$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f3b498d-3a79-3e6a-ab59-da6cd2a3d587.roa File: 3f3b498d-3a79-3e6a-ab59-da6cd2a3d587.roa (raw, json) Hash identifier: d8pv1Wpj0Dssze5HGlX/yS8FYmHbKl8lsrtxD4yT//Y= Subject key identifier: DC:EC:5A:7E:64:A9:E7:66:6F:DE:2D:61:4D:B3:5E:81:F3:A9:A4:54 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B48E1CC58ACC3A81EE0881180 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f3b498d-3a79-3e6a-ab59-da6cd2a3d587.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 35994 IP address blocks: 2600:1403:6400::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:cc:58:ac:c3:a8:1e:e0:88:11:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=1c754b9f-04a9-4c7e-903b-5b81b842ed42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:43:a3:5d:af:a3:f1:82:e9:06:35:1c:8d:03: 68:a4:6c:24:10:47:c7:dd:ed:95:4b:e6:2d:c5:26: 64:d5:99:b7:79:c7:4d:2b:aa:09:02:4a:5f:76:4e: 1f:03:be:2d:18:60:09:76:10:d7:19:81:7d:b9:cb: 8a:a2:51:3f:d1:47:d5:07:99:74:69:43:d6:85:9d: 42:31:30:2c:79:ff:3b:1c:11:b3:1e:54:b8:10:ba: 95:90:9b:5e:23:fa:dc:1d:6b:ce:74:2f:36:ad:31: 54:91:56:41:24:5d:66:74:85:84:9d:52:84:d4:85: 1f:ff:a5:97:2c:bf:2f:f8:e9:4f:11:0c:28:a7:af: 59:0a:59:89:99:47:f7:08:44:b0:1b:5f:ac:5d:ad: 07:db:9c:17:8d:6f:91:50:03:98:91:b2:81:fc:3d: 1f:b3:1e:82:c6:0f:c3:1f:6c:09:4e:b2:e0:2e:8a: c2:b0:5e:59:2f:78:da:ac:21:7b:24:98:d8:c4:79: f0:69:93:a9:e1:ae:d8:f2:61:64:28:7e:f5:fe:e6: a6:37:51:ee:db:13:21:61:ad:c1:b2:9e:08:cb:93: 96:07:c5:a0:c5:54:f6:73:22:0b:92:2d:3d:5e:df: a1:80:1b:7b:6c:e0:71:9a:b5:82:bb:81:0f:d5:c6: 1a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:EC:5A:7E:64:A9:E7:66:6F:DE:2D:61:4D:B3:5E:81:F3:A9:A4:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f3b498d-3a79-3e6a-ab59-da6cd2a3d587.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1403:6400::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:15:7b:64:3d:7b:01:2e:19:80:6f:ec:1d:6d:ef:d2:fa:d0: f0:5f:99:80:71:70:de:b7:29:d6:d3:01:93:21:c8:eb:80:c4: b9:cd:41:a4:91:46:79:2f:f2:43:78:c8:7e:c8:80:b5:46:46: 6a:ea:7b:5c:93:68:de:8c:52:53:b9:ca:be:3a:ee:e4:40:6d: b9:c1:e7:4c:5b:50:d9:bd:53:1d:e6:2a:2a:f7:0b:30:c6:64: 24:fe:5a:5f:98:27:28:d8:b7:bc:fa:9c:75:4d:a9:8c:a3:7a: 6a:41:34:c3:37:8c:ad:72:62:ad:27:d5:15:c0:23:66:53:83: de:7c:a7:c8:cc:30:9a:e6:43:a9:6e:42:be:29:17:c2:0a:f5: 61:aa:dd:bd:e8:66:30:db:5f:8e:3f:46:03:38:c5:a8:9e:b5: fc:c8:32:70:34:42:e6:8f:c3:40:4c:c4:a8:75:cb:79:86:81: 1f:88:f4:db:d0:af:90:b5:b8:72:f9:22:4d:b9:8e:57:7c:57: d1:d0:84:be:50:c6:31:d2:71:08:62:97:6e:3d:71:f3:82:9b: a8:15:84:8b:38:0a:1b:0e:2f:8f:7c:39:74:22:ed:ad:f1:b5: 9f:26:4e:dd:e6:41:b7:c9:2d:95:da:fc:9a:c5:7f:4d:ed:1f: 1d:0b:ae:47 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtI4cxYrMOoHuCIEYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk MWM3NTRiOWYtMDRhOS00YzdlLTkwM2ItNWI4MWI4NDJlZDQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEOjXa+j8YLpBjUcjQNopGwkEEfH3e2VS+Yt xSZk1Zm3ecdNK6oJAkpfdk4fA74tGGAJdhDXGYF9ucuKolE/0UfVB5l0aUPWhZ1C MTAsef87HBGzHlS4ELqVkJteI/rcHWvOdC82rTFUkVZBJF1mdIWEnVKE1IUf/6WX LL8v+OlPEQwop69ZClmJmUf3CESwG1+sXa0H25wXjW+RUAOYkbKB/D0fsx6Cxg/D H2wJTrLgLorCsF5ZL3jarCF7JJjYxHnwaZOp4a7Y8mFkKH71/uamN1Hu2xMhYa3B sp4Iy5OWB8WgxVT2cyILki09Xt+hgBt7bOBxmrWCu4EP1cYaUwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNzsWn5kqedmb94tYU2zXoHzqaRUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2YzYjQ5OGQtM2E3OS0z ZTZhLWFiNTktZGE2Y2QyYTNkNTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUA2QA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIcVe2Q9ewEuGYBv7B1t79L60PBfmYBxcN63KdbTAZMhyOuAxLnN QaSRRnkv8kN4yH7IgLVGRmrqe1yTaN6MUlO5yr467uRAbbnB50xbUNm9Ux3mKir3 CzDGZCT+Wl+YJyjYt7z6nHVNqYyjempBNMM3jK1yYq0n1RXAI2ZTg958p8jMMJrm Q6luQr4pF8IK9WGq3b3oZjDbX44/RgM4xaietfzIMnA0QuaPw0BMxKh1y3mGgR+I 9NvQr5C1uHL5Ik25jld8V9HQhL5QxjHScQhil249cfOCm6gVhIs4ChsOL498OXQi 7a3xtZ8mTt3mQbfJLZXa/JrFf03tHx0Lrkc= -----END CERTIFICATE-----Generated at Wed Nov 5 00:05:07 2025 by rpki-client