$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/45240c03-0de2-3d28-94e4-61e9fa32da58.roa File: 45240c03-0de2-3d28-94e4-61e9fa32da58.roa (raw, json) Hash identifier: R2/XmHpWkqhwxdarPzaEvhSqfhAGrsMBZLLGEOcxRZ4= Subject key identifier: 0F:48:46:60:5E:8D:A5:F8:3C:88:89:F2:15:32:BD:BC:FE:D4:3B:CC Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584ABD4B7C6DB22696CA0EDCDA80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/45240c03-0de2-3d28-94e4-61e9fa32da58.roa Signing time: Mon 04 Aug 2025 01:00:32 +0000 ROA not before: Mon 04 Aug 2025 01:00:32 +0000 ROA not after: Sun 02 Nov 2025 01:00:32 +0000 asID: 12222 IP address blocks: 2001:4878:8007::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bd:4b:7c:6d:b2:26:96:ca:0e:dc:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 4 01:00:32 2025 GMT Not After : Nov 2 01:00:32 2025 GMT Subject: CN=64b589f2-bc48-49dd-93fd-82e95aa5d561 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:79:47:33:7b:58:c0:a8:b3:1c:5d:78:03:a5: a6:ed:93:18:b0:58:37:2c:a0:7a:cc:a6:54:76:7b: d0:42:dd:15:2b:fb:3f:bb:53:42:88:15:af:7a:4f: ed:be:2c:72:d1:46:92:b6:f0:9c:2e:57:75:48:9e: 41:d4:bc:0f:7a:25:2d:6e:73:c8:fe:7b:cb:66:8f: df:96:d5:8c:83:aa:5d:c1:a5:8e:c4:37:ea:18:ef: 76:83:18:68:9a:de:29:b7:e1:27:06:c3:83:65:b4: 50:fa:67:44:f1:19:45:0b:0a:9d:8a:d2:b4:f5:33: c8:dd:61:dd:d4:d9:cf:ad:ae:e6:07:e0:51:9a:66: 46:89:4d:f5:02:96:33:46:ca:0d:49:ee:a9:1b:1a: f1:4a:40:96:ce:0e:93:f3:92:35:0a:c8:3e:96:19: 44:9f:59:21:ec:ba:ac:eb:d6:5d:1f:64:04:e7:8b: 83:5e:71:73:e4:0b:a0:9d:d1:51:c9:71:05:44:c5: 80:2c:c7:74:78:35:59:4c:57:46:8f:66:96:32:ab: a0:c1:f0:4b:a2:97:9b:72:cb:ec:0a:06:d9:b6:9a: ca:db:f9:08:57:6b:0d:64:23:41:84:22:ff:b9:9e: 50:79:4a:b9:1b:37:f4:f1:52:7d:ca:e6:87:23:56: 2e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:48:46:60:5E:8D:A5:F8:3C:88:89:F2:15:32:BD:BC:FE:D4:3B:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/45240c03-0de2-3d28-94e4-61e9fa32da58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2001:4878:8007::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:50:17:36:a1:3e:2b:1d:7b:71:37:54:c6:01:35:7c:0b:79: b2:7f:97:4f:d7:27:9d:c7:96:32:25:d3:d8:0e:4d:a6:64:96: b1:00:35:cf:7f:27:d4:05:f4:19:e8:f3:8b:42:cb:af:d2:93: 3d:12:18:c8:dc:00:60:79:1b:d8:63:b0:99:b8:a2:c0:06:e4: 66:c6:8b:c9:51:8f:4d:9b:57:b8:39:32:51:3a:03:23:b8:30: 0e:c2:34:55:58:ba:09:73:ac:7f:03:3f:f7:46:2e:f8:69:d3: cf:b8:a1:b4:23:42:a6:45:c4:ac:d9:fe:f5:a6:e5:a6:6f:62: 08:6d:8a:26:8b:8a:5b:c0:eb:fe:ad:14:fe:d3:e6:c1:7d:31: ab:78:c7:72:e2:ae:60:95:49:dc:6b:bc:bc:87:ee:b9:19:da: 96:7f:fb:7e:47:f6:3a:42:25:3a:f9:c2:0e:67:20:c1:dc:df: 44:77:8b:7d:5c:92:46:14:c6:9d:c9:18:d7:a8:3b:38:37:81: 8e:bc:ad:1c:12:a5:0e:1e:29:e6:d1:4a:7f:47:ad:92:87:b2: f9:36:9f:67:03:d6:c0:3d:0f:14:06:21:b0:e7:ec:9a:55:00: 69:3f:e6:dd:03:b6:32:0f:1b:a9:78:87:ce:c9:ee:0d:3c:85: 9d:55:30:8c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq9S3xtsiaWyg7c2oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgwNDAxMDAzMloXDTI1MTEwMjAxMDAzMlowLzEtMCsGA1UEAxMk NjRiNTg5ZjItYmM0OC00OWRkLTkzZmQtODJlOTVhYTVkNTYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHlHM3tYwKizHF14A6Wm7ZMYsFg3LKB6zKZU dnvQQt0VK/s/u1NCiBWvek/tvixy0UaStvCcLld1SJ5B1LwPeiUtbnPI/nvLZo/f ltWMg6pdwaWOxDfqGO92gxhomt4pt+EnBsODZbRQ+mdE8RlFCwqditK09TPI3WHd 1NnPra7mB+BRmmZGiU31ApYzRsoNSe6pGxrxSkCWzg6T85I1Csg+lhlEn1kh7Lqs 69ZdH2QE54uDXnFz5AugndFRyXEFRMWALMd0eDVZTFdGj2aWMqugwfBLopebcsvs CgbZtprK2/kIV2sNZCNBhCL/uZ5QeUq5Gzf08VJ9yuaHI1YuMwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFA9IRmBejaX4PIiJ8hUyvbz+1DvMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDUyNDBjMDMtMGRlMi0z ZDI4LTk0ZTQtNjFlOWZhMzJkYTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIeIAH MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGZQFzahPisde3E3VMYBNXwLebJ/l0/XJ53HljIl09gOTaZklrEA Nc9/J9QF9Bno84tCy6/Skz0SGMjcAGB5G9hjsJm4osAG5GbGi8lRj02bV7g5MlE6 AyO4MA7CNFVYuglzrH8DP/dGLvhp08+4obQjQqZFxKzZ/vWm5aZvYghtiiaLilvA 6/6tFP7T5sF9Mat4x3LirmCVSdxrvLyH7rkZ2pZ/+35H9jpCJTr5wg5nIMHc30R3 i31ckkYUxp3JGNeoOzg3gY68rRwSpQ4eKebRSn9HrZKHsvk2n2cD1sA9DxQGIbDn 7JpVAGk/5t0DtjIPG6l4h87J7g08hZ1VMIw= -----END CERTIFICATE-----Generated at Mon Aug 4 18:38:09 2025 by rpki-client