$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/40d84f2a-60b9-335f-8c36-1e988a49a073.roa File: 40d84f2a-60b9-335f-8c36-1e988a49a073.roa (raw, json) Hash identifier: wodcWR9CcxfUMlBtg6Blpo+2pNj3Ae5X0VqjPrTGieQ= Subject key identifier: A4:F6:F1:10:24:D6:47:CF:09:57:CA:DD:C5:C1:7C:4A:82:14:7C:F5 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B9E079C70F2D8E8F1A3891BC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/40d84f2a-60b9-335f-8c36-1e988a49a073.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 12222 IP address blocks: 2001:4878:4063::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:9c:70:f2:d8:e8:f1:a3:89:1b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=1c06ffe0-7116-48fe-9747-751414d67694 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a5:e4:6f:fa:c6:70:bf:4c:63:e0:15:7d:d6: fb:d5:fd:0a:3d:89:18:85:a5:77:de:d9:1f:bb:f2: d1:33:c7:a9:20:2a:01:e3:a4:d9:83:2f:c8:55:59: c5:6f:76:78:ea:6a:24:6d:76:ec:5f:01:0f:76:e4: 2a:e1:3f:15:2b:08:cc:2b:9a:3d:0e:9d:62:b2:cb: b5:a6:5c:a1:ca:35:63:7c:d3:38:ee:b4:82:9b:1c: 1a:f9:48:a0:0e:39:99:fe:11:b7:79:5d:ab:96:1e: 24:9c:a6:f6:65:30:55:95:a2:f1:7f:51:3d:19:1e: fa:63:0e:fe:55:0c:80:55:b3:83:21:80:b1:6a:f2: 07:e9:78:03:e9:f9:08:2d:ea:74:5e:f1:f8:b9:88: 28:2c:9b:fe:6b:1a:0a:6b:a2:bf:eb:f1:ab:57:4e: db:9f:46:53:d4:bf:a5:c6:24:53:fd:49:f1:09:e1: c8:00:65:e2:c2:69:49:0c:c2:bc:fc:d1:ae:ce:f5: b0:b4:a0:0a:7b:90:0a:a2:66:7e:e9:96:34:7f:d3: 4e:71:ce:16:e2:70:21:e4:ec:81:98:c9:06:12:27: e0:aa:00:7a:98:72:45:54:d0:7e:85:5d:16:1c:91: ac:0a:5d:86:a7:64:a7:d9:19:63:16:82:d9:10:53: fd:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:F6:F1:10:24:D6:47:CF:09:57:CA:DD:C5:C1:7C:4A:82:14:7C:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/40d84f2a-60b9-335f-8c36-1e988a49a073.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2001:4878:4063::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:4c:a9:7c:52:aa:03:2f:38:88:08:3c:b2:39:c0:de:ad:4d: d8:b8:39:0d:de:c9:10:9c:9b:ba:5a:9c:e1:c0:97:4d:f5:2d: f8:7f:bd:ef:42:95:2b:10:b5:66:8b:42:1c:67:59:18:8f:d5: bb:07:1b:4e:bb:47:f3:64:da:b6:fe:f3:c3:d2:d7:89:d0:71: 78:93:7e:4f:eb:b5:0f:cb:44:c7:84:65:c5:67:db:cd:40:14: f5:cd:2e:5a:8d:4a:05:e4:84:4b:5e:02:96:ae:e0:03:d7:3e: 9a:8d:ea:bf:12:5b:44:a4:af:7e:89:c2:e8:6d:9d:96:9d:1e: fa:ee:71:8d:d6:ec:39:f0:85:71:1a:bc:3d:9c:02:32:6c:df: 9b:13:93:a9:c9:64:ae:1b:28:2a:62:06:0d:40:54:3d:d1:c5: 72:30:54:6c:d8:77:17:7d:8d:d3:e7:5f:5b:e1:bb:d9:5c:47: ed:80:ca:3f:8e:44:63:eb:a6:6f:73:bf:6a:74:38:e0:10:14: bd:64:19:08:30:af:32:c9:ef:07:54:af:48:77:34:08:2f:61: c4:78:60:6b:72:0d:a1:2d:29:1c:2d:e8:31:d1:b9:83:ca:62: 64:70:34:44:c1:04:f5:e1:40:e7:cc:dd:54:15:01:e0:95:21: bc:e7:45:f5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEueB5xw8tjo8aOJG8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk MWMwNmZmZTAtNzExNi00OGZlLTk3NDctNzUxNDE0ZDY3Njk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KXkb/rGcL9MY+AVfdb71f0KPYkYhaV33tkf u/LRM8epICoB46TZgy/IVVnFb3Z46mokbXbsXwEPduQq4T8VKwjMK5o9Dp1issu1 plyhyjVjfNM47rSCmxwa+UigDjmZ/hG3eV2rlh4knKb2ZTBVlaLxf1E9GR76Yw7+ VQyAVbODIYCxavIH6XgD6fkILep0XvH4uYgoLJv+axoKa6K/6/GrV07bn0ZT1L+l xiRT/UnxCeHIAGXiwmlJDMK8/NGuzvWwtKAKe5AKomZ+6ZY0f9NOcc4W4nAh5OyB mMkGEifgqgB6mHJFVNB+hV0WHJGsCl2Gp2Sn2RljFoLZEFP9pwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKT28RAk1kfPCVfK3cXBfEqCFHz1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDBkODRmMmEtNjBiOS0z MzVmLThjMzYtMWU5ODhhNDlhMDczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIeEBj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAElMqXxSqgMvOIgIPLI5wN6tTdi4OQ3eyRCcm7panOHAl031Lfh/ ve9ClSsQtWaLQhxnWRiP1bsHG067R/Nk2rb+88PS14nQcXiTfk/rtQ/LRMeEZcVn 281AFPXNLlqNSgXkhEteApau4APXPpqN6r8SW0Skr36JwuhtnZadHvrucY3W7Dnw hXEavD2cAjJs35sTk6nJZK4bKCpiBg1AVD3RxXIwVGzYdxd9jdPnX1vhu9lcR+2A yj+ORGPrpm9zv2p0OOAQFL1kGQgwrzLJ7wdUr0h3NAgvYcR4YGtyDaEtKRwt6DHR uYPKYmRwNETBBPXhQOfM3VQVAeCVIbznRfU= -----END CERTIFICATE-----Generated at Tue Nov 4 23:55:47 2025 by rpki-client