$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/878a9806-aa27-30c2-adc0-dff42c8eb0bc.roa File: 878a9806-aa27-30c2-adc0-dff42c8eb0bc.roa (raw, json) Hash identifier: QLyjV9UPRPV6JqAbuNWpRPE7Ei+goDGQq/K5HUNRJMM= Subject key identifier: 42:E2:12:04:1E:88:D5:26:A4:AF:61:A7:86:B7:2E:A2:98:C3:EB:C4 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AC2E0F1BD3369FE0CADC7D880 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/878a9806-aa27-30c2-adc0-dff42c8eb0bc.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 12222 IP address blocks: 2001:4878:a324::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e0:f1:bd:33:69:fe:0c:ad:c7:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=d5161cc1-1afe-443e-a682-f561333451c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a9:a9:34:8c:d6:ac:98:13:4b:89:cc:dd:7c: dc:07:de:dd:fd:13:ca:66:73:12:55:69:0f:d6:fc: db:d0:bb:1e:56:13:0b:f3:65:75:6b:49:ee:ba:bf: 76:35:a6:70:07:2e:cc:f5:3d:b6:48:c4:07:a7:41: e7:c7:d7:db:e6:fd:d4:e5:9c:0b:26:2f:ab:9b:2d: 19:a1:41:bd:c7:f2:2b:bb:4b:fb:38:e0:20:df:f6: c3:35:0a:83:3f:53:f4:75:35:62:d0:12:c5:30:06: 3b:d9:d1:d5:1e:fe:0a:95:1d:71:51:ea:1f:82:eb: 78:a5:91:ce:61:d5:24:dd:44:c7:c8:f8:3e:2a:37: c0:f7:b5:17:ee:cb:23:23:5c:5d:1a:86:79:16:f1: e4:58:6a:14:bc:14:2c:f1:1b:45:01:c3:de:2f:60: 58:cb:7f:c8:da:78:73:f0:b3:5d:32:d2:46:14:51: 22:64:24:50:30:3f:aa:7a:d8:1b:f5:cc:4a:98:94: 43:1e:a2:21:09:6b:a0:86:6e:50:41:51:0c:cc:20: 47:f6:5b:9d:37:e7:04:dd:0b:2c:de:6a:e1:09:b3: 49:ab:1f:5c:c9:e8:0e:87:b9:44:58:46:f7:a6:5b: 36:3a:dd:00:28:5d:15:10:0c:68:eb:25:8c:a3:47: 71:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:E2:12:04:1E:88:D5:26:A4:AF:61:A7:86:B7:2E:A2:98:C3:EB:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/878a9806-aa27-30c2-adc0-dff42c8eb0bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2001:4878:a324::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:c2:95:33:a4:ba:e3:06:f4:8a:27:fd:bd:53:5c:31:eb:e8: b0:ae:ff:16:23:73:ff:a6:a7:4c:d3:e8:f2:9a:b1:4e:9e:7d: 90:00:1d:b5:6c:01:1f:b1:7d:21:67:b2:44:ab:fe:2f:e6:47: e1:e2:dd:61:17:1e:94:11:08:a3:53:e0:52:84:d2:c4:aa:35: e3:ea:a0:3f:9b:ac:0a:82:82:5b:1e:7e:2e:d3:64:2f:3b:ed: f2:46:d4:67:b5:06:8b:21:fe:4e:b2:25:3f:ce:f1:55:ab:ef: 14:d5:d9:6e:c1:bf:d2:8c:e7:6b:3c:8c:49:c0:57:5c:13:e6: cf:65:47:77:6b:0b:4f:74:50:6f:cb:8f:99:19:cd:d8:14:c1: d2:e3:3a:bf:10:de:5b:2c:88:be:7a:0f:40:01:12:9d:c5:a2: c2:1c:0b:ad:0f:e7:ab:49:e4:a0:3f:db:10:af:82:3d:4e:40: ed:9f:15:9f:d9:a6:21:7e:46:46:b4:4d:69:a3:f8:7f:4b:fe: ef:86:5f:80:bf:0a:08:e5:7d:03:18:7a:3b:fd:5e:c4:76:77: 2d:ed:eb:fe:5a:35:f0:fb:48:ca:ff:44:36:a5:ec:9e:7a:42: 1d:a9:ae:dc:b6:e5:31:2f:e0:a0:dc:46:7a:54:19:06:06:ff: 17:27:27:cb -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErC4PG9M2n+DK3H2IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk ZDUxNjFjYzEtMWFmZS00NDNlLWE2ODItZjU2MTMzMzQ1MWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqmpNIzWrJgTS4nM3XzcB97d/RPKZnMSVWkP 1vzb0LseVhML82V1a0nuur92NaZwBy7M9T22SMQHp0Hnx9fb5v3U5ZwLJi+rmy0Z oUG9x/Iru0v7OOAg3/bDNQqDP1P0dTVi0BLFMAY72dHVHv4KlR1xUeofgut4pZHO YdUk3UTHyPg+KjfA97UX7ssjI1xdGoZ5FvHkWGoUvBQs8RtFAcPeL2BYy3/I2nhz 8LNdMtJGFFEiZCRQMD+qetgb9cxKmJRDHqIhCWughm5QQVEMzCBH9ludN+cE3Qss 3mrhCbNJqx9cyegOh7lEWEb3pls2Ot0AKF0VEAxo6yWMo0dxQwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFELiEgQeiNUmpK9hp4a3LqKYw+vEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODc4YTk4MDYtYWEyNy0z MGMyLWFkYzAtZGZmNDJjOGViMGJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIeKMk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD/ClTOkuuMG9Ion/b1TXDHr6LCu/xYjc/+mp0zT6PKasU6efZAA HbVsAR+xfSFnskSr/i/mR+Hi3WEXHpQRCKNT4FKE0sSqNePqoD+brAqCglsefi7T ZC877fJG1Ge1Bosh/k6yJT/O8VWr7xTV2W7Bv9KM52s8jEnAV1wT5s9lR3drC090 UG/Lj5kZzdgUwdLjOr8Q3lssiL56D0ABEp3FosIcC60P56tJ5KA/2xCvgj1OQO2f FZ/ZpiF+Rka0TWmj+H9L/u+GX4C/CgjlfQMYejv9XsR2dy3t6/5aNfD7SMr/RDal 7J56Qh2prty25TEv4KDcRnpUGQYG/xcnJ8s= -----END CERTIFICATE-----Generated at Sat Aug 23 13:05:45 2025 by rpki-client