$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d43fa7fe-36f2-3783-a4ea-e5fe5b06dd31.roa File: d43fa7fe-36f2-3783-a4ea-e5fe5b06dd31.roa (raw, json) Hash identifier: /50gYes/Nzh85ketAYiwQY8V/rtxn7GnYuomdN/6XpY= Subject key identifier: B7:CC:A1:E1:83:DA:7D:DA:78:BB:FF:47:26:92:D8:6F:62:88:99:4E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B4081C7240F22AAF00329BA80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d43fa7fe-36f2-3783-a4ea-e5fe5b06dd31.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 20940 IP address blocks: 2600:1409:f800::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:c7:24:0f:22:aa:f0:03:29:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=548ea4ee-d27f-46e5-a379-9e5c99653436 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:3d:f7:47:e1:a5:01:45:72:f3:e1:9a:65:26: 89:fd:0a:6b:6b:af:31:78:7c:db:25:d4:4e:00:17: 9d:23:28:88:b8:89:59:d3:25:7e:9d:3a:c4:1c:b0: 6d:c0:ef:05:8f:b6:25:47:bf:97:e7:ce:55:85:61: 38:54:48:92:8b:bb:7a:33:d1:74:d3:59:45:bf:2b: 8b:8a:f1:ac:6d:00:66:e9:5e:c6:c1:f6:a3:77:a6: d8:7e:3e:40:38:0b:59:56:89:9d:9a:ca:99:c7:e5: d1:9e:8b:c7:d9:60:19:45:31:d0:aa:78:e0:7e:87: c0:a0:3c:e6:7c:31:62:eb:53:57:d4:b6:2a:66:46: 7b:6d:50:37:fc:08:b1:a0:9f:bf:90:24:f0:1e:43: f6:8d:d3:1e:20:1b:3a:6e:7e:2a:dd:76:96:76:6b: 63:b3:1f:0d:b5:9a:16:c7:46:95:bf:51:2c:30:20: bf:19:42:56:0f:e6:47:40:e8:c1:1c:37:36:d3:19: 98:fe:2b:1c:7b:ee:b7:a4:05:a9:6c:63:e8:56:d7: 66:fb:a8:96:f1:02:0b:d9:33:a1:4d:e4:1d:26:13: b9:0e:4a:f6:53:d1:f7:b4:ec:15:74:a4:a4:eb:51: 2b:54:7e:80:26:a9:a7:93:c5:7d:73:4b:13:d2:30: 6d:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:CC:A1:E1:83:DA:7D:DA:78:BB:FF:47:26:92:D8:6F:62:88:99:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d43fa7fe-36f2-3783-a4ea-e5fe5b06dd31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1409:f800::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:06:0e:b9:67:49:6f:57:3d:ac:f2:ee:58:75:a2:ae:0a:d3: 85:64:5f:d6:00:04:60:74:b7:25:0e:47:28:31:ce:90:15:7b: d2:52:9b:17:e1:cb:fb:18:b9:c9:00:15:38:f9:e4:b7:4c:cf: 5a:ae:73:9e:e3:fa:b4:fe:2b:1d:7d:55:45:e5:63:47:5a:e8: a4:11:6e:85:b0:4b:a7:d0:e2:86:8b:13:01:99:f2:9e:a6:5d: b7:34:0b:e9:26:de:b9:6d:b9:fb:61:28:f9:93:3c:e3:0d:8d: fe:af:3e:d4:4f:47:be:c9:92:06:b2:29:7f:49:24:08:82:65: 62:db:93:9e:28:5a:fe:26:87:a2:a6:2b:9c:a7:03:cd:ca:b1: 5e:03:77:c3:39:6e:21:a7:f7:8a:17:7c:75:24:03:04:81:a3: 09:dc:e8:a7:1d:b9:34:47:90:58:2f:f0:7f:4f:ca:ac:69:52: 57:4a:b6:85:87:24:14:0b:f4:cc:02:51:e4:06:c8:cc:80:d3: 59:6a:3c:1e:a3:6b:ff:60:ce:d3:03:83:fb:9d:83:26:09:5e: ca:a7:1f:d8:f1:36:0b:0f:0c:03:f1:d8:b0:83:ab:df:a0:28: eb:ca:2c:6f:49:ea:c9:2b:0a:e8:f1:55:92:b6:66:95:b3:bd: e8:0c:c4:09 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtAgcckDyKq8AMpuoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk NTQ4ZWE0ZWUtZDI3Zi00NmU1LWEzNzktOWU1Yzk5NjUzNDM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8j33R+GlAUVy8+GaZSaJ/Qpra68xeHzbJdRO ABedIyiIuIlZ0yV+nTrEHLBtwO8Fj7YlR7+X585VhWE4VEiSi7t6M9F001lFvyuL ivGsbQBm6V7Gwfajd6bYfj5AOAtZVomdmsqZx+XRnovH2WAZRTHQqnjgfofAoDzm fDFi61NX1LYqZkZ7bVA3/AixoJ+/kCTwHkP2jdMeIBs6bn4q3XaWdmtjsx8NtZoW x0aVv1EsMCC/GUJWD+ZHQOjBHDc20xmY/isce+63pAWpbGPoVtdm+6iW8QIL2TOh TeQdJhO5Dkr2U9H3tOwVdKSk61ErVH6AJqmnk8V9c0sT0jBtBQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLfMoeGD2n3aeLv/RyaS2G9iiJlOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDQzZmE3ZmUtMzZmMi0z NzgzLWE0ZWEtZTVmZTViMDZkZDMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUCfgA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH4GDrlnSW9XPazy7lh1oq4K04VkX9YABGB0tyUORygxzpAVe9JS mxfhy/sYuckAFTj55LdMz1quc57j+rT+Kx19VUXlY0da6KQRboWwS6fQ4oaLEwGZ 8p6mXbc0C+km3rltufthKPmTPOMNjf6vPtRPR77JkgayKX9JJAiCZWLbk54oWv4m h6KmK5ynA83KsV4Dd8M5biGn94oXfHUkAwSBownc6KcduTRHkFgv8H9PyqxpUldK toWHJBQL9MwCUeQGyMyA01lqPB6ja/9gztMDg/udgyYJXsqnH9jxNgsPDAPx2LCD q9+gKOvKLG9J6skrCujxVZK2ZpWzvegMxAk= -----END CERTIFICATE-----Generated at Mon Oct 20 00:27:31 2025 by rpki-client