$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a745147b-2fce-3e31-bc5f-7984e9e99e6a.roa File: a745147b-2fce-3e31-bc5f-7984e9e99e6a.roa (raw, json) Hash identifier: 9a2K+Vyl6CXjxDbchIAic7iR7kriVDoYyTM6rVcZqYk= Subject key identifier: 65:E5:95:04:53:3A:E4:F6:97:14:85:2D:E6:20:56:6C:B4:CE:00:5F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B9E07C70C97D14C160588E980 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a745147b-2fce-3e31-bc5f-7984e9e99e6a.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 20940 IP address blocks: 2600:1417:5c00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:c7:0c:97:d1:4c:16:05:88:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=41da8af4-972a-41a3-99bf-6cdb6a478feb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:a1:fa:36:32:bc:2c:bf:5a:c7:c0:57:d1:c0: d1:d0:1e:a5:35:c5:3f:d2:94:46:fb:2e:25:4d:4f: d2:7c:57:30:9d:5e:7f:98:43:e8:b1:89:61:44:0a: b9:05:46:db:e9:f3:68:a0:65:7a:0a:92:7d:59:19: aa:bf:d8:15:37:db:3a:3e:df:95:72:be:7a:7b:b1: 8f:da:8f:dc:00:65:b7:5b:58:6c:c5:f4:b6:f2:d0: 95:bc:cf:6b:67:03:23:0f:48:8e:24:cb:cf:42:0d: 21:aa:b4:7c:b3:75:d6:33:e4:60:eb:31:d2:63:f1: 01:90:46:b0:3d:ff:2a:8d:cb:96:55:9e:5b:2d:cb: f7:1a:c7:65:66:0a:fd:6a:e1:88:4b:b7:a2:a6:a0: 05:86:46:82:10:7d:3a:ea:ab:ec:86:35:51:39:4c: 20:b9:82:f6:fd:12:ed:f1:53:e7:ae:44:db:48:cf: 87:7e:1c:a8:c6:2d:e8:89:4c:df:5f:f4:ed:07:2f: 1a:7a:ae:eb:2b:43:42:3e:56:a8:5e:6c:8c:a9:02: d3:5f:f7:f7:96:95:49:30:c7:16:8a:d8:f7:76:1e: 10:d9:75:9e:a6:c4:a7:3e:eb:f5:1b:b8:43:36:6d: dd:a1:49:df:be:c9:18:5b:5e:50:2c:51:46:f9:64: 9d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:E5:95:04:53:3A:E4:F6:97:14:85:2D:E6:20:56:6C:B4:CE:00:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a745147b-2fce-3e31-bc5f-7984e9e99e6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1417:5c00::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:8c:e7:1f:1e:86:4f:31:60:af:8e:4f:08:62:d7:f2:c6:25: ec:e5:9a:26:0d:57:c4:97:57:1d:37:84:05:c6:8d:e0:03:8a: 6e:d1:a0:80:63:56:de:e4:ef:fa:0f:ec:aa:5e:a9:3b:d6:5b: 50:eb:3f:f4:36:e5:4e:26:70:4e:89:a5:0a:43:5e:f9:84:20: 66:1e:95:9f:19:7e:4e:1a:e6:db:68:0a:c6:63:3e:47:2b:a4: ad:93:43:87:bb:c3:e2:ed:ce:eb:ca:74:13:b6:58:68:af:a7: bc:ae:7a:8a:f6:c6:6b:24:89:30:72:57:12:54:76:64:3a:20: 16:c8:69:7e:88:e4:a1:b6:3d:d8:5d:f6:47:a5:0d:bf:9e:c8: bc:10:bc:b1:a8:92:9c:2c:a4:22:64:03:35:5f:cc:4f:31:64: 76:9c:7a:11:2b:7f:27:83:2b:55:cf:49:30:8c:a1:0b:0f:71: 3b:e3:bd:c0:78:11:44:3c:c2:29:29:0a:bd:d3:1a:eb:97:b2: 40:33:48:c2:29:f0:f1:6e:dc:35:45:40:f7:d6:4c:f0:9b:15: db:33:cf:11:34:e3:95:f6:07:5b:1e:21:fd:43:b0:9b:24:be: d9:65:0a:02:3c:e6:f4:ce:12:98:db:05:5c:66:d9:28:74:ed: b2:d3:a3:82 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEueB8cMl9FMFgWI6YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk NDFkYThhZjQtOTcyYS00MWEzLTk5YmYtNmNkYjZhNDc4ZmViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6H6NjK8LL9ax8BX0cDR0B6lNcU/0pRG+y4l TU/SfFcwnV5/mEPosYlhRAq5BUbb6fNooGV6CpJ9WRmqv9gVN9s6Pt+Vcr56e7GP 2o/cAGW3W1hsxfS28tCVvM9rZwMjD0iOJMvPQg0hqrR8s3XWM+Rg6zHSY/EBkEaw Pf8qjcuWVZ5bLcv3GsdlZgr9auGIS7eipqAFhkaCEH066qvshjVROUwguYL2/RLt 8VPnrkTbSM+Hfhyoxi3oiUzfX/TtBy8aeq7rK0NCPlaoXmyMqQLTX/f3lpVJMMcW itj3dh4Q2XWepsSnPuv1G7hDNm3doUnfvskYW15QLFFG+WSd1QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGXllQRTOuT2lxSFLeYgVmy0zgBfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTc0NTE0N2ItMmZjZS0z ZTMxLWJjNWYtNzk4NGU5ZTk5ZTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUF1wA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHKM5x8ehk8xYK+OTwhi1/LGJezlmiYNV8SXVx03hAXGjeADim7R oIBjVt7k7/oP7KpeqTvWW1DrP/Q25U4mcE6JpQpDXvmEIGYelZ8Zfk4a5ttoCsZj PkcrpK2TQ4e7w+LtzuvKdBO2WGivp7yueor2xmskiTByVxJUdmQ6IBbIaX6I5KG2 Pdhd9kelDb+eyLwQvLGokpwspCJkAzVfzE8xZHacehErfyeDK1XPSTCMoQsPcTvj vcB4EUQ8wikpCr3TGuuXskAzSMIp8PFu3DVFQPfWTPCbFdszzxE045X2B1seIf1D sJskvtllCgI85vTOEpjbBVxm2Sh07bLTo4I= -----END CERTIFICATE-----Generated at Wed Nov 5 03:00:16 2025 by rpki-client