$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cd0e74e6-62f4-358a-9588-53af8fb5859a.roa File: cd0e74e6-62f4-358a-9588-53af8fb5859a.roa (raw, json) Hash identifier: +fKXL6jQrW3jRD15EUGvmDQpsrK0anz/airBI+mVoEU= Subject key identifier: 4D:A9:CE:1E:DC:72:0A:57:18:50:A4:1A:A7:C5:4A:24:F4:1D:89:85 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BA0D24CC9371D854570038100 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cd0e74e6-62f4-358a-9588-53af8fb5859a.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 12222 IP address blocks: 2001:4878:8323::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:4c:c9:37:1d:85:45:70:03:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=9b1f76ca-c4ab-4243-871f-309e8e1887ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f0:6b:3e:3b:22:60:58:76:67:d3:87:65:59: 49:de:b8:46:5e:96:e0:a9:44:48:02:d6:a3:ec:82: 55:08:f2:0d:fe:24:f1:79:66:6e:47:a2:df:90:ca: 7e:89:e1:02:c7:17:c0:78:cc:f0:0d:af:31:7c:2f: 1c:cb:5b:7d:4e:66:e9:d0:89:24:5e:f9:2b:09:ac: c4:da:1e:19:e2:32:2c:7f:6d:7c:97:62:0b:6d:f7: bd:1f:36:a2:fd:65:85:82:eb:ae:dc:ca:44:35:bb: 41:dd:c1:05:b8:3d:ae:d2:26:21:88:c9:82:e9:21: 6b:0d:99:67:ad:2c:e0:d7:4b:11:75:83:44:2a:4b: e0:90:0f:f2:74:bd:69:f9:f2:6f:d1:e1:ec:79:10: 4f:41:dc:9d:99:33:f8:f2:40:f6:05:f6:6b:3e:a0: ad:55:ab:dc:12:b2:77:f5:6a:39:40:d4:cb:94:23: b5:78:aa:dc:f4:46:7e:79:ae:4e:a5:2a:ed:30:f7: 3c:3a:45:14:f0:45:7e:21:87:e8:d6:01:97:20:51: f7:e2:5c:62:8c:78:6f:4f:cc:81:99:89:b7:f0:9e: d1:3a:8f:6a:19:0c:39:10:ee:d8:16:b0:37:43:1d: 0f:4d:90:ea:ef:2e:4d:0f:8d:b6:cf:c7:6f:97:44: 90:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:A9:CE:1E:DC:72:0A:57:18:50:A4:1A:A7:C5:4A:24:F4:1D:89:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cd0e74e6-62f4-358a-9588-53af8fb5859a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2001:4878:8323::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:ab:a7:c3:08:e0:b3:c0:ec:9a:ce:29:b5:8c:68:e6:c2:ab: df:28:58:b0:79:ca:39:f7:0a:8f:d0:a5:f2:52:e9:72:c7:98: 6a:30:f4:52:f2:d3:0d:41:0a:fd:6e:23:de:3a:f4:26:90:9c: f3:66:ff:fd:1d:0d:c2:89:c5:34:6a:17:94:e8:b7:31:a6:4e: 1e:b5:f5:d9:46:bc:e5:6e:46:b3:58:49:84:d3:44:86:a5:48: 40:d9:04:b5:3b:f0:f3:47:f1:09:ce:08:66:fc:9d:25:7f:46: b0:a2:44:da:48:e7:8f:12:1e:36:26:09:d6:d1:8f:4f:90:0e: 87:f9:cb:bf:68:f5:4a:d5:1a:bf:80:88:a0:a5:7f:42:18:b1: 8e:65:d1:3d:c2:f5:ca:a6:e6:a2:57:cc:a4:af:1f:42:7a:4f: e0:98:73:fe:e8:3f:aa:74:9e:d7:8b:21:07:4a:65:0a:ca:31: 12:4c:7a:af:db:34:ed:d2:64:c1:b9:3e:42:ac:df:ab:fe:13: a4:b2:dc:ca:15:31:c7:62:ea:a6:3c:38:c9:8f:40:4f:59:48: 21:20:b9:b1:9c:bc:dc:60:5d:ff:7d:6d:2a:f9:3d:c6:4f:7f: f0:86:06:87:49:26:c9:c9:0b:79:e5:7f:c2:29:fe:54:de:df: 7b:ad:15:05 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEug0kzJNx2FRXADgQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk OWIxZjc2Y2EtYzRhYi00MjQzLTg3MWYtMzA5ZThlMTg4N2VmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvBrPjsiYFh2Z9OHZVlJ3rhGXpbgqURIAtaj 7IJVCPIN/iTxeWZuR6LfkMp+ieECxxfAeMzwDa8xfC8cy1t9Tmbp0IkkXvkrCazE 2h4Z4jIsf218l2ILbfe9Hzai/WWFguuu3MpENbtB3cEFuD2u0iYhiMmC6SFrDZln rSzg10sRdYNEKkvgkA/ydL1p+fJv0eHseRBPQdydmTP48kD2BfZrPqCtVavcErJ3 9Wo5QNTLlCO1eKrc9EZ+ea5OpSrtMPc8OkUU8EV+IYfo1gGXIFH34lxijHhvT8yB mYm38J7ROo9qGQw5EO7YFrA3Qx0PTZDq7y5ND422z8dvl0SQLwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFE2pzh7ccgpXGFCkGqfFSiT0HYmFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2QwZTc0ZTYtNjJmNC0z NThhLTk1ODgtNTNhZjhmYjU4NTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIeIMj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEmrp8MI4LPA7JrOKbWMaObCq98oWLB5yjn3Co/QpfJS6XLHmGow 9FLy0w1BCv1uI9469CaQnPNm//0dDcKJxTRqF5TotzGmTh619dlGvOVuRrNYSYTT RIalSEDZBLU78PNH8QnOCGb8nSV/RrCiRNpI548SHjYmCdbRj0+QDof5y79o9UrV Gr+AiKClf0IYsY5l0T3C9cqm5qJXzKSvH0J6T+CYc/7oP6p0nteLIQdKZQrKMRJM eq/bNO3SZMG5PkKs36v+E6Sy3MoVMcdi6qY8OMmPQE9ZSCEgubGcvNxgXf99bSr5 PcZPf/CGBodJJsnJC3nlf8Ip/lTe33utFQU= -----END CERTIFICATE-----Generated at Wed Nov 5 06:53:54 2025 by rpki-client