$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5ffda54e-d63d-3408-9033-3e53fbdbe9a0.roa File: 5ffda54e-d63d-3408-9033-3e53fbdbe9a0.roa (raw, json) Hash identifier: SmxHs0ogMSIevzKHI7imjU1G+1WJDenRwPhvAjmb60g= Subject key identifier: 43:A2:B6:A5:69:17:E5:9F:47:89:E1:78:06:C1:A9:9B:85:42:56:F2 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A84123D318761313490B244E0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5ffda54e-d63d-3408-9033-3e53fbdbe9a0.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 32381 IP address blocks: 2001:4860:1025::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:3d:31:87:61:31:34:90:b2:44:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=9628b347-528f-4fb4-859c-7e2b6078d2ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:8f:fd:45:b5:60:51:09:d3:80:ac:c0:f7:fb: d6:a5:da:c0:b4:bf:f0:e5:44:59:f2:c1:c5:e4:63: b1:f5:4c:ac:de:c8:06:85:61:c4:48:db:49:ee:8d: e9:8e:e8:50:37:aa:fa:af:e2:d3:6b:22:b6:03:6f: 97:10:12:e1:38:ee:2a:82:40:49:a2:25:00:89:2e: f7:b9:2c:c4:fd:3c:21:cf:11:8c:bb:02:8e:3d:84: e3:91:e8:25:2d:53:01:48:09:8c:ee:f0:40:b7:ec: f0:74:e7:a2:d1:3a:43:19:c9:4c:ef:5f:cc:d8:30: a7:e1:72:65:26:ae:be:ed:9a:5c:e2:fe:51:8d:9b: c3:d7:14:03:ea:9e:a5:79:73:11:48:2b:bb:bf:91: 08:ee:74:02:87:5f:f5:20:c3:20:78:43:4a:5b:97: db:70:60:46:33:06:16:eb:98:8e:26:34:30:42:b1: ba:f4:9a:62:5f:0b:a2:59:b6:ca:c5:a3:45:81:6f: 25:e1:29:be:f4:b7:69:c1:b4:a4:69:bf:cc:af:fd: 7e:b8:e2:ba:7a:3d:10:b0:26:25:db:e2:27:b6:56: 0f:92:9c:bc:4e:fa:07:4c:c3:38:c4:b3:30:ec:6e: 08:25:63:11:6d:23:72:f4:20:7e:8e:70:5b:ee:d7: de:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:A2:B6:A5:69:17:E5:9F:47:89:E1:78:06:C1:A9:9B:85:42:56:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5ffda54e-d63d-3408-9033-3e53fbdbe9a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv6: 2001:4860:1025::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:98:9f:6f:8b:a5:98:11:d1:5c:9b:62:75:5a:3d:38:6f:b2: db:b0:64:66:f6:fd:e9:e2:95:a7:4a:77:b3:6c:e5:c1:bf:fc: bf:f5:6a:4c:11:a2:0c:99:46:09:88:33:56:68:01:36:65:31: 1f:4c:76:b4:3a:1d:e7:8b:ca:17:87:44:ff:1d:59:bf:35:8f: 66:4b:f8:24:05:32:85:7f:ef:b2:8e:8e:74:2f:bf:d5:73:46: 8f:23:96:ab:3a:0a:2b:2a:b6:1d:15:9a:94:a6:e7:d7:6e:a6: d1:d3:e7:b6:50:37:f4:c4:5d:b5:9a:db:35:5b:0a:f7:87:44: 4f:29:1b:87:3b:0c:64:9d:39:fb:cb:b4:bb:bc:e3:f3:4c:4e: 37:f4:b7:60:09:26:e0:8f:17:fd:b9:21:02:ae:ca:66:37:49: bf:57:20:d2:6a:25:43:55:bf:82:d0:82:a6:04:aa:73:26:93: c7:c5:6c:a4:2b:75:3a:32:2b:88:45:0c:5a:40:4d:82:24:3e: d0:c0:03:ec:fc:19:d1:30:ba:b5:04:4f:4d:42:0d:9d:bd:b6: 7e:c1:d6:fc:29:40:8f:63:30:c5:8e:9c:10:e5:94:dd:cb:66: 08:f2:62:8f:d6:b1:3c:9a:fc:87:96:20:de:fa:6b:8a:b3:c1: 03:a9:d9:a4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqEEj0xh2ExNJCyROAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk OTYyOGIzNDctNTI4Zi00ZmI0LTg1OWMtN2UyYjYwNzhkMmVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkI/9RbVgUQnTgKzA9/vWpdrAtL/w5URZ8sHF 5GOx9Uys3sgGhWHESNtJ7o3pjuhQN6r6r+LTayK2A2+XEBLhOO4qgkBJoiUAiS73 uSzE/TwhzxGMuwKOPYTjkeglLVMBSAmM7vBAt+zwdOei0TpDGclM71/M2DCn4XJl Jq6+7Zpc4v5RjZvD1xQD6p6leXMRSCu7v5EI7nQCh1/1IMMgeENKW5fbcGBGMwYW 65iOJjQwQrG69JpiXwuiWbbKxaNFgW8l4Sm+9LdpwbSkab/Mr/1+uOK6ej0QsCYl 2+IntlYPkpy8TvoHTMM4xLMw7G4IJWMRbSNy9CB+jnBb7tfebQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEOitqVpF+WfR4nheAbBqZuFQlbyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNWZmZGE1NGUtZDYzZC0z NDA4LTkwMzMtM2U1M2ZiZGJlOWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIYBAl MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC+Yn2+LpZgR0VybYnVaPThvstuwZGb2/eniladKd7Ns5cG//L/1 akwRogyZRgmIM1ZoATZlMR9MdrQ6HeeLyheHRP8dWb81j2ZL+CQFMoV/77KOjnQv v9VzRo8jlqs6Cisqth0VmpSm59duptHT57ZQN/TEXbWa2zVbCveHRE8pG4c7DGSd OfvLtLu84/NMTjf0t2AJJuCPF/25IQKuymY3Sb9XINJqJUNVv4LQgqYEqnMmk8fF bKQrdToyK4hFDFpATYIkPtDAA+z8GdEwurUET01CDZ29tn7B1vwpQI9jMMWOnBDl lN3LZgjyYo/WsTya/IeWIN76a4qzwQOp2aQ= -----END CERTIFICATE-----Generated at Mon Aug 4 14:55:24 2025 by rpki-client