$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/cc3aac0c-bbc3-350c-b0ef-eeca06afab2a.roa File: cc3aac0c-bbc3-350c-b0ef-eeca06afab2a.roa (raw, json) Hash identifier: 81sq/4vVgDk5jJe9PWTcwzEMOQMWN9QfHK68IioHF7w= Subject key identifier: F4:DD:E4:A6:D3:5F:97:77:7A:E9:B8:99:51:36:9D:C3:B9:FA:5B:89 Certificate issuer: /CN=cb48baa8-6c83-45eb-b09b-5fbd1e42c57d Certificate serial: 010D0C9F4328584B1AD1748DFDFEB5DD44517480 Authority key identifier: E9:36:DC:58:66:FC:68:02:BF:A6:99:DE:B4:DD:13:5E:4C:D1:27:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/cc3aac0c-bbc3-350c-b0ef-eeca06afab2a.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 177 IP address blocks: 2001:48a8:68fd::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:74:8d:fd:fe:b5:dd:44:51:74:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb48baa8-6c83-45eb-b09b-5fbd1e42c57d Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=6eadc57b-ef34-4dc2-8714-123d019c2f51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:7a:98:e8:9a:31:e2:a1:99:d6:ef:94:4d:5b: 8e:74:c0:21:7e:8c:85:86:1e:1b:71:f5:5b:65:2d: 22:c9:cb:0a:a3:eb:6c:1d:81:b7:e9:14:04:ab:d5: 56:d8:e5:90:13:c9:42:0a:7d:d7:85:f9:98:14:3c: a8:0f:9c:a2:5b:7b:0a:f1:08:5d:b8:62:5c:00:34: a8:7d:62:5e:18:a9:36:26:42:b8:9c:8c:c3:92:b9: 62:ca:74:f7:dc:e9:3e:e1:d1:5f:4d:eb:56:98:f1: b8:3f:21:6e:34:b4:e1:70:3a:cf:50:ff:92:b7:60: eb:de:99:f7:c9:4c:7b:bd:22:60:9a:09:00:aa:45: 98:b3:89:cb:33:4b:7e:3f:91:f5:f4:85:dc:74:08: de:32:c0:e3:d2:31:9e:b2:11:e9:5e:03:9a:52:26: 76:ca:14:0f:ce:bc:35:10:10:4d:10:40:74:5d:91: 1a:f7:66:af:49:c0:38:d6:d3:e1:f1:9e:ce:ff:39: c9:b7:14:8e:30:ab:a4:90:cd:ce:5c:d1:d5:84:5e: 44:64:21:7d:b6:97:81:99:20:e3:ca:d0:4f:08:f7: d8:dc:ba:0b:a0:a9:30:14:52:ce:79:c5:9e:e1:df: 27:2d:74:ac:1d:7f:8f:6e:04:24:d9:20:62:ea:94: 58:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:DD:E4:A6:D3:5F:97:77:7A:E9:B8:99:51:36:9D:C3:B9:FA:5B:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/cc3aac0c-bbc3-350c-b0ef-eeca06afab2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.crl X509v3 Authority Key Identifier: keyid:E9:36:DC:58:66:FC:68:02:BF:A6:99:DE:B4:DD:13:5E:4C:D1:27:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.cer sbgp-ipAddrBlock: critical IPv6: 2001:48a8:68fd::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:02:b9:d9:38:89:6f:68:14:6e:15:7f:9e:ea:60:21:bb:33: 8d:41:35:de:9c:c7:5a:38:52:ee:fa:d6:71:64:1f:8e:6c:33: 47:96:ec:66:b9:27:94:e3:cf:52:88:5e:33:8c:d4:65:91:bf: 48:0c:6f:61:41:8e:5d:31:d0:db:eb:83:cb:10:ac:0f:10:58: b3:37:d2:df:e5:ce:dc:d2:0f:12:8a:5f:9f:07:2d:ae:9b:af: 68:9f:42:f3:fa:83:fc:28:66:0a:55:81:a5:64:44:52:b1:c8: 5d:51:5e:4d:8c:31:48:ed:76:3c:f7:5d:5a:95:46:15:fc:2b: 6a:d3:94:6e:6c:72:44:1f:0f:0d:46:e1:13:92:da:c4:83:6c: 28:ff:8f:f9:2d:1d:44:02:85:a1:ce:9e:84:7f:cb:40:b9:7c: 39:12:c5:5e:8e:54:9c:f0:9f:f3:42:35:42:7e:9b:92:b8:f0: 95:57:2b:0e:a9:fd:6c:c4:69:6b:8a:b5:b8:37:73:39:51:b1: f0:15:34:d2:7c:73:98:d8:1f:00:5f:de:ad:20:07:d3:4f:e9: 97:67:7d:98:15:67:31:0f:6d:00:c3:a1:68:d0:1d:2b:2d:d1: 2b:74:9d:1a:35:62:b5:ff:c3:e7:ef:7c:30:71:2e:9f:bc:89: b5:5e:3e:df -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsa0XSN/f613URRdIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0OGJhYTgtNmM4My00NWViLWIwOWItNWZiZDFlNDJj NTdkMB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk NmVhZGM1N2ItZWYzNC00ZGMyLTg3MTQtMTIzZDAxOWMyZjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3qY6Jox4qGZ1u+UTVuOdMAhfoyFhh4bcfVb ZS0iycsKo+tsHYG36RQEq9VW2OWQE8lCCn3XhfmYFDyoD5yiW3sK8QhduGJcADSo fWJeGKk2JkK4nIzDkrliynT33Ok+4dFfTetWmPG4PyFuNLThcDrPUP+St2Dr3pn3 yUx7vSJgmgkAqkWYs4nLM0t+P5H19IXcdAjeMsDj0jGeshHpXgOaUiZ2yhQPzrw1 EBBNEEB0XZEa92avScA41tPh8Z7O/znJtxSOMKukkM3OXNHVhF5EZCF9tpeBmSDj ytBPCPfY3LoLoKkwFFLOecWe4d8nLXSsHX+PbgQk2SBi6pRYNQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPTd5KbTX5d3eum4mVE2ncO5+luJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jYjQ4 YmFhOC02YzgzLTQ1ZWItYjA5Yi01ZmJkMWU0MmM1N2QvY2MzYWFjMGMtYmJjMy0z NTBjLWIwZWYtZWVjYTA2YWZhYjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvY2I0OGJhYTgtNmM4My00NWViLWIw OWItNWZiZDFlNDJjNTdkL2NiNDhiYWE4LTZjODMtNDVlYi1iMDliLTVmYmQxZTQy YzU3ZC5jcmwwHwYDVR0jBBgwFoAU6TbcWGb8aAK/ppnetN0TXkzRJ84wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jYjQ4YmFhOC02YzgzLTQ1ZWItYjA5Yi01ZmJk MWU0MmM1N2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIqGj9 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGQCudk4iW9oFG4Vf57qYCG7M41BNd6cx1o4Uu761nFkH45sM0eW 7Ga5J5Tjz1KIXjOM1GWRv0gMb2FBjl0x0Nvrg8sQrA8QWLM30t/lztzSDxKKX58H La6br2ifQvP6g/woZgpVgaVkRFKxyF1RXk2MMUjtdjz3XVqVRhX8K2rTlG5sckQf Dw1G4ROS2sSDbCj/j/ktHUQChaHOnoR/y0C5fDkSxV6OVJzwn/NCNUJ+m5K48JVX Kw6p/WzEaWuKtbg3czlRsfAVNNJ8c5jYHwBf3q0gB9NP6ZdnfZgVZzEPbQDDoWjQ HSst0St0nRo1YrX/w+fvfDBxLp+8ibVePt8= -----END CERTIFICATE-----Generated at Wed Nov 5 06:18:34 2025 by rpki-client