$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/732291c2-9541-3833-8b8b-32de6384bc20.roa File: 732291c2-9541-3833-8b8b-32de6384bc20.roa (raw, json) Hash identifier: B+eJZUmCmECbi3qXduG8EYx0M490w96yXc4GlFPyA6s= Subject key identifier: 70:B3:B7:21:1A:68:C7:FB:13:28:3D:10:92:5D:F9:C5:45:EE:0F:73 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584BBFA5AC57F0C9A7049CBFB280 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/732291c2-9541-3833-8b8b-32de6384bc20.roa Signing time: Tue 04 Nov 2025 14:00:39 +0000 ROA not before: Tue 04 Nov 2025 14:00:39 +0000 ROA not after: Mon 02 Feb 2026 14:00:39 +0000 asID: 16839 IP address blocks: 2606:3600:105::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:ac:57:f0:c9:a7:04:9c:bf:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Nov 4 14:00:39 2025 GMT Not After : Feb 2 14:00:39 2026 GMT Subject: CN=f6c9d18a-e57a-4f2b-a776-d73916ff53c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ca:0e:3f:65:ca:ab:19:ca:22:91:e8:3a:68: 17:b8:cb:15:f9:a8:df:99:ff:83:a4:26:74:cf:53: 4c:b1:74:83:10:0d:98:14:0d:75:34:54:f4:4f:2f: 37:83:fc:71:d6:2f:71:42:76:3e:25:fe:21:d1:88: 00:3a:10:83:f4:cd:d6:bd:a7:d7:79:c3:4f:d7:d0: 00:01:14:d6:7b:de:7e:de:bb:63:76:63:12:c3:a9: 6f:a3:3c:27:08:82:9f:9e:ba:1f:42:ba:29:18:56: cd:90:22:ba:28:54:3d:0f:e3:08:4f:39:e4:f4:7e: 2b:17:91:da:c6:b3:cc:4d:d7:1c:9e:e4:ab:a4:98: 31:0a:18:d7:e9:a1:21:0c:12:3d:ce:a3:05:c5:3c: 10:66:7c:77:5d:6a:81:a0:83:bb:50:3d:f7:3c:97: b6:15:75:db:f5:86:54:ca:4d:0c:d5:23:ef:bd:63: 27:81:7a:fd:0b:92:6f:57:48:ef:d6:54:05:cb:2c: d4:32:cf:a9:ff:15:1f:6d:c3:17:a9:36:1d:30:f6: 3e:ea:88:a7:80:fe:14:ea:44:d9:44:21:e1:a7:33: 79:85:68:08:af:02:6f:3a:f3:77:12:e9:ca:11:7d: f8:ff:b6:0d:3c:b4:4c:0d:1c:a4:8f:ad:a4:04:b5: c9:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:B3:B7:21:1A:68:C7:FB:13:28:3D:10:92:5D:F9:C5:45:EE:0F:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/732291c2-9541-3833-8b8b-32de6384bc20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv6: 2606:3600:105::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:20:27:d2:2f:f4:ce:78:00:e7:76:e6:01:29:34:7c:58:0c: 73:a3:ac:c1:ff:4b:b4:a5:22:ca:2e:78:65:97:29:7e:08:44: 71:85:91:a6:07:51:e1:cc:cc:e7:1c:27:7f:8e:5d:b2:17:67: ed:e0:66:85:dc:fb:99:c4:5b:4f:5e:57:89:48:48:a2:f7:c4: d8:32:92:19:d4:69:ac:4f:1f:2d:d3:6b:90:78:62:d7:7d:02: 88:75:04:d3:a8:b0:9d:3f:61:af:c7:f0:af:96:0b:2a:20:8d: 17:70:c1:67:8c:43:c9:9c:e1:f7:8f:87:e1:7f:c8:06:7c:85: fa:d3:54:28:c9:6d:46:da:e4:ce:c0:e3:8e:45:c3:3b:1d:be: 72:c7:a8:69:55:9e:b4:6e:d4:27:5e:29:da:71:f9:1a:f2:5f: a8:26:37:fe:ab:e1:21:16:60:5d:7b:40:61:4b:a0:23:c9:a1: bc:79:bd:b8:21:9c:40:f7:99:f6:fb:04:6a:3a:7d:c5:7d:49: 9b:c6:fe:18:8d:22:0a:fa:86:ae:14:d5:8f:2d:37:9f:62:d1: e1:a4:74:1b:b3:6b:b8:7b:7c:94:55:23:3b:cd:e8:80:24:b2: 28:10:e6:f5:7d:da:d4:61:8c:77:46:56:8d:d9:8e:30:d9:d6: ed:63:f5:12 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEu/paxX8MmnBJy/soAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk ZjZjOWQxOGEtZTU3YS00ZjJiLWE3NzYtZDczOTE2ZmY1M2M2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMoOP2XKqxnKIpHoOmgXuMsV+ajfmf+DpCZ0 z1NMsXSDEA2YFA11NFT0Ty83g/xx1i9xQnY+Jf4h0YgAOhCD9M3WvafXecNP19AA ARTWe95+3rtjdmMSw6lvozwnCIKfnrofQropGFbNkCK6KFQ9D+MITznk9H4rF5Ha xrPMTdccnuSrpJgxChjX6aEhDBI9zqMFxTwQZnx3XWqBoIO7UD33PJe2FXXb9YZU yk0M1SPvvWMngXr9C5JvV0jv1lQFyyzUMs+p/xUfbcMXqTYdMPY+6oingP4U6kTZ RCHhpzN5hWgIrwJvOvN3EunKEX34/7YNPLRMDRykj62kBLXJ6QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHCztyEaaMf7Eyg9EJJd+cVF7g9zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvNzMyMjkxYzItOTU0MS0z ODMzLThiOGItMzJkZTYzODRiYzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgY2AAEF MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADYgJ9Iv9M54AOd25gEpNHxYDHOjrMH/S7SlIsoueGWXKX4IRHGF kaYHUeHMzOccJ3+OXbIXZ+3gZoXc+5nEW09eV4lISKL3xNgykhnUaaxPHy3Ta5B4 Ytd9Aoh1BNOosJ0/Ya/H8K+WCyogjRdwwWeMQ8mc4fePh+F/yAZ8hfrTVCjJbUba 5M7A445FwzsdvnLHqGlVnrRu1CdeKdpx+RryX6gmN/6r4SEWYF17QGFLoCPJobx5 vbghnED3mfb7BGo6fcV9SZvG/hiNIgr6hq4U1Y8tN59i0eGkdBuza7h7fJRVIzvN 6IAksigQ5vV92tRhjHdGVo3ZjjDZ1u1j9RI= -----END CERTIFICATE-----Generated at Wed Nov 5 10:03:22 2025 by rpki-client