$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/da8c1574-6d78-3941-b340-85461f961213.roa File: da8c1574-6d78-3941-b340-85461f961213.roa (raw, json) Hash identifier: iZ792/oTN9TA7Jv8UdRUC8+6/9qGoIKaonttltlEyU0= Subject key identifier: 55:C4:DA:88:21:80:B3:1E:E0:44:A1:40:86:AF:6A:82:25:C8:96:4F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B4081C16FA30CD1712E5D8700 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/da8c1574-6d78-3941-b340-85461f961213.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 20940 IP address blocks: 2600:1406:bc00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:c1:6f:a3:0c:d1:71:2e:5d:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=a1ead447-98bd-4824-9640-13add188d539 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:67:ae:dc:a2:8c:71:3f:72:d7:9b:3a:39:e6: 29:c3:38:37:47:aa:8a:8f:98:89:64:0e:a3:c7:c4: 7a:96:30:40:15:fb:fe:c5:73:bd:cb:50:e4:0d:2e: 57:5a:a7:a7:5c:af:54:85:df:f1:97:f2:5a:0e:b0: 4e:fe:6d:36:8f:58:7f:3f:58:17:de:1e:19:63:f3: 65:ed:07:cb:16:47:ab:b6:20:2d:d1:7d:c2:06:40: 5b:7f:47:e2:ae:ba:32:15:17:66:2a:6f:03:61:40: b9:db:80:ec:de:ec:42:d7:ae:75:1a:fd:09:03:02: 38:00:60:27:b8:a2:e1:eb:a6:a0:bd:ab:63:66:84: 2d:f5:b1:24:eb:06:f9:07:e9:70:0c:1d:e3:32:c5: 6e:be:61:39:9d:3d:f7:47:4e:a7:d3:6b:8a:7c:ff: 26:e7:fd:5e:b4:f2:eb:57:09:1d:81:26:e8:0e:eb: e1:3c:d3:c3:1b:90:d5:36:7e:2f:a2:f9:6f:d8:44: bc:36:4f:af:65:a2:4d:48:df:04:b9:85:0f:da:06: d3:76:9b:dc:9e:09:ff:6f:ca:ae:37:68:2c:25:ff: 31:48:c6:6f:b3:f5:79:5f:d1:93:bb:e8:fb:45:58: 9a:93:cc:a4:25:a3:95:d7:67:fb:92:21:45:49:fb: 85:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:C4:DA:88:21:80:B3:1E:E0:44:A1:40:86:AF:6A:82:25:C8:96:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/da8c1574-6d78-3941-b340-85461f961213.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1406:bc00::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:c1:4b:46:33:df:be:47:b7:93:9a:38:01:3d:7d:fb:44:96: b4:b7:9c:67:84:56:cf:e8:78:f5:92:58:b4:36:6b:af:f1:50: bc:0e:0c:40:d2:14:55:5b:63:f1:5a:26:0c:5b:a9:f0:c0:8e: f7:c9:c1:b5:12:88:8a:99:d8:76:c7:e8:74:3c:dc:14:41:5a: 64:ea:4e:db:61:32:ab:bc:9f:d8:78:c7:e5:c3:72:88:50:54: 3b:45:b6:36:d4:c3:c4:a9:7e:d0:62:1f:6e:d9:9c:87:4f:13: 14:a1:53:b9:62:f6:d2:90:d3:b3:72:6b:73:60:80:65:e6:2e: 11:b6:2a:ad:63:4d:37:9e:84:3e:8f:ef:26:d1:0e:dc:11:f7: 3d:7e:5e:ae:5c:c9:b4:1a:2b:0a:cb:39:55:9a:28:13:e3:f3: f6:00:06:15:10:36:0b:99:d9:0d:36:4b:0d:7a:7f:5a:8f:1f: 9f:da:66:b8:f2:55:bd:3b:64:30:ea:ce:bf:f3:bc:28:3f:a0: 90:3b:06:ec:32:fd:a5:b0:07:b3:e7:ed:9d:7c:bc:dd:72:f6: 52:3f:dd:d9:4d:59:e8:66:a0:45:6e:73:58:2b:45:41:16:73: 54:43:7d:b2:83:d4:8d:f2:2e:a3:71:a2:cd:6f:0b:d3:ca:34: 91:66:2b:02 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtAgcFvowzRcS5dhwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk YTFlYWQ0NDctOThiZC00ODI0LTk2NDAtMTNhZGQxODhkNTM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWeu3KKMcT9y15s6OeYpwzg3R6qKj5iJZA6j x8R6ljBAFfv+xXO9y1DkDS5XWqenXK9Uhd/xl/JaDrBO/m02j1h/P1gX3h4ZY/Nl 7QfLFkertiAt0X3CBkBbf0firroyFRdmKm8DYUC524Ds3uxC1651Gv0JAwI4AGAn uKLh66agvatjZoQt9bEk6wb5B+lwDB3jMsVuvmE5nT33R06n02uKfP8m5/1etPLr VwkdgSboDuvhPNPDG5DVNn4vovlv2ES8Nk+vZaJNSN8EuYUP2gbTdpvcngn/b8qu N2gsJf8xSMZvs/V5X9GTu+j7RViak8ykJaOV12f7kiFFSfuF1wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFXE2oghgLMe4EShQIavaoIlyJZPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGE4YzE1NzQtNmQ3OC0z OTQxLWIzNDAtODU0NjFmOTYxMjEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUBrwA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJHBS0Yz375Ht5OaOAE9fftElrS3nGeEVs/oePWSWLQ2a6/xULwO DEDSFFVbY/FaJgxbqfDAjvfJwbUSiIqZ2HbH6HQ83BRBWmTqTtthMqu8n9h4x+XD cohQVDtFtjbUw8SpftBiH27ZnIdPExShU7li9tKQ07Nya3NggGXmLhG2Kq1jTTee hD6P7ybRDtwR9z1+Xq5cybQaKwrLOVWaKBPj8/YABhUQNguZ2Q02Sw16f1qPH5/a ZrjyVb07ZDDqzr/zvCg/oJA7Buwy/aWwB7Pn7Z18vN1y9lI/3dlNWehmoEVuc1gr RUEWc1RDfbKD1I3yLqNxos1vC9PKNJFmKwI= -----END CERTIFICATE-----Generated at Mon Oct 20 05:15:56 2025 by rpki-client