$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/158593d3-f511-31a7-84d8-12e8caf061ed.roa File: 158593d3-f511-31a7-84d8-12e8caf061ed.roa (raw, json) Hash identifier: 9Y+5yjNgh93I1VTzLoS7akM4SSS6xnSC/bYygMNHNtU= Subject key identifier: B6:3C:8D:30:FF:D3:2E:16:47:76:85:E6:4B:97:EA:64:DA:9F:AA:6D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B48E209F74715A23F870CDA00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/158593d3-f511-31a7-84d8-12e8caf061ed.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 35994 IP address blocks: 2600:1404:7400::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e2:09:f7:47:15:a2:3f:87:0c:da:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=652d777e-9452-4ffd-91fd-21ebdde5abae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:e3:b6:6d:06:96:b5:84:65:fd:30:41:a5:25: 82:89:50:08:bb:7b:79:80:48:d5:1c:3b:f1:7f:78: d6:18:5d:9e:83:aa:f4:b8:b0:d6:62:60:ee:94:33: de:8a:76:61:75:5e:3e:f9:23:de:33:c8:95:b5:ec: bd:3a:c7:49:f7:12:25:f9:b5:f2:2c:10:6a:d7:13: b0:1b:b5:5c:50:ef:72:1f:11:bd:94:83:ab:49:61: cf:d6:57:f3:6b:af:64:f9:d4:d8:06:f2:2d:e9:35: bd:9c:d6:28:29:9b:7d:18:70:af:a5:ee:95:b0:15: b2:b7:c3:75:c9:62:96:8e:37:88:8f:da:be:9e:1f: e3:3b:b3:77:6f:ae:98:83:f9:88:cc:82:18:87:ee: a3:da:78:fe:29:b0:e7:4d:25:e8:84:91:31:d5:11: 3b:f5:c3:e7:65:c0:98:e6:3e:9c:91:77:c4:69:17: c4:34:96:a7:53:a0:12:28:de:c0:7a:45:15:7e:61: af:33:05:41:77:10:3c:18:df:5a:6c:32:b8:47:77: d0:de:a9:6b:63:e9:d3:25:e7:90:53:e7:52:5d:e7: c8:c7:6b:ac:fb:fb:50:73:3a:09:72:3b:77:90:f7: a2:8c:13:4d:7a:69:d2:9d:44:9a:ad:e0:21:3f:95: 15:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:3C:8D:30:FF:D3:2E:16:47:76:85:E6:4B:97:EA:64:DA:9F:AA:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/158593d3-f511-31a7-84d8-12e8caf061ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1404:7400::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:f3:fb:76:f3:56:ec:0f:92:e0:8e:d0:d2:0b:36:6d:a8:cf: f0:36:82:7e:9e:10:62:e3:56:e0:93:19:14:f1:07:d7:17:ce: 00:ba:82:e5:8f:47:1f:0b:5d:99:1b:ec:b1:0c:60:9b:95:92: ee:c3:1f:8b:b1:25:b9:c2:39:ad:60:36:3e:e0:02:6b:6b:b0: 41:b7:5f:0b:6f:fc:da:b5:3a:7f:df:35:df:bf:76:b9:77:b5: 03:c7:0a:52:ae:14:8f:fd:06:af:ad:e8:66:ef:18:16:b2:4a: 84:71:49:e3:88:94:41:db:7d:1d:c0:c3:48:2d:72:95:70:33: 2f:da:b9:4a:33:dd:2f:00:3b:fc:2a:f5:48:51:fd:05:9e:fc: ff:4b:cf:d0:22:99:f6:09:58:5a:7f:f1:92:cf:07:5e:66:3c: 0c:4b:b8:67:d3:49:78:39:c4:5c:de:61:e0:45:0c:5e:cd:c9: 15:61:83:f4:95:13:73:3d:6c:8d:55:7c:9c:9a:70:dc:85:49: d2:6d:2a:4c:6d:f8:f3:9e:51:d1:49:18:bb:1b:ac:c5:73:f4: 2e:6c:43:5a:72:49:a2:2a:ce:e6:f3:3b:7d:7e:15:0d:47:12: 9d:10:40:59:1e:9b:ad:83:41:c2:64:66:fa:0d:37:19:09:61: b3:0b:4b:c0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtI4gn3RxWiP4cM2gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk NjUyZDc3N2UtOTQ1Mi00ZmZkLTkxZmQtMjFlYmRkZTVhYmFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+O2bQaWtYRl/TBBpSWCiVAIu3t5gEjVHDvx f3jWGF2eg6r0uLDWYmDulDPeinZhdV4++SPeM8iVtey9OsdJ9xIl+bXyLBBq1xOw G7VcUO9yHxG9lIOrSWHP1lfza69k+dTYBvIt6TW9nNYoKZt9GHCvpe6VsBWyt8N1 yWKWjjeIj9q+nh/jO7N3b66Yg/mIzIIYh+6j2nj+KbDnTSXohJEx1RE79cPnZcCY 5j6ckXfEaRfENJanU6ASKN7AekUVfmGvMwVBdxA8GN9abDK4R3fQ3qlrY+nTJeeQ U+dSXefIx2us+/tQczoJcjt3kPeijBNNemnSnUSareAhP5UVVwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLY8jTD/0y4WR3aF5kuX6mTan6ptMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTU4NTkzZDMtZjUxMS0z MWE3LTg0ZDgtMTJlOGNhZjA2MWVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUBHQA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIjz+3bzVuwPkuCO0NILNm2oz/A2gn6eEGLjVuCTGRTxB9cXzgC6 guWPRx8LXZkb7LEMYJuVku7DH4uxJbnCOa1gNj7gAmtrsEG3Xwtv/Nq1On/fNd+/ drl3tQPHClKuFI/9Bq+t6GbvGBaySoRxSeOIlEHbfR3Aw0gtcpVwMy/auUoz3S8A O/wq9UhR/QWe/P9Lz9AimfYJWFp/8ZLPB15mPAxLuGfTSXg5xFzeYeBFDF7NyRVh g/SVE3M9bI1VfJyacNyFSdJtKkxt+POeUdFJGLsbrMVz9C5sQ1pySaIqzubzO31+ FQ1HEp0QQFkem62DQcJkZvoNNxkJYbMLS8A= -----END CERTIFICATE-----Generated at Tue Nov 4 22:27:17 2025 by rpki-client