$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/854666e2-20f4-337b-aa64-7c899689b11c.roa File: 854666e2-20f4-337b-aa64-7c899689b11c.roa (raw, json) Hash identifier: TsNdYz1mtdcIfn7rtwZvqV1uGQnNaDM6ezyRvJ1t12c= Subject key identifier: 21:46:CC:88:0B:7D:D7:07:FD:06:29:1B:69:73:B8:82:D4:31:0F:7D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AC2E0F3803BEEF9EEC9EF65C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/854666e2-20f4-337b-aa64-7c899689b11c.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 12222 IP address blocks: 2001:4878:c164::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e0:f3:80:3b:ee:f9:ee:c9:ef:65:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=2507357a-85b3-4d6d-998d-3592af362619 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:71:e6:ad:da:c1:0e:a6:cc:64:7b:d7:39:ab: 25:a7:8b:1b:64:af:f1:4f:ed:74:2e:bf:cf:7e:e4: 6f:60:8d:d7:02:5b:7d:db:39:e7:ba:1a:91:9e:b2: ba:ba:55:1c:a9:25:1e:8c:6a:50:8c:99:5c:00:c2: 13:c7:5a:b5:86:5f:ce:af:97:47:87:4b:aa:1b:1e: be:13:1d:0c:c6:24:c3:cd:80:df:b1:78:0d:5c:06: 51:e7:64:dc:1c:52:52:b3:d0:d1:93:97:0b:7c:9d: b4:c4:ec:03:a1:42:4d:64:db:f5:f0:3f:cd:d4:98: c3:f2:34:d9:96:c3:ce:9d:f1:6a:f4:65:dd:c9:da: c5:44:6f:92:26:63:65:73:a8:1c:70:a2:9c:a5:7f: c7:cf:40:c8:fe:a8:a6:46:33:92:91:e7:30:1b:2d: 66:7d:59:fc:95:34:9f:85:1d:8f:09:ae:52:1a:e1: 15:bf:46:b2:7d:0f:4a:93:26:a4:61:28:cf:c5:6f: 5f:7b:b8:66:ca:b6:46:19:43:a5:f7:f9:e8:a2:b1: 26:c5:c2:f7:f9:57:ec:1b:98:5e:1a:dc:83:94:1d: c5:16:8b:c9:4f:ed:d3:73:7a:89:5a:c7:4c:c0:09: d0:64:78:d4:8f:6e:f3:00:97:ed:35:24:cb:ae:1c: 46:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:46:CC:88:0B:7D:D7:07:FD:06:29:1B:69:73:B8:82:D4:31:0F:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/854666e2-20f4-337b-aa64-7c899689b11c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2001:4878:c164::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:ca:51:e0:5b:f5:a8:c8:12:e0:30:b2:e1:44:0a:ce:45:4a: 10:ae:19:42:f6:e0:fe:96:c1:9c:4a:ef:62:a0:9b:7c:31:6f: c1:51:a1:1c:9d:ba:4d:b8:23:77:ec:70:43:1d:8f:43:1b:bb: b5:d3:13:58:38:05:0f:94:c4:63:30:d0:c1:4b:7d:f0:57:c5: ee:2e:69:a1:13:90:6b:f7:67:d1:52:fb:61:ce:c6:65:b2:8c: de:91:ee:4c:d0:6d:73:a2:04:57:75:91:11:77:ff:83:fb:6d: 08:6e:71:6c:4d:c5:54:a9:77:84:2e:76:65:58:81:09:5c:8e: fa:34:e0:08:ca:e3:15:76:c8:b9:f5:60:fc:6d:f8:e5:ae:40: 39:ef:47:fa:06:dc:4e:c5:1e:20:d7:06:c1:68:35:66:88:73: 12:55:62:9a:7e:f6:de:ce:1b:9c:e0:aa:2b:25:84:cd:7f:4b: a8:0f:2c:18:eb:f0:48:38:d8:aa:be:d6:a1:2d:f4:84:f9:d4: bb:e9:0b:c3:11:8f:67:40:c1:8e:43:f5:71:d8:7d:1d:56:5f: 63:e6:98:df:c8:6b:31:81:e5:35:c3:9b:48:1c:ed:e2:30:2f: 48:a2:13:85:8b:19:65:59:93:d4:ae:40:9e:fc:ee:af:68:4d: 36:41:cc:6a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErC4POAO+757snvZcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk MjUwNzM1N2EtODViMy00ZDZkLTk5OGQtMzU5MmFmMzYyNjE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXHmrdrBDqbMZHvXOaslp4sbZK/xT+10Lr/P fuRvYI3XAlt92znnuhqRnrK6ulUcqSUejGpQjJlcAMITx1q1hl/Or5dHh0uqGx6+ Ex0MxiTDzYDfsXgNXAZR52TcHFJSs9DRk5cLfJ20xOwDoUJNZNv18D/N1JjD8jTZ lsPOnfFq9GXdydrFRG+SJmNlc6gccKKcpX/Hz0DI/qimRjOSkecwGy1mfVn8lTSf hR2PCa5SGuEVv0ayfQ9KkyakYSjPxW9fe7hmyrZGGUOl9/noorEmxcL3+VfsG5he GtyDlB3FFovJT+3Tc3qJWsdMwAnQZHjUj27zAJftNSTLrhxGyQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCFGzIgLfdcH/QYpG2lzuILUMQ99MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODU0NjY2ZTItMjBmNC0z MzdiLWFhNjQtN2M4OTk2ODliMTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIeMFk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHXKUeBb9ajIEuAwsuFECs5FShCuGUL24P6WwZxK72Kgm3wxb8FR oRyduk24I3fscEMdj0Mbu7XTE1g4BQ+UxGMw0MFLffBXxe4uaaETkGv3Z9FS+2HO xmWyjN6R7kzQbXOiBFd1kRF3/4P7bQhucWxNxVSpd4QudmVYgQlcjvo04AjK4xV2 yLn1YPxt+OWuQDnvR/oG3E7FHiDXBsFoNWaIcxJVYpp+9t7OG5zgqislhM1/S6gP LBjr8Eg42Kq+1qEt9IT51LvpC8MRj2dAwY5D9XHYfR1WX2PmmN/IazGB5TXDm0gc 7eIwL0iiE4WLGWVZk9SuQJ787q9oTTZBzGo= -----END CERTIFICATE-----Generated at Sat Aug 23 15:03:35 2025 by rpki-client