$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d3e6f089-55a0-3f88-9305-4f36451838e6.roa File: d3e6f089-55a0-3f88-9305-4f36451838e6.roa (raw, json) Hash identifier: bAv6kFqfO2K1Y4o/n1zuXR1bSEcrXjQanWh1X0Nokv0= Subject key identifier: 89:04:FF:9C:DE:0E:C4:F1:CD:CA:54:25:AB:DF:AE:C8:74:80:F8:D0 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B4BAC5FC11EF715E921925338 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d3e6f089-55a0-3f88-9305-4f36451838e6.roa Signing time: Wed 24 Sep 2025 01:00:31 +0000 ROA not before: Wed 24 Sep 2025 01:00:31 +0000 ROA not after: Tue 23 Dec 2025 02:00:31 +0000 asID: 35994 IP address blocks: 2600:1407:9000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4b:ac:5f:c1:1e:f7:15:e9:21:92:53:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 24 01:00:31 2025 GMT Not After : Dec 23 02:00:31 2025 GMT Subject: CN=0a42ce2c-ae3d-4015-b38f-ca1bd925c8d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:56:c0:d5:c7:aa:7d:ef:57:1e:92:79:ed:82: 31:34:6e:f7:d8:d3:3a:1b:c5:9a:b9:8f:8d:1b:50: 5e:ab:f3:05:d6:66:fd:1b:be:5d:71:ca:52:00:a6: cd:6e:e9:7b:d8:ae:f8:df:47:42:0b:c7:ab:65:ee: 3e:93:c4:76:b2:0b:ec:54:38:63:43:5e:44:c6:ee: 01:5c:e3:4e:8a:97:c4:49:30:92:6b:01:28:e8:88: f5:e1:a3:62:7d:b2:66:a9:07:12:15:cf:8d:dd:ee: 62:57:6a:36:af:a4:7d:92:ab:6f:85:68:2f:02:0f: 8c:ff:68:b0:d7:14:38:26:60:1e:0d:41:c6:2c:98: 32:bf:90:aa:59:c0:82:7d:2e:7e:4e:cc:b5:fc:7c: b7:ba:2c:ac:b7:a9:98:d8:be:0d:7e:cc:35:3a:c9: b9:d2:e2:b3:ee:16:01:44:b2:a4:cc:21:2e:45:81: 10:96:f8:15:ce:ad:68:05:92:19:34:54:05:a6:01: 07:74:bb:c9:81:fb:9f:26:1b:ed:67:1a:47:6e:5b: 9a:9c:c7:fe:32:68:f5:d9:0a:19:25:b5:1f:3d:73: 88:bf:33:d0:08:e3:a5:5c:7f:5f:bf:97:75:6b:00: 65:1f:f9:47:fb:8f:44:5b:55:f1:48:10:9e:78:01: 7a:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:04:FF:9C:DE:0E:C4:F1:CD:CA:54:25:AB:DF:AE:C8:74:80:F8:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d3e6f089-55a0-3f88-9305-4f36451838e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1407:9000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:c3:19:35:43:45:e3:5f:0c:f3:9f:45:cc:7f:fa:08:5e:a9: 29:d5:3b:1d:c6:02:96:22:d1:c0:78:59:85:99:31:6a:86:9c: c4:d1:40:9e:79:02:0a:74:b6:92:85:28:f6:ed:8e:82:5d:2a: b7:f4:27:34:f1:37:d3:64:e2:be:ed:59:67:b9:7a:6c:a9:f9: 63:9a:61:a3:aa:62:d9:e0:b3:0c:e6:3b:a5:47:3c:3c:47:a1: f9:ee:00:0b:09:1f:a8:c8:ab:4a:5c:d9:22:4a:11:af:c0:61: c2:a8:c8:47:5e:82:85:b8:54:6a:2d:e8:5d:a7:0b:5b:8e:d9: 0b:d0:90:8e:86:cf:c6:38:3c:30:1c:3e:33:7f:fd:f3:bb:62: 1b:23:f8:df:6e:b2:50:8a:48:51:d5:3e:76:90:5e:7e:05:87: 64:b0:6a:f6:6a:ac:cc:12:44:0d:c4:7d:c2:4b:8a:58:77:ad: 23:47:b2:87:40:2e:cf:8f:36:d3:98:16:4e:10:04:aa:be:cb: 87:38:79:99:39:a0:0b:91:b7:02:c3:dd:46:0f:54:a1:50:79: e6:6d:9a:40:3c:5d:88:ed:72:63:ff:db:31:02:69:d6:25:ca: 9b:44:29:65:fb:11:fd:b7:f2:93:aa:6c:5f:67:68:3e:3a:7a: 33:82:92:bb -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtLrF/BHvcV6SGSUzgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyNDAxMDAzMVoXDTI1MTIyMzAyMDAzMVowLzEtMCsGA1UEAxMk MGE0MmNlMmMtYWUzZC00MDE1LWIzOGYtY2ExYmQ5MjVjOGQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVbA1ceqfe9XHpJ57YIxNG732NM6G8WauY+N G1Beq/MF1mb9G75dccpSAKbNbul72K7430dCC8erZe4+k8R2sgvsVDhjQ15Exu4B XONOipfESTCSawEo6Ij14aNifbJmqQcSFc+N3e5iV2o2r6R9kqtvhWgvAg+M/2iw 1xQ4JmAeDUHGLJgyv5CqWcCCfS5+Tsy1/Hy3uiyst6mY2L4Nfsw1Osm50uKz7hYB RLKkzCEuRYEQlvgVzq1oBZIZNFQFpgEHdLvJgfufJhvtZxpHbluanMf+Mmj12QoZ JbUfPXOIvzPQCOOlXH9fv5d1awBlH/lH+49EW1XxSBCeeAF6LwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIkE/5zeDsTxzcpUJavfrsh0gPjQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDNlNmYwODktNTVhMC0z Zjg4LTkzMDUtNGYzNjQ1MTgzOGU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUB5AA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEzDGTVDReNfDPOfRcx/+gheqSnVOx3GApYi0cB4WYWZMWqGnMTR QJ55Agp0tpKFKPbtjoJdKrf0JzTxN9Nk4r7tWWe5emyp+WOaYaOqYtngswzmO6VH PDxHofnuAAsJH6jIq0pc2SJKEa/AYcKoyEdegoW4VGot6F2nC1uO2QvQkI6Gz8Y4 PDAcPjN//fO7Yhsj+N9uslCKSFHVPnaQXn4Fh2SwavZqrMwSRA3EfcJLilh3rSNH sodALs+PNtOYFk4QBKq+y4c4eZk5oAuRtwLD3UYPVKFQeeZtmkA8XYjtcmP/2zEC adYlyptEKWX7Ef238pOqbF9naD46ejOCkrs= -----END CERTIFICATE-----Generated at Tue Nov 4 23:57:37 2025 by rpki-client