$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f81bf0fd-7903-39eb-b0fa-7392938c4db2.roa File: f81bf0fd-7903-39eb-b0fa-7392938c4db2.roa (raw, json) Hash identifier: 9psGBnyc2EnzPXh/Cs5eShP0wHgaJWqJnN6z7p8CxoY= Subject key identifier: 78:B5:56:8F:14:02:C3:4A:80:DA:78:17:40:53:3A:C0:98:B1:8C:21 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B2CF6EE06F181F31B0B07C0A0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f81bf0fd-7903-39eb-b0fa-7392938c4db2.roa Signing time: Sat 13 Sep 2025 01:00:33 +0000 ROA not before: Sat 13 Sep 2025 01:00:33 +0000 ROA not after: Fri 12 Dec 2025 02:00:33 +0000 asID: 20940 IP address blocks: 2600:1406:40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:f6:ee:06:f1:81:f3:1b:0b:07:c0:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 13 01:00:33 2025 GMT Not After : Dec 12 02:00:33 2025 GMT Subject: CN=6d670ff1-0988-4236-8b8e-745b0efbe875 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:55:d4:67:7f:26:58:87:3c:6e:bd:82:9f:de: a7:df:9c:f6:f9:d8:da:32:0a:25:a5:da:15:63:0a: 65:af:4e:4d:49:ad:f0:55:3d:16:e1:88:38:4e:9c: d5:45:47:a2:93:67:81:49:69:76:35:fe:40:21:77: c4:12:c6:e9:d8:1b:a8:c9:37:92:04:de:7a:88:7c: 09:cf:e5:47:8a:ed:7d:73:f4:72:d2:33:45:67:e7: f3:9f:86:58:9b:67:18:c2:60:4b:29:be:77:6d:28: 2e:2e:38:ae:80:83:88:96:a5:63:87:17:d3:c6:b8: d7:8b:8a:fa:8e:b5:eb:3d:cf:fb:8e:d4:b7:1e:4e: 98:20:ea:18:a6:06:23:61:7d:bd:2b:d7:74:dd:84: c1:13:c2:13:53:b3:dc:b8:c5:0c:8a:fc:74:83:a3: 17:7c:36:cb:33:b6:30:14:79:a6:71:98:69:9d:31: f2:eb:e8:a6:d9:44:f4:a9:c5:45:80:13:7b:f2:ec: c4:43:b1:8e:13:f2:23:7e:67:f8:98:70:3c:e1:e5: 3a:f3:41:78:1b:23:fe:62:67:75:99:c7:54:be:70: e1:a0:9f:bd:1d:f9:8c:ad:9f:63:ae:5d:7f:ae:aa: 6a:a2:b1:01:22:78:a9:e7:eb:fd:08:4e:53:4f:a5: 34:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:B5:56:8F:14:02:C3:4A:80:DA:78:17:40:53:3A:C0:98:B1:8C:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f81bf0fd-7903-39eb-b0fa-7392938c4db2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1406:40::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:c0:3f:75:ff:0c:31:cc:9d:6a:ce:52:7c:6c:39:5c:25:28: b6:ca:97:92:84:72:f5:d7:77:90:1e:0a:6b:81:50:23:23:64: 0c:8d:21:ab:c1:de:d8:9d:84:0c:70:b2:2b:1f:da:97:2b:7a: db:e2:1b:4d:97:81:0a:2a:d2:d4:ca:ea:53:33:0b:be:06:04: 66:5c:de:6f:38:16:d6:51:0b:60:65:76:2c:ba:52:8a:b4:f9: 0b:08:08:48:08:62:94:08:68:3d:e0:9c:3c:93:e2:ce:3a:4d: 36:f4:22:4b:75:49:11:af:6a:f4:a7:26:d9:84:62:f0:f2:00: 5b:ff:e8:cf:99:14:d3:b4:7c:6a:c9:08:56:67:00:83:f0:d8: be:fc:0a:32:e3:2f:c0:52:5e:d8:b2:8e:2a:05:57:2c:53:3c: 15:59:27:08:c9:e7:9e:1d:40:bf:52:f3:bb:f5:45:04:76:1e: 8d:1c:03:48:a5:3c:c1:b4:8d:ae:db:df:cb:07:69:07:03:e5: 3c:a8:60:23:1c:be:c7:37:1d:70:72:d7:91:38:1a:46:6b:4b: 6d:1a:1c:68:37:b9:40:7e:0a:d6:bc:32:67:cf:07:2a:b4:12: c3:ad:46:04:47:78:86:7b:eb:b0:8b:98:91:88:c4:c0:78:ea: 32:07:46:e3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEss9u4G8YHzGwsHwKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkxMzAxMDAzM1oXDTI1MTIxMjAyMDAzM1owLzEtMCsGA1UEAxMk NmQ2NzBmZjEtMDk4OC00MjM2LThiOGUtNzQ1YjBlZmJlODc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVXUZ38mWIc8br2Cn96n35z2+djaMgolpdoV Ywplr05NSa3wVT0W4Yg4TpzVRUeik2eBSWl2Nf5AIXfEEsbp2BuoyTeSBN56iHwJ z+VHiu19c/Ry0jNFZ+fzn4ZYm2cYwmBLKb53bSguLjiugIOIlqVjhxfTxrjXi4r6 jrXrPc/7jtS3Hk6YIOoYpgYjYX29K9d03YTBE8ITU7PcuMUMivx0g6MXfDbLM7Yw FHmmcZhpnTHy6+im2UT0qcVFgBN78uzEQ7GOE/Ijfmf4mHA84eU680F4GyP+Ymd1 mcdUvnDhoJ+9HfmMrZ9jrl1/rqpqorEBInip5+v9CE5TT6U0pwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHi1Vo8UAsNKgNp4F0BTOsCYsYwhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjgxYmYwZmQtNzkwMy0z OWViLWIwZmEtNzM5MjkzOGM0ZGIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUBgBA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACjAP3X/DDHMnWrOUnxsOVwlKLbKl5KEcvXXd5AeCmuBUCMjZAyN IavB3tidhAxwsisf2pcretviG02XgQoq0tTK6lMzC74GBGZc3m84FtZRC2Bldiy6 Uoq0+QsICEgIYpQIaD3gnDyT4s46TTb0Ikt1SRGvavSnJtmEYvDyAFv/6M+ZFNO0 fGrJCFZnAIPw2L78CjLjL8BSXtiyjioFVyxTPBVZJwjJ554dQL9S87v1RQR2Ho0c A0ilPMG0ja7b38sHaQcD5TyoYCMcvsc3HXBy15E4GkZrS20aHGg3uUB+Cta8MmfP Byq0EsOtRgRHeIZ767CLmJGIxMB46jIHRuM= -----END CERTIFICATE-----Generated at Mon Oct 20 00:27:49 2025 by rpki-client