$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4cf719bc-1c9d-3aaa-85cf-f81a3543abd3.roa File: 4cf719bc-1c9d-3aaa-85cf-f81a3543abd3.roa (raw, json) Hash identifier: C1lIZqc+WKPcWIj3T++kkOBfaC7a9B1kXHRA7CtCKDQ= Subject key identifier: CF:2B:13:FC:31:B7:49:33:7A:60:18:FC:9B:91:7E:CF:C5:7B:F9:BA Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B2A2C41BCD18EF744ECD68100 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4cf719bc-1c9d-3aaa-85cf-f81a3543abd3.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 20940 IP address blocks: 2600:1404:b400::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:41:bc:d1:8e:f7:44:ec:d6:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=3d66644d-c53b-4e86-bcb7-08659d4144c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e9:38:a1:70:45:02:5d:f6:f2:86:90:67:e5: b9:00:c1:35:1a:2b:d4:f2:98:73:91:b7:eb:50:c8: af:ee:30:82:e2:1e:0f:97:13:72:b1:dc:7f:3d:6c: 4d:10:13:fa:f6:73:78:86:48:12:55:d2:77:bb:a4: a5:cd:08:3d:d1:3f:cd:c1:ed:86:de:9e:9f:88:93: 56:83:d8:ac:14:37:7c:c6:5f:5b:c5:d4:59:b6:51: eb:0e:30:be:47:fe:ac:34:8b:a4:03:b5:15:1e:9a: 0c:98:e4:29:53:c3:92:7c:7c:b1:36:1d:e0:2d:1a: 89:4e:bf:63:de:62:be:d0:a3:17:ed:c0:3c:8c:80: 15:da:e8:1c:2b:92:72:93:e8:bf:f9:f7:17:c4:e9: 42:5f:41:10:d7:31:fe:6a:c8:09:ea:4d:f0:16:d7: 7e:53:cc:1b:be:6d:4d:08:58:48:85:c0:16:8f:4c: 71:39:23:29:c4:c2:01:8d:d7:c0:b1:20:e3:06:58: 61:6d:28:67:a3:7b:ca:b9:08:f4:40:6e:96:79:56: ac:31:85:23:52:d8:23:57:4c:77:ff:9d:63:1d:a6: d8:c7:14:1e:8c:59:10:12:61:bf:0f:8b:22:5c:50: 74:0c:2e:61:32:e3:62:19:bb:9c:bf:26:4b:81:0b: ca:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:2B:13:FC:31:B7:49:33:7A:60:18:FC:9B:91:7E:CF:C5:7B:F9:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4cf719bc-1c9d-3aaa-85cf-f81a3543abd3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1404:b400::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:00:03:22:54:d6:1e:3a:b9:18:9a:3c:a9:a1:72:1d:d1:f6: 69:2e:00:9d:52:ba:a1:dc:1a:47:0c:8f:fd:74:00:35:72:6d: d2:7b:91:3e:90:69:bf:d0:38:00:33:d0:39:da:e5:15:fc:e3: f6:5b:a7:be:27:7a:55:db:c1:99:d7:2a:2f:af:91:86:87:4b: 10:bf:39:a1:de:70:ab:82:3a:74:d2:f9:36:d3:68:1a:31:5b: 18:1a:1e:66:37:f6:5b:f2:e5:eb:d3:c6:69:fa:ac:25:ec:c0: 6a:13:b6:49:a9:88:07:70:7f:02:c3:99:01:1a:32:70:6f:70: 19:90:58:ce:36:6b:31:6a:ba:d2:e5:17:ce:37:41:d2:9a:4b: ff:c0:da:7b:52:47:92:8d:1c:3f:e3:97:42:93:e0:14:b8:23: 7e:36:cf:f3:85:dd:fb:55:b0:3d:70:a6:d0:86:f0:92:cc:95: a1:82:f1:c5:0d:d2:30:6c:b8:64:3d:f4:2b:4a:40:f4:3d:cc: 2a:53:74:6e:3a:d4:26:ce:4d:60:13:d4:33:89:6d:2d:3c:7f: d4:6f:36:f8:51:cf:88:70:7b:0c:da:db:77:eb:72:aa:97:94: 79:72:ee:31:ef:72:2d:21:42:1e:e0:29:ce:76:0a:13:a0:9f: 44:58:61:9a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsqLEG80Y73ROzWgQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk M2Q2NjY0NGQtYzUzYi00ZTg2LWJjYjctMDg2NTlkNDE0NGM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOk4oXBFAl328oaQZ+W5AME1GivU8phzkbfr UMiv7jCC4h4PlxNysdx/PWxNEBP69nN4hkgSVdJ3u6SlzQg90T/Nwe2G3p6fiJNW g9isFDd8xl9bxdRZtlHrDjC+R/6sNIukA7UVHpoMmOQpU8OSfHyxNh3gLRqJTr9j 3mK+0KMX7cA8jIAV2ugcK5Jyk+i/+fcXxOlCX0EQ1zH+asgJ6k3wFtd+U8wbvm1N CFhIhcAWj0xxOSMpxMIBjdfAsSDjBlhhbShno3vKuQj0QG6WeVasMYUjUtgjV0x3 /51jHabYxxQejFkQEmG/D4siXFB0DC5hMuNiGbucvyZLgQvKDQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFM8rE/wxt0kzemAY/JuRfs/Fe/m6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGNmNzE5YmMtMWM5ZC0z YWFhLTg1Y2YtZjgxYTM1NDNhYmQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUBLQA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAwAAyJU1h46uRiaPKmhch3R9mkuAJ1SuqHcGkcMj/10ADVybdJ7 kT6Qab/QOAAz0Dna5RX84/Zbp74nelXbwZnXKi+vkYaHSxC/OaHecKuCOnTS+TbT aBoxWxgaHmY39lvy5evTxmn6rCXswGoTtkmpiAdwfwLDmQEaMnBvcBmQWM42azFq utLlF843QdKaS//A2ntSR5KNHD/jl0KT4BS4I342z/OF3ftVsD1wptCG8JLMlaGC 8cUN0jBsuGQ99CtKQPQ9zCpTdG461CbOTWAT1DOJbS08f9RvNvhRz4hwewza23fr cqqXlHly7jHvci0hQh7gKc52ChOgn0RYYZo= -----END CERTIFICATE-----Generated at Tue Nov 4 22:18:20 2025 by rpki-client