$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ca2529c2-77da-318b-ad83-33c8b3cff72e.roa File: ca2529c2-77da-318b-ad83-33c8b3cff72e.roa (raw, json) Hash identifier: cI6xX8aToG2jbBoTcPUoTDr48Rn36YdMVfRlhIuapgA= Subject key identifier: F5:09:D8:82:46:6B:C0:26:EF:DF:5B:86:1F:83:40:39:DB:BC:BB:D6 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B9E079BEE4A929D75D94DB6A0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ca2529c2-77da-318b-ad83-33c8b3cff72e.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 12222 IP address blocks: 2001:4878:2324::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:9b:ee:4a:92:9d:75:d9:4d:b6:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=49801be0-9076-4789-b7da-8096274554cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ae:e3:0a:d7:29:5b:b2:68:68:57:33:7e:08: f9:af:03:23:d8:85:a3:3b:31:15:44:80:d1:9a:d4: c4:63:f9:86:6e:be:6f:f2:a1:83:6f:33:a4:82:37: cf:71:7a:87:8e:43:f1:54:c6:82:19:89:1c:4b:4b: 22:ac:43:06:45:0c:fa:50:03:f1:44:93:85:1b:35: 88:fb:53:68:4d:ea:4f:14:d3:90:2b:63:c7:ac:a3: ca:15:86:a5:d5:04:33:2e:9a:b2:19:b6:ef:1e:5b: a7:73:cb:8c:2e:12:77:26:22:01:eb:e2:e3:26:f8: d2:39:35:31:09:b7:b4:aa:f7:22:36:2e:db:d8:f5: 5b:e8:df:cb:e3:83:41:cc:04:5e:cc:a5:28:49:c1: e5:33:36:4b:23:fb:0c:90:53:c5:f5:a3:0f:c5:76: a4:80:2d:34:9e:0f:47:eb:d5:7c:cd:05:93:35:e1: ba:3f:ab:83:73:d1:6b:a5:c0:ca:f0:14:29:72:67: e9:78:15:81:8f:8f:26:b1:4a:31:75:62:8b:26:27: 9c:9e:55:82:5a:55:d2:a5:1e:14:60:2c:20:fc:0c: ac:85:d0:da:90:44:8b:f4:b8:c3:37:41:26:73:be: a3:2a:58:26:07:4f:55:0e:f8:ba:ba:6b:61:7d:3a: f6:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:09:D8:82:46:6B:C0:26:EF:DF:5B:86:1F:83:40:39:DB:BC:BB:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ca2529c2-77da-318b-ad83-33c8b3cff72e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2001:4878:2324::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:dd:4d:ca:25:01:1c:e5:ac:fe:14:06:e6:1e:1f:8d:1c:57: 4d:8d:6a:57:03:64:13:97:57:7b:32:1c:24:39:82:3d:2b:01: 99:c9:96:52:de:65:52:c1:39:5d:19:1a:3f:0b:89:08:2e:5c: 60:bf:c3:ee:ef:b7:47:5a:0b:41:93:63:39:90:d2:f3:8a:61: 87:2f:86:7c:ff:7e:56:b3:1d:97:8d:03:f4:57:35:c4:ca:bd: 64:9f:72:18:1e:1f:38:de:57:d7:7c:9d:56:37:9f:96:3c:91: 81:dd:e4:12:89:14:bf:89:db:79:5a:97:34:48:10:15:2d:fe: 9e:39:9d:30:d1:88:1d:7e:18:e0:c2:74:47:0c:14:c7:55:87: 84:a5:6d:e3:32:a3:f4:37:2c:69:e3:70:c2:0c:3d:56:31:44: df:81:dc:3a:d5:46:92:76:94:94:f6:7e:a1:ea:ec:3d:32:75: a2:91:03:55:00:b7:f0:e0:fd:42:a8:7f:67:eb:a0:07:13:39: b1:a5:84:d0:57:bb:de:00:81:6e:76:86:a1:29:20:9a:cd:97: 85:8b:02:6e:f1:b1:95:81:3f:92:0c:62:78:06:7f:3f:a9:b2: 74:54:d0:32:fb:85:39:8f:e1:71:bd:ab:26:2b:8b:9a:16:6a: 8a:c9:e2:7e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEueB5vuSpKdddlNtqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk NDk4MDFiZTAtOTA3Ni00Nzg5LWI3ZGEtODA5NjI3NDU1NGNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzq7jCtcpW7JoaFczfgj5rwMj2IWjOzEVRIDR mtTEY/mGbr5v8qGDbzOkgjfPcXqHjkPxVMaCGYkcS0sirEMGRQz6UAPxRJOFGzWI +1NoTepPFNOQK2PHrKPKFYal1QQzLpqyGbbvHlunc8uMLhJ3JiIB6+LjJvjSOTUx Cbe0qvciNi7b2PVb6N/L44NBzARezKUoScHlMzZLI/sMkFPF9aMPxXakgC00ng9H 69V8zQWTNeG6P6uDc9FrpcDK8BQpcmfpeBWBj48msUoxdWKLJiecnlWCWlXSpR4U YCwg/AyshdDakESL9LjDN0Emc76jKlgmB09VDvi6umthfTr2kwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPUJ2IJGa8Am799bhh+DQDnbvLvWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2EyNTI5YzItNzdkYS0z MThiLWFkODMtMzNjOGIzY2ZmNzJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIeCMk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHvdTcolARzlrP4UBuYeH40cV02NalcDZBOXV3syHCQ5gj0rAZnJ llLeZVLBOV0ZGj8LiQguXGC/w+7vt0daC0GTYzmQ0vOKYYcvhnz/flazHZeNA/RX NcTKvWSfchgeHzjeV9d8nVY3n5Y8kYHd5BKJFL+J23lalzRIEBUt/p45nTDRiB1+ GODCdEcMFMdVh4SlbeMyo/Q3LGnjcMIMPVYxRN+B3DrVRpJ2lJT2fqHq7D0ydaKR A1UAt/Dg/UKof2froAcTObGlhNBXu94AgW52hqEpIJrNl4WLAm7xsZWBP5IMYngG fz+psnRU0DL7hTmP4XG9qyYri5oWaorJ4n4= -----END CERTIFICATE-----Generated at Tue Nov 4 23:57:02 2025 by rpki-client