$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ccfef573-0244-34d8-a044-75e3ee3d0aea.roa File: ccfef573-0244-34d8-a044-75e3ee3d0aea.roa (raw, json) Hash identifier: 21eLs6TU7egMj7aG647QmazIzdqGfREAf99KHW3uVnY= Subject key identifier: 53:67:92:C5:35:B3:E4:24:83:41:58:37:F5:99:36:A8:0E:2E:09:1B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B84E78A9693B4CEE8E1B9B500 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ccfef573-0244-34d8-a044-75e3ee3d0aea.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 20940 IP address blocks: 2600:1408:600::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:8a:96:93:b4:ce:e8:e1:b9:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=7ae6b22d-a3d6-46ce-8a94-23b1d03b0ecf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:32:04:b3:01:cb:94:e7:6b:c2:db:f6:b4:ed: ea:f2:a3:f2:42:de:6c:4c:08:c4:67:7b:95:ed:b0: f0:4b:08:b1:67:70:cf:c2:ea:31:b7:44:53:32:9c: c5:4f:c9:01:d1:a5:63:fd:5a:9b:36:fe:a3:83:6b: 41:d8:11:ea:74:cf:c0:63:c7:4f:e8:85:c9:7c:29: 3c:bc:7d:a0:5a:c2:09:4e:96:f5:70:e9:8e:30:dd: 62:0b:f1:66:a5:5a:be:e2:d5:3a:8f:1b:c7:6e:23: 15:f4:96:70:78:0c:74:5c:7f:52:43:c9:64:f0:2f: ae:3a:af:b7:03:d8:0d:76:33:e0:3c:c7:dc:ad:d7: 92:fc:d8:7d:16:e6:1e:f1:8a:46:56:d9:e7:cb:b3: bb:c6:10:6b:48:54:07:e4:1d:97:f9:38:7f:0f:ad: 0f:b1:28:ab:6e:11:76:44:0f:f8:d1:e2:03:2a:86: 95:de:5b:11:6a:a6:82:b1:a0:b5:c8:60:37:d1:9c: 08:9b:36:86:65:80:68:bf:1b:62:94:80:0b:80:fb: d1:a0:76:c6:b9:a2:99:36:b6:e3:ea:ee:0d:e2:c8: ad:21:b5:c1:ed:71:a9:d7:ef:1d:c7:e9:7f:a6:20: 39:6f:47:b5:53:31:ad:a9:11:82:7e:86:e8:67:4d: d0:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:67:92:C5:35:B3:E4:24:83:41:58:37:F5:99:36:A8:0E:2E:09:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ccfef573-0244-34d8-a044-75e3ee3d0aea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1408:600::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:c0:74:1c:cb:98:75:47:6a:e5:2f:8f:43:02:65:9f:84:0d: 4a:aa:48:42:c2:a1:ce:7e:86:7a:30:0e:aa:73:ae:e5:4a:c2: 61:65:a6:6e:8b:97:8d:ad:ef:cd:cf:6b:f7:49:8c:90:e4:16: 11:e8:ce:b8:2f:82:39:c2:89:69:c4:97:df:64:b2:93:6b:23: a5:ea:a9:d1:f1:78:73:5e:1f:a4:9a:ed:6d:15:89:6f:bc:20: 29:67:7e:1c:a2:ab:7e:43:a7:df:b1:75:d0:3f:f4:a4:b8:62: 86:83:1a:44:d4:2d:24:23:57:49:b9:a4:36:e4:37:d4:f6:a6: a6:1f:7a:a5:66:6c:76:f1:98:19:51:a6:35:3c:50:18:7a:01: f0:63:c2:0e:0c:ac:d7:28:50:05:3d:77:f5:6e:fc:37:a3:50: 04:a9:c3:d0:58:ac:39:bd:c4:70:3d:b3:1f:4d:d0:b0:a2:10: c4:f7:67:39:e2:64:ea:d5:1f:ab:e6:d9:10:7d:23:53:6e:b7: a2:64:d9:11:48:59:a4:5d:3a:20:ca:2d:d1:cf:62:20:08:ed: 47:1e:4b:47:3a:4a:86:01:b5:2b:2a:b8:80:c5:2e:82:51:4b: 4b:d6:65:e1:6b:c2:e2:50:bc:51:21:66:55:6e:3a:ba:32:34: 82:e2:d6:95 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuE54qWk7TO6OG5tQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk N2FlNmIyMmQtYTNkNi00NmNlLThhOTQtMjNiMWQwM2IwZWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDIEswHLlOdrwtv2tO3q8qPyQt5sTAjEZ3uV 7bDwSwixZ3DPwuoxt0RTMpzFT8kB0aVj/VqbNv6jg2tB2BHqdM/AY8dP6IXJfCk8 vH2gWsIJTpb1cOmOMN1iC/FmpVq+4tU6jxvHbiMV9JZweAx0XH9SQ8lk8C+uOq+3 A9gNdjPgPMfcrdeS/Nh9FuYe8YpGVtnny7O7xhBrSFQH5B2X+Th/D60PsSirbhF2 RA/40eIDKoaV3lsRaqaCsaC1yGA30ZwImzaGZYBovxtilIALgPvRoHbGuaKZNrbj 6u4N4sitIbXB7XGp1+8dx+l/piA5b0e1UzGtqRGCfoboZ03QmQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFNnksU1s+Qkg0FYN/WZNqgOLgkbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2NmZWY1NzMtMDI0NC0z NGQ4LWEwNDQtNzVlM2VlM2QwYWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUCAYA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHfAdBzLmHVHauUvj0MCZZ+EDUqqSELCoc5+hnowDqpzruVKwmFl pm6Ll42t783Pa/dJjJDkFhHozrgvgjnCiWnEl99kspNrI6XqqdHxeHNeH6Sa7W0V iW+8IClnfhyiq35Dp9+xddA/9KS4YoaDGkTULSQjV0m5pDbkN9T2pqYfeqVmbHbx mBlRpjU8UBh6AfBjwg4MrNcoUAU9d/Vu/DejUASpw9BYrDm9xHA9sx9N0LCiEMT3 ZzniZOrVH6vm2RB9I1Nut6Jk2RFIWaRdOiDKLdHPYiAI7UceS0c6SoYBtSsquIDF LoJRS0vWZeFrwuJQvFEhZlVuOroyNILi1pU= -----END CERTIFICATE-----Generated at Mon Oct 20 00:28:20 2025 by rpki-client