$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/23bfea97-d198-3af0-bad9-a1c9fb3a78bc.roa File: 23bfea97-d198-3af0-bad9-a1c9fb3a78bc.roa (raw, json) Hash identifier: SS6zv5/dS+hzmjP8oDEmXCmp7ZI9XBNzEdnwfgR0ZkA= Subject key identifier: A9:40:7F:06:D9:B6:AD:C9:08:3A:ED:70:CF:C4:13:5C:1F:2A:64:36 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AC01639D5A7B81C3968BCF100 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/23bfea97-d198-3af0-bad9-a1c9fb3a78bc.roa Signing time: Tue 05 Aug 2025 01:00:32 +0000 ROA not before: Tue 05 Aug 2025 01:00:32 +0000 ROA not after: Mon 03 Nov 2025 02:00:32 +0000 asID: 12222 IP address blocks: 2001:4878:a048::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c0:16:39:d5:a7:b8:1c:39:68:bc:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 5 01:00:32 2025 GMT Not After : Nov 3 02:00:32 2025 GMT Subject: CN=4a808675-7258-4b99-b7b2-d312ed9ae611 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:fd:4b:37:91:f9:cf:90:00:c1:24:21:83:23: 13:3b:dc:49:ee:18:0d:c2:8f:93:0e:a4:a1:f9:da: 70:1b:08:c4:04:3c:5f:1e:bc:46:ef:05:bb:82:42: f6:bb:05:ba:7a:21:cb:c5:2a:37:bf:ec:d1:dd:af: b7:d3:c8:53:a0:a3:45:61:7b:f8:40:1c:8b:3e:5d: 29:d6:91:de:f5:40:37:c9:2d:f3:3f:fe:f6:23:3f: 18:2b:04:a2:ac:58:4c:8d:67:5f:18:9f:a9:ac:41: c7:13:cc:5f:ad:fc:4e:20:13:98:7a:3f:ac:9c:b6: f3:a7:c0:e0:b2:e4:3a:c1:97:4a:c0:fe:3d:6b:ab: ef:ee:bf:c8:d4:dc:64:14:d6:3f:99:13:14:1d:6f: a1:d6:d7:fa:5b:e7:7f:7d:ed:cf:60:d7:bc:f2:f4: 89:8e:40:0e:96:47:c2:ef:2d:8d:92:8c:bd:04:82: 80:be:64:b6:cd:67:26:05:f2:ff:b0:1f:b3:d1:a1: a1:e3:af:11:04:1e:00:dc:41:a7:87:8b:eb:f3:a8: 52:1a:82:a2:39:0e:e7:4e:fc:0b:f8:f8:dd:3a:c5: 66:08:3a:7c:16:20:38:af:23:01:d0:74:57:19:67: 79:bb:73:22:04:00:81:69:0e:e4:ff:ce:ee:3a:d8: f1:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:40:7F:06:D9:B6:AD:C9:08:3A:ED:70:CF:C4:13:5C:1F:2A:64:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/23bfea97-d198-3af0-bad9-a1c9fb3a78bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2001:4878:a048::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:e3:63:25:98:5c:16:0b:fa:6a:80:5d:ca:79:12:1e:f5:ba: 0b:43:43:79:f2:22:2c:eb:e7:c9:0d:eb:dc:1b:8a:a0:90:2d: a6:8e:94:6d:5e:b0:88:5d:51:c6:83:97:4c:06:24:b0:ab:57: 6b:92:42:2f:52:14:a9:6b:b0:7d:76:1b:28:f3:9d:ee:9b:a6: 6c:51:fe:53:54:1e:22:9f:d0:52:cf:71:6d:05:22:32:71:c7: a9:8b:61:d2:1d:53:46:28:11:31:8c:36:55:4c:22:7e:28:cd: 1a:f7:37:03:0a:5b:1e:a3:86:58:6f:20:1b:c6:ac:38:5c:75: b3:b5:86:6a:0e:0c:44:04:9a:d2:2d:a8:1c:70:0e:e1:10:44: 70:4d:ee:88:98:72:03:54:b1:32:60:06:96:db:d4:72:f8:7c: 99:1c:fb:de:28:a5:d1:c1:47:85:3b:3a:55:38:af:bf:85:c0: db:2c:9a:a6:5e:ac:3b:80:5c:37:f2:f7:d1:e0:d5:b2:74:20: 90:5b:81:3c:e3:1d:5e:1c:df:52:14:16:52:23:2c:90:37:37: 22:a5:3c:0b:67:3f:12:64:70:15:3a:89:d6:30:30:7b:03:b9: a2:d0:7f:fc:83:ea:7f:65:ad:c4:e7:4f:e0:a4:51:e4:73:de: 89:5e:f6:ec -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErAFjnVp7gcOWi88QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgwNTAxMDAzMloXDTI1MTEwMzAyMDAzMlowLzEtMCsGA1UEAxMk NGE4MDg2NzUtNzI1OC00Yjk5LWI3YjItZDMxMmVkOWFlNjExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgv1LN5H5z5AAwSQhgyMTO9xJ7hgNwo+TDqSh +dpwGwjEBDxfHrxG7wW7gkL2uwW6eiHLxSo3v+zR3a+308hToKNFYXv4QByLPl0p 1pHe9UA3yS3zP/72Iz8YKwSirFhMjWdfGJ+prEHHE8xfrfxOIBOYej+snLbzp8Dg suQ6wZdKwP49a6vv7r/I1NxkFNY/mRMUHW+h1tf6W+d/fe3PYNe88vSJjkAOlkfC 7y2Nkoy9BIKAvmS2zWcmBfL/sB+z0aGh468RBB4A3EGnh4vr86hSGoKiOQ7nTvwL +PjdOsVmCDp8FiA4ryMB0HRXGWd5u3MiBACBaQ7k/87uOtjxoQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKlAfwbZtq3JCDrtcM/EE1wfKmQ2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjNiZmVhOTctZDE5OC0z YWYwLWJhZDktYTFjOWZiM2E3OGJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIeKBI MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABnjYyWYXBYL+mqAXcp5Eh71ugtDQ3nyIizr58kN69wbiqCQLaaO lG1esIhdUcaDl0wGJLCrV2uSQi9SFKlrsH12Gyjzne6bpmxR/lNUHiKf0FLPcW0F IjJxx6mLYdIdU0YoETGMNlVMIn4ozRr3NwMKWx6jhlhvIBvGrDhcdbO1hmoODEQE mtItqBxwDuEQRHBN7oiYcgNUsTJgBpbb1HL4fJkc+94opdHBR4U7OlU4r7+FwNss mqZerDuAXDfy99Hg1bJ0IJBbgTzjHV4c31IUFlIjLJA3NyKlPAtnPxJkcBU6idYw MHsDuaLQf/yD6n9lrcTnT+CkUeRz3ole9uw= -----END CERTIFICATE-----Generated at Sat Aug 23 16:59:37 2025 by rpki-client