$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/322c2f46-302e-3b86-872b-588f6ddbb9bd.roa File: 322c2f46-302e-3b86-872b-588f6ddbb9bd.roa (raw, json) Hash identifier: 168j7w0nvH8RV6uhK66b7BawxsTLhDbJmSpyHEyQ8WU= Subject key identifier: 85:68:F4:D2:58:DD:A1:2C:24:4A:A5:C3:32:84:C2:0E:A9:BF:31:E4 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BA39D00703BEAE3FEE52C8FE0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/322c2f46-302e-3b86-872b-588f6ddbb9bd.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 12222 IP address blocks: 2001:4878:c322::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:00:70:3b:ea:e3:fe:e5:2c:8f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=ef356339-6c49-4c32-a5f4-3b937e3fcd4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:21:64:67:6c:f8:6f:6e:da:99:ed:e8:4d:44: d8:aa:c7:00:77:7f:3a:ee:e6:b8:60:56:70:f7:51: 0f:98:c9:5a:db:53:c2:3f:26:83:52:93:fb:84:74: 47:60:fe:61:4b:23:ef:da:1c:df:3a:e2:f4:c6:53: 4b:d6:53:5a:5a:b0:ab:5a:42:06:44:27:07:c5:c5: 60:c9:b7:b1:06:39:6e:9f:e3:ee:3f:87:84:b3:0f: f0:be:e9:a7:b8:bc:ac:d3:7a:00:4c:e2:61:b5:ce: d9:88:f3:4b:e7:a5:68:2d:88:9e:1f:5a:32:08:45: 95:32:39:9d:9f:6e:16:c9:0d:fe:38:11:9b:06:ce: ac:ab:62:2a:e7:67:7a:49:6b:d1:09:e9:2a:d9:5c: fe:a6:83:7d:f5:49:69:52:2b:ef:91:7d:00:16:2c: 3b:eb:42:9d:49:e2:eb:7a:e0:da:13:72:f9:07:f1: d8:c7:a4:b4:c2:24:83:d3:bc:48:89:6d:54:d5:cb: 30:bf:60:6b:55:0d:50:b6:cb:12:8b:ef:54:17:2e: f7:6c:61:2a:03:7b:3f:c1:32:ed:b8:49:21:14:49: 2b:d3:4b:55:42:b0:93:6d:f4:a4:f3:18:2f:df:09: b2:a6:93:26:88:93:8c:18:15:d4:8e:29:ad:9c:e9: 62:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:68:F4:D2:58:DD:A1:2C:24:4A:A5:C3:32:84:C2:0E:A9:BF:31:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/322c2f46-302e-3b86-872b-588f6ddbb9bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2001:4878:c322::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:9f:23:b9:9b:96:d9:54:63:19:d0:72:99:1c:de:98:38:c7: 96:93:b9:b7:08:86:25:94:4c:53:bb:c1:f7:c2:09:35:2d:16: b5:74:c6:fe:b6:50:14:25:62:e3:4e:33:b4:9a:16:84:11:78: ca:c3:2f:cd:b7:e5:72:fb:34:84:a5:9a:5c:65:d8:cb:9b:86: 14:f0:ab:2a:d0:81:cb:f7:9a:d2:10:f3:9e:11:26:5f:77:7e: 80:86:20:bd:25:3b:c9:54:17:44:4f:4e:49:46:92:b6:08:5c: 89:ea:c2:1c:9f:16:62:d3:df:bf:a0:87:2b:94:d0:c1:36:e4: 4f:11:7f:e8:9e:7b:75:ac:7a:ec:1e:de:09:10:dd:5b:6c:3f: 39:22:5b:68:b3:e7:72:bd:da:96:f7:af:ac:36:a1:40:ea:3f: 34:c9:ea:a3:33:2e:d0:08:3a:af:90:1d:c3:14:20:57:7f:a1: f7:a4:27:9f:0b:e0:30:3b:99:98:3b:c9:01:39:93:bd:b9:13: c0:23:e8:0f:e5:16:85:bb:c9:39:21:9e:85:18:00:ff:22:f3: b8:de:5a:3d:58:b4:54:fb:db:e1:49:af:62:cb:a2:03:d1:48: 80:b3:6e:27:b5:ef:45:da:bc:a1:15:90:60:3c:83:22:aa:98: 0b:07:b8:fe -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEujnQBwO+rj/uUsj+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk ZWYzNTYzMzktNmM0OS00YzMyLWE1ZjQtM2I5MzdlM2ZjZDRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhyFkZ2z4b27ame3oTUTYqscAd3867ua4YFZw 91EPmMla21PCPyaDUpP7hHRHYP5hSyPv2hzfOuL0xlNL1lNaWrCrWkIGRCcHxcVg ybexBjlun+PuP4eEsw/wvumnuLys03oATOJhtc7ZiPNL56VoLYieH1oyCEWVMjmd n24WyQ3+OBGbBs6sq2Iq52d6SWvRCekq2Vz+poN99UlpUivvkX0AFiw760KdSeLr euDaE3L5B/HYx6S0wiSD07xIiW1U1cswv2BrVQ1QtssSi+9UFy73bGEqA3s/wTLt uEkhFEkr00tVQrCTbfSk8xgv3wmyppMmiJOMGBXUjimtnOliyQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIVo9NJY3aEsJEqlwzKEwg6pvzHkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzIyYzJmNDYtMzAyZS0z Yjg2LTg3MmItNTg4ZjZkZGJiOWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIeMMi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACGfI7mbltlUYxnQcpkc3pg4x5aTubcIhiWUTFO7wffCCTUtFrV0 xv62UBQlYuNOM7SaFoQReMrDL8235XL7NISlmlxl2MubhhTwqyrQgcv3mtIQ854R Jl93foCGIL0lO8lUF0RPTklGkrYIXInqwhyfFmLT37+ghyuU0ME25E8Rf+iee3Ws euwe3gkQ3VtsPzkiW2iz53K92pb3r6w2oUDqPzTJ6qMzLtAIOq+QHcMUIFd/ofek J58L4DA7mZg7yQE5k725E8Aj6A/lFoW7yTkhnoUYAP8i87jeWj1YtFT72+FJr2LL ogPRSICzbie170XavKEVkGA8gyKqmAsHuP4= -----END CERTIFICATE-----Generated at Wed Nov 5 03:04:26 2025 by rpki-client