$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e01205e4-5ff2-3e16-8c68-4fbf20ce682e.roa File: e01205e4-5ff2-3e16-8c68-4fbf20ce682e.roa (raw, json) Hash identifier: lruhcHr7OAQKRX7/eOuqPxyLToD17qFBSV3TdBLa3HM= Subject key identifier: A1:29:BA:2D:67:BB:F9:D3:5A:CB:5A:98:01:05:4D:8F:DF:9C:C0:D7 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584ABD4B82A88ACCDC2EB5E6C6C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e01205e4-5ff2-3e16-8c68-4fbf20ce682e.roa Signing time: Mon 04 Aug 2025 01:00:32 +0000 ROA not before: Mon 04 Aug 2025 01:00:32 +0000 ROA not after: Sun 02 Nov 2025 01:00:32 +0000 asID: 12222 IP address blocks: 2001:4878:204::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bd:4b:82:a8:8a:cc:dc:2e:b5:e6:c6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 4 01:00:32 2025 GMT Not After : Nov 2 01:00:32 2025 GMT Subject: CN=e4ea82e5-0461-4e23-8f8e-258c9a2bf4cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:6f:51:f7:b5:18:eb:62:c8:be:57:44:27:e6: ff:49:81:67:15:b0:fe:0f:98:47:90:ac:11:ab:83: 17:81:96:c6:36:b5:64:7f:1d:8b:d4:70:73:74:e8: a5:a2:c5:93:d9:85:c8:a5:51:59:68:89:37:e3:52: 30:c7:ef:d8:85:07:04:1f:e3:e1:fc:e4:1b:40:5a: 55:5c:88:b9:0c:cc:7c:70:88:96:01:ad:fc:2a:6c: 10:23:37:c7:26:b4:f2:e2:87:ab:bf:d8:9c:a8:89: 46:b4:c8:8a:53:26:60:c7:38:05:59:6a:69:ab:4c: 6d:cf:e4:01:1a:92:16:29:24:20:0d:6a:98:ee:16: 79:ed:a0:a3:b2:fd:ad:51:32:56:d0:c4:17:2d:e8: ce:6c:3f:07:ec:77:80:15:e7:75:47:46:42:66:a3: 76:ba:fb:34:16:ad:00:41:7b:f4:c1:b3:45:79:51: 9e:43:3f:89:64:fc:7c:5e:cc:16:34:f1:b1:87:ce: 20:99:e2:c2:33:5a:09:54:45:00:f6:28:ac:87:b4: 8c:e1:a9:97:36:6e:95:53:8a:f4:b8:af:da:d6:6b: be:3f:77:0c:50:c3:8a:04:d9:39:af:e6:54:aa:88: 24:49:ec:3f:9b:55:cc:59:58:18:3a:4d:50:aa:32: 90:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:29:BA:2D:67:BB:F9:D3:5A:CB:5A:98:01:05:4D:8F:DF:9C:C0:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e01205e4-5ff2-3e16-8c68-4fbf20ce682e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2001:4878:204::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:c8:29:f5:9c:2a:15:82:3d:a0:dd:b9:48:51:83:21:24:fc: 75:68:9f:20:8e:1d:6d:ba:99:4b:be:f5:5f:38:89:be:b5:cf: f6:97:61:f4:a5:9f:d8:57:c0:06:23:be:2b:8c:37:9d:2b:6e: fb:31:44:82:36:66:60:e1:64:fe:8c:58:3d:1e:04:86:a0:07: d3:4c:e4:21:1f:4c:44:d1:2e:fd:2b:32:40:92:b4:32:d6:0d: d9:0e:75:02:6b:a3:c1:6d:91:b4:de:fb:26:fd:1c:5b:07:fc: 85:ba:dc:1d:6c:9b:14:44:24:83:f9:8d:b5:a9:2d:c8:97:d1: c7:fa:13:49:a1:3d:b1:2a:7e:94:e2:ce:94:16:73:15:fb:e3: 7f:28:31:da:13:2c:6d:48:95:69:87:58:b3:d0:f7:60:be:86: ee:72:aa:c9:dd:23:cd:58:b1:89:e6:7d:82:40:8d:45:31:d4: 90:71:4c:0c:da:05:fc:89:58:a0:c0:8a:68:38:e4:20:3f:53: 72:40:74:7e:db:fc:0e:88:83:91:5a:1f:0c:93:9e:97:75:1b: e9:28:57:f7:b7:a8:8f:f8:6d:6d:7b:28:d8:6e:02:6f:4c:51: ba:d3:d7:f9:11:7e:d8:24:3d:7f:0b:1b:02:7f:10:a1:b4:dd: 1d:00:5a:76 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq9S4KoiszcLrXmxsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgwNDAxMDAzMloXDTI1MTEwMjAxMDAzMlowLzEtMCsGA1UEAxMk ZTRlYTgyZTUtMDQ2MS00ZTIzLThmOGUtMjU4YzlhMmJmNGNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAym9R97UY62LIvldEJ+b/SYFnFbD+D5hHkKwR q4MXgZbGNrVkfx2L1HBzdOilosWT2YXIpVFZaIk341Iwx+/YhQcEH+Ph/OQbQFpV XIi5DMx8cIiWAa38KmwQIzfHJrTy4oerv9icqIlGtMiKUyZgxzgFWWppq0xtz+QB GpIWKSQgDWqY7hZ57aCjsv2tUTJW0MQXLejObD8H7HeAFed1R0ZCZqN2uvs0Fq0A QXv0wbNFeVGeQz+JZPx8XswWNPGxh84gmeLCM1oJVEUA9iish7SM4amXNm6VU4r0 uK/a1mu+P3cMUMOKBNk5r+ZUqogkSew/m1XMWVgYOk1QqjKQHwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKEpui1nu/nTWstamAEFTY/fnMDXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTAxMjA1ZTQtNWZmMi0z ZTE2LThjNjgtNGZiZjIwY2U2ODJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIeAIE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHHIKfWcKhWCPaDduUhRgyEk/HVonyCOHW26mUu+9V84ib61z/aX YfSln9hXwAYjviuMN50rbvsxRII2ZmDhZP6MWD0eBIagB9NM5CEfTETRLv0rMkCS tDLWDdkOdQJro8FtkbTe+yb9HFsH/IW63B1smxREJIP5jbWpLciX0cf6E0mhPbEq fpTizpQWcxX7438oMdoTLG1IlWmHWLPQ92C+hu5yqsndI81YsYnmfYJAjUUx1JBx TAzaBfyJWKDAimg45CA/U3JAdH7b/A6Ig5FaHwyTnpd1G+koV/e3qI/4bW17KNhu Am9MUbrT1/kRftgkPX8LGwJ/EKG03R0AWnY= -----END CERTIFICATE-----Generated at Mon Aug 4 19:11:03 2025 by rpki-client