$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cf5a1dad-d8fa-3abc-92a9-130a0b061f05.roa File: cf5a1dad-d8fa-3abc-92a9-130a0b061f05.roa (raw, json) Hash identifier: gakT7ovLbd8Cy9FzsduBYl5doLpjq4hQ+Bcer+9er2k= Subject key identifier: E3:89:E7:69:32:61:BD:D0:8A:72:95:69:74:4C:C9:59:2B:87:A9:EE Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B328C36741FC81B4C77F9AB80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cf5a1dad-d8fa-3abc-92a9-130a0b061f05.roa Signing time: Mon 15 Sep 2025 01:00:33 +0000 ROA not before: Mon 15 Sep 2025 01:00:33 +0000 ROA not after: Sun 14 Dec 2025 02:00:33 +0000 asID: 32787 IP address blocks: 2606:6c00:207::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:32:8c:36:74:1f:c8:1b:4c:77:f9:ab:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 15 01:00:33 2025 GMT Not After : Dec 14 02:00:33 2025 GMT Subject: CN=461c358a-fff7-48dc-80c4-e7adc33b9955 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:d1:43:20:f8:30:70:dc:74:cc:f2:e0:a2:69: eb:83:08:b4:c5:1f:2f:d2:93:15:68:4d:38:98:08: ad:7f:d2:95:66:50:78:59:78:3d:b3:58:9c:2b:2a: 6e:da:fd:2c:86:88:ab:6e:ca:7f:45:bb:cb:a4:b2: b4:ae:62:a1:3d:c6:c8:26:97:60:40:40:15:56:c9: bc:f0:12:d1:9f:46:e1:80:9f:f9:be:fc:97:e8:24: ad:f2:bb:ef:e5:c8:f8:c6:0d:1b:3c:88:07:6e:18: db:bc:cf:fe:91:8f:9b:b9:37:f6:0e:ed:bc:6d:08: 1e:bb:b9:3f:d2:5f:de:d1:c3:88:7e:70:5d:f8:c9: 98:b6:97:48:63:22:60:75:e7:a4:c9:fb:ba:e5:a2: 71:75:09:0b:ab:b2:c8:c0:5c:9b:e5:a0:80:44:70: 6b:8e:2d:f6:b7:19:3d:5b:ea:b9:ad:e4:40:bd:5e: 4a:cb:7b:dc:f9:f4:f8:22:ea:5a:83:c7:5c:d1:aa: 83:5d:a4:ee:33:92:6f:89:54:95:ca:21:2c:a7:1c: 45:76:66:6b:6e:7f:9b:2c:72:83:8c:99:46:2f:5c: 4c:eb:5e:74:c4:d7:02:05:1e:b9:71:05:25:79:12: 09:25:b8:c3:a1:94:2a:90:23:7c:61:58:23:ad:9a: 5f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:89:E7:69:32:61:BD:D0:8A:72:95:69:74:4C:C9:59:2B:87:A9:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cf5a1dad-d8fa-3abc-92a9-130a0b061f05.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2606:6c00:207::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:98:80:f5:68:f1:d1:24:b9:88:53:a9:df:d2:fd:1f:53:e4: 61:dc:b0:e3:15:0f:dd:76:68:39:af:06:d7:8f:74:c3:aa:b3: b6:3b:75:00:ee:5a:62:0c:ed:cb:9c:f4:58:fe:bb:71:19:3e: 09:1e:d4:e2:97:5e:ba:14:a3:37:1a:4c:57:7e:ab:2f:3f:80: 57:f2:09:74:89:b3:e0:cc:63:4b:c0:20:f9:6d:6a:90:9d:4a: d0:cc:e3:d8:0d:5c:1a:47:7f:66:de:4a:18:c7:0c:fc:4d:9f: fc:a6:bf:5c:96:a4:9b:db:86:5c:5b:aa:d8:bb:f3:c8:ce:15: d9:85:cb:c9:16:dd:3f:33:f7:d5:dd:c7:a4:db:70:c6:41:ca: 70:0b:c3:17:8c:63:03:8e:60:d4:38:ba:70:01:65:40:8b:5d: 86:07:9b:58:cf:b4:fa:ba:5f:67:29:c3:64:72:bb:d5:a3:5c: 9b:ef:df:cc:33:9a:e3:d5:95:7d:e0:71:89:76:e8:b4:23:15: d8:ce:dc:f9:ff:b2:bf:0c:45:51:ef:28:50:51:f0:b5:ce:fb: 77:40:5e:85:58:7c:c8:8b:4c:92:f3:1f:aa:d4:1b:16:fe:b6: cf:5e:34:66:8b:7d:56:32:16:e3:25:37:35:39:70:0e:46:73: 90:86:1e:4a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsyjDZ0H8gbTHf5q4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkxNTAxMDAzM1oXDTI1MTIxNDAyMDAzM1owLzEtMCsGA1UEAxMk NDYxYzM1OGEtZmZmNy00OGRjLTgwYzQtZTdhZGMzM2I5OTU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNFDIPgwcNx0zPLgomnrgwi0xR8v0pMVaE04 mAitf9KVZlB4WXg9s1icKypu2v0shoirbsp/RbvLpLK0rmKhPcbIJpdgQEAVVsm8 8BLRn0bhgJ/5vvyX6CSt8rvv5cj4xg0bPIgHbhjbvM/+kY+buTf2Du28bQgeu7k/ 0l/e0cOIfnBd+MmYtpdIYyJgdeekyfu65aJxdQkLq7LIwFyb5aCARHBrji32txk9 W+q5reRAvV5Ky3vc+fT4Iupag8dc0aqDXaTuM5JviVSVyiEspxxFdmZrbn+bLHKD jJlGL1xM6150xNcCBR65cQUleRIJJbjDoZQqkCN8YVgjrZpfuQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOOJ52kyYb3QinKVaXRMyVkrh6nuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2Y1YTFkYWQtZDhmYS0z YWJjLTkyYTktMTMwYTBiMDYxZjA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZsAAIH MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACeYgPVo8dEkuYhTqd/S/R9T5GHcsOMVD912aDmvBtePdMOqs7Y7 dQDuWmIM7cuc9Fj+u3EZPgke1OKXXroUozcaTFd+qy8/gFfyCXSJs+DMY0vAIPlt apCdStDM49gNXBpHf2beShjHDPxNn/ymv1yWpJvbhlxbqti788jOFdmFy8kW3T8z 99Xdx6TbcMZBynALwxeMYwOOYNQ4unABZUCLXYYHm1jPtPq6X2cpw2Ryu9WjXJvv 38wzmuPVlX3gcYl26LQjFdjO3Pn/sr8MRVHvKFBR8LXO+3dAXoVYfMiLTJLzH6rU Gxb+ts9eNGaLfVYyFuMlNzU5cA5Gc5CGHko= -----END CERTIFICATE-----Generated at Mon Oct 20 07:20:24 2025 by rpki-client