$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c59db444-e73d-3a71-9d47-a14cb21c2f3e.roa File: c59db444-e73d-3a71-9d47-a14cb21c2f3e.roa (raw, json) Hash identifier: nUCSHN7fpSgdFFmSAohvD55ar+zcFGfXqRDXn9afexg= Subject key identifier: A2:69:F0:8F:50:BE:78:A0:55:CD:34:C0:4B:94:87:B9:06:D0:DF:67 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584ABD4B7B0EF2C9ED392C2A6880 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c59db444-e73d-3a71-9d47-a14cb21c2f3e.roa Signing time: Mon 04 Aug 2025 01:00:32 +0000 ROA not before: Mon 04 Aug 2025 01:00:32 +0000 ROA not after: Sun 02 Nov 2025 01:00:32 +0000 asID: 12222 IP address blocks: 2001:4878:2259::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bd:4b:7b:0e:f2:c9:ed:39:2c:2a:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 4 01:00:32 2025 GMT Not After : Nov 2 01:00:32 2025 GMT Subject: CN=1b784b82-8bc4-4ff4-a752-20f218acac10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:85:ee:bf:80:47:f5:8c:7c:4a:ec:d9:03:21: 8e:4a:bc:98:d5:0f:3d:22:ed:fd:e5:8a:5d:b0:e4: f6:2e:01:85:c3:b5:ce:96:1d:1d:a1:97:93:ed:61: 89:40:9d:d7:32:1e:99:4d:0b:3e:61:15:47:b9:e8: ae:46:35:ff:8a:07:75:cc:b0:c6:19:9f:30:0d:4b: 90:9f:44:b8:78:a1:12:86:d7:22:a1:c7:96:e2:bd: 12:f4:eb:6c:51:73:64:46:84:73:c2:6b:32:54:4a: fa:73:a9:67:35:45:9b:05:99:22:76:c0:b2:9c:6e: 31:2e:8f:a6:1d:c8:ca:e8:8f:99:91:e4:4b:5d:8d: 98:b8:3d:ec:51:82:55:0b:b6:91:67:95:dd:be:8a: d6:d3:37:18:e0:90:9b:67:aa:9d:cb:e9:c1:38:c2: 1c:bb:9b:6b:13:c1:7e:f6:84:9f:10:5e:92:96:4d: 26:0e:17:36:0a:38:d9:31:d7:91:96:a6:c1:0e:bd: 24:72:b1:ea:f7:ff:8b:25:fa:95:1f:46:fd:78:d5: 6c:c5:b9:ca:0d:1d:23:c6:09:ea:a5:6b:ac:c1:ee: 87:00:22:d4:12:c4:b5:4a:79:81:a0:54:3e:6f:2b: df:22:3e:9f:93:44:b4:05:ea:d3:f2:43:c2:9e:ed: 1f:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:69:F0:8F:50:BE:78:A0:55:CD:34:C0:4B:94:87:B9:06:D0:DF:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c59db444-e73d-3a71-9d47-a14cb21c2f3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2001:4878:2259::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:00:bb:8a:6e:d4:61:14:2f:3b:75:af:bd:4f:ab:c2:82:91: c7:86:a8:d7:d7:01:69:89:d8:3e:89:b8:d7:c7:6b:bc:86:ca: 3b:fe:41:ae:06:ce:89:4d:85:09:0e:30:33:58:cb:8a:27:83: e7:c5:7e:32:cc:c7:35:5e:27:9e:af:88:4b:d7:10:ae:14:f9: 49:2b:49:f0:3a:c6:a3:59:2e:02:55:b9:ee:5c:12:d8:6c:3d: 13:42:e8:3d:9b:ae:31:ce:19:d3:64:dc:32:3d:a7:11:25:45: 02:a9:cc:dc:8b:31:5a:46:f2:6e:ae:3d:4b:d1:91:d7:43:b4: 61:56:de:a4:15:c2:39:67:33:28:d0:72:a8:16:68:56:fc:11: 32:b2:56:00:77:83:d9:9e:67:a5:f3:81:5f:5c:50:a8:ac:18: eb:09:8a:5a:43:64:ba:08:7c:a3:ff:95:c7:a9:5d:9d:26:70: cc:d9:07:fe:13:25:e5:a0:d7:df:89:66:79:45:f0:9b:9c:3f: 0c:a3:b8:00:2c:30:96:fb:e4:e3:4f:ee:6b:06:2c:28:d6:61: 66:db:11:ff:50:71:d4:cf:a8:74:b2:5d:96:74:de:27:55:b7: 8a:6f:e2:fa:0f:a5:2e:b0:78:f3:18:0b:1a:34:a4:31:11:47: d3:c6:fe:6a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq9S3sO8sntOSwqaIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgwNDAxMDAzMloXDTI1MTEwMjAxMDAzMlowLzEtMCsGA1UEAxMk MWI3ODRiODItOGJjNC00ZmY0LWE3NTItMjBmMjE4YWNhYzEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4Xuv4BH9Yx8SuzZAyGOSryY1Q89Iu395Ypd sOT2LgGFw7XOlh0doZeT7WGJQJ3XMh6ZTQs+YRVHueiuRjX/igd1zLDGGZ8wDUuQ n0S4eKEShtcioceW4r0S9OtsUXNkRoRzwmsyVEr6c6lnNUWbBZkidsCynG4xLo+m HcjK6I+ZkeRLXY2YuD3sUYJVC7aRZ5XdvorW0zcY4JCbZ6qdy+nBOMIcu5trE8F+ 9oSfEF6Slk0mDhc2CjjZMdeRlqbBDr0kcrHq9/+LJfqVH0b9eNVsxbnKDR0jxgnq pWuswe6HACLUEsS1SnmBoFQ+byvfIj6fk0S0BerT8kPCnu0fbwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKJp8I9QvnigVc00wEuUh7kG0N9nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzU5ZGI0NDQtZTczZC0z YTcxLTlkNDctYTE0Y2IyMWMyZjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIeCJZ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEMAu4pu1GEULzt1r71Pq8KCkceGqNfXAWmJ2D6JuNfHa7yGyjv+ Qa4GzolNhQkOMDNYy4ong+fFfjLMxzVeJ56viEvXEK4U+UkrSfA6xqNZLgJVue5c EthsPRNC6D2brjHOGdNk3DI9pxElRQKpzNyLMVpG8m6uPUvRkddDtGFW3qQVwjln MyjQcqgWaFb8ETKyVgB3g9meZ6XzgV9cUKisGOsJilpDZLoIfKP/lcepXZ0mcMzZ B/4TJeWg19+JZnlF8JucPwyjuAAsMJb75ONP7msGLCjWYWbbEf9QcdTPqHSyXZZ0 3idVt4pv4voPpS6wePMYCxo0pDERR9PG/mo= -----END CERTIFICATE-----Generated at Mon Aug 4 19:15:07 2025 by rpki-client