$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3d21d251-4939-30c3-98d8-9a7c334ec43e.roa File: 3d21d251-4939-30c3-98d8-9a7c334ec43e.roa (raw, json) Hash identifier: 4DbHfqtCc0l2oPhZBPMWAKyAy6lsvG2WEaubqCn767Q= Subject key identifier: 7A:B1:97:6E:AA:EA:B9:A2:D2:DA:1E:A9:FE:D3:B7:6F:7F:CA:EA:18 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584ABD4B7A3A73060627C412BA80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3d21d251-4939-30c3-98d8-9a7c334ec43e.roa Signing time: Mon 04 Aug 2025 01:00:32 +0000 ROA not before: Mon 04 Aug 2025 01:00:32 +0000 ROA not after: Sun 02 Nov 2025 01:00:32 +0000 asID: 12222 IP address blocks: 2001:4878:2141::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bd:4b:7a:3a:73:06:06:27:c4:12:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 4 01:00:32 2025 GMT Not After : Nov 2 01:00:32 2025 GMT Subject: CN=302f3045-1040-4b08-a72b-a975a4b3ea38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ea:21:fe:2f:15:8a:e1:fe:c2:16:6d:82:10: e6:15:5b:8a:d0:48:e0:ff:ed:05:95:95:85:86:e7: 3a:41:98:de:90:1f:e3:f4:92:09:d0:bb:63:d4:8d: bd:9f:df:ba:74:b9:32:91:09:38:ff:a4:4d:ec:d4: 5d:18:26:0c:c8:ed:63:99:fc:d1:47:ae:85:9f:71: 20:16:d9:83:4d:f2:1c:26:7b:43:d7:c8:ca:85:4e: a0:8a:e4:68:9f:2c:a2:be:d1:91:f3:f9:f3:ed:6b: 1a:9c:e0:05:a0:3b:43:e6:e6:23:69:9d:00:93:d5: 81:0d:28:25:43:f9:89:e7:93:c0:b4:9e:f0:b4:f1: d3:d7:25:cb:82:2e:8a:34:65:32:bb:6e:9b:ff:ae: 7c:59:27:e6:4a:f4:63:65:1d:ff:a4:cf:5b:20:1f: 1c:38:48:b8:b7:ad:85:61:5f:9f:74:b7:7d:f3:62: 1f:a4:ee:04:e4:53:0f:f2:d4:64:cf:15:77:aa:00: a9:f5:2c:39:2e:c4:8b:62:e9:90:82:c3:8d:fb:3d: 25:82:78:43:c2:52:fa:8d:c2:0e:b5:66:86:bc:4f: 64:90:8f:cf:73:e5:9d:d5:66:c0:4d:ae:8e:a8:ac: 0b:02:cd:32:b3:44:bc:5c:8d:d0:a5:22:46:88:1d: 17:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:B1:97:6E:AA:EA:B9:A2:D2:DA:1E:A9:FE:D3:B7:6F:7F:CA:EA:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3d21d251-4939-30c3-98d8-9a7c334ec43e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2001:4878:2141::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:29:15:c5:79:5d:fe:0b:bb:8a:f6:56:af:ee:9a:b7:49:4a: 9c:b4:ac:51:9b:ef:b4:2f:49:44:a0:20:f2:5f:0c:3b:f0:54: 72:bc:83:39:2e:d7:46:29:7f:93:87:95:42:c7:d0:3e:76:75: 62:11:c3:ec:7e:ce:bd:30:3a:03:bd:dc:cb:fd:a0:7a:bf:41: eb:00:92:84:f0:dd:1e:c5:6f:4e:f2:0e:97:84:f6:5f:2a:c1: ab:1f:95:b2:44:bd:47:b1:47:fa:42:bc:fd:09:e3:94:98:d4: 12:d5:33:41:98:95:bb:07:62:0f:a8:10:49:26:dd:6f:5f:40: d9:c3:56:ef:cf:ec:f8:a6:d5:2f:c2:23:0e:10:df:1f:f8:85: 5d:6d:c3:da:d0:02:14:29:cf:7c:34:3a:d9:f8:3c:97:38:bf: 1a:e5:a7:71:88:82:7c:20:b2:54:52:86:4e:bc:d1:14:6a:60: 10:42:10:94:e9:75:da:ea:04:fe:6b:59:f6:b8:f4:0e:15:34: 8c:34:4e:93:75:47:2f:a7:cd:83:09:80:bd:0b:c5:bb:e2:cf: c5:19:d5:ff:a1:a1:32:45:3f:1c:df:52:e0:50:2c:18:1e:2f: 39:2f:62:ce:47:ee:fd:19:91:c8:fc:53:6a:0d:b1:1c:33:04: 78:00:2c:e0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq9S3o6cwYGJ8QSuoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgwNDAxMDAzMloXDTI1MTEwMjAxMDAzMlowLzEtMCsGA1UEAxMk MzAyZjMwNDUtMTA0MC00YjA4LWE3MmItYTk3NWE0YjNlYTM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquoh/i8ViuH+whZtghDmFVuK0Ejg/+0FlZWF huc6QZjekB/j9JIJ0Ltj1I29n9+6dLkykQk4/6RN7NRdGCYMyO1jmfzRR66Fn3Eg FtmDTfIcJntD18jKhU6giuRonyyivtGR8/nz7WsanOAFoDtD5uYjaZ0Ak9WBDSgl Q/mJ55PAtJ7wtPHT1yXLgi6KNGUyu26b/658WSfmSvRjZR3/pM9bIB8cOEi4t62F YV+fdLd982IfpO4E5FMP8tRkzxV3qgCp9Sw5LsSLYumQgsON+z0lgnhDwlL6jcIO tWaGvE9kkI/Pc+Wd1WbATa6OqKwLAs0ys0S8XI3QpSJGiB0XXwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHqxl26q6rmi0toeqf7Tt29/yuoYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2QyMWQyNTEtNDkzOS0z MGMzLTk4ZDgtOWE3YzMzNGVjNDNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIeCFB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACQpFcV5Xf4Lu4r2Vq/umrdJSpy0rFGb77QvSUSgIPJfDDvwVHK8 gzku10Ypf5OHlULH0D52dWIRw+x+zr0wOgO93Mv9oHq/QesAkoTw3R7Fb07yDpeE 9l8qwasflbJEvUexR/pCvP0J45SY1BLVM0GYlbsHYg+oEEkm3W9fQNnDVu/P7Pim 1S/CIw4Q3x/4hV1tw9rQAhQpz3w0Otn4PJc4vxrlp3GIgnwgslRShk680RRqYBBC EJTpddrqBP5rWfa49A4VNIw0TpN1Ry+nzYMJgL0Lxbviz8UZ1f+hoTJFPxzfUuBQ LBgeLzkvYs5H7v0Zkcj8U2oNsRwzBHgALOA= -----END CERTIFICATE-----Generated at Tue Aug 5 20:08:48 2025 by rpki-client