$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8be0b04f-9463-370b-8d93-9d314ada547c.roa File: 8be0b04f-9463-370b-8d93-9d314ada547c.roa (raw, json) Hash identifier: 7c3MgkM00WKdRoWwO/oD8lQhZcvlaQV+wb+c/le5cL4= Subject key identifier: FB:5A:5E:EE:D4:5D:00:51:FC:8D:0D:99:3A:2A:CC:1C:B8:B0:8C:D4 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B9E079A0CF231DEE8D0D11400 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8be0b04f-9463-370b-8d93-9d314ada547c.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 12222 IP address blocks: 2001:4878:136::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:9a:0c:f2:31:de:e8:d0:d1:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=e6e6c8f3-8bba-4d0d-a662-568ac6fdafd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:86:d0:e5:31:c8:c5:e3:7c:ef:15:55:f2:82: 69:a5:30:0f:6f:ec:b7:9c:d5:5f:7c:19:30:39:fb: d3:cf:94:95:60:ec:74:95:6b:ad:dd:c6:b4:01:36: c9:1c:ba:21:9b:7c:09:c5:0c:71:47:b6:df:ca:5b: fc:d5:3c:80:76:fb:fe:c8:32:12:64:f9:5a:61:ce: 9a:5b:61:11:22:31:fe:eb:0f:26:98:74:cc:3d:99: ba:7e:13:cc:d7:87:71:f2:1a:24:ac:e8:24:8a:20: 35:86:20:d5:23:83:a0:76:af:ef:b8:8f:b3:50:e1: 81:6f:04:bb:d9:3f:8b:e6:50:77:8c:60:d4:bd:19: ba:05:7c:0b:90:8b:50:af:02:9e:bd:6d:9e:2d:85: ce:f6:10:db:9c:e4:49:db:c1:b0:58:4b:36:30:bc: e3:12:30:91:f7:19:e3:b0:ab:63:3f:db:2a:44:f2: 65:72:bc:8f:23:56:4d:5f:0e:72:41:00:9a:42:7b: 78:ab:60:dd:96:82:56:67:72:b8:b1:ee:07:74:46: 30:44:64:e0:f0:bb:38:2c:2a:d1:41:59:95:f9:4b: bc:2c:56:62:ef:3c:53:15:90:91:ed:67:14:c9:f3: 83:a0:f3:91:59:a3:05:80:4a:82:85:de:d5:6c:70: 3d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:5A:5E:EE:D4:5D:00:51:FC:8D:0D:99:3A:2A:CC:1C:B8:B0:8C:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8be0b04f-9463-370b-8d93-9d314ada547c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2001:4878:136::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:3b:a6:8b:e6:06:fc:e9:4b:f5:1d:31:3e:93:92:2f:de:72: db:11:43:58:3c:08:73:f4:57:49:1e:79:0f:0a:85:41:3e:01: 50:8b:62:34:77:f6:83:cc:97:77:fd:e1:c4:65:6d:e8:32:fe: 48:74:b0:55:de:44:4a:63:29:60:9f:5a:0a:92:52:cb:65:f3: 6e:1b:d9:54:0a:b9:74:58:20:87:63:d7:46:1d:8c:ae:d2:13: 2c:c2:87:2f:11:e6:83:4a:a5:87:48:ec:25:e2:25:07:e2:54: 0c:b7:af:49:65:6e:4f:ed:13:66:c7:04:22:79:c1:99:bb:d6: 4d:84:da:15:bd:19:75:5f:5d:ed:00:20:8c:a3:e9:b8:8e:f0: 60:96:8d:e7:48:3c:b4:d2:d1:99:3d:a0:e4:60:02:1b:60:a4: 9c:cb:0b:60:e4:ca:b6:04:98:8a:c4:98:24:7c:93:7a:5f:05: 92:46:63:bb:c3:df:4b:e7:27:15:7e:3c:23:9c:60:76:59:a5: 0f:c9:db:53:80:ad:73:85:6b:56:c4:ff:28:79:13:32:f4:31: 62:0a:b7:07:52:4b:cb:73:72:de:4c:91:3c:d3:8f:06:f5:b9: 96:8d:cf:b3:cd:88:35:f7:f1:9f:ef:f2:de:f9:db:02:52:16: 1f:64:8d:6a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEueB5oM8jHe6NDRFAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk ZTZlNmM4ZjMtOGJiYS00ZDBkLWE2NjItNTY4YWM2ZmRhZmQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4bQ5THIxeN87xVV8oJppTAPb+y3nNVffBkw OfvTz5SVYOx0lWut3ca0ATbJHLohm3wJxQxxR7bfylv81TyAdvv+yDISZPlaYc6a W2ERIjH+6w8mmHTMPZm6fhPM14dx8hokrOgkiiA1hiDVI4Ogdq/vuI+zUOGBbwS7 2T+L5lB3jGDUvRm6BXwLkItQrwKevW2eLYXO9hDbnORJ28GwWEs2MLzjEjCR9xnj sKtjP9sqRPJlcryPI1ZNXw5yQQCaQnt4q2DdloJWZ3K4se4HdEYwRGTg8Ls4LCrR QVmV+Uu8LFZi7zxTFZCR7WcUyfODoPORWaMFgEqChd7VbHA9yQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPtaXu7UXQBR/I0NmToqzBy4sIzUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGJlMGIwNGYtOTQ2My0z NzBiLThkOTMtOWQzMTRhZGE1NDdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIeAE2 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADs7povmBvzpS/UdMT6Tki/ectsRQ1g8CHP0V0keeQ8KhUE+AVCL YjR39oPMl3f94cRlbegy/kh0sFXeREpjKWCfWgqSUstl824b2VQKuXRYIIdj10Yd jK7SEyzChy8R5oNKpYdI7CXiJQfiVAy3r0llbk/tE2bHBCJ5wZm71k2E2hW9GXVf Xe0AIIyj6biO8GCWjedIPLTS0Zk9oORgAhtgpJzLC2DkyrYEmIrEmCR8k3pfBZJG Y7vD30vnJxV+PCOcYHZZpQ/J21OArXOFa1bE/yh5EzL0MWIKtwdSS8tzct5MkTzT jwb1uZaNz7PNiDX38Z/v8t752wJSFh9kjWo= -----END CERTIFICATE-----Generated at Wed Nov 5 00:05:09 2025 by rpki-client