$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1c409d7b-5bdf-30f8-8c61-de5f13fd1d4a.roa File: 1c409d7b-5bdf-30f8-8c61-de5f13fd1d4a.roa (raw, json) Hash identifier: Br6A+teaPLsnFCPtvKTcpVFhKWz3SasT+8OwI72LOJg= Subject key identifier: F9:5D:C5:E2:53:F1:21:43:27:A8:2B:3E:4D:2A:D2:6E:CC:76:00:97 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BA0D25717A547339B55F20780 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1c409d7b-5bdf-30f8-8c61-de5f13fd1d4a.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 12222 IP address blocks: 2001:4878:a062::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:57:17:a5:47:33:9b:55:f2:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=0145a790-83e1-46d4-a3d3-8de1374acd6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:cf:ef:a9:d2:55:62:10:1f:4d:3f:28:40:5e: f9:b9:6d:fa:be:df:03:5d:14:1b:91:a2:eb:e3:c1: 45:8a:6c:ef:47:00:b5:3f:e2:5f:5d:1b:86:75:d8: 59:01:a2:d4:b0:f8:4d:6e:58:27:73:71:6e:96:dd: 0b:d0:5e:f4:79:ef:ed:d0:3b:83:60:f8:06:62:ab: 86:61:4e:7d:87:79:4c:e1:d0:c4:11:6e:18:52:c8: 1d:df:0c:1a:2b:f6:31:c7:13:11:23:40:27:b6:55: f5:ec:2f:a6:20:55:0c:68:ad:5b:82:e9:df:e0:62: 8e:88:ec:4a:48:b1:3c:3f:ff:a5:b6:b1:bb:09:4a: 73:b4:43:57:0c:b1:d3:e8:f9:0e:13:85:5d:4c:dc: cf:9b:2b:a3:5a:b9:81:5f:bf:25:ea:0c:8d:08:fb: e0:97:62:e9:20:bc:02:25:8d:fa:e5:5b:a5:4c:db: e6:9a:8c:86:f5:c0:01:26:7b:00:db:95:c6:a3:11: 71:d0:2c:59:b9:4a:fc:5f:cd:e1:e3:5d:67:71:30: a3:75:4e:b6:e1:b8:8e:48:54:c4:fa:d0:ed:c6:30: 4a:47:ba:da:46:07:93:e3:79:8c:f2:1a:a4:18:28: 7e:18:28:24:eb:28:e7:2f:0a:7e:0e:a3:27:73:79: f4:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:5D:C5:E2:53:F1:21:43:27:A8:2B:3E:4D:2A:D2:6E:CC:76:00:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1c409d7b-5bdf-30f8-8c61-de5f13fd1d4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2001:4878:a062::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:36:23:c2:95:d4:9c:2d:66:43:27:ee:6d:99:40:d2:22:f1: 3c:84:26:88:51:c3:cb:32:12:0f:58:62:0b:ec:e8:ca:50:34: cf:42:a4:b5:f6:46:d3:56:be:8f:d2:17:de:37:fd:b6:06:1e: 52:18:86:b3:aa:9e:c0:22:36:f6:50:09:b3:21:1b:7e:76:10: cc:64:da:47:8d:21:d7:3f:f6:81:14:3f:f1:01:de:b8:47:4e: 7a:25:82:8c:43:f3:39:40:4e:6c:57:f4:34:8e:d9:c6:c4:40: 27:ee:b4:82:b5:c4:60:bf:ef:48:ff:38:ea:aa:0d:98:8e:f3: 17:f1:b1:3b:56:ad:d8:f0:e1:66:22:5f:48:ff:6a:b2:62:4d: cf:e6:ae:a4:91:67:ef:a2:7c:5b:79:9a:e6:1c:70:45:62:8b: f7:78:22:f8:58:33:97:4c:dc:a9:1f:83:fc:03:db:28:9e:99: 66:54:b9:c2:d0:2b:74:32:f6:fb:94:71:10:54:2d:fe:c9:b2: 5c:95:0a:6d:7e:85:1d:cf:06:95:45:ac:e3:67:52:15:39:38: 0d:b5:00:97:46:6e:1a:4d:f3:8c:2a:fb:f0:f0:a6:77:2b:d6: 64:bd:b9:6c:a7:b6:56:29:9d:08:31:6e:9b:67:7c:1b:d1:45: ab:41:23:70 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEug0lcXpUczm1XyB4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk MDE0NWE3OTAtODNlMS00NmQ0LWEzZDMtOGRlMTM3NGFjZDZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8/vqdJVYhAfTT8oQF75uW36vt8DXRQbkaLr 48FFimzvRwC1P+JfXRuGddhZAaLUsPhNblgnc3Fult0L0F70ee/t0DuDYPgGYquG YU59h3lM4dDEEW4YUsgd3wwaK/YxxxMRI0AntlX17C+mIFUMaK1bgunf4GKOiOxK SLE8P/+ltrG7CUpztENXDLHT6PkOE4VdTNzPmyujWrmBX78l6gyNCPvgl2LpILwC JY365VulTNvmmoyG9cABJnsA25XGoxFx0CxZuUr8X83h411ncTCjdU624biOSFTE +tDtxjBKR7raRgeT43mM8hqkGCh+GCgk6yjnLwp+DqMnc3n0LQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPldxeJT8SFDJ6grPk0q0m7MdgCXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWM0MDlkN2ItNWJkZi0z MGY4LThjNjEtZGU1ZjEzZmQxZDRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIeKBi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIs2I8KV1JwtZkMn7m2ZQNIi8TyEJohRw8syEg9YYgvs6MpQNM9C pLX2RtNWvo/SF943/bYGHlIYhrOqnsAiNvZQCbMhG352EMxk2keNIdc/9oEUP/EB 3rhHTnolgoxD8zlATmxX9DSO2cbEQCfutIK1xGC/70j/OOqqDZiO8xfxsTtWrdjw 4WYiX0j/arJiTc/mrqSRZ++ifFt5muYccEVii/d4IvhYM5dM3Kkfg/wD2yiemWZU ucLQK3Qy9vuUcRBULf7JslyVCm1+hR3PBpVFrONnUhU5OA21AJdGbhpN84wq+/Dw pncr1mS9uWyntlYpnQgxbptnfBvRRatBI3A= -----END CERTIFICATE-----Generated at Wed Nov 5 03:00:34 2025 by rpki-client