$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/d770de6c-e795-3458-b3fa-76797a8fc14c.roa File: d770de6c-e795-3458-b3fa-76797a8fc14c.roa (raw, json) Hash identifier: iAjs/SUjJ339z8E/Z4GrBlwFgcvXt0IXUxDfboNEh54= Subject key identifier: FA:76:21:58:58:C2:CC:C2:8B:AA:B2:C6:C1:E2:89:44:9F:1D:00:AC Certificate issuer: /CN=cb48baa8-6c83-45eb-b09b-5fbd1e42c57d Certificate serial: 010D0C9F4328584B3556E2666C4084771B868200 Authority key identifier: E9:36:DC:58:66:FC:68:02:BF:A6:99:DE:B4:DD:13:5E:4C:D1:27:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/d770de6c-e795-3458-b3fa-76797a8fc14c.roa Signing time: Tue 16 Sep 2025 01:00:33 +0000 ROA not before: Tue 16 Sep 2025 01:00:33 +0000 ROA not after: Mon 15 Dec 2025 02:00:33 +0000 asID: 229 IP address blocks: 2001:48a8:68f7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:56:e2:66:6c:40:84:77:1b:86:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb48baa8-6c83-45eb-b09b-5fbd1e42c57d Validity Not Before: Sep 16 01:00:33 2025 GMT Not After : Dec 15 02:00:33 2025 GMT Subject: CN=e23ac08c-397b-4bd4-917b-4bd12f6e9bb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:9b:78:29:3b:7a:e8:09:d2:8d:53:c6:e2:a4: ef:3e:c4:65:17:c6:ed:04:a4:ed:9e:9e:aa:4d:8f: 1e:e3:47:c4:a3:ea:66:52:69:4d:9c:a7:b4:ac:4a: 88:78:56:bb:24:67:dd:8d:a1:72:9d:71:21:28:0e: 65:f4:8e:3d:0d:d9:f2:08:89:ee:10:22:c9:7a:d8: e5:91:05:39:92:ff:88:c1:f7:e0:3d:d1:16:d4:54: 98:93:38:ca:7e:4e:2d:d0:67:77:a5:7d:0b:4f:17: 25:27:7c:5d:06:a8:60:2a:96:00:a1:96:83:76:7c: 61:d0:9e:fb:18:67:e3:7b:68:9f:5c:7d:63:23:87: ce:a3:c8:cf:e3:13:5d:f7:34:e4:e3:f5:b9:3e:df: 15:14:8c:97:b3:42:3c:72:5a:a9:b0:8e:74:d8:6c: 88:29:87:5c:2f:7d:33:40:16:63:ab:53:79:dc:0a: 04:cf:0c:17:0f:f0:35:9d:78:29:48:f4:c4:c0:ce: 6a:ee:1b:56:67:b0:a0:2d:5b:3e:8a:21:a3:74:73: b8:f7:cd:c9:a5:fa:09:09:cb:7e:87:d3:9c:49:ec: 9d:fd:b0:17:1d:9f:01:aa:c6:8b:62:76:ac:aa:a2: 49:66:91:2a:61:b0:ea:29:61:0e:12:c0:a8:88:5d: fe:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:76:21:58:58:C2:CC:C2:8B:AA:B2:C6:C1:E2:89:44:9F:1D:00:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/d770de6c-e795-3458-b3fa-76797a8fc14c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.crl X509v3 Authority Key Identifier: keyid:E9:36:DC:58:66:FC:68:02:BF:A6:99:DE:B4:DD:13:5E:4C:D1:27:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.cer sbgp-ipAddrBlock: critical IPv6: 2001:48a8:68f7::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:5f:d0:73:c9:6e:21:79:ff:98:77:84:51:5f:98:7b:71:43: c7:23:48:b5:bc:17:d2:e2:52:e2:dd:6f:59:13:c0:e7:ad:c9: 18:24:dc:69:a4:8a:a1:58:1d:5f:16:36:a4:0b:af:0f:37:40: 71:27:b0:bf:b4:74:3e:e0:b5:f9:9b:2c:83:69:42:e3:5e:82: 05:9d:8b:66:21:1f:af:d3:29:10:f2:e1:f5:a6:e4:f7:c9:95: b3:ea:f9:1e:2d:fb:d8:5f:6a:1d:9b:b5:fb:11:f8:e5:75:aa: cc:82:31:bd:90:32:b9:b6:89:b4:3c:ab:ad:fd:cb:4b:81:dc: 7d:b3:fc:54:36:86:b9:35:45:9d:9d:75:67:e8:f1:31:7a:82: 24:44:21:47:9b:b3:fd:dd:d3:46:a4:ed:95:56:40:79:d0:8e: 03:30:78:56:2a:82:97:d5:bc:d0:ad:48:2f:23:c0:f5:58:19: 6b:3b:2b:fa:34:60:5b:67:b6:ac:23:84:e1:77:22:6f:71:bb: e6:77:a3:b3:17:d0:9c:fd:22:39:b9:ac:b9:15:a2:2d:51:b5: 97:a3:14:b9:64:ac:35:93:91:fd:67:07:02:06:7c:0e:f2:df: a0:af:1c:50:ab:ff:39:36:c8:f6:65:aa:20:aa:d9:fd:5f:48: 4a:93:24:7c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs1VuJmbECEdxuGggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0OGJhYTgtNmM4My00NWViLWIwOWItNWZiZDFlNDJj NTdkMB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk ZTIzYWMwOGMtMzk3Yi00YmQ0LTkxN2ItNGJkMTJmNmU5YmIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZt4KTt66AnSjVPG4qTvPsRlF8btBKTtnp6q TY8e40fEo+pmUmlNnKe0rEqIeFa7JGfdjaFynXEhKA5l9I49DdnyCInuECLJetjl kQU5kv+IwffgPdEW1FSYkzjKfk4t0Gd3pX0LTxclJ3xdBqhgKpYAoZaDdnxh0J77 GGfje2ifXH1jI4fOo8jP4xNd9zTk4/W5Pt8VFIyXs0I8clqpsI502GyIKYdcL30z QBZjq1N53AoEzwwXD/A1nXgpSPTEwM5q7htWZ7CgLVs+iiGjdHO4983JpfoJCct+ h9OcSeyd/bAXHZ8BqsaLYnasqqJJZpEqYbDqKWEOEsCoiF3+lQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPp2IVhYwszCi6qyxsHiiUSfHQCsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jYjQ4 YmFhOC02YzgzLTQ1ZWItYjA5Yi01ZmJkMWU0MmM1N2QvZDc3MGRlNmMtZTc5NS0z NDU4LWIzZmEtNzY3OTdhOGZjMTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvY2I0OGJhYTgtNmM4My00NWViLWIw OWItNWZiZDFlNDJjNTdkL2NiNDhiYWE4LTZjODMtNDVlYi1iMDliLTVmYmQxZTQy YzU3ZC5jcmwwHwYDVR0jBBgwFoAU6TbcWGb8aAK/ppnetN0TXkzRJ84wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jYjQ4YmFhOC02YzgzLTQ1ZWItYjA5Yi01ZmJk MWU0MmM1N2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIqGj3 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABVf0HPJbiF5/5h3hFFfmHtxQ8cjSLW8F9LiUuLdb1kTwOetyRgk 3GmkiqFYHV8WNqQLrw83QHEnsL+0dD7gtfmbLINpQuNeggWdi2YhH6/TKRDy4fWm 5PfJlbPq+R4t+9hfah2btfsR+OV1qsyCMb2QMrm2ibQ8q639y0uB3H2z/FQ2hrk1 RZ2ddWfo8TF6giREIUebs/3d00ak7ZVWQHnQjgMweFYqgpfVvNCtSC8jwPVYGWs7 K/o0YFtntqwjhOF3Im9xu+Z3o7MX0Jz9Ijm5rLkVoi1RtZejFLlkrDWTkf1nBwIG fA7y36CvHFCr/zk2yPZlqiCq2f1fSEqTJHw= -----END CERTIFICATE-----Generated at Thu Oct 9 19:57:11 2025 by rpki-client