B:C4:97:C5:0D:4A:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bd85ff48-f188-31df-8d0c-118e66d9fbcf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1415:2c00::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:d0:e0:66:66:9b:0f:45:5e:7e:df:b3:f2:57:3c:ed:72:bc: f7:90:e3:03:53:15:28:f2:64:a3:58:d1:29:7c:6a:12:e0:35: 59:18:8f:5d:b9:22:01:77:73:14:f8:0c:3f:ae:b7:c8:63:ac: dd:7d:79:98:46:07:43:82:36:3d:f6:bd:dd:25:a9:0c:9c:38: ba:26:38:14:43:c3:5c:d5:de:16:04:c4:12:e5:d3:c8:cf:93: b5:6d:80:00:85:93:dc:d4:d8:7d:3e:8c:43:81:7b:a2:50:43: 0e:fe:ea:d5:8f:0e:d8:30:49:dc:e2:bb:07:4f:73:fd:0f:81: 4d:28:c2:13:10:15:ad:f7:b0:51:97:ac:2e:f1:b3:31:ad:4c: 4d:7b:a1:c4:ae:17:10:9f:22:91:76:72:e2:ad:41:e0:5c:fe: a6:ca:95:a1:48:34:f4:29:d1:3c:40:18:17:47:d1:f4:02:56: 4a:ce:c1:c6:75:17:68:f4:88:54:f0:06:33:83:df:84:25:ff: 69:35:f2:b2:a7:66:8c:07:b1:5d:6c:5a:ea:19:21:e1:c2:72: c8:a6:b7:ef:ec:dc:ee:78:c3:70:7a:57:d4:e6:b1:e2:97:f7: 8d:66:39:94:82:94:43:bc:53:3a:3f:ff:42:57:b8:73:54:48: bd:a9:f4:f2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtAgcgTpK4EQjaVQaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk MGE0NTRmMWUtZjllMC00YmRhLWE1NTQtYTI2ZmIxNDMzYjU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpIXOD84HnuNIYIBQi6u2RjRkOzN4pCSqaSb cYVgTWevIZS5oFzNqYpkRGochu9QMFAK/g1gPbS0VETJ032LE4+GUVTrIbgity7O VUcQL5BY8Y3L9xdHu9tkXG+qF9YVz1Mx/jDPrfqSFJIJY7tUnHp4qBy9vTFr2N5k 8j/dOxmcKMKyLa4e2UkFRtSBy7qvNsdcI8Xcp3aBVUvqX9lDbTQOa4nfJUNsFlTi i6Bbx1+5q2A3F3mbQ6xzXRveoYpjdKlZ5KsQ56b/R+jb4c0d4guFDvCc2EalKb3K XfDzJ4VzGuH68jGUpokKZWT1AvFCMRKZmE+NJeowTKKQGVDMswIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLN1EFl4k2FmG4AYF0VbxJfFDUonMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmQ4NWZmNDgtZjE4OC0z MWRmLThkMGMtMTE4ZTY2ZDlmYmNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUFSwA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAI/Q4GZmmw9FXn7fs/JXPO1yvPeQ4wNTFSjyZKNY0Sl8ahLgNVkY j125IgF3cxT4DD+ut8hjrN19eZhGB0OCNj32vd0lqQycOLomOBRDw1zV3hYExBLl 08jPk7VtgACFk9zU2H0+jEOBe6JQQw7+6tWPDtgwSdziuwdPc/0PgU0owhMQFa33 sFGXrC7xszGtTE17ocSuFxCfIpF2cuKtQeBc/qbKlaFINPQp0TxAGBdH0fQCVkrO wcZ1F2j0iFTwBjOD34Ql/2k18rKnZowHsV1sWuoZIeHCcsimt+/s3O54w3B6V9Tm seKX941mOZSClEO8Uzo//0JXuHNUSL2p9PI= -----END CERTIFICATE-----Generated at Mon Oct 20 00:28:16 2025 by rpki-client