$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/efa5823c-5d9a-3f4c-87bd-9258226b2a1d.roa File: efa5823c-5d9a-3f4c-87bd-9258226b2a1d.roa (raw, json) Hash identifier: ht0kS0WCZstbVDtfckQOyOsWfyw2nigJj6VH1Ww3k5U= Subject key identifier: C4:4A:D1:99:6D:97:64:93:B7:B5:E1:4F:69:E7:25:30:50:48:65:B7 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BA39D1094B12D95891524D980 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/efa5823c-5d9a-3f4c-87bd-9258226b2a1d.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 12222 IP address blocks: 2001:4878:c225::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:10:94:b1:2d:95:89:15:24:d9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=aeacb306-b416-4809-9b8f-eb29a3a69334 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:78:75:8d:5b:16:7c:a8:86:99:7c:aa:c4:da: 2b:0f:a4:49:5a:a9:3b:d9:03:01:b5:18:21:0b:57: c9:8a:f7:df:ae:e9:ff:99:66:60:ee:fe:51:e3:af: 65:6f:5c:36:04:c2:f1:d0:31:4f:5b:db:09:c2:00: 1a:16:dd:fc:f7:16:06:12:ae:48:dc:08:38:0f:91: 0b:f4:4f:2c:83:21:df:2b:cf:27:9a:76:5c:3a:7d: 51:1e:f5:03:8d:d8:cd:20:2f:f6:cc:22:b4:7b:59: 69:29:3f:74:a5:c5:5a:97:08:44:29:6c:b7:94:0c: fb:64:dc:74:41:a1:f4:31:55:e8:82:3b:bc:1c:33: 84:30:ad:97:0b:68:1e:e7:f8:46:ec:2c:75:b3:9d: 6d:0a:c5:50:ce:c3:72:35:ee:f4:a1:ba:26:fa:a0: bc:f1:da:7c:44:73:af:74:0c:9c:c2:85:3c:1b:86: d7:a8:32:fa:ee:de:c5:ff:91:4b:34:d1:d5:dc:15: 8d:86:c4:82:11:8b:d4:48:45:a3:66:92:fd:a3:91: ad:64:c8:2d:47:5a:cc:d0:c0:26:d7:95:11:96:69: c1:6e:c7:42:66:e3:fb:6a:d3:a6:b3:3c:2c:79:fb: 0c:b5:08:0d:5a:64:71:4c:6c:02:a8:a4:9b:3d:8d: bf:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:4A:D1:99:6D:97:64:93:B7:B5:E1:4F:69:E7:25:30:50:48:65:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/efa5823c-5d9a-3f4c-87bd-9258226b2a1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2001:4878:c225::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:48:b4:9b:6a:d3:e3:5d:dc:b5:f7:0c:d7:78:b1:57:4b:81: 49:11:cb:7e:d8:fe:a1:6f:43:40:5c:0c:31:32:d2:29:a8:93: 95:24:36:4c:a4:76:4a:d1:2c:9f:c8:06:1e:b2:92:3b:94:9a: 79:90:92:78:f8:bb:14:6b:04:3d:93:db:53:bf:f5:63:88:da: 7a:28:62:8b:5c:9c:b1:70:bd:47:1e:64:2f:cf:e2:e3:f3:a6: 79:97:a7:4e:ce:41:61:5b:6b:78:2a:3b:56:42:95:c7:fc:3c: 9b:32:c0:74:85:0a:64:fc:db:68:18:bd:55:c0:88:f4:0d:1d: 1f:f4:c9:46:1d:01:2b:48:1e:55:f8:49:32:96:b0:79:49:4e: f2:da:88:bb:1f:87:4e:4a:40:93:35:ee:18:32:19:1a:8d:7f: 95:07:ef:71:2c:91:3b:be:ce:07:f8:cc:cc:3d:eb:4d:f1:64: 70:16:19:66:28:c1:35:24:60:00:b3:57:4d:5f:d9:50:6f:5e: 51:45:20:76:66:93:32:3a:c2:18:4d:b2:95:8d:08:dc:84:be: e8:f1:c4:db:14:55:39:9c:c6:52:0d:9d:d3:4b:95:b2:06:d7: 9e:db:f2:ea:85:f4:97:2b:12:bc:e2:26:92:5d:12:4e:7d:d1: ff:ce:67:4d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEujnRCUsS2ViRUk2YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk YWVhY2IzMDYtYjQxNi00ODA5LTliOGYtZWIyOWEzYTY5MzM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHh1jVsWfKiGmXyqxNorD6RJWqk72QMBtRgh C1fJivffrun/mWZg7v5R469lb1w2BMLx0DFPW9sJwgAaFt389xYGEq5I3Ag4D5EL 9E8sgyHfK88nmnZcOn1RHvUDjdjNIC/2zCK0e1lpKT90pcValwhEKWy3lAz7ZNx0 QaH0MVXogju8HDOEMK2XC2ge5/hG7Cx1s51tCsVQzsNyNe70obom+qC88dp8RHOv dAycwoU8G4bXqDL67t7F/5FLNNHV3BWNhsSCEYvUSEWjZpL9o5GtZMgtR1rM0MAm 15URlmnBbsdCZuP7atOmszwsefsMtQgNWmRxTGwCqKSbPY2/AwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMRK0Zltl2STt7XhT2nnJTBQSGW3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZWZhNTgyM2MtNWQ5YS0z ZjRjLTg3YmQtOTI1ODIyNmIyYTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIeMIl MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABFItJtq0+Nd3LX3DNd4sVdLgUkRy37Y/qFvQ0BcDDEy0imok5Uk NkykdkrRLJ/IBh6ykjuUmnmQknj4uxRrBD2T21O/9WOI2nooYotcnLFwvUceZC/P 4uPzpnmXp07OQWFba3gqO1ZClcf8PJsywHSFCmT822gYvVXAiPQNHR/0yUYdAStI HlX4STKWsHlJTvLaiLsfh05KQJM17hgyGRqNf5UH73EskTu+zgf4zMw9603xZHAW GWYowTUkYACzV01f2VBvXlFFIHZmkzI6whhNspWNCNyEvujxxNsUVTmcxlINndNL lbIG157b8uqF9JcrErziJpJdEk590f/OZ00= -----END CERTIFICATE-----Generated at Tue Nov 4 22:19:21 2025 by rpki-client