$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/37dcc827-500d-3f5b-b386-f2f53f92ae66.roa File: 37dcc827-500d-3f5b-b386-f2f53f92ae66.roa (raw, json) Hash identifier: 8XjLBabY6SROraYkryYTbRPUC1R1UdgcHoHc7kFDrNc= Subject key identifier: 6A:BC:47:7C:EA:C9:91:46:E9:BF:E5:0D:AF:03:AF:11:C9:ED:FF:FF Certificate issuer: /CN=311f19cc-344e-48c5-a1f1-47593aa56b0d Certificate serial: 010D0C9F4328584BBFA594585212B2287AED7E80 Authority key identifier: 4D:D6:60:E6:E1:75:11:29:94:0A:F2:82:C1:B6:B6:AD:02:D9:60:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/37dcc827-500d-3f5b-b386-f2f53f92ae66.roa Signing time: Tue 04 Nov 2025 14:00:39 +0000 ROA not before: Tue 04 Nov 2025 14:00:39 +0000 ROA not after: Mon 02 Feb 2026 14:00:39 +0000 asID: 54225 IP address blocks: 2604:ebc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/311f19cc-344e-48c5-a1f1-47593aa56b0d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/311f19cc-344e-48c5-a1f1-47593aa56b0d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:94:58:52:12:b2:28:7a:ed:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=311f19cc-344e-48c5-a1f1-47593aa56b0d Validity Not Before: Nov 4 14:00:39 2025 GMT Not After : Feb 2 14:00:39 2026 GMT Subject: CN=b989f74e-1cd8-4246-9ce9-eb76fbd73465 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:84:a8:21:51:6e:c0:81:00:2d:db:60:9f:df: d4:0e:d6:9c:fe:02:5e:b5:92:9d:25:85:0d:63:15: b3:77:b9:1c:79:b4:65:82:eb:1a:7d:14:ce:56:18: 09:12:df:68:17:85:50:ca:5b:e2:39:24:7b:cd:b8: 3b:5c:e7:b1:5f:e3:23:0a:fd:94:cd:d9:da:63:f2: ec:fb:0e:c3:ea:16:6d:29:35:61:52:29:b0:96:ff: d3:35:c6:4a:7b:4a:6f:f3:88:d6:99:3d:b7:ac:61: a5:66:f2:0f:7e:b7:04:57:39:a7:de:9b:95:83:9a: 7a:68:a2:3d:46:d8:f9:93:95:51:28:6a:cc:16:3d: 2d:9c:b6:d7:0d:e3:f6:9e:c8:2e:32:6a:f8:a5:fd: 44:1d:01:7e:b6:25:6e:c3:db:2e:cb:11:93:f3:f1: a4:1d:86:08:d8:67:ea:db:b3:47:5d:aa:de:a7:c4: a2:05:9e:73:ce:4d:36:19:ef:56:f1:27:e5:b1:ff: 7d:bf:a1:a9:c8:3d:d9:ab:71:f2:30:7f:e4:46:85: 8a:1b:64:c9:2c:85:81:fa:8b:85:e1:be:e6:01:00: 7b:55:1c:2c:b1:a5:4c:57:b7:ce:20:d3:ff:92:f5: 82:cf:ac:bc:c5:05:d7:2d:8f:15:e0:ca:b8:d4:43: 87:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:BC:47:7C:EA:C9:91:46:E9:BF:E5:0D:AF:03:AF:11:C9:ED:FF:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/37dcc827-500d-3f5b-b386-f2f53f92ae66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/311f19cc-344e-48c5-a1f1-47593aa56b0d.crl X509v3 Authority Key Identifier: keyid:4D:D6:60:E6:E1:75:11:29:94:0A:F2:82:C1:B6:B6:AD:02:D9:60:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d.cer sbgp-ipAddrBlock: critical IPv6: 2604:ebc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:ff:b2:7f:da:78:f1:9e:77:95:08:d1:e8:d9:42:53:c2:f5: 8d:55:df:a8:50:2d:24:23:a7:10:bc:ec:48:1f:fa:1e:5c:a1: 24:0c:44:eb:ee:83:47:38:2f:a2:93:0b:f0:33:ba:42:c5:8d: cc:80:25:e6:d2:17:3a:c0:48:b0:49:7e:21:41:2a:c9:a3:cd: b1:0d:b0:0e:d7:53:01:f5:3c:8c:e8:04:c0:fd:12:27:1c:c4: 95:04:16:15:14:5f:92:19:1e:9b:25:9d:d9:d7:ba:c6:e3:f5: 06:98:9f:f2:79:7e:82:82:c0:dc:ea:8e:27:8c:20:fe:1e:d9: 62:a9:b9:ea:d5:5e:e9:a4:13:71:e9:9d:0f:44:89:98:81:c2: 7f:3b:fe:5d:d7:31:d6:01:35:f4:c1:d8:e6:6f:a6:4e:f4:f9: cc:9d:87:2c:09:bb:57:29:54:7e:ad:de:c2:ba:04:51:1f:6d: 38:53:cf:ab:48:30:d4:76:de:43:67:d6:57:c5:f8:40:ba:3f: 6d:9e:42:b2:70:b8:1d:65:6c:f2:40:70:da:e1:5e:0f:22:ff: bd:fc:31:b2:2b:6d:f9:d3:c9:ea:94:24:b1:96:d3:52:c2:b2: 4c:d9:07:f1:fb:94:42:c2:af:c5:70:f5:27:86:1d:2d:78:45: 66:94:c1:2a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEu/pZRYUhKyKHrtfoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzExZjE5Y2MtMzQ0ZS00OGM1LWExZjEtNDc1OTNhYTU2 YjBkMB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk Yjk4OWY3NGUtMWNkOC00MjQ2LTljZTktZWI3NmZiZDczNDY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4SoIVFuwIEALdtgn9/UDtac/gJetZKdJYUN YxWzd7kcebRlgusafRTOVhgJEt9oF4VQylviOSR7zbg7XOexX+MjCv2UzdnaY/Ls +w7D6hZtKTVhUimwlv/TNcZKe0pv84jWmT23rGGlZvIPfrcEVzmn3puVg5p6aKI9 Rtj5k5VRKGrMFj0tnLbXDeP2nsguMmr4pf1EHQF+tiVuw9suyxGT8/GkHYYI2Gfq 27NHXarep8SiBZ5zzk02Ge9W8Sflsf99v6GpyD3Zq3HyMH/kRoWKG2TJLIWB+ouF 4b7mAQB7VRwssaVMV7fOINP/kvWCz6y8xQXXLY8V4Mq41EOH3QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGq8R3zqyZFG6b/lDa8DrxHJ7f//MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zMTFm MTljYy0zNDRlLTQ4YzUtYTFmMS00NzU5M2FhNTZiMGQvMzdkY2M4MjctNTAwZC0z ZjViLWIzODYtZjJmNTNmOTJhZTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzExZjE5Y2MtMzQ0ZS00OGM1LWEx ZjEtNDc1OTNhYTU2YjBkLzMxMWYxOWNjLTM0NGUtNDhjNS1hMWYxLTQ3NTkzYWE1 NmIwZC5jcmwwHwYDVR0jBBgwFoAUTdZg5uF1ESmUCvKCwba2rQLZYH0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zMTFmMTljYy0zNDRlLTQ4YzUtYTFmMS00NzU5 M2FhNTZiMGQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgTrwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBu/7J/2njxnneVCNHo2UJTwvWNVd+oUC0kI6cQvOxIH/oeXKEkDETr 7oNHOC+ikwvwM7pCxY3MgCXm0hc6wEiwSX4hQSrJo82xDbAO11MB9TyM6ATA/RIn HMSVBBYVFF+SGR6bJZ3Z17rG4/UGmJ/yeX6CgsDc6o4njCD+Htliqbnq1V7ppBNx 6Z0PRImYgcJ/O/5d1zHWATX0wdjmb6ZO9PnMnYcsCbtXKVR+rd7CugRRH204U8+r SDDUdt5DZ9ZXxfhAuj9tnkKycLgdZWzyQHDa4V4PIv+9/DGyK23508nqlCSxltNS wrJM2Qfx+5RCwq/FcPUnhh0teEVmlMEq -----END CERTIFICATE-----Generated at Wed Nov 5 02:19:09 2025 by rpki-client