$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e80dd251-fe1b-3a66-b07b-ac79283cb51a.roa File: e80dd251-fe1b-3a66-b07b-ac79283cb51a.roa (raw, json) Hash identifier: OGgW5Q1/SfYlWov9Mvd00IgRroWMIkBmNdzdgaxLkxg= Subject key identifier: 58:A5:CC:3A:60:71:04:41:B5:D2:4E:C5:AF:39:BE:77:4D:34:45:C5 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B48E1CACC6D339EC419B5BC80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e80dd251-fe1b-3a66-b07b-ac79283cb51a.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 20940 IP address blocks: 2600:1488:a180::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:ca:cc:6d:33:9e:c4:19:b5:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=9d77d7b6-a037-4ca2-a83c-1acad726259d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:26:9f:81:8f:66:01:17:55:c3:19:8a:d3:66: c2:f6:b0:d6:42:32:59:b1:b0:c8:ad:61:d6:b7:3d: fe:d8:7a:82:37:35:d1:34:ce:05:70:ad:80:d2:5c: 27:18:a5:f2:13:d3:3b:52:11:c8:9b:fc:06:71:4a: 57:49:c5:ad:30:a5:08:2a:01:f9:4d:26:ba:46:4e: 23:3e:32:60:8c:9f:11:b0:65:48:e0:a2:2c:fe:78: e9:23:3d:00:42:ab:e3:46:72:2a:1c:c5:2f:ea:2e: 46:1d:ae:9f:32:a5:84:34:35:63:6c:8c:b1:9f:bb: 2e:81:be:26:4c:e7:06:86:78:6b:47:12:44:c9:e7: 83:d1:5a:c2:ec:29:8e:36:44:18:cc:b3:c8:4f:dc: 42:4c:bf:0e:64:0a:64:17:e0:00:54:ad:fb:86:ca: a8:39:05:40:27:58:42:86:f8:ed:59:43:af:7f:13: be:1e:be:e2:17:72:94:bf:a0:6c:8c:aa:5a:17:55: 4a:44:16:b2:43:f5:a9:77:06:8e:5a:dc:ea:a8:b7: 1e:a9:0b:6d:15:b1:02:cb:40:4e:57:31:d1:6e:47: ff:b9:17:eb:66:a0:ed:f9:64:3c:ef:d5:0a:e5:eb: 89:38:ef:ee:7f:d3:84:3e:bd:5d:a6:d8:39:e4:96: 35:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:A5:CC:3A:60:71:04:41:B5:D2:4E:C5:AF:39:BE:77:4D:34:45:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e80dd251-fe1b-3a66-b07b-ac79283cb51a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1488:a180::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:f6:96:84:28:50:21:dd:1f:79:91:8b:2b:c6:f9:1f:e4:ba: cc:15:d7:67:1c:44:3d:68:46:90:ed:c6:4c:82:9c:79:99:ef: fb:0c:8c:ee:d1:80:f9:e0:9b:a2:93:4d:cb:a0:31:ff:ac:93: b8:89:f1:cf:1b:ae:64:b0:78:64:a4:51:df:69:d6:13:19:91: a0:89:1a:d6:4f:04:55:a7:b3:7b:8a:2f:ed:cd:c3:f2:31:2b: 56:1d:4f:bc:36:32:14:a5:86:9e:93:8b:d1:37:5d:14:2e:29: 39:17:1c:3d:9c:21:19:44:14:ab:fa:12:6a:8d:fb:98:e8:d9: 1d:3c:15:40:dd:3a:45:cf:7b:64:1f:5c:17:b9:47:63:27:91: 4f:79:20:f6:14:51:47:2c:ad:82:44:28:c0:bb:7f:a5:db:01: d3:88:04:41:94:33:a6:b3:01:17:6b:2c:c0:5f:26:0e:e2:24: 23:a2:6f:68:34:e8:5e:cb:62:6e:1c:34:53:21:84:64:64:d0: 14:05:d3:db:ac:e8:39:ee:5a:74:01:0a:32:5a:9e:e0:c8:7b: 26:89:c4:a6:59:b8:58:d7:89:96:7f:4e:ae:56:93:03:5d:62: 97:0e:1e:cf:2d:a9:57:e7:03:82:75:01:9e:ee:72:37:70:b4: a1:2a:30:69 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtI4crMbTOexBm1vIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk OWQ3N2Q3YjYtYTAzNy00Y2EyLWE4M2MtMWFjYWQ3MjYyNTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyafgY9mARdVwxmK02bC9rDWQjJZsbDIrWHW tz3+2HqCNzXRNM4FcK2A0lwnGKXyE9M7UhHIm/wGcUpXScWtMKUIKgH5TSa6Rk4j PjJgjJ8RsGVI4KIs/njpIz0AQqvjRnIqHMUv6i5GHa6fMqWENDVjbIyxn7sugb4m TOcGhnhrRxJEyeeD0VrC7CmONkQYzLPIT9xCTL8OZApkF+AAVK37hsqoOQVAJ1hC hvjtWUOvfxO+Hr7iF3KUv6BsjKpaF1VKRBayQ/WpdwaOWtzqqLceqQttFbECy0BO VzHRbkf/uRfrZqDt+WQ879UK5euJOO/uf9OEPr1dptg55JY1HQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFilzDpgcQRBtdJOxa85vndNNEXFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTgwZGQyNTEtZmUxYi0z YTY2LWIwN2ItYWM3OTI4M2NiNTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUiKGA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJL2loQoUCHdH3mRiyvG+R/kuswV12ccRD1oRpDtxkyCnHmZ7/sM jO7RgPngm6KTTcugMf+sk7iJ8c8brmSweGSkUd9p1hMZkaCJGtZPBFWns3uKL+3N w/IxK1YdT7w2MhSlhp6Ti9E3XRQuKTkXHD2cIRlEFKv6EmqN+5jo2R08FUDdOkXP e2QfXBe5R2MnkU95IPYUUUcsrYJEKMC7f6XbAdOIBEGUM6azARdrLMBfJg7iJCOi b2g06F7LYm4cNFMhhGRk0BQF09us6DnuWnQBCjJanuDIeyaJxKZZuFjXiZZ/Tq5W kwNdYpcOHs8tqVfnA4J1AZ7ucjdwtKEqMGk= -----END CERTIFICATE-----Generated at Mon Oct 20 04:55:50 2025 by rpki-client