$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d34ef7f0-d85e-3348-970c-ec39269f1361.roa File: d34ef7f0-d85e-3348-970c-ec39269f1361.roa (raw, json) Hash identifier: D2ZxPWwTcjjFuHeZFo3kwuVR8OcPMWDm/axb2tD6L90= Subject key identifier: 09:39:0A:9D:21:7B:42:A7:93:7B:23:D7:58:2F:EC:97:93:B7:43:BB Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BA6679CA52638C3986F455200 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d34ef7f0-d85e-3348-970c-ec39269f1361.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 20940 IP address blocks: 2600:14a0:20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:9c:a5:26:38:c3:98:6f:45:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=6cbda48b-671a-4716-8a65-de59841ba5d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:7c:c0:23:a0:89:07:d4:c2:2f:87:02:b9:30: 5a:70:a5:1e:a2:96:a2:28:52:50:f3:3e:5f:bd:b4: 76:76:a3:a6:97:44:74:f1:23:58:a4:48:c9:e1:9d: 5f:fe:f4:e4:ab:b2:c8:03:55:0a:d0:17:8d:0b:f9: 65:32:f5:2c:83:06:47:55:2f:67:70:3b:89:78:93: 80:d7:53:70:7b:4d:26:26:f6:7e:f8:ac:1e:8a:fd: 3d:f0:5f:28:c0:eb:78:f4:a2:7d:d8:0d:9f:6d:40: de:00:e9:7f:a5:61:0d:01:ea:f6:29:af:45:e7:37: 6c:19:72:7f:f1:6c:93:f7:43:21:a8:ac:08:4e:ac: 01:13:05:48:c7:80:d5:5a:35:62:a5:bb:6f:5b:38: 11:48:37:50:7b:1b:9b:0d:c7:66:9a:ae:fb:b4:38: 8e:b7:cd:41:4f:3c:e6:26:4c:63:f4:90:e9:d7:18: 6e:e0:44:5a:ea:69:07:31:ab:7a:23:a5:67:a3:89: 94:4d:1b:c2:e6:61:c2:7a:08:d3:5c:03:8c:44:04: 9b:0e:b2:6e:66:ae:ae:24:39:cf:ac:6d:64:e5:07: 15:00:f9:be:6f:90:2c:2d:18:9c:af:de:9a:17:fd: fc:35:d8:e9:40:cf:b9:05:5e:3e:ae:ff:5c:f8:5c: a3:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:39:0A:9D:21:7B:42:A7:93:7B:23:D7:58:2F:EC:97:93:B7:43:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d34ef7f0-d85e-3348-970c-ec39269f1361.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:14a0:20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:a0:b1:3e:2d:43:8e:34:e4:7e:fa:47:99:6e:ab:5e:02:fa: 52:f5:06:bf:ee:8f:f4:71:66:a3:0c:fc:8d:c7:48:15:cc:d4: 91:3a:db:1d:6a:86:b8:a2:e0:3c:2e:85:cb:2f:bf:8f:18:38: 2c:0c:19:19:a5:28:33:3d:eb:e6:9b:6f:ec:cd:3a:1c:c2:1a: 73:dc:56:ce:28:80:2a:de:a0:f3:65:66:5f:53:12:a0:90:ff: df:eb:1f:83:31:93:23:70:42:aa:e2:2e:d8:7e:0c:1d:c9:5f: 23:2a:22:4d:03:34:aa:52:cc:0a:33:b3:16:90:8a:0e:9c:7f: ea:20:e2:40:37:1b:ae:ca:b1:9d:b6:f4:a3:eb:64:36:d2:6c: 44:f2:90:17:b0:37:19:90:ab:34:50:8a:32:71:0b:29:c6:ec: 6a:40:ef:bd:8f:cd:7d:ee:84:9e:9e:92:5e:67:da:5c:d7:c7: 27:7f:c6:b8:4e:3c:d0:80:5f:a7:c6:af:14:7a:c2:0e:fb:0d: 6e:4b:51:d4:65:69:c1:6c:b8:6b:21:5d:4f:03:83:87:7d:34: 13:5f:cf:c1:d3:8e:2e:f2:2f:5b:39:93:19:2c:83:7d:85:6e: 26:e1:7e:bc:75:77:f9:a3:bf:ea:5c:4c:30:22:ba:9c:14:c8: ae:2f:45:ab -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEumZ5ylJjjDmG9FUgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk NmNiZGE0OGItNjcxYS00NzE2LThhNjUtZGU1OTg0MWJhNWQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXzAI6CJB9TCL4cCuTBacKUeopaiKFJQ8z5f vbR2dqOml0R08SNYpEjJ4Z1f/vTkq7LIA1UK0BeNC/llMvUsgwZHVS9ncDuJeJOA 11Nwe00mJvZ++Kweiv098F8owOt49KJ92A2fbUDeAOl/pWENAer2Ka9F5zdsGXJ/ 8WyT90MhqKwITqwBEwVIx4DVWjVipbtvWzgRSDdQexubDcdmmq77tDiOt81BTzzm Jkxj9JDp1xhu4ERa6mkHMat6I6Vno4mUTRvC5mHCegjTXAOMRASbDrJuZq6uJDnP rG1k5QcVAPm+b5AsLRicr96aF/38NdjpQM+5BV4+rv9c+Fyj6QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAk5Cp0he0Knk3sj11gv7JeTt0O7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDM0ZWY3ZjAtZDg1ZS0z MzQ4LTk3MGMtZWMzOTI2OWYxMzYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUoAAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJOgsT4tQ4405H76R5luq14C+lL1Br/uj/RxZqMM/I3HSBXM1JE6 2x1qhrii4Dwuhcsvv48YOCwMGRmlKDM96+abb+zNOhzCGnPcVs4ogCreoPNlZl9T EqCQ/9/rH4MxkyNwQqriLth+DB3JXyMqIk0DNKpSzAozsxaQig6cf+og4kA3G67K sZ229KPrZDbSbETykBewNxmQqzRQijJxCynG7GpA772PzX3uhJ6ekl5n2lzXxyd/ xrhOPNCAX6fGrxR6wg77DW5LUdRlacFsuGshXU8Dg4d9NBNfz8HTji7yL1s5kxks g32Fbibhfrx1d/mjv+pcTDAiupwUyK4vRas= -----END CERTIFICATE-----Generated at Wed Nov 5 00:53:36 2025 by rpki-client