$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bfd9f5c9-035d-3e75-9541-3d9259a23f2c.roa File: bfd9f5c9-035d-3e75-9541-3d9259a23f2c.roa (raw, json) Hash identifier: CfmXS9hvpDH+e/heF3Ct1wBClRoDPoVkM2fsC4bsPNI= Subject key identifier: 37:64:3A:BF:C2:F8:E8:EE:C9:05:E0:62:8C:A9:21:92:A4:A9:4F:C4 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B2FC17F63BFAEFB0473532200 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bfd9f5c9-035d-3e75-9541-3d9259a23f2c.roa Signing time: Sun 14 Sep 2025 01:00:33 +0000 ROA not before: Sun 14 Sep 2025 01:00:33 +0000 ROA not after: Sat 13 Dec 2025 02:00:33 +0000 asID: 20940 IP address blocks: 2600:141c:1c00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2f:c1:7f:63:bf:ae:fb:04:73:53:22:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 14 01:00:33 2025 GMT Not After : Dec 13 02:00:33 2025 GMT Subject: CN=d479aa37-7c03-4d73-84dd-2c6fa37816af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:0d:4f:5c:9c:ef:59:72:56:04:9d:c3:06:a7: a3:a6:61:65:a6:1c:71:3c:7f:1d:ef:dc:fa:c8:b5: 53:3b:c2:77:7b:77:f0:a1:e4:3b:97:69:28:d1:f3: c3:04:b9:b2:b8:7a:b5:4e:ff:5a:b2:31:29:c8:6f: 5e:8d:3b:de:55:2e:9f:d4:99:e0:ce:94:cb:c4:c1: 16:db:3e:08:91:03:ac:48:ad:42:6b:76:e9:74:d1: cf:0e:11:2c:d7:37:3c:df:1b:b6:86:86:5e:7c:4a: b7:c0:15:42:d5:ee:1f:98:e4:4e:85:2b:53:8b:9c: af:3a:7e:29:17:ed:f8:80:db:21:cf:77:88:16:db: ef:de:99:32:8f:ca:c3:1f:57:17:b3:4a:8b:f0:cb: ff:d1:7f:6b:37:b7:3f:07:7c:7e:ea:6a:ef:c6:40: f6:9a:a2:15:2d:46:e6:9b:1c:a8:dd:a7:7b:ed:d7: fd:07:d1:ac:b3:ee:fd:7c:7b:9f:a4:cb:94:88:5c: 7a:65:4a:a1:8c:a0:77:38:10:7c:18:87:10:e7:34: 65:f6:b9:46:23:72:7f:21:56:d4:97:3a:05:06:e2: 41:37:8f:86:1b:c4:06:1a:e1:34:f0:85:9f:b3:73: 11:eb:98:ae:2d:5b:41:5e:ca:f9:05:96:66:44:e8: 91:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:64:3A:BF:C2:F8:E8:EE:C9:05:E0:62:8C:A9:21:92:A4:A9:4F:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bfd9f5c9-035d-3e75-9541-3d9259a23f2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:141c:1c00::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:50:5b:1a:10:da:f1:a2:a6:a0:c7:69:ba:be:6d:6e:5d:70: 0c:66:58:05:13:74:8a:5f:74:0e:7d:4a:5f:05:d4:49:5f:45: 9e:a5:1c:94:82:25:32:68:cf:ac:d9:9c:ee:ae:e3:0e:60:96: 97:6b:f9:c9:03:24:2e:09:59:ce:34:b4:48:1c:5d:04:39:49: b0:78:37:74:c4:0e:b5:20:cd:cd:39:06:b2:9d:65:59:8e:74: e1:f2:4e:17:5c:1e:60:0d:7d:6a:a7:53:f3:8b:7c:ec:ca:ae: b5:7d:15:a6:d9:5a:98:0a:61:a9:47:00:05:a6:98:f4:2e:10: 43:c7:b2:b8:9f:fa:19:85:ac:28:6f:22:f7:19:44:a2:33:e5: e4:10:f0:6d:5f:7a:31:ab:42:ca:b0:0b:4e:ff:bf:20:1e:9a: 6a:07:f0:30:a9:4c:40:c3:1b:ed:87:af:fc:a2:cd:56:9e:a4: a1:37:e8:07:76:70:c0:bf:31:4e:66:2f:86:f5:08:63:0a:f7: c7:07:d5:35:9b:b3:38:28:ad:d7:05:d0:4a:30:d1:d9:86:2f: 0c:ef:96:e6:04:f9:a8:ba:68:4e:94:76:e8:46:9d:bf:70:3e: 02:a8:1b:70:4e:9a:f8:07:b3:45:d7:97:e5:f1:97:01:ef:33: b5:20:8e:99 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsvwX9jv677BHNTIgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkxNDAxMDAzM1oXDTI1MTIxMzAyMDAzM1owLzEtMCsGA1UEAxMk ZDQ3OWFhMzctN2MwMy00ZDczLTg0ZGQtMmM2ZmEzNzgxNmFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9A1PXJzvWXJWBJ3DBqejpmFlphxxPH8d79z6 yLVTO8J3e3fwoeQ7l2ko0fPDBLmyuHq1Tv9asjEpyG9ejTveVS6f1JngzpTLxMEW 2z4IkQOsSK1Ca3bpdNHPDhEs1zc83xu2hoZefEq3wBVC1e4fmOROhStTi5yvOn4p F+34gNshz3eIFtvv3pkyj8rDH1cXs0qL8Mv/0X9rN7c/B3x+6mrvxkD2mqIVLUbm mxyo3ad77df9B9Gss+79fHufpMuUiFx6ZUqhjKB3OBB8GIcQ5zRl9rlGI3J/IVbU lzoFBuJBN4+GG8QGGuE08IWfs3MR65iuLVtBXsr5BZZmROiRjwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDdkOr/C+OjuyQXgYoypIZKkqU/EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmZkOWY1YzktMDM1ZC0z ZTc1LTk1NDEtM2Q5MjU5YTIzZjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUHBwA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJFQWxoQ2vGipqDHabq+bW5dcAxmWAUTdIpfdA59Sl8F1ElfRZ6l HJSCJTJoz6zZnO6u4w5glpdr+ckDJC4JWc40tEgcXQQ5SbB4N3TEDrUgzc05BrKd ZVmOdOHyThdcHmANfWqnU/OLfOzKrrV9FabZWpgKYalHAAWmmPQuEEPHsrif+hmF rChvIvcZRKIz5eQQ8G1fejGrQsqwC07/vyAemmoH8DCpTEDDG+2Hr/yizVaepKE3 6Ad2cMC/MU5mL4b1CGMK98cH1TWbszgordcF0Eow0dmGLwzvluYE+ai6aE6UduhG nb9wPgKoG3BOmvgHs0XXl+XxlwHvM7Ugjpk= -----END CERTIFICATE-----Generated at Mon Oct 20 10:07:53 2025 by rpki-client