$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c6a47138-193d-342a-adfd-429a1b414d56.roa File: c6a47138-193d-342a-adfd-429a1b414d56.roa (raw, json) Hash identifier: KD5zut7Vg2PUHIseT6VFoO+lrvCo7Q7y3ELVW8VHpic= Subject key identifier: C7:6B:B5:E5:C9:23:59:CF:54:18:9C:1E:95:9B:94:9C:7E:71:9E:1F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B9E07A21B9CE56BD51AAE3CC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c6a47138-193d-342a-adfd-429a1b414d56.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 12222 IP address blocks: 2001:4878:48::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:a2:1b:9c:e5:6b:d5:1a:ae:3c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=cc0f8ca5-0d6e-4aa7-a2da-7f33393833ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:6c:aa:b6:b4:bb:84:f8:d2:41:18:95:c4:8f: 82:cc:1c:e0:bc:79:ce:1d:3b:52:a5:d6:33:32:76: 32:70:b3:99:06:e8:7e:17:86:c6:1c:26:c0:a1:e4: be:91:be:9d:9e:99:e7:a9:d7:71:dc:47:7b:5f:49: c4:6e:49:da:a4:83:01:24:19:22:9a:66:9f:cb:b6: b0:1b:72:f0:c4:71:f7:31:cf:b2:42:86:8a:e3:38: 65:dd:22:0b:7e:60:df:f3:86:47:54:5b:83:49:87: a6:82:ea:2b:59:b0:6e:fe:91:9d:bd:e2:b7:d1:48: 90:b1:79:c0:e7:70:6e:1f:12:61:9b:46:19:15:b4: 4d:97:c5:c0:00:91:69:74:e5:8d:fa:fc:25:7b:ca: 22:5c:dd:bc:d7:f8:7e:f8:8e:9a:45:7b:5e:8f:9f: fb:bc:2a:e1:19:79:2a:78:47:5e:0f:85:1a:be:6c: bf:d1:44:32:99:88:46:20:e2:ac:b8:ab:00:ee:7c: fd:b3:7e:79:bc:5b:cb:21:d9:b7:5f:9d:aa:b4:9d: 96:fb:7d:6e:a3:fc:ee:56:20:cc:84:9c:97:69:ca: 1a:d5:23:ef:46:ac:f9:fc:6f:ea:36:88:85:b9:34: 7a:f0:f1:1d:00:17:f0:d0:ec:fe:6d:f9:ea:92:b6: 71:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:6B:B5:E5:C9:23:59:CF:54:18:9C:1E:95:9B:94:9C:7E:71:9E:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c6a47138-193d-342a-adfd-429a1b414d56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2001:4878:48::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:43:26:78:17:50:43:63:9c:00:4f:ce:c4:58:b6:1a:d5:3e: 24:17:d9:41:18:c9:e7:9b:58:de:96:8b:4d:a0:26:04:7d:4d: 7f:ab:49:ce:d9:6e:49:64:c4:f2:14:a7:23:2c:f4:4f:7b:8c: 0c:6f:15:5c:0f:bc:49:3f:1c:c8:81:9e:6a:8f:f7:5d:ee:fe: 4a:d6:b4:9d:42:d0:87:f4:d0:9f:79:32:82:3a:24:d8:16:9e: 19:e5:fa:d3:7b:34:9c:db:63:2a:39:58:fd:87:b4:59:be:0c: c5:bf:0b:da:25:c4:64:8f:a9:11:5c:d2:7c:4b:52:18:97:0d: 8e:22:af:57:69:aa:a0:1d:76:35:43:3f:69:47:76:17:27:ad: 9f:52:7c:95:d7:3a:4e:37:7d:ad:61:cb:e3:36:a4:d5:51:b0: 0e:a0:7c:b9:55:eb:62:e2:0b:cb:3f:cd:51:5c:dd:48:c3:b3: ac:ae:63:b9:cb:77:a2:9d:5e:10:55:99:f6:a3:f3:f3:98:1e: 2c:4e:75:a1:ba:ed:1a:22:e5:2c:1b:80:83:64:e5:5a:35:49: 1b:f2:bc:47:e3:da:0f:73:f8:54:6f:9a:9a:ea:82:94:00:0a: ed:fc:ad:56:44:08:9f:07:a5:c8:51:8b:9c:32:32:50:26:b7: e8:0a:36:b2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEueB6IbnOVr1RquPMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk Y2MwZjhjYTUtMGQ2ZS00YWE3LWEyZGEtN2YzMzM5MzgzM2VlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02yqtrS7hPjSQRiVxI+CzBzgvHnOHTtSpdYz MnYycLOZBuh+F4bGHCbAoeS+kb6dnpnnqddx3Ed7X0nEbknapIMBJBkimmafy7aw G3LwxHH3Mc+yQoaK4zhl3SILfmDf84ZHVFuDSYemguorWbBu/pGdveK30UiQsXnA 53BuHxJhm0YZFbRNl8XAAJFpdOWN+vwle8oiXN281/h++I6aRXtej5/7vCrhGXkq eEdeD4Uavmy/0UQymYhGIOKsuKsA7nz9s355vFvLIdm3X52qtJ2W+31uo/zuViDM hJyXacoa1SPvRqz5/G/qNoiFuTR68PEdABfw0Oz+bfnqkrZxEwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMdrteXJI1nPVBicHpWblJx+cZ4fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzZhNDcxMzgtMTkzZC0z NDJhLWFkZmQtNDI5YTFiNDE0ZDU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIeABI MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJVDJngXUENjnABPzsRYthrVPiQX2UEYyeebWN6Wi02gJgR9TX+r Sc7ZbklkxPIUpyMs9E97jAxvFVwPvEk/HMiBnmqP913u/krWtJ1C0If00J95MoI6 JNgWnhnl+tN7NJzbYyo5WP2HtFm+DMW/C9olxGSPqRFc0nxLUhiXDY4ir1dpqqAd djVDP2lHdhcnrZ9SfJXXOk43fa1hy+M2pNVRsA6gfLlV62LiC8s/zVFc3UjDs6yu Y7nLd6KdXhBVmfaj8/OYHixOdaG67Roi5SwbgINk5Vo1SRvyvEfj2g9z+FRvmprq gpQACu38rVZECJ8HpchRi5wyMlAmt+gKNrI= -----END CERTIFICATE-----Generated at Tue Nov 4 22:19:48 2025 by rpki-client