$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f2f7afbe-2948-3564-91c0-61b5bde41659.roa File: f2f7afbe-2948-3564-91c0-61b5bde41659.roa (raw, json) Hash identifier: qNVAgLPHrzhjxHVrrvfcDoA+6+esoaPU14WpOxvSYJE= Subject key identifier: 70:94:E0:C6:23:CC:60:3C:1C:3B:62:F2:09:C1:57:EF:67:41:6C:7C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B9E07A58356C65FA511847580 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f2f7afbe-2948-3564-91c0-61b5bde41659.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 12222 IP address blocks: 2001:4878:4037::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:a5:83:56:c6:5f:a5:11:84:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=aced1617-9300-4ca8-878e-366cb715dbee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:cc:8f:52:00:52:06:3b:09:39:62:16:fb:4d: fe:08:3a:3b:70:a2:80:15:68:4e:4f:5c:6b:0a:2d: 8f:39:04:6e:ea:37:05:46:91:e7:b9:bf:8b:00:41: 20:dc:46:88:68:c1:bb:71:e7:bc:b2:e6:7b:95:0a: 68:5b:32:2f:cd:11:8c:ae:a1:d4:d5:42:ef:93:cf: b9:c0:09:23:59:20:9a:7c:82:7a:17:fa:ef:d7:97: 3a:19:97:32:39:02:52:8c:07:62:69:29:e5:00:a1: 9d:88:e3:b3:11:1e:36:41:65:08:9b:e2:78:45:2f: d8:22:52:bc:18:b8:8a:cf:4c:55:20:fb:c0:13:ba: 6e:6c:f5:fb:03:03:83:1d:98:d6:37:0b:39:b6:95: 83:78:c8:2f:bf:5b:bf:9e:d9:f2:fd:45:38:d7:e6: 94:96:4b:5c:c9:08:37:77:99:f4:81:d0:10:fe:48: 79:d2:0e:b8:a6:90:7e:4f:3e:f8:39:30:4a:6b:8d: be:5c:f4:23:fc:dd:3b:40:00:b9:99:b4:6e:55:06: dd:d1:54:62:e3:93:7a:0c:5a:64:96:a8:a6:e5:bb: 08:d4:7d:29:01:c2:56:8a:38:85:cb:0d:91:50:cd: e2:0d:b6:00:5f:34:47:74:3d:34:26:c4:cd:be:7b: fc:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:94:E0:C6:23:CC:60:3C:1C:3B:62:F2:09:C1:57:EF:67:41:6C:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f2f7afbe-2948-3564-91c0-61b5bde41659.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2001:4878:4037::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:29:c0:9f:59:f6:a4:b3:7e:c1:6b:62:1e:e6:6d:a4:b4:6f: 2f:f6:27:54:a9:00:15:5c:2f:e9:c5:f1:b7:07:4b:e1:67:6e: 7a:44:ee:53:82:de:9a:a9:59:8a:41:cc:98:b0:b5:16:52:27: 42:61:a2:d9:38:a0:b6:a6:2d:36:01:c0:67:58:a8:46:c4:11: 93:24:58:4e:e4:36:6e:0e:94:e4:99:d3:b5:fd:1e:3d:5c:fd: 35:40:64:2e:c0:96:e8:35:14:ee:e6:e4:a0:d1:0b:f6:1b:a4: fe:99:22:72:e1:f1:f0:c1:32:d1:c6:11:8f:db:a2:f3:35:b4: 0c:52:a3:b5:e1:54:27:2a:5a:81:ce:fd:85:6a:c8:70:66:48: 59:c0:15:c6:a7:a8:6b:c2:bc:e8:86:71:7c:56:9e:29:18:7c: a5:36:40:b2:82:2e:90:7b:38:af:10:6c:66:61:9e:38:a6:c5: 35:f0:42:f1:ac:22:35:a1:24:11:0f:5b:96:a3:18:0f:48:2e: 64:ca:11:3f:5a:04:a6:d5:e7:af:4c:96:0d:bb:ef:1a:5d:49: 21:5b:3f:de:b8:85:ed:2f:d1:2f:99:d7:69:3e:9b:c4:a8:98: 4b:b8:30:b8:d1:3e:b2:46:4f:d6:2d:ff:e3:02:93:f0:ac:87: 16:b7:a6:51 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEueB6WDVsZfpRGEdYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk YWNlZDE2MTctOTMwMC00Y2E4LTg3OGUtMzY2Y2I3MTVkYmVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycyPUgBSBjsJOWIW+03+CDo7cKKAFWhOT1xr Ci2POQRu6jcFRpHnub+LAEEg3EaIaMG7cee8suZ7lQpoWzIvzRGMrqHU1ULvk8+5 wAkjWSCafIJ6F/rv15c6GZcyOQJSjAdiaSnlAKGdiOOzER42QWUIm+J4RS/YIlK8 GLiKz0xVIPvAE7pubPX7AwODHZjWNws5tpWDeMgvv1u/ntny/UU41+aUlktcyQg3 d5n0gdAQ/kh50g64ppB+Tz74OTBKa42+XPQj/N07QAC5mbRuVQbd0VRi45N6DFpk lqim5bsI1H0pAcJWijiFyw2RUM3iDbYAXzRHdD00JsTNvnv8iQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHCU4MYjzGA8HDti8gnBV+9nQWx8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjJmN2FmYmUtMjk0OC0z NTY0LTkxYzAtNjFiNWJkZTQxNjU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIeEA3 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADQpwJ9Z9qSzfsFrYh7mbaS0by/2J1SpABVcL+nF8bcHS+FnbnpE 7lOC3pqpWYpBzJiwtRZSJ0Jhotk4oLamLTYBwGdYqEbEEZMkWE7kNm4OlOSZ07X9 Hj1c/TVAZC7Alug1FO7m5KDRC/YbpP6ZInLh8fDBMtHGEY/bovM1tAxSo7XhVCcq WoHO/YVqyHBmSFnAFcanqGvCvOiGcXxWnikYfKU2QLKCLpB7OK8QbGZhnjimxTXw QvGsIjWhJBEPW5ajGA9ILmTKET9aBKbV569Mlg277xpdSSFbP964he0v0S+Z12k+ m8SomEu4MLjRPrJGT9Yt/+MCk/Cshxa3plE= -----END CERTIFICATE-----Generated at Wed Nov 5 00:04:52 2025 by rpki-client