$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/254a50b6-5d9f-3106-8bb7-b65f449c1a1c.roa File: 254a50b6-5d9f-3106-8bb7-b65f449c1a1c.roa (raw, json) Hash identifier: PMfs6qTmbR9yqx3OE3K6sUQC0SWEmUGrRmWL4PzyfjM= Subject key identifier: 73:8E:6E:57:B9:EE:36:3E:14:03:B7:0F:09:84:14:5F:C2:E3:60:7C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B48E207E03B7DE5196C392B80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/254a50b6-5d9f-3106-8bb7-b65f449c1a1c.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 20940 IP address blocks: 2600:1488:6480::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e2:07:e0:3b:7d:e5:19:6c:39:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=c116217b-f69d-40d8-80a4-d05a5abfb08d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ad:c0:cf:26:f6:63:42:0c:c6:92:e3:19:39: 2e:15:ee:6d:9b:b2:55:93:d5:56:65:fa:34:34:ad: ca:67:ad:dd:5a:a7:fe:1a:7f:e5:20:89:04:83:f9: c6:36:8f:06:09:bf:b7:30:e6:94:7c:a6:58:57:1c: 0a:a8:55:2b:3b:ee:bf:0f:5f:8c:6f:b8:1d:21:a7: 0c:f1:8a:fb:45:b6:23:7d:fe:99:6b:81:fd:69:7b: e7:80:c2:20:40:ba:73:35:ea:4a:d7:10:4b:a6:da: 85:33:c9:0d:78:81:c6:6e:1a:4f:37:f5:da:68:c0: 87:8c:de:31:11:19:7b:05:f1:da:4a:1f:4f:05:a4: f6:23:a0:4d:6f:20:41:23:b7:79:63:9c:b1:92:ae: 65:84:cb:17:c0:10:36:df:a4:a8:8b:76:57:2f:74: e6:ec:f1:c6:e0:7e:a7:3d:db:86:e8:2e:6d:e2:96: 4b:c4:c1:ee:69:d5:f6:d6:5e:86:2d:6d:e4:ac:ec: bf:b6:37:7c:70:1e:f3:31:8a:b3:2c:4a:eb:a6:41: 73:9a:a1:10:ad:54:10:0e:c4:a0:17:31:5f:7a:db: fd:c1:90:02:75:1b:7d:f0:22:14:e3:30:c0:e2:3a: 19:42:9a:a7:26:00:f3:29:c5:c8:c1:b5:d6:97:62: 83:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:8E:6E:57:B9:EE:36:3E:14:03:B7:0F:09:84:14:5F:C2:E3:60:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/254a50b6-5d9f-3106-8bb7-b65f449c1a1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1488:6480::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:70:a2:92:9f:ca:a1:41:5e:3b:75:b6:82:3e:31:2c:54:35: 9d:3e:c4:d5:e3:47:7e:2e:a4:b2:c2:84:44:45:65:c5:a1:94: 86:52:c3:ec:6e:e0:64:a9:3b:d3:9d:9d:99:5f:48:f3:aa:72: 4e:83:55:26:ef:51:da:a2:44:08:b1:af:9f:61:ab:7d:0c:b2: 74:c8:43:45:16:c1:bb:56:7e:dc:fa:db:ac:aa:39:06:85:dc: 10:aa:56:a3:5c:fe:d4:eb:c6:b6:97:8e:ab:49:23:7d:a6:5e: b2:37:b4:14:b6:05:83:09:18:f1:9b:14:86:b8:32:74:bc:c1: 2b:05:2d:2e:d2:90:9e:84:36:6a:48:a8:3e:4f:51:ed:af:42: 8e:cc:69:71:e3:e7:56:68:0e:3b:dc:ed:3c:23:1b:50:c2:e2: b8:b7:38:fc:ba:23:8e:ff:6f:eb:e3:6c:53:9a:54:a6:00:1f: 47:a9:ab:db:e5:2c:a0:ca:a8:a9:f0:4d:17:7a:f3:23:91:43: f1:c1:a7:b8:ac:81:d5:43:45:76:d6:09:11:14:01:c8:ca:8b: 85:1f:7d:14:19:4d:ca:cd:7d:48:36:d2:b6:97:8e:77:75:3a: d5:16:73:88:17:d5:2e:3b:67:3c:83:d6:77:e3:0d:1c:b5:2a: 61:13:07:54 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtI4gfgO33lGWw5K4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk YzExNjIxN2ItZjY5ZC00MGQ4LTgwYTQtZDA1YTVhYmZiMDhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmK3Azyb2Y0IMxpLjGTkuFe5tm7JVk9VWZfo0 NK3KZ63dWqf+Gn/lIIkEg/nGNo8GCb+3MOaUfKZYVxwKqFUrO+6/D1+Mb7gdIacM 8Yr7RbYjff6Za4H9aXvngMIgQLpzNepK1xBLptqFM8kNeIHGbhpPN/XaaMCHjN4x ERl7BfHaSh9PBaT2I6BNbyBBI7d5Y5yxkq5lhMsXwBA236Soi3ZXL3Tm7PHG4H6n PduG6C5t4pZLxMHuadX21l6GLW3krOy/tjd8cB7zMYqzLErrpkFzmqEQrVQQDsSg FzFfetv9wZACdRt98CIU4zDA4joZQpqnJgDzKcXIwbXWl2KDfwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHOOble57jY+FAO3DwmEFF/C42B8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjU0YTUwYjYtNWQ5Zi0z MTA2LThiYjctYjY1ZjQ0OWMxYTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUiGSA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGlwopKfyqFBXjt1toI+MSxUNZ0+xNXjR34upLLChERFZcWhlIZS w+xu4GSpO9OdnZlfSPOqck6DVSbvUdqiRAixr59hq30MsnTIQ0UWwbtWftz626yq OQaF3BCqVqNc/tTrxraXjqtJI32mXrI3tBS2BYMJGPGbFIa4MnS8wSsFLS7SkJ6E NmpIqD5PUe2vQo7MaXHj51ZoDjvc7TwjG1DC4ri3OPy6I47/b+vjbFOaVKYAH0ep q9vlLKDKqKnwTRd68yORQ/HBp7isgdVDRXbWCREUAcjKi4UffRQZTcrNfUg20raX jnd1OtUWc4gX1S47ZzyD1nfjDRy1KmETB1Q= -----END CERTIFICATE-----Generated at Wed Nov 5 02:59:08 2025 by rpki-client