$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/91a6f01e-3fa5-3832-ad9d-db5669c0d349.roa File: 91a6f01e-3fa5-3832-ad9d-db5669c0d349.roa (raw, json) Hash identifier: eKX5N0FWEMHFo2R81MgEBkkftPRq5HSd6w9KRC/lkbs= Subject key identifier: 27:44:1B:76:32:7B:7F:0B:9C:A8:56:9D:F1:C9:AB:8E:D4:33:DA:D5 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B2CF6EEF11F34E0DC4C2DE950 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/91a6f01e-3fa5-3832-ad9d-db5669c0d349.roa Signing time: Sat 13 Sep 2025 01:00:33 +0000 ROA not before: Sat 13 Sep 2025 01:00:33 +0000 ROA not after: Fri 12 Dec 2025 02:00:33 +0000 asID: 20940 IP address blocks: 2600:1409:5000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:f6:ee:f1:1f:34:e0:dc:4c:2d:e9:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 13 01:00:33 2025 GMT Not After : Dec 12 02:00:33 2025 GMT Subject: CN=c99e6bdf-5fa4-4101-be0a-0345ddcd9e54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f5:28:18:07:9b:70:85:92:c9:57:99:ba:50: eb:7f:9e:9c:54:9c:6e:6e:d9:92:83:e4:91:11:fd: a1:2f:c1:36:2f:3f:27:4f:ec:f5:36:0b:1a:fe:08: 21:37:b3:be:0b:e2:2c:05:69:e2:31:ea:d6:db:dd: 6c:9d:3c:d3:be:0c:90:a5:f4:5c:7b:3d:11:14:66: 3c:51:93:7d:5e:8f:4e:7d:0d:21:4f:34:56:62:f4: 34:70:53:81:aa:95:f0:8e:8f:34:78:a3:bb:0c:a9: 0e:be:36:bf:c5:13:7e:57:59:16:ff:4a:1c:32:90: f9:93:9d:73:1f:69:04:bb:27:83:83:d4:0f:ae:f5: 19:58:ab:af:a9:33:e4:6e:e5:b4:b9:9a:52:c8:7b: e2:89:4d:53:60:7a:58:2b:8a:81:24:76:20:fd:39: b9:ca:6f:75:67:17:8b:4b:f0:5d:37:22:22:16:37: 0b:b9:67:46:04:ec:06:9f:f8:52:8e:3e:ac:eb:48: ab:d3:56:37:76:49:30:e7:87:f2:f0:76:6d:cd:db: ae:aa:77:75:7a:1b:85:61:5a:c0:4f:77:4b:1f:8f: 9b:dc:8f:4a:9d:59:bb:fb:27:d3:44:8c:b1:e0:db: 3a:a7:e3:f4:0a:f9:2f:c7:48:61:20:3a:58:28:5c: 34:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:44:1B:76:32:7B:7F:0B:9C:A8:56:9D:F1:C9:AB:8E:D4:33:DA:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/91a6f01e-3fa5-3832-ad9d-db5669c0d349.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1409:5000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:7b:6c:ea:6a:bc:48:20:42:93:5c:f1:cd:d3:de:64:e1:03: be:18:fa:42:59:3f:57:c9:d6:21:a7:23:51:c1:b3:32:7a:af: f8:9a:f1:a4:76:e2:a2:3e:8c:57:2a:f9:7e:37:9d:b1:f4:8e: 79:a4:3d:0b:1f:75:8e:33:0e:ce:c0:d3:dc:eb:d3:6d:89:45: 43:ae:be:33:28:43:98:72:52:5d:de:38:69:9e:97:9d:b8:30: 2f:63:7e:54:71:5d:e9:ff:4c:a1:3f:ae:8f:e0:7a:d6:01:23: a3:82:9a:72:0b:89:98:da:49:4b:02:a9:92:0d:11:ae:1d:f2: 81:53:97:49:1c:bd:ef:57:a5:08:f5:d1:f6:19:52:f7:77:fd: 5a:5d:0c:21:e9:8a:45:91:f6:c4:7e:9c:89:d8:40:65:1b:f4: fa:29:e0:ec:f4:80:8b:41:36:4d:59:09:ba:a5:21:b8:48:24: 3e:cd:ca:5e:fb:7f:1c:dc:fe:8c:32:01:0b:9b:90:59:d4:57: 21:08:01:a8:02:8b:60:85:f3:e7:5b:79:f1:a5:e0:c9:af:72: 72:78:ce:42:9f:cb:34:c1:7e:ab:c2:f0:dc:7f:59:1c:3e:49: 4a:89:0a:b9:25:e4:3f:00:d2:84:37:a3:65:d9:bd:6f:8c:90: c1:4b:23:f7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEss9u7xHzTg3Ewt6VAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkxMzAxMDAzM1oXDTI1MTIxMjAyMDAzM1owLzEtMCsGA1UEAxMk Yzk5ZTZiZGYtNWZhNC00MTAxLWJlMGEtMDM0NWRkY2Q5ZTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvUoGAebcIWSyVeZulDrf56cVJxubtmSg+SR Ef2hL8E2Lz8nT+z1Ngsa/gghN7O+C+IsBWniMerW291snTzTvgyQpfRcez0RFGY8 UZN9Xo9OfQ0hTzRWYvQ0cFOBqpXwjo80eKO7DKkOvja/xRN+V1kW/0ocMpD5k51z H2kEuyeDg9QPrvUZWKuvqTPkbuW0uZpSyHviiU1TYHpYK4qBJHYg/Tm5ym91ZxeL S/BdNyIiFjcLuWdGBOwGn/hSjj6s60ir01Y3dkkw54fy8HZtzduuqnd1ehuFYVrA T3dLH4+b3I9KnVm7+yfTRIyx4Ns6p+P0Cvkvx0hhIDpYKFw04QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCdEG3Yye38LnKhWnfHJq47UM9rVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTFhNmYwMWUtM2ZhNS0z ODMyLWFkOWQtZGI1NjY5YzBkMzQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUCVAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABZ7bOpqvEggQpNc8c3T3mThA74Y+kJZP1fJ1iGnI1HBszJ6r/ia 8aR24qI+jFcq+X43nbH0jnmkPQsfdY4zDs7A09zr022JRUOuvjMoQ5hyUl3eOGme l524MC9jflRxXen/TKE/ro/getYBI6OCmnILiZjaSUsCqZINEa4d8oFTl0kcve9X pQj10fYZUvd3/VpdDCHpikWR9sR+nInYQGUb9Pop4Oz0gItBNk1ZCbqlIbhIJD7N yl77fxzc/owyAQubkFnUVyEIAagCi2CF8+dbefGl4MmvcnJ4zkKfyzTBfqvC8Nx/ WRw+SUqJCrkl5D8A0oQ3o2XZvW+MkMFLI/c= -----END CERTIFICATE-----Generated at Tue Nov 4 22:17:26 2025 by rpki-client