$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aa72b7f2-6eaa-34e7-88e2-e50f32f81063.roa File: aa72b7f2-6eaa-34e7-88e2-e50f32f81063.roa (raw, json) Hash identifier: GHzoVAJduUlOUwqNs44AzKG35BQmUdLaOrmmEg93Flo= Subject key identifier: FF:02:69:26:0D:23:B2:F4:F6:45:69:E7:4A:E1:2C:A6:8B:F8:9E:F0 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B2CF6EE1A7DD9D44C58A32400 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aa72b7f2-6eaa-34e7-88e2-e50f32f81063.roa Signing time: Sat 13 Sep 2025 01:00:33 +0000 ROA not before: Sat 13 Sep 2025 01:00:33 +0000 ROA not after: Fri 12 Dec 2025 02:00:33 +0000 asID: 20940 IP address blocks: 2600:1407:1800::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:f6:ee:1a:7d:d9:d4:4c:58:a3:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 13 01:00:33 2025 GMT Not After : Dec 12 02:00:33 2025 GMT Subject: CN=8b447f2d-90d0-467f-b929-c4de4be0e25e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:66:d9:aa:e0:5b:79:8d:3d:5e:8d:3c:13:06: f6:79:a4:4b:6b:f5:e4:d3:57:50:4b:08:d0:13:ab: 9e:44:60:f3:44:89:32:0b:9a:be:69:3a:85:28:60: b4:de:ba:56:b9:a3:a7:f8:ab:25:56:c6:23:0f:46: 3e:72:2d:4d:32:97:ea:e7:88:03:5c:8d:9e:d6:8f: 07:1e:90:08:67:be:af:1e:68:03:e3:fa:f0:97:6d: 33:68:b1:f1:a5:0f:37:f7:ed:91:e3:06:df:09:86: 20:38:0c:ac:30:4a:7a:7e:be:58:68:c3:f1:27:28: 55:ed:e0:3f:82:5f:af:eb:57:18:93:54:07:6c:30: f7:fd:74:9b:f2:dd:ab:f9:45:2e:94:c8:e9:02:96: 73:0f:c7:e3:30:61:2a:d3:75:f1:ac:9a:f7:de:c7: a2:13:78:40:87:48:dd:3d:82:46:39:02:a0:52:17: e0:f1:9f:4d:13:5b:ad:38:22:07:ba:2f:a5:7f:8c: 0c:03:f3:c4:a7:97:00:e2:52:82:d9:33:df:43:d3: 14:61:f7:3c:97:12:00:5b:fb:6a:fb:ab:32:f5:76: 30:75:7e:fd:73:e5:9d:94:24:f8:ff:e1:37:2b:5d: 6a:eb:d4:5e:dd:f0:11:6c:c0:49:58:5e:0d:fa:e5: b2:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:02:69:26:0D:23:B2:F4:F6:45:69:E7:4A:E1:2C:A6:8B:F8:9E:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aa72b7f2-6eaa-34e7-88e2-e50f32f81063.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1407:1800::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:fe:2b:43:a3:ff:70:d8:be:cd:48:ec:6f:62:0c:d6:8d:ea: 2a:d4:e2:72:2f:9e:17:9b:e8:74:e2:e3:ae:11:06:91:f9:2d: 6d:9f:e7:de:45:58:28:ad:0c:66:67:84:67:d0:ef:8e:0c:ac: 61:4b:6e:ce:ce:5e:97:dd:ae:07:9b:be:36:0c:b6:1e:7e:21: ac:9e:17:98:f2:5a:30:62:16:49:cb:eb:c9:ce:51:97:0d:6e: 3c:a1:d6:b1:52:7a:c7:50:0a:e5:3d:9a:8c:f9:93:b8:63:5f: 28:01:9b:fc:01:37:82:1a:59:be:96:36:f8:a6:b4:b1:ac:b6: 90:14:e9:69:9e:6e:7d:af:7d:d9:67:48:1a:13:89:34:05:e4: 73:27:d7:3a:da:bc:96:7c:e6:ad:14:8f:ad:16:46:85:f7:6d: b0:a6:cd:be:da:54:05:74:d9:2c:4d:5e:b5:66:16:fd:9c:9f: 72:f9:99:c6:dd:6a:67:be:8b:92:6f:5a:2c:e5:21:49:86:08: 77:4b:6d:80:9a:3b:84:24:14:43:32:70:9f:d5:27:cc:50:3c: 53:61:bf:0c:6f:0f:1d:be:c6:a5:d8:a0:8f:bf:a7:c0:6a:5e: 7c:ba:89:ff:20:26:64:a4:8a:bc:80:8f:5e:a4:66:56:05:8d: 84:99:22:70 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEss9u4afdnUTFijJAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkxMzAxMDAzM1oXDTI1MTIxMjAyMDAzM1owLzEtMCsGA1UEAxMk OGI0NDdmMmQtOTBkMC00NjdmLWI5MjktYzRkZTRiZTBlMjVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4mbZquBbeY09Xo08Ewb2eaRLa/Xk01dQSwjQ E6ueRGDzRIkyC5q+aTqFKGC03rpWuaOn+KslVsYjD0Y+ci1NMpfq54gDXI2e1o8H HpAIZ76vHmgD4/rwl20zaLHxpQ839+2R4wbfCYYgOAysMEp6fr5YaMPxJyhV7eA/ gl+v61cYk1QHbDD3/XSb8t2r+UUulMjpApZzD8fjMGEq03XxrJr33seiE3hAh0jd PYJGOQKgUhfg8Z9NE1utOCIHui+lf4wMA/PEp5cA4lKC2TPfQ9MUYfc8lxIAW/tq +6sy9XYwdX79c+WdlCT4/+E3K11q69Re3fARbMBJWF4N+uWyewIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFP8CaSYNI7L09kVp50rhLKaL+J7wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWE3MmI3ZjItNmVhYS0z NGU3LTg4ZTItZTUwZjMyZjgxMDYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUBxgA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACr+K0Oj/3DYvs1I7G9iDNaN6irU4nIvnheb6HTi464RBpH5LW2f 595FWCitDGZnhGfQ744MrGFLbs7OXpfdrgebvjYMth5+IayeF5jyWjBiFknL68nO UZcNbjyh1rFSesdQCuU9moz5k7hjXygBm/wBN4IaWb6WNvimtLGstpAU6Wmebn2v fdlnSBoTiTQF5HMn1zravJZ85q0Uj60WRoX3bbCmzb7aVAV02SxNXrVmFv2cn3L5 mcbdame+i5JvWizlIUmGCHdLbYCaO4QkFEMycJ/VJ8xQPFNhvwxvDx2+xqXYoI+/ p8BqXny6if8gJmSkiryAj16kZlYFjYSZInA= -----END CERTIFICATE-----Generated at Tue Nov 4 22:17:56 2025 by rpki-client