$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/e239f5a3-1376-3dea-9101-a7a67a437145.roa File: e239f5a3-1376-3dea-9101-a7a67a437145.roa (raw, json) Hash identifier: sx3Ymsnh9uYMm0BZWxgVydTMbtulf7ZrLHM32vsoOoc= Subject key identifier: E3:05:07:DC:91:E3:1A:D0:12:96:B3:C1:E1:0B:CC:F2:96:E3:78:F2 Certificate issuer: /CN=d5df2e7f-8e83-432a-8c27-5546944dda4b Certificate serial: 010D0C9F4328584B8EACC4BB555F520384C6BB00 Authority key identifier: F7:4D:4B:DE:0E:79:7B:FF:3E:5D:21:D7:B9:1A:A9:CB:AF:14:17:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/e239f5a3-1376-3dea-9101-a7a67a437145.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 46408 IP address blocks: 2600:1e00::/28 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/d5df2e7f-8e83-432a-8c27-5546944dda4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/d5df2e7f-8e83-432a-8c27-5546944dda4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:c4:bb:55:5f:52:03:84:c6:bb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5df2e7f-8e83-432a-8c27-5546944dda4b Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=be6353df-6b52-4877-a029-c62b98a37d55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:9e:35:97:5c:ca:ff:fb:95:f4:7c:ea:1d:49: 2a:07:67:c0:b1:ca:da:89:f1:25:df:eb:a7:47:a5: c7:db:68:a8:a7:da:d2:14:34:fb:86:80:af:ee:9d: 71:28:63:fd:0a:f0:f2:ff:a6:0e:67:c8:89:bb:a0: 14:41:ba:0c:ce:00:3e:d3:00:4b:a5:c9:ab:a7:a1: 13:99:12:4a:56:49:d0:75:04:b1:fd:09:9f:aa:86: 35:39:83:70:00:ac:73:9d:42:70:df:a3:ce:df:bd: f1:e1:36:79:10:f8:d9:33:47:8c:ce:db:0d:ae:96: 9e:95:bf:8c:d3:c8:e8:a4:28:57:2f:b6:4f:4c:fa: d3:07:84:98:f8:2c:09:1c:7d:f1:37:13:1a:fd:70: a4:b3:39:6d:28:6f:95:4e:ad:be:f1:e4:6f:fc:0b: a6:96:e9:df:b8:8b:cc:b9:af:c2:06:e3:2a:df:83: 49:45:a9:05:4d:5b:d2:cc:38:1d:9c:1a:c5:6f:dd: 5e:57:1d:c4:b4:8d:1d:59:79:8b:f9:2c:23:be:eb: 6a:f1:2e:b7:a8:07:6b:73:9b:34:8d:a3:bc:ab:5a: 22:49:c5:fe:ef:d8:02:bd:a7:98:d8:8e:35:ca:16: a4:bd:2b:90:d9:35:de:d1:34:e6:51:78:ed:a1:02: 23:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:05:07:DC:91:E3:1A:D0:12:96:B3:C1:E1:0B:CC:F2:96:E3:78:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/e239f5a3-1376-3dea-9101-a7a67a437145.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/d5df2e7f-8e83-432a-8c27-5546944dda4b.crl X509v3 Authority Key Identifier: keyid:F7:4D:4B:DE:0E:79:7B:FF:3E:5D:21:D7:B9:1A:A9:CB:AF:14:17:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b.cer sbgp-ipAddrBlock: critical IPv6: 2600:1e00::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:45:6e:ab:14:20:b6:89:f7:5f:04:0a:9a:be:06:e3:d5:da: a9:ee:a7:0d:02:6f:e9:b1:ac:d7:55:1e:c1:f0:63:87:dc:f4: 9c:bc:0b:d8:1a:77:21:84:67:47:e2:57:44:b6:4d:93:f4:93: 50:a6:63:9d:76:ee:7a:01:82:50:91:8d:9b:62:a0:16:22:3b: fc:a0:91:67:6b:b3:62:13:d4:d5:5e:e1:57:d1:8c:10:80:07: 34:26:45:0e:0c:9a:43:c6:a1:af:8c:49:d1:6b:58:65:67:4a: 13:b0:a6:ba:88:f2:dd:ee:54:6c:f4:fe:39:64:9f:7a:95:e1: 39:e2:b0:95:3c:c1:e7:04:81:6a:36:45:d1:7e:47:26:8a:c8: 9b:71:3b:df:c8:ca:33:fb:ac:9c:62:75:3b:7d:ac:5c:06:6a: 2e:1a:07:12:7d:84:4b:2f:15:5e:81:0d:40:b1:0b:1a:1d:4f: 98:0d:31:b0:01:a4:a4:cf:07:fe:9c:3a:1e:f1:40:a5:c0:60: 1a:27:c8:38:d3:17:4d:ec:df:dd:c4:34:a8:8a:20:ef:5f:0a: 44:79:98:bd:fd:b4:44:0b:af:3d:5f:70:f8:03:ff:9a:45:43: 2f:66:72:a2:18:28:93:77:b2:3b:b4:c6:7e:c3:75:de:76:5c: 17:b2:8d:6f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEuOrMS7VV9SA4TGuwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDVkZjJlN2YtOGU4My00MzJhLThjMjctNTU0Njk0NGRk YTRiMB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk YmU2MzUzZGYtNmI1Mi00ODc3LWEwMjktYzYyYjk4YTM3ZDU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZ41l1zK//uV9HzqHUkqB2fAscraifEl3+un R6XH22iop9rSFDT7hoCv7p1xKGP9CvDy/6YOZ8iJu6AUQboMzgA+0wBLpcmrp6ET mRJKVknQdQSx/QmfqoY1OYNwAKxznUJw36PO373x4TZ5EPjZM0eMztsNrpaelb+M 08jopChXL7ZPTPrTB4SY+CwJHH3xNxMa/XCkszltKG+VTq2+8eRv/AumlunfuIvM ua/CBuMq34NJRakFTVvSzDgdnBrFb91eVx3EtI0dWXmL+Swjvutq8S63qAdrc5s0 jaO8q1oiScX+79gCvaeY2I41yhakvSuQ2TXe0TTmUXjtoQIjYQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOMFB9yR4xrQEpazweELzPKW43jyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kNWRm MmU3Zi04ZTgzLTQzMmEtOGMyNy01NTQ2OTQ0ZGRhNGIvZTIzOWY1YTMtMTM3Ni0z ZGVhLTkxMDEtYTdhNjdhNDM3MTQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDVkZjJlN2YtOGU4My00MzJhLThj MjctNTU0Njk0NGRkYTRiL2Q1ZGYyZTdmLThlODMtNDMyYS04YzI3LTU1NDY5NDRk ZGE0Yi5jcmwwHwYDVR0jBBgwFoAU901L3g55e/8+XSHXuRqpy68UFwwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kNWRmMmU3Zi04ZTgzLTQzMmEtOGMyNy01NTQ2 OTQ0ZGRhNGIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgAeADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAbRW6rFCC2ifdfBAqavgbj1dqp7qcNAm/psazXVR7B8GOH3PScvAvY GnchhGdH4ldEtk2T9JNQpmOddu56AYJQkY2bYqAWIjv8oJFna7NiE9TVXuFX0YwQ gAc0JkUODJpDxqGvjEnRa1hlZ0oTsKa6iPLd7lRs9P45ZJ96leE54rCVPMHnBIFq NkXRfkcmisibcTvfyMoz+6ycYnU7faxcBmouGgcSfYRLLxVegQ1AsQsaHU+YDTGw AaSkzwf+nDoe8UClwGAaJ8g40xdN7N/dxDSoiiDvXwpEeZi9/bREC689X3D4A/+a RUMvZnKiGCiTd7I7tMZ+w3XedlwXso1v -----END CERTIFICATE-----Generated at Mon Oct 20 21:14:52 2025 by rpki-client