$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f880805d-a68c-390e-a7a4-9fff8eb39a3b.roa File: f880805d-a68c-390e-a7a4-9fff8eb39a3b.roa (raw, json) Hash identifier: VmucWZ/lFCijzydt5O8KUoROjPGWE+/pgk3q5dFp4B4= Subject key identifier: 3F:1D:A6:82:67:A1:17:3C:46:F9:89:E0:9B:EB:22:A6:57:01:83:B8 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B3821A6F9EA514D8A27DCB180 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f880805d-a68c-390e-a7a4-9fff8eb39a3b.roa Signing time: Wed 17 Sep 2025 01:00:33 +0000 ROA not before: Wed 17 Sep 2025 01:00:33 +0000 ROA not after: Tue 16 Dec 2025 02:00:33 +0000 asID: 20940 IP address blocks: 2600:1419:8400::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:38:21:a6:f9:ea:51:4d:8a:27:dc:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 17 01:00:33 2025 GMT Not After : Dec 16 02:00:33 2025 GMT Subject: CN=a1f4bbfd-6b69-47fa-9238-bfc90366e3aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d4:37:6b:b2:f5:27:0a:2e:78:5f:00:17:91: 26:9a:af:ac:93:f4:db:bc:d7:c2:be:03:29:48:06: 92:1d:80:cb:dc:26:bf:63:39:b1:a3:76:5a:95:85: 83:d4:ff:c8:82:f6:0b:02:c7:d5:75:d1:4c:0c:12: e4:2e:9c:38:a7:53:00:2c:57:b6:55:15:fd:7b:5c: ab:9b:8e:ac:28:e5:9a:e8:c5:61:13:d2:18:c8:eb: 88:59:63:2c:9d:97:a3:96:e6:17:7f:20:07:d0:a9: aa:e4:21:37:a7:14:81:e1:b3:bb:d1:33:bf:29:2e: 52:51:55:9a:9f:70:9e:c3:e2:c9:4d:64:87:2f:4d: ae:ea:cc:d4:4a:cb:c4:9e:e1:f9:f5:2e:aa:a9:f6: e4:43:0b:97:58:ad:8c:68:6b:94:fe:cb:ce:57:46: 03:84:34:dc:d3:cd:00:97:20:66:2d:5c:7b:b4:3b: 5e:69:fc:58:b0:2d:68:7c:af:cf:af:56:7f:fc:f2: 19:92:17:96:6d:2c:bc:6c:1c:59:fd:4a:b0:10:7b: 0c:82:5a:09:95:38:37:45:13:f0:37:6a:f5:53:c5: 27:0f:df:22:9e:7a:94:6e:d3:bf:cc:76:08:89:a4: 7d:ca:46:00:18:57:9d:6d:72:1a:4d:12:0a:ec:37: aa:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:1D:A6:82:67:A1:17:3C:46:F9:89:E0:9B:EB:22:A6:57:01:83:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f880805d-a68c-390e-a7a4-9fff8eb39a3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1419:8400::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:ef:37:14:bd:44:7c:04:1a:82:15:37:8a:2e:54:c6:64:c8: 6c:2e:a1:cd:ed:0c:67:3c:09:fa:79:78:b3:bb:d4:f8:cd:51: 52:47:f1:2d:33:6f:59:42:85:84:42:42:39:5e:10:2d:58:41: ac:2c:f7:79:21:b9:4e:97:7d:c2:f5:49:58:29:2e:3d:d4:b4: 37:c5:63:77:6d:91:47:09:43:ac:ff:83:ec:4e:2f:61:8f:ee: 44:97:a2:c5:c6:43:39:11:d2:2a:29:71:5a:99:a5:9d:52:f0: f1:1e:cb:f8:6e:4d:70:f8:9c:5f:b0:40:a3:dd:ec:5e:ec:1b: e9:f9:aa:98:5d:08:83:4f:32:40:aa:b5:95:87:48:e6:ac:e6: 9d:e0:b3:66:8e:f6:39:6d:e4:77:74:cb:b9:6d:a5:bc:cc:6c: 1c:b2:22:d9:99:87:49:d9:c4:de:be:79:d4:7e:a4:61:91:1b: c8:e3:4c:58:ba:44:0d:c2:fb:64:67:29:97:3b:8f:a7:71:a0: 26:ae:e6:3b:b6:e6:e2:e7:be:9e:d6:95:11:9a:69:3e:a3:ee: bf:b8:0d:b2:f1:bf:ba:cd:ec:f3:aa:1d:b8:47:32:e9:33:d2: 07:48:29:fe:5b:71:12:e3:e1:bf:fb:57:a3:61:69:36:44:0b: 5b:e1:5b:90 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs4Iab56lFNiifcsYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkxNzAxMDAzM1oXDTI1MTIxNjAyMDAzM1owLzEtMCsGA1UEAxMk YTFmNGJiZmQtNmI2OS00N2ZhLTkyMzgtYmZjOTAzNjZlM2FhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNQ3a7L1JwoueF8AF5Emmq+sk/TbvNfCvgMp SAaSHYDL3Ca/Yzmxo3ZalYWD1P/IgvYLAsfVddFMDBLkLpw4p1MALFe2VRX9e1yr m46sKOWa6MVhE9IYyOuIWWMsnZejluYXfyAH0Kmq5CE3pxSB4bO70TO/KS5SUVWa n3Cew+LJTWSHL02u6szUSsvEnuH59S6qqfbkQwuXWK2MaGuU/svOV0YDhDTc080A lyBmLVx7tDteafxYsC1ofK/Pr1Z//PIZkheWbSy8bBxZ/UqwEHsMgloJlTg3RRPw N2r1U8UnD98innqUbtO/zHYIiaR9ykYAGFedbXIaTRIK7DeqHQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFD8dpoJnoRc8RvmJ4JvrIqZXAYO4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjg4MDgwNWQtYTY4Yy0z OTBlLWE3YTQtOWZmZjhlYjM5YTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUGYQA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADfvNxS9RHwEGoIVN4ouVMZkyGwuoc3tDGc8Cfp5eLO71PjNUVJH 8S0zb1lChYRCQjleEC1YQaws93khuU6XfcL1SVgpLj3UtDfFY3dtkUcJQ6z/g+xO L2GP7kSXosXGQzkR0iopcVqZpZ1S8PEey/huTXD4nF+wQKPd7F7sG+n5qphdCINP MkCqtZWHSOas5p3gs2aO9jlt5Hd0y7ltpbzMbByyItmZh0nZxN6+edR+pGGRG8jj TFi6RA3C+2RnKZc7j6dxoCau5ju25uLnvp7WlRGaaT6j7r+4DbLxv7rN7POqHbhH Mukz0gdIKf5bcRLj4b/7V6NhaTZEC1vhW5A= -----END CERTIFICATE-----Generated at Mon Oct 20 10:08:52 2025 by rpki-client