$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fe034ab7-a381-383e-aa58-ea2d4289f9a5.roa File: fe034ab7-a381-383e-aa58-ea2d4289f9a5.roa (raw, json) Hash identifier: uFBie4CmPGXvkNbHO0eL6/gqkJl8iCzBfX9OpABHMa4= Subject key identifier: 0D:55:4A:4F:28:98:24:20:2D:18:88:52:B9:EB:0E:76:13:8B:FB:DC Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B4081BC1308E05CBE997E3300 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fe034ab7-a381-383e-aa58-ea2d4289f9a5.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 20940 IP address blocks: 2600:1413:7000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:bc:13:08:e0:5c:be:99:7e:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=8d5f7c16-00ad-4ffb-b7d3-f57d31c11742 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:17:04:81:1e:f7:b0:18:62:21:4f:f8:9d:08: 24:fe:d7:bc:99:08:4b:b5:e5:fb:ef:2a:3c:80:b4: b4:ed:0e:32:4e:cf:6f:14:3e:86:d6:59:43:c4:c9: 38:5e:b9:7a:3c:ae:3b:3f:ad:65:9c:bf:45:c9:29: 25:ea:88:25:13:39:0f:db:b8:26:e0:16:64:88:a5: 1a:a7:02:1b:3f:65:1a:e4:73:bf:2a:da:a3:64:d8: 3a:9a:c9:f9:61:ac:43:2d:b9:14:ae:c5:dd:ed:ca: 66:5a:f7:d3:89:b0:55:54:fe:6d:f1:14:d8:6d:aa: c2:b8:81:28:42:1e:72:f9:60:e0:43:39:48:b0:55: 89:ca:c6:c1:43:29:a4:56:8e:7f:c4:be:0f:a3:80: 14:02:64:cb:f7:80:40:bc:67:57:c2:bb:a7:97:bc: d7:36:4a:23:43:49:35:a0:f4:c5:7d:69:98:0b:5c: 9d:7f:8e:21:cd:cb:81:e7:16:22:7e:36:14:e4:62: 44:a1:8a:ad:62:01:24:b0:c2:86:34:78:19:c6:de: ae:83:bf:85:4f:e8:88:ac:d3:47:20:34:03:f6:c8: 6e:71:96:9f:da:15:ac:11:4f:d5:14:de:72:ea:1e: 37:c8:64:01:c6:fc:b0:6c:b6:c8:b6:18:09:9f:5d: c1:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:55:4A:4F:28:98:24:20:2D:18:88:52:B9:EB:0E:76:13:8B:FB:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fe034ab7-a381-383e-aa58-ea2d4289f9a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1413:7000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:17:e9:91:52:34:e8:a0:3e:ba:b3:08:69:06:97:ba:9f:ac: 04:53:7d:47:cc:74:18:25:03:0c:b8:0b:a3:0b:7f:df:44:ee: f5:36:07:a0:99:9b:c6:a2:a3:64:7d:e8:d0:12:a5:92:7a:f0: 29:8e:f9:36:3a:6c:e1:f8:82:58:46:ca:6c:18:fc:62:ad:a1: 25:fb:af:44:82:8c:15:cf:9f:1d:2e:75:3e:e7:51:49:a7:54: 59:23:a1:c9:75:10:8a:ed:13:5f:db:41:8d:ec:f3:8c:24:ae: 55:b6:83:e0:39:ab:2d:22:04:07:25:20:72:63:b6:70:e1:38: 37:01:52:58:ff:a4:96:92:13:f2:b7:c0:18:8a:39:3d:d2:be: 56:34:da:d1:90:09:9b:1c:4e:e6:17:69:aa:30:18:65:1b:ce: 3d:d3:50:48:41:27:f1:36:23:84:bb:9b:47:2a:27:be:51:4c: da:9f:ea:cf:61:c2:ad:5f:91:07:c8:e1:08:ac:04:d9:51:d6: 3a:b0:8f:fb:3d:03:87:9e:e6:74:f5:8b:1b:0e:45:d4:de:97: a7:db:23:f9:76:8a:91:5f:c6:e5:3c:57:1b:fa:0f:0c:bc:d1: ae:16:46:66:cb:31:7f:c6:ce:b1:0f:d6:8c:92:74:b4:ac:d5: 30:d8:1a:bd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtAgbwTCOBcvpl+MwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk OGQ1ZjdjMTYtMDBhZC00ZmZiLWI3ZDMtZjU3ZDMxYzExNzQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxcEgR73sBhiIU/4nQgk/te8mQhLteX77yo8 gLS07Q4yTs9vFD6G1llDxMk4Xrl6PK47P61lnL9FySkl6oglEzkP27gm4BZkiKUa pwIbP2Ua5HO/KtqjZNg6msn5YaxDLbkUrsXd7cpmWvfTibBVVP5t8RTYbarCuIEo Qh5y+WDgQzlIsFWJysbBQymkVo5/xL4Po4AUAmTL94BAvGdXwrunl7zXNkojQ0k1 oPTFfWmYC1ydf44hzcuB5xYifjYU5GJEoYqtYgEksMKGNHgZxt6ug7+FT+iIrNNH IDQD9shucZaf2hWsEU/VFN5y6h43yGQBxvywbLbIthgJn13BJwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFA1VSk8omCQgLRiIUrnrDnYTi/vcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZmUwMzRhYjctYTM4MS0z ODNlLWFhNTgtZWEyZDQyODlmOWE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUE3AA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA8X6ZFSNOigPrqzCGkGl7qfrARTfUfMdBglAwy4C6MLf99E7vU2 B6CZm8aio2R96NASpZJ68CmO+TY6bOH4glhGymwY/GKtoSX7r0SCjBXPnx0udT7n UUmnVFkjocl1EIrtE1/bQY3s84wkrlW2g+A5qy0iBAclIHJjtnDhODcBUlj/pJaS E/K3wBiKOT3SvlY02tGQCZscTuYXaaowGGUbzj3TUEhBJ/E2I4S7m0cqJ75RTNqf 6s9hwq1fkQfI4QisBNlR1jqwj/s9A4ee5nT1ixsORdTel6fbI/l2ipFfxuU8Vxv6 Dwy80a4WRmbLMX/GzrEP1oySdLSs1TDYGr0= -----END CERTIFICATE-----Generated at Mon Oct 20 04:55:11 2025 by rpki-client