$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/79382436-4a21-3061-965a-1453535676b2.roa File: 79382436-4a21-3061-965a-1453535676b2.roa (raw, json) Hash identifier: U/JzwxYQR/OnsOfIypB7sUlQU7ocEp0+baH2pDdvqYg= Subject key identifier: F3:36:57:29:02:3B:71:98:E8:04:84:97:90:9A:E4:66:1A:D2:5D:6F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BA39D0F00D6462DEF0874E600 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/79382436-4a21-3061-965a-1453535676b2.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 12222 IP address blocks: 2001:4878:a347::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:0f:00:d6:46:2d:ef:08:74:e6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=59f387a6-7d94-4544-9a54-b89859073315 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:88:fc:97:49:14:98:cf:68:b5:4e:92:32:bc: 7c:8b:f4:e8:cf:9b:81:ad:5d:1e:38:20:c4:ef:a1: 1f:29:f5:b8:85:5e:5c:c1:96:9d:df:44:62:dd:42: 66:36:10:b6:5d:09:73:07:bb:bb:19:7c:88:80:5b: 4b:eb:29:39:e0:2f:b8:dc:f3:49:9c:41:be:b4:d2: 44:b3:7d:8c:43:5f:84:be:70:01:80:f9:8e:fb:ca: 4c:7d:97:0b:2c:a5:9c:45:16:95:c0:75:ad:cf:cd: 90:6a:93:3b:12:b6:d1:9e:31:dc:24:84:7a:84:6e: 26:ce:b8:2c:48:d6:41:55:6c:df:70:a0:ee:71:07: d9:2f:80:ac:0b:44:b3:11:c0:2d:3f:3b:49:79:58: d0:47:8a:f7:6a:05:1c:fc:72:ed:d6:1f:ea:53:c8: 06:f9:86:54:e2:f3:b0:9e:3d:24:3a:83:4c:18:f6: 18:79:b6:de:09:68:1e:06:25:52:84:55:ef:5a:28: f3:cb:07:cd:16:6d:4d:c0:24:a0:ff:44:d6:8b:31: a8:55:ba:a9:d1:7c:da:09:3c:42:61:cd:5f:f1:da: 16:91:7a:93:05:ab:42:40:98:f9:5b:67:1b:f7:e6: 62:b2:44:d3:de:fb:77:33:e2:1f:c4:67:d5:29:df: 43:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:36:57:29:02:3B:71:98:E8:04:84:97:90:9A:E4:66:1A:D2:5D:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/79382436-4a21-3061-965a-1453535676b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2001:4878:a347::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:cf:e6:5d:27:0a:77:42:15:51:e1:21:d6:b5:a8:39:7d:72: 0d:8a:51:23:98:f6:c0:1e:64:55:fd:00:e3:c2:97:75:b8:51: c1:02:54:c4:bb:58:a8:b2:04:14:74:21:65:5a:1f:db:35:06: 63:6c:a8:c7:d5:50:c9:d3:6e:d2:19:e4:c3:a9:dc:d9:b8:a5: 43:4c:e9:57:89:08:95:b2:99:77:0a:38:57:2d:8f:53:43:6f: 70:d7:8a:56:c8:ee:52:f7:f5:eb:a4:b7:f2:82:58:15:c4:4b: 8d:43:6d:a4:1f:ff:00:9c:c8:5d:5b:1c:4f:65:d9:f9:1d:c0: 4f:f5:73:18:39:5f:09:02:72:54:f9:79:96:12:08:09:8d:42: 7d:cf:ff:1b:67:03:56:f4:06:ad:8e:c3:93:50:77:ba:e1:4c: 33:4c:1e:83:17:7e:d1:6b:ae:4a:c7:a8:fb:49:3f:e6:4b:48: 08:2f:ac:29:ba:96:b5:95:c3:56:20:5a:61:7a:94:cb:bd:29: 02:30:36:06:80:eb:a2:76:17:60:83:b7:78:ed:13:4d:96:2a: b9:4f:64:ee:35:99:59:50:93:e0:a0:d0:fa:2d:e5:da:07:00: a0:c1:4f:90:53:a8:08:3d:04:79:0a:c0:b4:d8:7c:93:41:8f: 2d:21:de:9d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEujnQ8A1kYt7wh05gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk NTlmMzg3YTYtN2Q5NC00NTQ0LTlhNTQtYjg5ODU5MDczMzE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYj8l0kUmM9otU6SMrx8i/Toz5uBrV0eOCDE 76EfKfW4hV5cwZad30Ri3UJmNhC2XQlzB7u7GXyIgFtL6yk54C+43PNJnEG+tNJE s32MQ1+EvnABgPmO+8pMfZcLLKWcRRaVwHWtz82QapM7ErbRnjHcJIR6hG4mzrgs SNZBVWzfcKDucQfZL4CsC0SzEcAtPztJeVjQR4r3agUc/HLt1h/qU8gG+YZU4vOw nj0kOoNMGPYYebbeCWgeBiVShFXvWijzywfNFm1NwCSg/0TWizGoVbqp0XzaCTxC Yc1f8doWkXqTBatCQJj5W2cb9+ZiskTT3vt3M+IfxGfVKd9DBQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPM2VykCO3GY6ASEl5Ca5GYa0l1vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzkzODI0MzYtNGEyMS0z MDYxLTk2NWEtMTQ1MzUzNTY3NmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIeKNH MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADjP5l0nCndCFVHhIda1qDl9cg2KUSOY9sAeZFX9AOPCl3W4UcEC VMS7WKiyBBR0IWVaH9s1BmNsqMfVUMnTbtIZ5MOp3Nm4pUNM6VeJCJWymXcKOFct j1NDb3DXilbI7lL39eukt/KCWBXES41DbaQf/wCcyF1bHE9l2fkdwE/1cxg5XwkC clT5eZYSCAmNQn3P/xtnA1b0Bq2Ow5NQd7rhTDNMHoMXftFrrkrHqPtJP+ZLSAgv rCm6lrWVw1YgWmF6lMu9KQIwNgaA66J2F2CDt3jtE02WKrlPZO41mVlQk+Cg0Pot 5doHAKDBT5BTqAg9BHkKwLTYfJNBjy0h3p0= -----END CERTIFICATE-----Generated at Tue Nov 4 22:23:29 2025 by rpki-client