$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1c61ddbd-6f2a-3ee8-bc76-7682feb2aab2.roa File: 1c61ddbd-6f2a-3ee8-bc76-7682feb2aab2.roa (raw, json) Hash identifier: PcEWKN5g33f3CzB+TvD3QqQK9JZz4Qu40zpT22ZIXVc= Subject key identifier: 63:76:07:66:D4:39:CB:48:FA:69:8E:62:B3:11:DC:72:84:49:FF:B1 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CE31F23D8FF85F315FF300 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1c61ddbd-6f2a-3ee8-bc76-7682feb2aab2.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 2001:4860:4822::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:31:f2:3d:8f:f8:5f:31:5f:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=956bc4ed-ae35-4ea3-ad98-1aa87df90308 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:6f:d5:87:53:17:2c:c3:7f:4d:c9:af:73:10: 5c:01:ab:01:69:42:18:77:48:84:03:28:c9:cc:bf: 53:ad:f7:14:85:83:b8:ef:95:05:07:d8:64:70:2a: 94:ef:15:0a:19:bf:70:23:5e:c9:46:3b:8d:fa:a5: 03:a4:46:d4:0a:2f:c2:34:0b:a8:e9:f6:71:f8:12: 34:58:5c:03:fd:ff:73:c7:b4:64:04:28:91:aa:36: 0a:77:df:5b:73:02:bb:ea:bd:e9:75:04:dd:7c:da: e6:55:58:ab:ee:5e:fe:f1:5e:a8:8e:23:df:8a:e9: a8:76:ae:3b:6a:fc:5b:a5:3f:3d:cc:f9:7a:bb:bf: 23:9a:f4:21:69:6a:71:fe:ef:af:d2:84:85:7c:bc: 32:58:23:fb:dd:89:25:99:47:dc:95:52:85:21:eb: 6d:84:81:98:d5:26:cb:80:dc:24:17:f2:aa:fe:a0: d3:19:86:02:97:50:e9:35:cc:ec:93:77:b2:b4:ac: c7:1a:c6:ba:16:4c:a5:31:f6:3f:d5:b9:62:f1:fb: 1b:33:0c:99:dc:bf:4c:85:c3:ab:2b:65:b6:5e:f0: 6b:c8:16:2a:30:0f:e1:41:b3:e1:01:a0:6a:8c:8c: b5:54:fe:5e:55:46:f8:0f:38:79:1f:6c:b8:8a:4e: 8c:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:76:07:66:D4:39:CB:48:FA:69:8E:62:B3:11:DC:72:84:49:FF:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1c61ddbd-6f2a-3ee8-bc76-7682feb2aab2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv6: 2001:4860:4822::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:66:bc:0e:cd:24:ef:ed:50:57:8b:0d:da:ed:13:4a:e6:64: 18:1b:d8:9c:44:76:32:a1:b9:b6:a1:ad:cf:8f:28:4c:61:dd: 5e:c0:0d:d5:a2:29:16:c6:11:4e:7a:95:61:48:87:76:38:99: c8:47:85:ed:7b:6b:c0:f8:22:3c:58:13:65:3d:24:a8:c7:bf: 4b:7b:72:76:35:72:19:7e:74:af:30:c2:5c:37:1a:91:15:94: b9:59:42:24:50:7f:d4:93:43:c1:a2:1e:47:19:db:65:0e:2b: 34:ca:59:3f:79:ee:a0:a7:19:d2:81:3e:68:de:88:a9:33:32: 88:38:fd:76:d5:56:d7:74:ca:1f:e0:cc:49:61:5d:4b:6a:f2: 4a:c9:78:c4:63:12:8a:33:e6:b9:80:ef:e0:0d:ca:58:7f:04: ed:31:db:14:e7:80:ca:19:59:a2:2d:d3:4b:bc:c7:a2:e4:0b: 7e:26:82:af:9f:15:0e:d0:38:c4:1d:ce:54:ba:45:8b:86:7f: d4:fd:4f:06:99:e6:2e:eb:1b:9e:5f:e4:66:9e:0b:b0:9a:24: 45:92:5f:b4:14:b7:a1:6d:9a:3b:ee:f4:f5:36:aa:06:d0:ca: 16:05:5f:03:d7:33:c3:e6:c6:95:3d:3c:a3:9d:86:64:30:09: b0:3e:77:09 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtkzjHyPY/4XzFf8wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk OTU2YmM0ZWQtYWUzNS00ZWEzLWFkOTgtMWFhODdkZjkwMzA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxm/Vh1MXLMN/TcmvcxBcAasBaUIYd0iEAyjJ zL9TrfcUhYO475UFB9hkcCqU7xUKGb9wI17JRjuN+qUDpEbUCi/CNAuo6fZx+BI0 WFwD/f9zx7RkBCiRqjYKd99bcwK76r3pdQTdfNrmVVir7l7+8V6ojiPfiumodq47 avxbpT89zPl6u78jmvQhaWpx/u+v0oSFfLwyWCP73YklmUfclVKFIetthIGY1SbL gNwkF/Kq/qDTGYYCl1DpNczsk3eytKzHGsa6FkylMfY/1bli8fsbMwyZ3L9MhcOr K2W2XvBryBYqMA/hQbPhAaBqjIy1VP5eVUb4Dzh5H2y4ik6MtQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGN2B2bUOctI+mmOYrMR3HKESf+xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMWM2MWRkYmQtNmYyYS0z ZWU4LWJjNzYtNzY4MmZlYjJhYWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIYEgi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHFmvA7NJO/tUFeLDdrtE0rmZBgb2JxEdjKhubahrc+PKExh3V7A DdWiKRbGEU56lWFIh3Y4mchHhe17a8D4IjxYE2U9JKjHv0t7cnY1chl+dK8wwlw3 GpEVlLlZQiRQf9STQ8GiHkcZ22UOKzTKWT957qCnGdKBPmjeiKkzMog4/XbVVtd0 yh/gzElhXUtq8krJeMRjEooz5rmA7+ANylh/BO0x2xTngMoZWaIt00u8x6LkC34m gq+fFQ7QOMQdzlS6RYuGf9T9TwaZ5i7rG55f5GaeC7CaJEWSX7QUt6Ftmjvu9PU2 qgbQyhYFXwPXM8PmxpU9PKOdhmQwCbA+dwk= -----END CERTIFICATE-----Generated at Wed Nov 5 04:34:23 2025 by rpki-client