$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9d205bb7-fa7c-3779-9d88-e6a2e1846ea7.roa File: 9d205bb7-fa7c-3779-9d88-e6a2e1846ea7.roa (raw, json) Hash identifier: BoC3aqrCmyWNEFc/Yj9StWGwnCPtT2DbirJWnIHonCw= Subject key identifier: 84:6A:DF:73:54:90:2A:32:D5:03:67:4F:91:22:46:C8:F8:33:13:FB Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BBB759B749F14C7503EE63880 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9d205bb7-fa7c-3779-9d88-e6a2e1846ea7.roa Signing time: Mon 03 Nov 2025 02:00:31 +0000 ROA not before: Mon 03 Nov 2025 02:00:31 +0000 ROA not after: Sun 01 Feb 2026 02:00:31 +0000 asID: 32787 IP address blocks: 2606:6c00:20d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bb:75:9b:74:9f:14:c7:50:3e:e6:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 3 02:00:31 2025 GMT Not After : Feb 1 02:00:31 2026 GMT Subject: CN=ed5f7164-7b4b-4a72-8661-29da113f6dd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ea:c0:54:b6:64:38:bf:07:53:1d:4b:20:d0: 80:4f:73:71:02:c8:15:c4:0d:51:fd:52:6b:a3:56: 52:59:42:51:2c:24:cf:a5:20:f4:e4:9a:d1:9a:78: a5:a3:10:15:7c:8e:a5:08:00:59:9d:ca:55:bc:fd: d5:7a:85:9c:e9:e2:c7:06:75:a7:71:bf:19:96:c7: 8f:30:9d:57:be:02:12:23:14:99:f6:64:87:f7:a8: 2d:65:33:d5:cb:76:2f:8b:31:fe:a4:97:ec:0b:9f: d9:dc:bc:40:65:23:0a:33:57:f8:61:ea:50:f4:b1: eb:24:9d:29:28:2b:90:ae:e5:a8:da:8b:fd:62:89: ff:d0:67:84:0b:9e:92:ba:e8:d5:64:22:10:d1:72: f8:21:84:7c:79:2a:d2:93:a7:d3:31:bd:a1:9c:fd: 1f:e6:36:97:d5:9a:b9:88:d7:2e:bc:a5:f9:b2:58: 66:e2:55:1d:f2:7e:3b:b5:b8:d7:f7:40:b0:53:dd: 90:1f:2b:64:3c:bd:45:36:be:1b:3d:18:7d:84:a6: 0a:8e:1b:7c:56:5a:bc:6a:f3:b6:3f:d6:1e:3a:6b: 29:ec:e3:a3:79:99:69:cd:49:b4:77:94:8d:80:ff: cc:ce:81:75:ad:d5:19:9f:c9:6d:2f:5c:f8:29:a0: c8:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:6A:DF:73:54:90:2A:32:D5:03:67:4F:91:22:46:C8:F8:33:13:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9d205bb7-fa7c-3779-9d88-e6a2e1846ea7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2606:6c00:20d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:c8:f3:9a:35:a5:44:93:c6:d6:49:14:75:18:db:57:45:4a: 2f:53:83:03:8b:61:06:f7:78:e0:28:8e:e3:c6:56:4c:7f:49: 86:f4:21:2d:d3:08:57:ab:84:24:aa:4c:f5:a5:c7:ad:4e:df: 2e:06:8b:54:77:08:0f:b7:18:4d:dc:49:13:6b:d1:1d:b9:40: c6:c7:ec:9a:62:58:21:99:36:83:9f:6e:80:90:23:0f:09:44: 28:78:4f:18:02:d6:cf:19:48:18:44:b0:6c:9f:fa:03:c2:9a: 14:6c:86:df:31:84:be:1f:c4:2a:6d:08:3a:7d:47:40:ba:04: 13:c3:00:f7:5e:a9:a8:68:ff:bb:d3:07:0d:2e:55:0f:8c:96: 73:d0:e0:52:0a:46:7d:f8:5f:20:1b:cc:2f:68:0e:7b:d8:40: 87:96:27:94:ec:22:fa:ae:70:84:3d:5c:bf:1e:c3:a3:d5:5f: d5:ed:09:55:38:2c:43:c0:a0:53:d7:06:9d:3d:19:52:e6:e0: 89:c7:45:a2:54:5f:2b:aa:5d:58:15:9e:ba:9b:54:15:02:9c: d2:0c:38:25:2a:c3:ce:70:8e:f0:f7:5f:9d:93:c0:ac:63:a7: 47:78:9a:fb:7d:4f:73:f8:e9:d6:34:7a:26:75:1a:47:15:5c: 8f:32:ba:75 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEu7dZt0nxTHUD7mOIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTEwMzAyMDAzMVoXDTI2MDIwMTAyMDAzMVowLzEtMCsGA1UEAxMk ZWQ1ZjcxNjQtN2I0Yi00YTcyLTg2NjEtMjlkYTExM2Y2ZGQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOrAVLZkOL8HUx1LINCAT3NxAsgVxA1R/VJr o1ZSWUJRLCTPpSD05JrRmniloxAVfI6lCABZncpVvP3VeoWc6eLHBnWncb8ZlseP MJ1XvgISIxSZ9mSH96gtZTPVy3YvizH+pJfsC5/Z3LxAZSMKM1f4YepQ9LHrJJ0p KCuQruWo2ov9Yon/0GeEC56SuujVZCIQ0XL4IYR8eSrSk6fTMb2hnP0f5jaX1Zq5 iNcuvKX5slhm4lUd8n47tbjX90CwU92QHytkPL1FNr4bPRh9hKYKjht8Vlq8avO2 P9YeOmsp7OOjeZlpzUm0d5SNgP/MzoF1rdUZn8ltL1z4KaDI+wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIRq33NUkCoy1QNnT5EiRsj4MxP7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOWQyMDViYjctZmE3Yy0z Nzc5LTlkODgtZTZhMmUxODQ2ZWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZsAAIN MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAInI85o1pUSTxtZJFHUY21dFSi9TgwOLYQb3eOAojuPGVkx/SYb0 IS3TCFerhCSqTPWlx61O3y4Gi1R3CA+3GE3cSRNr0R25QMbH7JpiWCGZNoOfboCQ Iw8JRCh4TxgC1s8ZSBhEsGyf+gPCmhRsht8xhL4fxCptCDp9R0C6BBPDAPdeqaho /7vTBw0uVQ+MlnPQ4FIKRn34XyAbzC9oDnvYQIeWJ5TsIvqucIQ9XL8ew6PVX9Xt CVU4LEPAoFPXBp09GVLm4InHRaJUXyuqXVgVnrqbVBUCnNIMOCUqw85wjvD3X52T wKxjp0d4mvt9T3P46dY0eiZ1GkcVXI8yunU= -----END CERTIFICATE-----Generated at Tue Nov 4 17:14:19 2025 by rpki-client