$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9702962a-413b-3010-b92e-0a8efd3e158d.roa File: 9702962a-413b-3010-b92e-0a8efd3e158d.roa (raw, json) Hash identifier: wrLJyit8kp5cKUA55VeMbrAdDJ4iRiCwHgkPICbZsgU= Subject key identifier: 1E:AC:FD:89:6E:8F:4C:BE:F5:52:37:42:76:CB:E1:94:0B:A7:BA:E1 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AC2E0F40C1B2EFA2CD9FE0C00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9702962a-413b-3010-b92e-0a8efd3e158d.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 12222 IP address blocks: 2001:4878:c242::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e0:f4:0c:1b:2e:fa:2c:d9:fe:0c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=4462d33d-c7ff-4d0e-9168-c2b2173b90d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:bd:4f:f2:2c:dd:55:bd:6f:1e:39:c5:1b:87: 07:da:3d:a1:cd:da:6d:81:1c:45:9f:d6:e2:dd:24: c5:bd:1b:cb:bf:65:bc:fc:09:98:d4:6b:8a:ae:70: 71:f1:de:de:79:7e:e1:56:5e:a0:2f:3f:49:85:3c: 2b:d8:f2:f7:79:00:ed:73:77:c9:c9:fa:70:61:c5: b0:e8:48:68:c5:37:f7:2c:d3:6f:16:0a:f0:e7:2e: d3:03:f8:25:44:e1:cb:fa:3e:cc:3d:97:18:70:eb: b0:7b:ec:9b:1c:41:95:5e:44:ee:ae:96:67:5d:c3: f0:1f:79:00:ee:29:a3:5a:59:6c:19:a9:36:d1:6a: dc:7c:b9:73:b9:52:14:97:7e:87:3f:dc:80:b0:3e: a4:be:79:d1:a4:40:8c:c9:ca:77:6a:8e:76:20:49: 5f:98:a9:41:7e:59:4a:bd:e1:2b:84:0d:27:68:b5: c4:5e:25:9b:45:62:3a:08:c5:24:9e:f3:34:31:e8: b1:23:12:ec:7e:e9:10:7b:8e:b0:40:1b:5c:25:76: de:41:5a:c8:8f:91:03:3d:e2:43:10:1d:ec:8a:bb: 0d:af:f5:43:b9:48:5d:0e:7e:3a:fc:6d:03:b9:26: 7c:88:72:7d:52:e7:24:b9:f8:a2:05:6d:af:f7:05: 97:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:AC:FD:89:6E:8F:4C:BE:F5:52:37:42:76:CB:E1:94:0B:A7:BA:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9702962a-413b-3010-b92e-0a8efd3e158d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2001:4878:c242::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:ae:1d:22:3f:63:23:b7:40:7f:d7:16:ed:e0:93:c4:22:35: 43:9d:85:6a:5d:43:bc:ef:e3:c6:47:53:5a:66:6e:45:9f:71: a9:a4:98:74:b5:11:02:a5:f9:22:fc:d0:c8:2c:d7:21:8f:ee: 52:44:06:46:5b:bf:98:a2:75:9a:02:77:ea:7e:a0:51:6b:23: 45:c6:e0:13:b6:2f:7b:e0:24:20:8b:9f:8f:4b:73:65:ed:b7: 6d:f2:6c:a7:ef:4f:22:ae:d3:21:9c:d4:bc:4d:b3:65:48:f9: 53:d6:d0:3e:db:40:bb:f0:81:b8:2c:68:09:aa:81:fe:b0:5d: 74:e9:81:f9:d2:97:7d:49:e2:98:a3:3c:d3:06:02:91:bb:2d: ab:c2:42:63:18:a8:41:d5:2c:34:20:fb:86:31:2b:2b:dc:ba: 10:a7:62:dc:6a:fd:49:02:97:04:a8:c6:76:f7:38:0b:ff:bf: 03:c5:57:9d:c9:02:98:91:b6:19:07:87:fc:a1:55:d5:fb:0b: d5:a5:2e:93:cc:59:72:a2:80:60:b6:0b:1f:6b:c7:06:3c:3b: 21:89:bf:5f:67:b7:2c:38:a2:59:ab:46:07:cc:08:cb:f2:9e: 0a:b8:fa:f8:b8:b5:8e:4f:fc:d9:a9:95:78:b1:6c:be:5e:ce: 9b:0d:5a:97 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErC4PQMGy76LNn+DAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk NDQ2MmQzM2QtYzdmZi00ZDBlLTkxNjgtYzJiMjE3M2I5MGQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkr1P8izdVb1vHjnFG4cH2j2hzdptgRxFn9bi 3STFvRvLv2W8/AmY1GuKrnBx8d7eeX7hVl6gLz9JhTwr2PL3eQDtc3fJyfpwYcWw 6EhoxTf3LNNvFgrw5y7TA/glROHL+j7MPZcYcOuwe+ybHEGVXkTurpZnXcPwH3kA 7imjWllsGak20WrcfLlzuVIUl36HP9yAsD6kvnnRpECMycp3ao52IElfmKlBfllK veErhA0naLXEXiWbRWI6CMUknvM0MeixIxLsfukQe46wQBtcJXbeQVrIj5EDPeJD EB3sirsNr/VDuUhdDn46/G0DuSZ8iHJ9UuckufiiBW2v9wWXRQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFB6s/Yluj0y+9VI3QnbL4ZQLp7rhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTcwMjk2MmEtNDEzYi0z MDEwLWI5MmUtMGE4ZWZkM2UxNThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIeMJC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEuuHSI/YyO3QH/XFu3gk8QiNUOdhWpdQ7zv48ZHU1pmbkWfcamk mHS1EQKl+SL80Mgs1yGP7lJEBkZbv5iidZoCd+p+oFFrI0XG4BO2L3vgJCCLn49L c2Xtt23ybKfvTyKu0yGc1LxNs2VI+VPW0D7bQLvwgbgsaAmqgf6wXXTpgfnSl31J 4pijPNMGApG7LavCQmMYqEHVLDQg+4YxKyvcuhCnYtxq/UkClwSoxnb3OAv/vwPF V53JApiRthkHh/yhVdX7C9WlLpPMWXKigGC2Cx9rxwY8OyGJv19ntyw4olmrRgfM CMvyngq4+vi4tY5P/NmplXixbL5ezpsNWpc= -----END CERTIFICATE-----Generated at Sat Aug 23 14:53:24 2025 by rpki-client