$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c7e585e0-7f8e-3303-bd06-d9c41c61c420.roa File: c7e585e0-7f8e-3303-bd06-d9c41c61c420.roa (raw, json) Hash identifier: rdJJ/XqT+TgRqlv+9apqThciNPmtihGpySCFhF87PzA= Subject key identifier: 30:C7:C7:48:67:1A:DE:D6:AE:18:70:56:36:37:54:37:FE:C0:C6:DA Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B9E07C87FE77601F7CC4137C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c7e585e0-7f8e-3303-bd06-d9c41c61c420.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 35994 IP address blocks: 2600:141b:9800::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:c8:7f:e7:76:01:f7:cc:41:37:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=b48b6179-9e28-43f8-b47e-53b18052b9e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:e2:03:0d:b8:23:e2:f4:21:87:2c:94:fa:50: 67:c8:d7:a4:ac:7d:3d:2c:2c:fc:09:81:6f:a9:03: 51:38:6b:b7:ce:a6:a2:49:c2:50:d1:fd:db:c7:3b: d3:41:de:88:40:d0:5e:97:9e:52:10:07:42:2c:aa: 4e:ab:20:f2:25:88:9e:5c:4f:05:4b:c5:8c:ec:54: 4e:4a:4d:48:18:f5:e7:03:28:b1:72:12:23:1c:ea: 53:db:0f:c6:ea:c7:e2:a4:6a:54:56:3e:b2:f8:c4: 68:78:20:49:31:50:77:e2:7d:86:a9:b7:34:01:78: 08:c7:bb:7a:c5:eb:b6:6e:6e:b8:31:bd:0d:13:d2: 9b:58:17:24:8a:60:63:7d:18:7a:57:77:56:08:e1: 37:66:21:50:b3:62:eb:b2:8c:78:22:68:a2:fa:d3: 32:80:f2:e3:99:14:44:9c:90:b4:6a:26:4a:a0:15: 94:b5:01:ce:af:35:96:1f:2b:39:d8:34:3a:8f:e2: f0:e5:b0:8e:f4:11:07:84:76:6a:c5:ad:57:d8:59: 08:04:88:3f:74:4c:3c:58:02:ff:76:5b:85:2d:44: 27:27:ea:0e:49:e7:98:c4:3d:da:64:4f:86:c7:cc: 3f:e9:41:88:6d:f6:62:ef:fe:60:ac:bd:0a:e2:d4: fc:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:C7:C7:48:67:1A:DE:D6:AE:18:70:56:36:37:54:37:FE:C0:C6:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c7e585e0-7f8e-3303-bd06-d9c41c61c420.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:141b:9800::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:f7:94:26:24:35:3c:cf:3f:4a:92:08:79:f1:2c:0d:92:54: c7:a8:f4:7a:10:4f:d2:03:51:cb:12:88:8d:53:f2:ab:ad:2b: a5:6b:0e:c9:1f:64:83:54:3a:a6:8d:60:c1:ca:39:d0:98:3c: 94:61:5e:23:3a:56:66:58:a4:e1:2d:f0:09:64:c1:bb:14:2f: 91:f0:23:3f:ba:ab:3d:93:52:bb:31:6d:f3:c5:31:c1:c3:22: 6d:ed:7e:c5:a7:56:9d:8a:2e:c1:ea:5e:7a:be:4c:6b:55:c3: 1a:db:ea:77:14:13:91:f6:89:bf:e4:0c:73:97:49:90:30:21: ef:16:ec:02:b8:05:3f:af:7b:c0:11:92:b6:bb:04:96:ba:55: 7b:87:69:7a:08:b8:51:d8:81:4b:69:18:de:56:2f:f1:0b:f0: bd:02:f9:b9:c2:e8:c6:11:10:ac:1b:d9:62:02:bc:21:52:a3: a7:b6:c0:94:dc:fc:78:b6:72:80:48:83:71:7d:1b:fc:70:a9: 14:f6:4b:24:32:6f:ab:f6:ab:78:2a:bc:2a:ce:50:b4:6a:75: c6:c5:20:c1:3f:71:d4:49:38:44:99:43:06:51:ff:41:a4:48: 8d:75:00:85:fc:d2:7b:63:13:63:15:c4:51:32:82:5f:d7:dc: 5b:ac:38:0a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEueB8h/53YB98xBN8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk YjQ4YjYxNzktOWUyOC00M2Y4LWI0N2UtNTNiMTgwNTJiOWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+OIDDbgj4vQhhyyU+lBnyNekrH09LCz8CYFv qQNROGu3zqaiScJQ0f3bxzvTQd6IQNBel55SEAdCLKpOqyDyJYieXE8FS8WM7FRO Sk1IGPXnAyixchIjHOpT2w/G6sfipGpUVj6y+MRoeCBJMVB34n2Gqbc0AXgIx7t6 xeu2bm64Mb0NE9KbWBckimBjfRh6V3dWCOE3ZiFQs2Lrsox4Imii+tMygPLjmRRE nJC0aiZKoBWUtQHOrzWWHys52DQ6j+Lw5bCO9BEHhHZqxa1X2FkIBIg/dEw8WAL/ dluFLUQnJ+oOSeeYxD3aZE+Gx8w/6UGIbfZi7/5grL0K4tT8fwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDDHx0hnGt7WrhhwVjY3VDf+wMbaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzdlNTg1ZTAtN2Y4ZS0z MzAzLWJkMDYtZDljNDFjNjFjNDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUG5gA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABf3lCYkNTzPP0qSCHnxLA2SVMeo9HoQT9IDUcsSiI1T8qutK6Vr DskfZINUOqaNYMHKOdCYPJRhXiM6VmZYpOEt8AlkwbsUL5HwIz+6qz2TUrsxbfPF McHDIm3tfsWnVp2KLsHqXnq+TGtVwxrb6ncUE5H2ib/kDHOXSZAwIe8W7AK4BT+v e8ARkra7BJa6VXuHaXoIuFHYgUtpGN5WL/EL8L0C+bnC6MYREKwb2WICvCFSo6e2 wJTc/Hi2coBIg3F9G/xwqRT2SyQyb6v2q3gqvCrOULRqdcbFIME/cdRJOESZQwZR /0GkSI11AIX80ntjE2MVxFEygl/X3FusOAo= -----END CERTIFICATE-----Generated at Tue Nov 4 23:54:58 2025 by rpki-client