$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0643a5b1-12f8-3823-9851-1590244b2064.roa File: 0643a5b1-12f8-3823-9851-1590244b2064.roa (raw, json) Hash identifier: a41vc9xklBC5azguJcdinvcr/JY3HoneJVDHn6lv3h8= Subject key identifier: 77:52:51:3D:68:6F:22:FC:AF:35:21:A0:CE:4F:4B:9D:49:D5:7E:85 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B56D73A48C0A96E24C5C9B4C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0643a5b1-12f8-3823-9851-1590244b2064.roa Signing time: Sun 28 Sep 2025 01:00:33 +0000 ROA not before: Sun 28 Sep 2025 01:00:33 +0000 ROA not after: Sat 27 Dec 2025 02:00:33 +0000 asID: 20940 IP address blocks: 2600:141b:f800::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:56:d7:3a:48:c0:a9:6e:24:c5:c9:b4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 28 01:00:33 2025 GMT Not After : Dec 27 02:00:33 2025 GMT Subject: CN=2a1cf1ab-ce27-4b11-9790-3f14ba79aa10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:66:49:1d:cf:18:b2:0c:0f:8f:89:85:49:88: 71:22:8d:c1:be:39:51:71:81:5a:84:71:c7:44:43: 00:3c:40:36:5e:3f:83:ba:cc:82:1a:c5:7c:c5:5b: 25:6e:fc:31:61:99:0b:af:3c:a4:3d:bd:40:4a:7e: 9f:de:b4:1e:2f:c1:91:96:2e:02:4d:38:7e:af:ae: 0c:33:df:cf:7f:b9:67:71:4f:05:5b:6f:3e:d7:39: 5b:95:95:ad:4a:bf:f4:0b:81:7f:59:1b:9d:bd:26: b1:42:4e:c7:0d:62:c0:cc:ea:f6:79:fd:6c:ea:54: e4:99:ff:21:93:ec:43:fb:57:9b:36:6b:95:c2:57: 52:25:c2:79:9d:17:c3:a8:c4:07:c2:de:5d:00:00: db:ac:85:a1:7e:31:bf:43:7f:86:d7:15:e7:5e:70: 94:ea:b1:c7:60:21:4e:5d:e8:d6:ba:6f:92:d3:93: 72:35:e9:11:4c:c3:0a:3b:a9:47:e5:5b:41:da:df: d1:20:d1:07:87:6e:c8:57:c3:d6:d8:01:f7:ff:a5: c6:d4:11:0b:9a:a1:cb:98:89:b4:65:22:5f:3d:6d: b3:0c:c8:13:f5:70:0b:a3:a0:7e:d4:63:c2:cc:f9: 1e:06:5c:d5:f0:84:2d:7c:d7:fc:fd:e8:fc:22:9a: 59:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:52:51:3D:68:6F:22:FC:AF:35:21:A0:CE:4F:4B:9D:49:D5:7E:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0643a5b1-12f8-3823-9851-1590244b2064.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:141b:f800::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:73:c6:8c:68:fd:94:26:6c:93:86:5f:39:bd:5c:b6:48:8c: 3d:52:e0:06:42:57:b2:36:4b:e7:44:2f:83:3b:34:1a:23:7f: 25:01:df:07:6f:ea:4b:c9:0a:ed:b7:cb:9b:b6:4a:e2:6e:61: 0b:3e:3d:d2:0a:ac:dd:82:71:e8:45:df:17:e8:96:0b:d4:81: 3d:68:4c:e6:9b:aa:dd:22:ce:b1:ce:10:26:e3:d9:84:22:46: b8:70:0f:91:43:67:2a:cb:d8:63:9f:fa:d5:bd:d5:4e:75:c2: 3b:2c:33:24:a9:fc:56:04:99:89:b2:61:19:96:34:27:5c:a6: 3a:bd:83:74:40:a7:8e:f4:32:9e:d4:85:44:c0:21:3b:40:27: 1c:35:fd:ed:1c:58:b7:00:b1:c0:b7:14:1f:b9:03:e8:a7:68: d8:f2:2e:04:52:c1:bb:37:ac:1a:5c:9b:36:50:af:1a:ae:5f: 72:07:fe:63:05:51:4c:1d:44:ed:5d:ee:92:3b:a8:e3:5b:86: 70:9b:70:f6:41:ce:f7:fb:7a:5c:1a:02:55:43:ad:e8:80:fc: 42:15:8b:2d:7f:49:8b:62:12:61:39:a6:df:61:76:ff:36:49: 56:2d:a4:a6:1d:a4:2f:82:c8:3b:78:2d:83:c1:c0:7a:c0:5c: 91:ba:d7:ee -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtW1zpIwKluJMXJtMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyODAxMDAzM1oXDTI1MTIyNzAyMDAzM1owLzEtMCsGA1UEAxMk MmExY2YxYWItY2UyNy00YjExLTk3OTAtM2YxNGJhNzlhYTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2ZJHc8YsgwPj4mFSYhxIo3BvjlRcYFahHHH REMAPEA2Xj+DusyCGsV8xVslbvwxYZkLrzykPb1ASn6f3rQeL8GRli4CTTh+r64M M9/Pf7lncU8FW28+1zlblZWtSr/0C4F/WRudvSaxQk7HDWLAzOr2ef1s6lTkmf8h k+xD+1ebNmuVwldSJcJ5nRfDqMQHwt5dAADbrIWhfjG/Q3+G1xXnXnCU6rHHYCFO XejWum+S05NyNekRTMMKO6lH5VtB2t/RINEHh27IV8PW2AH3/6XG1BELmqHLmIm0 ZSJfPW2zDMgT9XALo6B+1GPCzPkeBlzV8IQtfNf8/ej8IppZJQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHdSUT1obyL8rzUhoM5PS51J1X6FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDY0M2E1YjEtMTJmOC0z ODIzLTk4NTEtMTU5MDI0NGIyMDY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUG/gA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFZzxoxo/ZQmbJOGXzm9XLZIjD1S4AZCV7I2S+dEL4M7NBojfyUB 3wdv6kvJCu23y5u2SuJuYQs+PdIKrN2CcehF3xfolgvUgT1oTOabqt0izrHOECbj 2YQiRrhwD5FDZyrL2GOf+tW91U51wjssMySp/FYEmYmyYRmWNCdcpjq9g3RAp470 Mp7UhUTAITtAJxw1/e0cWLcAscC3FB+5A+inaNjyLgRSwbs3rBpcmzZQrxquX3IH /mMFUUwdRO1d7pI7qONbhnCbcPZBzvf7elwaAlVDreiA/EIViy1/SYtiEmE5pt9h dv82SVYtpKYdpC+CyDt4LYPBwHrAXJG61+4= -----END CERTIFICATE-----Generated at Tue Nov 4 22:28:28 2025 by rpki-client