$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/695e8e4c-d432-3126-a3c1-aa94e8253b6f.roa File: 695e8e4c-d432-3126-a3c1-aa94e8253b6f.roa (raw, json) Hash identifier: hUJTAKM833Lngrcv6IT+kaaUa0IFTXtmmBFALP9igUE= Subject key identifier: 28:10:92:9B:0B:0D:27:5F:76:75:CA:85:C8:75:71:8C:46:9D:7B:B4 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B48E1C967BAFC56E5B83ED180 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/695e8e4c-d432-3126-a3c1-aa94e8253b6f.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 20940 IP address blocks: 2600:1488:6080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:c9:67:ba:fc:56:e5:b8:3e:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=f181d124-1ad3-48b3-978d-4615219e42ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:5a:8c:bb:93:be:e9:68:63:2a:83:5a:ed:65: 35:b4:cd:2c:df:bc:69:d3:50:68:1d:9f:75:8e:13: 15:60:03:7b:d5:05:a7:a2:df:be:c8:29:5f:92:ba: c6:d2:19:10:d5:95:7a:9b:c7:16:33:41:45:56:0f: 65:02:2b:25:c1:0e:47:31:6e:cd:3b:57:43:50:94: 37:4b:39:5e:b8:7d:de:29:9d:d9:00:23:e1:78:fc: e6:03:f5:58:87:e0:46:9a:8e:25:ab:a6:04:eb:62: 9d:2e:95:e2:de:54:a4:10:b5:f5:ee:01:97:c7:2b: e4:aa:8c:b9:85:0c:0d:2f:56:6e:63:ba:94:a4:de: 7c:57:ce:ad:32:d7:c1:a6:de:2e:77:06:81:bd:bc: b2:be:1e:1b:83:ca:0e:1d:40:34:49:25:74:c2:2f: d7:97:5b:ed:ba:e1:af:bd:97:25:d1:8a:9f:d8:1b: 0f:e4:fd:b6:ed:4f:9e:df:d9:10:57:31:b7:ac:11: 2b:df:98:11:21:a5:dd:73:81:9d:bf:92:33:3e:5e: 65:35:2c:cb:b4:02:de:14:c9:66:ae:18:9b:8d:50: 6d:bf:f7:c1:fb:b9:7a:49:f9:08:12:ef:b6:92:12: 76:97:9a:1a:c1:a8:9f:66:41:07:29:2e:89:f0:48: 43:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:10:92:9B:0B:0D:27:5F:76:75:CA:85:C8:75:71:8C:46:9D:7B:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/695e8e4c-d432-3126-a3c1-aa94e8253b6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1488:6080::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:81:42:ed:29:21:0e:53:da:23:bb:cc:4f:d7:be:69:b2:64: f9:61:88:c3:f8:31:c6:68:06:35:8d:75:e4:f3:69:38:25:ab: d5:0b:c0:2e:50:e8:c3:74:59:a7:bc:66:0b:ab:6f:d1:7c:0e: 8d:5c:d8:58:8f:1c:dd:46:0d:69:b5:84:b7:be:cf:f0:70:59: 7f:85:24:60:0c:5e:44:25:26:4d:48:22:c9:ef:7d:43:ee:15: 1c:78:e7:f0:eb:6d:f1:57:1a:25:98:a0:64:76:03:a0:35:e9: 52:70:66:5d:7a:12:16:88:22:5f:7c:6f:47:db:99:8e:01:1f: a1:d1:39:a8:cd:8f:9f:f6:42:60:e7:48:eb:25:83:06:f4:4a: 92:c4:e7:86:d7:37:68:a3:e5:cc:1e:5d:2f:78:b4:08:08:b6: d7:ad:ab:b3:cc:aa:51:33:84:5c:11:5b:28:b9:32:dc:ef:4c: d6:4d:79:16:82:b7:38:b4:c9:dd:b6:ee:f3:3b:86:ad:2d:f2: 1e:86:70:2c:3b:2f:8f:c6:4f:49:96:83:0e:26:c1:71:41:91: 7d:9e:88:10:32:72:ba:27:ed:8a:08:83:f0:ac:99:d3:e3:22: 72:5c:65:b9:c0:12:41:d3:29:8e:23:3b:e9:13:6f:9e:a0:0a: de:05:bf:43 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtI4clnuvxW5bg+0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk ZjE4MWQxMjQtMWFkMy00OGIzLTk3OGQtNDYxNTIxOWU0MmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVqMu5O+6WhjKoNa7WU1tM0s37xp01BoHZ91 jhMVYAN71QWnot++yClfkrrG0hkQ1ZV6m8cWM0FFVg9lAislwQ5HMW7NO1dDUJQ3 SzleuH3eKZ3ZACPhePzmA/VYh+BGmo4lq6YE62KdLpXi3lSkELX17gGXxyvkqoy5 hQwNL1ZuY7qUpN58V86tMtfBpt4udwaBvbyyvh4bg8oOHUA0SSV0wi/Xl1vtuuGv vZcl0Yqf2BsP5P227U+e39kQVzG3rBEr35gRIaXdc4Gdv5IzPl5lNSzLtALeFMlm rhibjVBtv/fB+7l6SfkIEu+2khJ2l5oawaifZkEHKS6J8EhDJwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCgQkpsLDSdfdnXKhch1cYxGnXu0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjk1ZThlNGMtZDQzMi0z MTI2LWEzYzEtYWE5NGU4MjUzYjZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUiGCA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAECBQu0pIQ5T2iO7zE/XvmmyZPlhiMP4McZoBjWNdeTzaTglq9UL wC5Q6MN0Wae8Zgurb9F8Do1c2FiPHN1GDWm1hLe+z/BwWX+FJGAMXkQlJk1IIsnv fUPuFRx45/DrbfFXGiWYoGR2A6A16VJwZl16EhaIIl98b0fbmY4BH6HROajNj5/2 QmDnSOslgwb0SpLE54bXN2ij5cweXS94tAgIttetq7PMqlEzhFwRWyi5MtzvTNZN eRaCtzi0yd227vM7hq0t8h6GcCw7L4/GT0mWgw4mwXFBkX2eiBAycron7YoIg/Cs mdPjInJcZbnAEkHTKY4jO+kTb56gCt4Fv0M= -----END CERTIFICATE-----Generated at Wed Nov 5 00:50:24 2025 by rpki-client