$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3f51e877-1ec2-3992-a53c-c0a0b4652f10.roa File: 3f51e877-1ec2-3992-a53c-c0a0b4652f10.roa (raw, json) Hash identifier: TFP/GLUDqGrUeZs6jJpbpKt3a6Nm+H1u3g2XHyfLKag= Subject key identifier: 22:A0:BB:C8:A7:C9:2D:BE:0D:E0:ED:E9:06:09:6C:23:97:5D:7D:B5 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CD77E76B9D64332BCDA200 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3f51e877-1ec2-3992-a53c-c0a0b4652f10.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 32381 IP address blocks: 2001:4860:480c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:77:e7:6b:9d:64:33:2b:cd:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=ab6d7b0f-4854-4e3d-8e99-3a3154fa1a13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:13:24:d4:27:1e:d3:ac:9d:c0:50:c6:18:d6: 4e:88:e1:31:9b:04:68:d1:39:3c:eb:c1:e5:d3:28: c9:ff:de:1f:f2:2b:bc:c6:d8:5f:d6:e8:60:9b:81: 31:6d:90:1f:3d:70:81:54:8f:e5:44:8f:bd:89:6c: d4:bd:c9:c2:50:83:33:c7:ba:26:f8:3e:29:e1:0b: c5:40:58:d6:b6:6c:ff:e4:93:80:85:e6:67:c3:f6: 01:a2:bc:34:9d:b6:00:b7:9c:45:28:08:b6:fa:4a: 2d:0c:dc:55:5f:f1:8a:62:77:3b:48:df:f4:d0:60: 9b:d5:04:7a:a3:b5:00:97:92:db:a7:03:e8:65:ae: 69:29:df:34:b6:cc:1e:e5:75:c9:35:a3:2c:22:b3: 03:29:4c:b9:fd:37:ae:cb:0d:9d:06:bc:98:6f:cc: 47:e9:31:26:93:1e:fa:e8:e1:18:d7:96:a2:92:8a: bc:fe:f4:02:14:9d:b9:80:33:74:16:eb:72:ca:dc: 07:bc:ca:b5:6a:f9:ff:e6:da:04:55:52:f5:b5:dc: ef:fe:c2:8d:cf:15:75:56:96:fd:76:95:63:6b:65: f6:8f:31:0e:69:5f:06:85:59:e4:d1:bf:9b:5e:d7: 7f:68:64:5a:d3:fe:ff:c1:4a:c2:6a:49:98:0e:9e: 1e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:A0:BB:C8:A7:C9:2D:BE:0D:E0:ED:E9:06:09:6C:23:97:5D:7D:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3f51e877-1ec2-3992-a53c-c0a0b4652f10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv6: 2001:4860:480c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:c7:c8:74:45:b1:b9:91:2b:6a:9a:1b:61:05:68:50:e4:10: 8b:34:0e:d2:16:d9:fb:ea:3e:c8:f7:01:c1:cc:1d:75:9e:72: 10:22:83:ec:7b:35:57:b6:1e:f8:e5:c5:48:ef:88:ee:97:ba: fc:46:78:0f:e5:b8:37:66:7b:b1:a3:01:f7:9d:40:56:2d:72: 35:e4:f1:e2:87:b1:f4:fd:82:f6:16:90:46:cd:28:cd:98:ae: 65:ed:29:45:52:9f:fd:f2:26:c0:e9:7e:0e:f5:a8:3e:8d:90: 72:9e:d4:a2:cb:63:8c:f5:1e:52:07:65:8c:c7:4c:31:c8:0f: 4f:91:e3:c5:61:97:22:9a:45:75:e3:e9:fd:df:f4:4c:56:f5: 68:30:c3:84:3f:cd:3e:53:2e:14:b5:ce:7b:97:d1:4f:b6:a8: 08:10:91:e4:72:e7:9a:5b:8d:83:ea:b9:e5:90:d2:9d:0e:8f: 8c:b5:29:f3:b4:af:4a:e6:43:c1:55:7e:4c:c3:14:8d:19:04: 65:6f:e4:10:e4:51:46:c0:63:70:df:ef:7d:06:fe:6e:16:d2: 04:b3:a9:21:5d:dc:41:68:64:40:36:f9:d3:3a:d3:27:ac:60: d8:3b:14:59:c4:c7:0d:52:f2:58:2f:a2:27:2b:08:80:ad:c0: bd:6c:1b:a0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtkzXfna51kMyvNogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk YWI2ZDdiMGYtNDg1NC00ZTNkLThlOTktM2EzMTU0ZmExYTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRMk1Cce06ydwFDGGNZOiOExmwRo0Tk868Hl 0yjJ/94f8iu8xthf1uhgm4ExbZAfPXCBVI/lRI+9iWzUvcnCUIMzx7om+D4p4QvF QFjWtmz/5JOAheZnw/YBorw0nbYAt5xFKAi2+kotDNxVX/GKYnc7SN/00GCb1QR6 o7UAl5LbpwPoZa5pKd80tswe5XXJNaMsIrMDKUy5/Teuyw2dBryYb8xH6TEmkx76 6OEY15aikoq8/vQCFJ25gDN0FutyytwHvMq1avn/5toEVVL1tdzv/sKNzxV1Vpb9 dpVja2X2jzEOaV8GhVnk0b+bXtd/aGRa0/7/wUrCakmYDp4eZQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCKgu8inyS2+DeDt6QYJbCOXXX21MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvM2Y1MWU4NzctMWVjMi0z OTkyLWE1M2MtYzBhMGI0NjUyZjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIYEgM MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABvHyHRFsbmRK2qaG2EFaFDkEIs0DtIW2fvqPsj3AcHMHXWechAi g+x7NVe2HvjlxUjviO6XuvxGeA/luDdme7GjAfedQFYtcjXk8eKHsfT9gvYWkEbN KM2YrmXtKUVSn/3yJsDpfg71qD6NkHKe1KLLY4z1HlIHZYzHTDHID0+R48VhlyKa RXXj6f3f9ExW9Wgww4Q/zT5TLhS1znuX0U+2qAgQkeRy55pbjYPqueWQ0p0Oj4y1 KfO0r0rmQ8FVfkzDFI0ZBGVv5BDkUUbAY3Df730G/m4W0gSzqSFd3EFoZEA2+dM6 0yesYNg7FFnExw1S8lgvoicrCICtwL1sG6A= -----END CERTIFICATE-----Generated at Fri Oct 17 08:42:11 2025 by rpki-client