$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d14ddef2-acc1-3f42-b63a-0d20d7bba4ca.roa File: d14ddef2-acc1-3f42-b63a-0d20d7bba4ca.roa (raw, json) Hash identifier: ywL8tNkwgL4Y/VCJOvVw8JD0ArdAgCEEXMDh4meyNMQ= Subject key identifier: 6D:62:3F:E7:69:04:56:32:0D:56:9E:8B:0E:F5:46:B8:24:60:4A:67 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CD772A31C86CB1B036AC00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d14ddef2-acc1-3f42-b63a-0d20d7bba4ca.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 2001:4860:4830::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:77:2a:31:c8:6c:b1:b0:36:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=2d49d2e6-e447-4b63-8199-168a3ce80b12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:26:7a:e1:4a:62:54:bc:ce:90:e4:3c:3d:96: 2f:1f:9d:a9:d2:f2:77:73:c0:88:74:44:73:ce:d3: 2f:2a:76:4c:04:91:6f:02:ac:b4:7c:ea:fc:65:c4: 91:fc:68:80:26:4e:ac:fc:fe:f8:88:af:65:76:f9: c4:13:d1:b0:49:a4:05:66:5f:10:cd:4a:fe:0d:0a: 8d:c6:ca:3b:90:0a:37:17:dd:a4:87:c8:d0:c3:9a: 8d:dd:36:f1:68:51:d2:d2:8e:0d:60:16:87:7a:95: 4b:72:e3:c1:d1:46:dc:a1:25:d5:a6:21:56:88:95: 33:ef:72:57:59:b0:b9:d7:30:e3:89:d3:55:cc:e3: 29:8c:60:e9:63:01:8d:67:ef:e9:40:59:b7:03:39: 3a:22:37:1a:9a:51:d4:14:af:20:9b:5e:74:73:50: 1b:8f:fb:b1:75:a9:8a:91:07:58:a3:af:e2:2e:85: 59:34:20:7a:fd:d3:a4:ff:79:e2:8d:eb:25:53:ca: fa:f8:15:e3:91:80:8c:0c:83:f9:66:4c:50:62:4c: c3:d6:4b:ec:4b:a1:c0:2a:d7:2f:41:89:c9:8f:e8: 84:a4:8a:28:f0:13:89:3a:13:c1:10:d4:22:c4:71: c8:dd:d8:93:92:f4:dc:32:61:1a:3d:43:35:56:48: 5a:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:62:3F:E7:69:04:56:32:0D:56:9E:8B:0E:F5:46:B8:24:60:4A:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d14ddef2-acc1-3f42-b63a-0d20d7bba4ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv6: 2001:4860:4830::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:24:1e:6e:94:7c:d1:75:1a:5a:34:33:d7:1f:4f:8b:6d:5b: a1:56:4a:5d:80:23:44:88:87:dc:f2:9a:97:99:49:c9:52:ca: 81:83:5d:6d:78:42:97:80:d9:28:05:6f:a9:f4:30:a4:6d:9c: 28:74:85:d2:a7:e0:75:d7:37:0a:1e:01:6f:09:1b:ed:c5:09: 32:e3:dd:f4:cb:55:be:9a:2c:8a:8e:d2:f0:85:0d:63:ed:94: 43:18:0b:4e:5f:eb:12:1d:e6:87:89:5d:ee:19:00:cb:fa:0b: 07:10:65:3d:80:40:c6:84:32:48:5b:18:e4:c8:d8:89:13:ca: 3d:97:29:c4:ea:f6:81:bc:a7:11:5a:12:8b:85:78:12:c7:c2: 17:2b:d8:5a:93:77:da:38:46:b9:cd:7f:cc:07:d6:14:69:7e: e2:cb:b4:12:60:f5:6b:f9:7a:8e:64:8c:81:fa:44:9e:e0:82: 3c:b6:6f:42:86:ec:3b:67:b3:61:03:9f:20:b5:02:73:92:a1: 08:7e:ae:4c:eb:21:c8:80:8b:68:55:48:49:d5:3b:e4:d1:2c: 8a:53:83:7d:32:00:ca:0d:5e:48:8e:0e:20:3d:0c:e2:48:ea: aa:f7:d6:04:ae:2f:99:74:04:a6:ec:7c:64:81:d1:b2:15:97: 70:2e:04:0f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtkzXcqMchssbA2rAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk MmQ0OWQyZTYtZTQ0Ny00YjYzLTgxOTktMTY4YTNjZTgwYjEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8yZ64UpiVLzOkOQ8PZYvH52p0vJ3c8CIdERz ztMvKnZMBJFvAqy0fOr8ZcSR/GiAJk6s/P74iK9ldvnEE9GwSaQFZl8QzUr+DQqN xso7kAo3F92kh8jQw5qN3TbxaFHS0o4NYBaHepVLcuPB0UbcoSXVpiFWiJUz73JX WbC51zDjidNVzOMpjGDpYwGNZ+/pQFm3Azk6IjcamlHUFK8gm150c1Abj/uxdamK kQdYo6/iLoVZNCB6/dOk/3nijeslU8r6+BXjkYCMDIP5ZkxQYkzD1kvsS6HAKtcv QYnJj+iEpIoo8BOJOhPBENQixHHI3diTkvTcMmEaPUM1VkhalwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFG1iP+dpBFYyDVaeiw71RrgkYEpnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZDE0ZGRlZjItYWNjMS0z ZjQyLWI2M2EtMGQyMGQ3YmJhNGNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIYEgw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAYkHm6UfNF1Glo0M9cfT4ttW6FWSl2AI0SIh9zympeZSclSyoGD XW14QpeA2SgFb6n0MKRtnCh0hdKn4HXXNwoeAW8JG+3FCTLj3fTLVb6aLIqO0vCF DWPtlEMYC05f6xId5oeJXe4ZAMv6CwcQZT2AQMaEMkhbGOTI2IkTyj2XKcTq9oG8 pxFaEouFeBLHwhcr2FqTd9o4RrnNf8wH1hRpfuLLtBJg9Wv5eo5kjIH6RJ7ggjy2 b0KG7Dtns2EDnyC1AnOSoQh+rkzrIciAi2hVSEnVO+TRLIpTg30yAMoNXkiODiA9 DOJI6qr31gSuL5l0BKbsfGSB0bIVl3AuBA8= -----END CERTIFICATE-----Generated at Sun Oct 19 23:41:48 2025 by rpki-client