$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/661fa57e-cb9c-3ef1-8efe-ff44f1ba6e72.roa File: 661fa57e-cb9c-3ef1-8efe-ff44f1ba6e72.roa (raw, json) Hash identifier: czl9jknM8qBVJiwIU1BiFWgb5yml9bTsHnlsyjWFx2A= Subject key identifier: 58:AA:51:5F:0D:83:8C:2E:5E:0D:58:F8:FB:45:BB:40:9D:65:50:3E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584ABD4B846DB98CB861C63472D0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/661fa57e-cb9c-3ef1-8efe-ff44f1ba6e72.roa Signing time: Mon 04 Aug 2025 01:00:32 +0000 ROA not before: Mon 04 Aug 2025 01:00:32 +0000 ROA not after: Sun 02 Nov 2025 01:00:32 +0000 asID: 12222 IP address blocks: 2001:4878:2136::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bd:4b:84:6d:b9:8c:b8:61:c6:34:72:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 4 01:00:32 2025 GMT Not After : Nov 2 01:00:32 2025 GMT Subject: CN=d138a1d0-3efa-4bd9-8271-b2c7004a2708 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:74:88:27:35:3f:dd:e2:c3:b0:39:8e:f2:f2: 61:9c:e0:4d:21:b7:e5:2f:bd:cb:73:4c:75:21:21: 53:fb:dd:4e:eb:09:88:ff:59:89:c9:db:28:20:e7: dd:fd:41:97:2e:34:57:6c:dc:c3:dd:df:d8:af:9d: ab:51:88:02:16:39:2f:10:a5:d1:af:40:58:eb:45: 0d:13:66:27:02:1a:e4:6e:7e:db:56:e1:82:bd:e8: 93:5d:dc:63:f9:04:c7:04:f6:35:dc:88:12:96:10: 60:00:8f:52:79:f9:1e:da:10:6d:ea:3d:f1:16:82: 56:ad:7e:04:46:c7:ec:76:eb:9c:c0:4d:24:f3:a5: 4e:69:e6:fe:9c:25:58:be:c1:4b:2a:77:f6:27:ec: d4:e3:15:89:97:87:53:36:ed:13:41:d5:be:a5:8e: ad:71:2c:b8:f3:86:51:a4:bc:dd:66:68:95:bf:71: fa:e2:fc:67:fc:fb:46:e2:f9:7f:c0:68:f0:8b:d6: 77:8a:41:b1:70:7a:c9:93:05:1f:e6:b5:44:2c:c8: b2:3a:7b:4a:a4:0f:ac:d0:0a:99:63:0d:52:28:ec: 0b:e9:43:ff:1c:54:b9:0f:d3:26:f0:95:ed:aa:4d: 90:4e:2f:93:13:14:00:01:5d:a9:bb:51:4b:29:26: 18:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:AA:51:5F:0D:83:8C:2E:5E:0D:58:F8:FB:45:BB:40:9D:65:50:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/661fa57e-cb9c-3ef1-8efe-ff44f1ba6e72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2001:4878:2136::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:0e:38:58:56:c1:82:69:d8:b8:21:2e:e8:2d:e0:34:f2:ed: a8:c9:da:b4:bb:31:fe:fc:af:6f:35:13:f4:68:34:65:9f:5f: b3:3e:f5:de:1f:88:f3:84:62:4b:77:64:d6:2d:11:7e:95:66: c1:26:d3:ef:9c:05:81:52:03:65:a8:79:fc:af:a7:82:54:68: c7:b8:14:43:dd:ff:39:d9:94:27:43:c5:9b:77:00:16:46:48: 55:38:36:3c:7a:33:2b:75:28:45:06:fa:11:d2:48:51:9b:0c: 87:c2:23:1e:c4:ff:a5:54:18:8b:47:d0:f2:d8:62:f0:7d:94: 6c:07:61:d9:a7:69:03:95:8c:a1:b8:cf:72:8c:cf:16:7d:13: de:15:ab:91:2f:12:10:b9:3b:17:4c:9f:db:47:4e:f7:84:8f: 0f:dc:82:26:a4:bf:64:b7:ac:b5:df:82:2d:b8:85:c1:90:27: 03:33:74:18:71:69:03:9e:82:72:af:2e:4b:2d:c0:06:2a:f9: 1f:e7:ee:79:8c:2b:7a:ba:d7:4f:92:cb:d9:bd:1a:ae:92:1b: 8d:0b:f5:fa:5c:f9:47:dd:2b:ef:2e:1f:c9:9f:42:9c:89:e5: 3d:8e:0e:53:f4:cd:ea:69:ea:13:2c:f3:13:89:7c:91:5b:86: cc:72:04:a6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq9S4RtuYy4YcY0ctAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgwNDAxMDAzMloXDTI1MTEwMjAxMDAzMlowLzEtMCsGA1UEAxMk ZDEzOGExZDAtM2VmYS00YmQ5LTgyNzEtYjJjNzAwNGEyNzA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXSIJzU/3eLDsDmO8vJhnOBNIbflL73Lc0x1 ISFT+91O6wmI/1mJydsoIOfd/UGXLjRXbNzD3d/Yr52rUYgCFjkvEKXRr0BY60UN E2YnAhrkbn7bVuGCveiTXdxj+QTHBPY13IgSlhBgAI9Sefke2hBt6j3xFoJWrX4E RsfsduucwE0k86VOaeb+nCVYvsFLKnf2J+zU4xWJl4dTNu0TQdW+pY6tcSy484ZR pLzdZmiVv3H64vxn/PtG4vl/wGjwi9Z3ikGxcHrJkwUf5rVELMiyOntKpA+s0AqZ Yw1SKOwL6UP/HFS5D9Mm8JXtqk2QTi+TExQAAV2pu1FLKSYYgQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFiqUV8Ng4wuXg1Y+PtFu0CdZVA+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjYxZmE1N2UtY2I5Yy0z ZWYxLThlZmUtZmY0NGYxYmE2ZTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIeCE2 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACkOOFhWwYJp2LghLugt4DTy7ajJ2rS7Mf78r281E/RoNGWfX7M+ 9d4fiPOEYkt3ZNYtEX6VZsEm0++cBYFSA2Woefyvp4JUaMe4FEPd/znZlCdDxZt3 ABZGSFU4Njx6Myt1KEUG+hHSSFGbDIfCIx7E/6VUGItH0PLYYvB9lGwHYdmnaQOV jKG4z3KMzxZ9E94Vq5EvEhC5OxdMn9tHTveEjw/cgiakv2S3rLXfgi24hcGQJwMz dBhxaQOegnKvLkstwAYq+R/n7nmMK3q610+Sy9m9Gq6SG40L9fpc+UfdK+8uH8mf QpyJ5T2ODlP0zepp6hMs8xOJfJFbhsxyBKY= -----END CERTIFICATE-----Generated at Mon Aug 4 18:54:05 2025 by rpki-client