$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0/2744f7f5-ab18-3de3-b244-bc520f20d607.roa File: 2744f7f5-ab18-3de3-b244-bc520f20d607.roa (raw, json) Hash identifier: GSjt/pTekY9F2/6Xolhbd75C9dh4wqGVc23yofItoKg= Subject key identifier: A0:A7:9A:ED:76:D8:E3:6F:3D:AA:2F:29:32:6A:ED:75:51:0D:00:4E Certificate issuer: /CN=7c1b0964-bd9c-4931-a53d-e2a434bc2af0 Certificate serial: 010D0C9F4328584BB88D225AF0BD40C729712600 Authority key identifier: 66:6F:7E:8C:15:5F:8C:94:34:06:21:1B:FB:BC:4D:C1:6C:D8:85:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0/2744f7f5-ab18-3de3-b244-bc520f20d607.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 40230 IP address blocks: 2604:cf00::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0/7c1b0964-bd9c-4931-a53d-e2a434bc2af0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0/7c1b0964-bd9c-4931-a53d-e2a434bc2af0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:22:5a:f0:bd:40:c7:29:71:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c1b0964-bd9c-4931-a53d-e2a434bc2af0 Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=b727f5d1-eab5-44e5-911f-30e5bd7a58b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:3d:d2:f5:1d:e3:78:8d:a5:b9:a4:24:f3:bc: 0f:93:67:9e:e9:bc:18:3a:c0:73:c5:a8:83:59:6d: 90:9c:e8:cd:72:bb:80:53:c0:cb:e5:27:0b:21:8f: 21:21:7e:64:ad:8b:3c:43:e8:5a:66:9b:4f:b5:b4: e9:07:d9:d1:7c:bc:2f:e3:a4:1a:53:dc:44:31:f9: b8:20:58:02:52:56:ed:4e:00:89:cb:27:8e:5e:b0: 07:34:8d:87:4a:e4:11:da:63:3f:7b:40:2d:73:07: c5:0c:d5:38:9d:94:74:29:1b:ed:b0:2e:32:12:47: 20:fd:36:3d:5c:70:8d:f5:9b:3c:da:9f:ac:5f:60: fa:23:b3:55:6c:a8:4e:77:61:54:86:72:21:1f:45: b0:a6:c7:e9:33:70:bd:7e:83:6e:b7:89:e5:76:20: 7a:08:d1:98:c3:10:4c:a3:64:61:9c:5c:02:07:ff: 4e:c9:bd:ed:2f:5b:f8:26:f0:04:0e:e3:2f:10:ec: 8f:69:71:f7:de:d5:5e:f3:f2:b8:bb:56:cd:48:66: b8:7e:e3:0d:6d:e9:0f:44:07:13:74:88:9d:f7:25: ab:d1:1c:84:2c:b4:d5:84:03:63:0e:8b:d9:18:f1: e2:10:86:29:c6:e0:39:a2:dc:2f:21:a9:0a:d0:98: dc:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:A7:9A:ED:76:D8:E3:6F:3D:AA:2F:29:32:6A:ED:75:51:0D:00:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0/2744f7f5-ab18-3de3-b244-bc520f20d607.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0/7c1b0964-bd9c-4931-a53d-e2a434bc2af0.crl X509v3 Authority Key Identifier: keyid:66:6F:7E:8C:15:5F:8C:94:34:06:21:1B:FB:BC:4D:C1:6C:D8:85:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0.cer sbgp-ipAddrBlock: critical IPv6: 2604:cf00::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:29:e8:32:ea:b4:dc:7a:22:4b:e3:15:e0:b6:ac:62:52:1b: 19:ab:60:92:04:d2:98:84:97:52:0d:1e:4a:d5:9d:13:63:8a: f6:3e:1a:e6:cd:1a:8f:26:17:09:06:4a:51:42:de:74:c9:de: 01:89:df:a5:ad:3f:07:c9:ac:59:73:da:ba:0b:e2:0c:fb:a7: 6b:ec:0e:36:02:8d:3b:5e:02:1b:db:d4:46:ce:0e:73:33:8f: 02:da:07:94:f5:03:ee:4c:27:e1:5f:e2:74:16:e6:6f:af:64: e4:1a:a8:53:d1:f0:11:d1:04:03:2c:ba:c7:c5:bc:04:fe:a6: af:4c:9f:6c:e6:f4:4e:ab:ec:8b:5b:18:3a:46:ed:27:36:ff: 72:f6:15:95:fc:37:76:d1:2e:45:93:ca:d5:84:9d:07:ca:07: 62:40:03:84:5c:d2:78:a3:fe:4b:8c:ca:64:a1:bb:83:ca:12: f4:fb:6d:69:5c:fe:b4:c3:d8:77:8f:45:a4:d8:66:e4:14:f0: c4:c2:30:d6:87:a4:fc:82:01:05:16:d5:6c:56:9c:d2:66:c6: 29:3d:ba:bd:49:f4:3f:e1:40:9d:e0:d1:f5:1b:7b:9a:09:79: fd:b3:d0:86:23:43:0d:f6:4e:eb:db:fe:53:d2:38:ca:0b:d6: 66:ac:60:96 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEu4jSJa8L1AxylxJgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2MxYjA5NjQtYmQ5Yy00OTMxLWE1M2QtZTJhNDM0YmMy YWYwMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk YjcyN2Y1ZDEtZWFiNS00NGU1LTkxMWYtMzBlNWJkN2E1OGIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmz3S9R3jeI2luaQk87wPk2ee6bwYOsBzxaiD WW2QnOjNcruAU8DL5ScLIY8hIX5krYs8Q+haZptPtbTpB9nRfLwv46QaU9xEMfm4 IFgCUlbtTgCJyyeOXrAHNI2HSuQR2mM/e0AtcwfFDNU4nZR0KRvtsC4yEkcg/TY9 XHCN9Zs82p+sX2D6I7NVbKhOd2FUhnIhH0WwpsfpM3C9foNut4nldiB6CNGYwxBM o2RhnFwCB/9Oyb3tL1v4JvAEDuMvEOyPaXH33tVe8/K4u1bNSGa4fuMNbekPRAcT dIid9yWr0RyELLTVhANjDovZGPHiEIYpxuA5otwvIakK0JjcQQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKCnmu122ONvPaovKTJq7XVRDQBOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83YzFi MDk2NC1iZDljLTQ5MzEtYTUzZC1lMmE0MzRiYzJhZjAvMjc0NGY3ZjUtYWIxOC0z ZGUzLWIyNDQtYmM1MjBmMjBkNjA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2MxYjA5NjQtYmQ5Yy00OTMxLWE1 M2QtZTJhNDM0YmMyYWYwLzdjMWIwOTY0LWJkOWMtNDkzMS1hNTNkLWUyYTQzNGJj MmFmMC5jcmwwHwYDVR0jBBgwFoAUZm9+jBVfjJQ0BiEb+7xNwWzYhYUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83YzFiMDk2NC1iZDljLTQ5MzEtYTUzZC1lMmE0 MzRiYzJhZjAuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgTPADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB0Kegy6rTceiJL4xXgtqxiUhsZq2CSBNKYhJdSDR5K1Z0TY4r2Phrm zRqPJhcJBkpRQt50yd4Bid+lrT8HyaxZc9q6C+IM+6dr7A42Ao07XgIb29RGzg5z M48C2geU9QPuTCfhX+J0FuZvr2TkGqhT0fAR0QQDLLrHxbwE/qavTJ9s5vROq+yL Wxg6Ru0nNv9y9hWV/Dd20S5Fk8rVhJ0HygdiQAOEXNJ4o/5LjMpkobuDyhL0+21p XP60w9h3j0Wk2GbkFPDEwjDWh6T8ggEFFtVsVpzSZsYpPbq9SfQ/4UCd4NH1G3ua CXn9s9CGI0MN9k7r2/5T0jjKC9ZmrGCW -----END CERTIFICATE-----Generated at Wed Nov 5 01:10:53 2025 by rpki-client