$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/99b7fe13-4721-31b9-b11e-3c5201b945e9.roa File: 99b7fe13-4721-31b9-b11e-3c5201b945e9.roa (raw, json) Hash identifier: gJbvrFFthWYtr6382MjLNPQfvWuEqaBj1yX9TS23pY4= Subject key identifier: 25:6A:F0:F8:3C:F9:60:2D:FC:51:B3:FF:D5:1C:6D:AA:EA:91:50:37 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B9E07A68D792065AF1932A8E0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/99b7fe13-4721-31b9-b11e-3c5201b945e9.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 12222 IP address blocks: 2001:4878:4323::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:a6:8d:79:20:65:af:19:32:a8:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=abd199d2-e5df-4527-9b0e-0bc7e019d4e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:21:17:7b:88:eb:11:bb:78:12:79:36:96:de: 33:7f:e8:92:ca:94:42:50:33:29:98:bc:2b:9c:24: a4:27:51:97:ac:d0:c8:3a:9d:6a:e1:88:89:8f:fe: f5:ca:df:81:96:bd:c6:e5:b5:97:ee:4a:87:50:fa: 61:a4:00:91:c0:c0:54:82:1a:81:b0:cd:0d:ee:9a: 46:b6:ba:6c:ef:c8:73:f0:b7:28:25:9e:5f:22:b1: d7:09:b8:a8:2b:64:ee:1f:2b:c5:89:76:30:d4:ec: e7:0b:52:9e:a7:4a:64:1b:b2:2c:33:1c:c7:8c:43: 3a:92:5e:e1:2e:1c:44:8d:be:22:5d:0a:7d:0c:52: c7:59:c1:13:45:c2:9d:ec:30:06:51:c4:07:d1:7d: 02:f2:28:54:84:7e:f8:cf:5a:5c:20:9d:1f:f7:ba: 8d:86:d4:a3:66:e0:85:a3:b7:85:e6:09:2d:51:df: 9a:b6:52:07:a3:bf:8f:67:96:5a:6a:77:c1:48:59: 37:21:49:f3:ad:ac:6d:89:4e:c2:77:2a:35:ad:46: 16:40:52:b9:2c:bb:0b:31:d2:ae:35:c0:ab:cf:ff: 19:61:a0:ef:c4:3e:ad:38:80:ab:6d:9b:f3:20:28: f0:2c:e0:75:6c:0b:40:76:5d:43:4e:13:8d:75:48: ab:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:6A:F0:F8:3C:F9:60:2D:FC:51:B3:FF:D5:1C:6D:AA:EA:91:50:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/99b7fe13-4721-31b9-b11e-3c5201b945e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2001:4878:4323::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:21:dd:e1:18:91:d7:66:d8:45:21:a3:96:28:93:9d:02:47: a4:60:37:8d:1f:d0:f0:a1:51:b4:23:5a:21:6b:4f:df:23:ca: ac:b6:d1:c0:31:1e:0c:af:b4:65:5b:8d:8e:82:c1:22:f1:ed: 51:c1:1e:7f:bb:fe:ad:1c:ba:fa:78:4b:de:aa:94:f0:ba:16: 6f:c3:c8:03:f5:87:db:64:fb:35:9e:33:f6:7c:a7:4f:39:e7: da:80:a7:1c:b8:73:5b:7b:92:f1:a2:70:aa:05:69:25:de:6b: 0a:17:46:a0:2e:69:fa:38:29:90:cb:9d:d5:35:0f:25:5b:c2: 06:4f:30:b0:fc:96:80:f2:c7:05:5f:19:13:1c:fc:bf:60:28: 76:33:c3:92:14:ef:6d:27:a2:89:69:ce:5c:e7:21:f1:03:28: e2:5d:21:8e:29:32:1d:32:f7:e4:c1:c5:00:9f:cb:dc:59:31: 91:92:3c:a9:ab:17:f5:a9:53:d5:16:c1:92:b7:93:c1:87:0b: 5d:05:39:ae:05:54:da:a1:19:96:de:42:b8:b5:53:fd:ca:85: 67:1c:d1:f0:2a:5d:de:5f:5d:69:eb:ec:00:dd:40:59:48:f2: dd:05:67:ed:34:56:aa:c9:62:80:39:42:78:c4:f9:85:1f:26: bd:7f:47:44 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEueB6aNeSBlrxkyqOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk YWJkMTk5ZDItZTVkZi00NTI3LTliMGUtMGJjN2UwMTlkNGU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyEXe4jrEbt4Enk2lt4zf+iSypRCUDMpmLwr nCSkJ1GXrNDIOp1q4YiJj/71yt+Blr3G5bWX7kqHUPphpACRwMBUghqBsM0N7ppG trps78hz8LcoJZ5fIrHXCbioK2TuHyvFiXYw1OznC1Kep0pkG7IsMxzHjEM6kl7h LhxEjb4iXQp9DFLHWcETRcKd7DAGUcQH0X0C8ihUhH74z1pcIJ0f97qNhtSjZuCF o7eF5gktUd+atlIHo7+PZ5ZaanfBSFk3IUnzraxtiU7Cdyo1rUYWQFK5LLsLMdKu NcCrz/8ZYaDvxD6tOICrbZvzICjwLOB1bAtAdl1DThONdUirwwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCVq8Pg8+WAt/FGz/9UcbarqkVA3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTliN2ZlMTMtNDcyMS0z MWI5LWIxMWUtM2M1MjAxYjk0NWU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIeEMj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACwh3eEYkddm2EUho5Yok50CR6RgN40f0PChUbQjWiFrT98jyqy2 0cAxHgyvtGVbjY6CwSLx7VHBHn+7/q0cuvp4S96qlPC6Fm/DyAP1h9tk+zWeM/Z8 p08559qApxy4c1t7kvGicKoFaSXeawoXRqAuafo4KZDLndU1DyVbwgZPMLD8loDy xwVfGRMc/L9gKHYzw5IU720noolpzlznIfEDKOJdIY4pMh0y9+TBxQCfy9xZMZGS PKmrF/WpU9UWwZK3k8GHC10FOa4FVNqhGZbeQri1U/3KhWcc0fAqXd5fXWnr7ADd QFlI8t0FZ+00VqrJYoA5QnjE+YUfJr1/R0Q= -----END CERTIFICATE-----Generated at Wed Nov 5 04:16:49 2025 by rpki-client