$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bf4560e7-1722-3c2c-9e61-3703ea722f90.roa File: bf4560e7-1722-3c2c-9e61-3703ea722f90.roa (raw, json) Hash identifier: 8qJ2h9rGP7N9eCPPvGluZCnVL4jEu22YvqsVTYmETkk= Subject key identifier: A1:AC:1F:6C:2C:12:01:00:49:16:29:88:A4:31:20:80:8F:AE:6E:F3 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B4BAC644D9346550DBF3CCC40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bf4560e7-1722-3c2c-9e61-3703ea722f90.roa Signing time: Wed 24 Sep 2025 01:00:31 +0000 ROA not before: Wed 24 Sep 2025 01:00:31 +0000 ROA not after: Tue 23 Dec 2025 02:00:31 +0000 asID: 35994 IP address blocks: 2600:1408:4000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4b:ac:64:4d:93:46:55:0d:bf:3c:cc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 24 01:00:31 2025 GMT Not After : Dec 23 02:00:31 2025 GMT Subject: CN=25f9af75-38c3-438e-845b-18114793badc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3f:7c:33:62:5f:33:e2:02:52:d3:04:83:74: 87:fd:f9:ac:72:ed:43:81:a0:94:1d:97:2f:46:4a: 78:98:5f:64:22:86:ed:47:7b:b2:d6:89:c7:54:da: 54:da:10:4e:65:81:bd:c4:69:cd:3c:1b:79:8f:b4: 44:5a:ef:ee:f6:65:1a:33:67:d9:5c:31:fa:9e:22: 18:d6:db:2e:26:15:24:fd:c0:fa:c5:77:58:22:52: 72:94:ce:dc:54:c0:b7:f8:eb:dc:fe:05:9f:7d:fb: a4:ed:59:99:40:32:7f:bf:78:d9:ae:1c:6c:95:2b: 59:a4:02:9a:b7:32:2e:3e:6e:e1:2c:ea:bb:e3:9b: fb:91:dc:54:74:47:a1:c7:52:31:18:19:37:18:52: e8:96:89:a5:e6:12:9f:ab:a0:72:66:7a:0f:a6:62: ca:c6:51:32:af:bf:b3:b7:55:50:fe:36:cd:60:00: 90:5b:60:03:a2:3f:ad:be:b8:78:77:e2:2e:bb:31: aa:a7:45:cb:08:61:67:cf:ec:8a:75:75:b1:84:2a: cb:6f:7b:7a:a7:99:ad:77:a2:7b:4d:3d:b2:31:83: ca:45:3a:94:2d:ed:7b:a4:d2:e0:f1:a8:5d:06:4d: 56:d6:ec:c2:c9:68:eb:7c:ca:46:a2:57:0d:bd:d7: 1f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:AC:1F:6C:2C:12:01:00:49:16:29:88:A4:31:20:80:8F:AE:6E:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bf4560e7-1722-3c2c-9e61-3703ea722f90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1408:4000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:e4:8d:3a:e9:94:f4:7b:75:5c:f9:63:fd:84:8c:95:26:69: 13:a5:6e:98:cc:82:d3:29:bd:d0:a2:7b:c1:48:f9:a4:1b:d4: 7f:32:99:01:fa:e7:77:17:1e:37:ae:f8:cb:fc:b8:6b:9c:b7: 20:2f:29:fa:27:3e:35:e8:86:c0:c8:52:99:bd:d9:29:8b:82: 85:29:5a:0d:c9:56:47:fc:3c:2b:78:2d:48:da:c7:24:01:2b: 27:ac:71:6a:c8:46:6b:d3:62:df:dc:22:bd:df:b3:21:74:07: 92:e4:73:6e:5c:2f:6e:c8:83:09:01:b5:83:49:0a:79:2e:12: 78:63:54:fa:7a:25:88:e5:81:59:20:df:f6:94:e2:75:14:8b: 7a:34:0e:50:47:fd:c8:1b:f0:b0:99:72:12:31:54:4a:92:76: c5:01:48:87:09:22:43:85:13:e8:dc:5c:47:cb:37:46:f3:51: 0e:68:bb:86:66:f6:40:bc:18:cf:bb:88:8f:9f:c0:f6:87:ea: 35:cb:cb:43:40:20:94:d5:9d:e1:a1:ae:84:74:02:0f:9e:86: cd:78:37:6d:55:22:b9:10:16:aa:ca:c0:3f:97:6f:21:11:86: ff:3a:28:d6:a2:d2:77:81:a2:54:1b:14:2e:b4:11:ed:d9:91: e5:fd:60:5c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtLrGRNk0ZVDb88zEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyNDAxMDAzMVoXDTI1MTIyMzAyMDAzMVowLzEtMCsGA1UEAxMk MjVmOWFmNzUtMzhjMy00MzhlLTg0NWItMTgxMTQ3OTNiYWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtD98M2JfM+ICUtMEg3SH/fmscu1DgaCUHZcv Rkp4mF9kIobtR3uy1onHVNpU2hBOZYG9xGnNPBt5j7REWu/u9mUaM2fZXDH6niIY 1tsuJhUk/cD6xXdYIlJylM7cVMC3+Ovc/gWfffuk7VmZQDJ/v3jZrhxslStZpAKa tzIuPm7hLOq745v7kdxUdEehx1IxGBk3GFLoloml5hKfq6ByZnoPpmLKxlEyr7+z t1VQ/jbNYACQW2ADoj+tvrh4d+IuuzGqp0XLCGFnz+yKdXWxhCrLb3t6p5mtd6J7 TT2yMYPKRTqULe17pNLg8ahdBk1W1uzCyWjrfMpGolcNvdcfNQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKGsH2wsEgEASRYpiKQxIICPrm7zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmY0NTYwZTctMTcyMi0z YzJjLTllNjEtMzcwM2VhNzIyZjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUCEAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGXkjTrplPR7dVz5Y/2EjJUmaROlbpjMgtMpvdCie8FI+aQb1H8y mQH653cXHjeu+Mv8uGuctyAvKfonPjXohsDIUpm92SmLgoUpWg3JVkf8PCt4LUja xyQBKyescWrIRmvTYt/cIr3fsyF0B5Lkc25cL27IgwkBtYNJCnkuEnhjVPp6JYjl gVkg3/aU4nUUi3o0DlBH/cgb8LCZchIxVEqSdsUBSIcJIkOFE+jcXEfLN0bzUQ5o u4Zm9kC8GM+7iI+fwPaH6jXLy0NAIJTVneGhroR0Ag+ehs14N21VIrkQFqrKwD+X byERhv86KNai0neBolQbFC60Ee3ZkeX9YFw= -----END CERTIFICATE-----Generated at Mon Oct 20 12:35:02 2025 by rpki-client