$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/1f5af667-5392-32dd-904c-88223551c9dd.roa File: 1f5af667-5392-32dd-904c-88223551c9dd.roa (raw, json) Hash identifier: ifd7iXPIwSnSVkigkEaeygYBAYspY+M2YMGycx92TDY= Subject key identifier: A1:5B:C3:06:65:7A:A9:60:78:E3:79:88:86:34:78:7C:E7:08:B8:08 Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Certificate serial: 010D0C9F4328584BBFA5B819AB2D48D436986E00 Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/1f5af667-5392-32dd-904c-88223551c9dd.roa Signing time: Tue 04 Nov 2025 14:00:39 +0000 ROA not before: Tue 04 Nov 2025 14:00:39 +0000 ROA not after: Mon 02 Feb 2026 14:00:39 +0000 asID: 11232 IP address blocks: 2604:7a00:f800::/42 maxlen: 42 2605:4a80:f000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:b8:19:ab:2d:48:d4:36:98:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Validity Not Before: Nov 4 14:00:39 2025 GMT Not After : Feb 2 14:00:39 2026 GMT Subject: CN=290a569e-7c1f-411b-bc98-44994bc4d952 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:49:1c:80:61:6d:c2:3f:ca:03:71:c1:30:96: de:8e:b3:dc:ce:bd:99:9a:b0:ef:c1:b2:5f:04:d3: 04:7f:c5:6e:fe:31:13:64:10:b7:22:31:ef:f0:d8: cb:b8:bf:10:fa:f0:63:0a:a9:01:7a:85:cb:1f:07: 04:73:d6:cd:ed:31:84:2b:b1:23:d0:47:3c:6f:bc: c6:75:a9:22:a5:9f:d3:e4:6a:4d:91:ee:a7:7e:2a: 3b:11:ad:cf:1d:df:72:b1:84:f3:7c:7e:af:5d:e6: 01:14:5f:54:5a:6f:0d:04:c3:8c:3b:94:ee:61:95: 4c:b3:d9:d6:ac:91:7e:34:5e:88:d1:4e:dd:59:3b: 71:fa:8a:57:3c:33:ef:d3:e9:21:55:95:d1:4c:29: 9a:71:02:08:63:30:00:54:a0:c3:f9:b2:7b:08:9b: 08:e5:3c:41:94:e1:9a:0d:dc:0b:33:92:8a:ed:49: ab:e5:80:f4:85:3c:02:4c:56:03:f0:33:7e:83:79: 2a:a5:b5:13:71:c3:03:27:7a:4f:8e:53:44:5c:e2: 2e:12:ad:58:cb:41:ac:63:9e:71:c3:6f:40:13:d7: 22:50:1a:cb:25:66:2f:ec:36:9e:6f:74:08:35:32: 6e:49:c7:e4:80:10:2b:71:61:1e:06:0c:b1:ac:e5: 80:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:5B:C3:06:65:7A:A9:60:78:E3:79:88:86:34:78:7C:E7:08:B8:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/1f5af667-5392-32dd-904c-88223551c9dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl X509v3 Authority Key Identifier: keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer sbgp-ipAddrBlock: critical IPv6: 2604:7a00:f800::/42 2605:4a80:f000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:37:e7:34:59:3e:cc:54:e1:da:6a:5a:ae:1f:99:1e:a2:c7: 45:8b:3c:1c:13:81:d4:5a:e0:86:81:64:f3:26:cd:0d:44:5a: 7a:2b:3c:f9:be:c0:fb:58:69:3e:c2:20:04:bd:ad:1f:66:a0: cf:bf:ec:49:39:ba:05:08:bc:5e:53:bc:19:27:0e:aa:fc:88: 23:72:07:b5:f9:34:4a:20:85:09:91:95:f0:c6:23:5b:52:34: d1:ec:7b:05:27:2b:db:b2:3f:78:0c:da:cd:2a:69:be:35:c8: 85:8a:d1:09:5e:fe:a0:7c:fe:f2:93:b5:38:3a:2e:dc:bd:ef: 4e:dd:94:3d:ef:b1:23:01:d1:51:5b:8a:98:97:bc:dd:bb:b8: 1b:f5:1b:30:c0:86:5f:88:66:40:9b:67:70:b2:d3:30:33:de: 88:2b:98:e4:33:cf:6f:b9:3f:51:4a:1a:9b:68:7f:71:c9:40: 21:a9:b1:af:3e:59:21:29:ab:81:00:37:75:8e:15:e3:da:73: 09:14:7e:31:89:e3:4f:06:19:cc:12:b0:7d:32:eb:4d:c4:29: b5:e0:d9:5e:a7:0c:fa:05:ec:6b:72:2e:38:ee:e1:d8:48:b7: ea:15:c8:6f:c2:fa:e0:8f:5d:14:db:34:bd:94:78:7a:a4:18: 79:69:79:c4 -----BEGIN CERTIFICATE----- MIIGTjCCBTagAwIBAgIUAQ0Mn0MoWEu/pbgZqy1I1DaYbgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3 MDg1MB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk MjkwYTU2OWUtN2MxZi00MTFiLWJjOTgtNDQ5OTRiYzRkOTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUkcgGFtwj/KA3HBMJbejrPczr2ZmrDvwbJf BNMEf8Vu/jETZBC3IjHv8NjLuL8Q+vBjCqkBeoXLHwcEc9bN7TGEK7Ej0Ec8b7zG dakipZ/T5GpNke6nfio7Ea3PHd9ysYTzfH6vXeYBFF9UWm8NBMOMO5TuYZVMs9nW rJF+NF6I0U7dWTtx+opXPDPv0+khVZXRTCmacQIIYzAAVKDD+bJ7CJsI5TxBlOGa DdwLM5KK7Umr5YD0hTwCTFYD8DN+g3kqpbUTccMDJ3pPjlNEXOIuEq1Yy0GsY55x w29AE9ciUBrLJWYv7Daeb3QINTJuScfkgBArcWEeBgyxrOWAjQIDAQABo4IDYDCC A1wwHQYDVR0OBBYEFKFbwwZleqlgeON5iIY0eHznCLgIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2 M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvMWY1YWY2NjctNTM5Mi0z MmRkLTkwNGMtODgyMjM1NTFjOWRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3 NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2 NDNhNzcwODUuY2VyMCoGCCsGAQUFBwEHAQH/BBswGTAXBAIAAjARAwcGJgR6APgA AwYCJgVKgPAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEApzfnNFk+zFTh2mparh+ZHqLHRYs8HBOB1FrghoFk 8ybNDURaeis8+b7A+1hpPsIgBL2tH2agz7/sSTm6BQi8XlO8GScOqvyII3IHtfk0 SiCFCZGV8MYjW1I00ex7BScr27I/eAzazSppvjXIhYrRCV7+oHz+8pO1ODou3L3v Tt2UPe+xIwHRUVuKmJe83bu4G/UbMMCGX4hmQJtncLLTMDPeiCuY5DPPb7k/UUoa m2h/cclAIamxrz5ZISmrgQA3dY4V49pzCRR+MYnjTwYZzBKwfTLrTcQpteDZXqcM +gXsa3IuOO7h2Ei36hXIb8L64I9dFNs0vZR4eqQYeWl5xA== -----END CERTIFICATE-----Generated at Wed Nov 5 01:58:35 2025 by rpki-client