$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/b58fa615-5e8c-35d0-9005-e119e966f41c.roa File: b58fa615-5e8c-35d0-9005-e119e966f41c.roa (raw, json) Hash identifier: HNutZVOrXIQ3gzk+Q94jde8yPY5bM7whW8q/q+G7NSs= Subject key identifier: 12:68:77:E0:1D:7A:F1:D7:18:E8:A2:3D:5E:4B:E4:DF:4E:BC:47:F4 Certificate issuer: /CN=eff73345-b771-45fd-be81-1f41a7f777ec Certificate serial: 010D0C9F4328584B9E07B5C3EC9BD7F532133C80 Authority key identifier: 9A:65:3F:69:7C:72:6A:FD:22:B4:20:19:C1:45:30:96:4D:15:72:46 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/b58fa615-5e8c-35d0-9005-e119e966f41c.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 400967 IP address blocks: 2602:f922::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/eff73345-b771-45fd-be81-1f41a7f777ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/eff73345-b771-45fd-be81-1f41a7f777ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:b5:c3:ec:9b:d7:f5:32:13:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eff73345-b771-45fd-be81-1f41a7f777ec Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=1fce4000-ec7f-40ff-8765-d236722aafed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:46:58:d9:f1:ba:fb:4a:a5:a3:8b:8b:81:ca: c5:8d:a2:1a:9e:ec:cd:26:4d:63:d8:ed:27:a2:36: e4:50:29:87:fc:51:9c:c1:58:21:7f:d2:0a:29:57: 14:2a:89:f4:62:f6:20:5e:d9:3c:c4:90:65:4b:c0: 6d:4c:b8:de:58:f5:7a:c7:f1:f6:48:33:34:49:83: 56:39:2a:28:6f:75:8a:04:ea:78:26:4a:f9:17:7d: a5:b4:f6:2d:23:a6:79:45:de:af:05:f3:37:85:32: 76:03:96:2e:3a:81:41:a1:70:99:ae:d4:a3:44:14: 69:b1:46:06:1b:fa:6f:61:aa:b2:56:50:30:19:91: fd:7e:53:d1:a6:b6:7e:35:c1:3f:8a:c4:10:50:4d: db:cc:b3:0f:a0:0d:6e:58:78:63:4f:9d:aa:aa:64: dd:e6:3d:17:29:1e:6e:ee:91:67:7b:29:92:a5:22: d5:e5:0d:cc:77:be:ab:87:df:50:dc:68:e9:46:68: dd:ee:96:55:89:f1:bb:61:10:13:8c:88:4d:f0:fd: 14:82:c6:d0:cf:74:3c:63:1f:af:ca:7d:6a:71:f9: 3e:6f:19:2d:75:30:83:1e:af:04:66:1b:7d:57:9b: 9f:b0:c4:f3:26:8f:97:62:27:0c:1a:ea:1b:46:cd: 9c:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:68:77:E0:1D:7A:F1:D7:18:E8:A2:3D:5E:4B:E4:DF:4E:BC:47:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/b58fa615-5e8c-35d0-9005-e119e966f41c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/eff73345-b771-45fd-be81-1f41a7f777ec.crl X509v3 Authority Key Identifier: keyid:9A:65:3F:69:7C:72:6A:FD:22:B4:20:19:C1:45:30:96:4D:15:72:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec.cer sbgp-ipAddrBlock: critical IPv6: 2602:f922::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:eb:e9:9e:a7:f8:a4:e2:42:01:d6:dd:bf:c0:da:2c:cf:38: 0d:e6:43:b7:61:69:c9:5f:45:87:6c:8e:05:52:3a:a1:bd:06: b4:94:32:56:de:00:40:26:68:4b:30:42:dc:65:25:1c:de:48: f4:d5:dc:82:83:ac:a8:6a:6d:fd:4b:30:38:6c:e5:67:ad:e2: 98:21:e0:15:3b:49:cb:71:b8:75:b7:79:81:c7:34:6d:74:64: b1:dc:df:3a:68:bf:5c:d1:80:5c:2f:84:e3:96:1c:ba:48:58: 28:6e:7a:85:61:41:66:37:c7:ec:b4:38:b3:af:45:9e:bf:e9: 27:24:db:32:c0:82:38:f0:81:97:19:d8:e1:bd:27:11:05:8c: 3e:fc:79:28:6f:b4:24:af:1a:d5:2f:01:5c:be:55:27:bc:48: 8f:a9:32:09:a4:0b:eb:eb:5c:d7:c6:b2:11:32:c5:7d:fb:b2: ad:78:8e:16:0e:2c:56:10:15:d4:56:e2:2c:b8:11:df:63:b2: f8:1b:52:8d:27:40:52:be:d8:01:3f:9f:d8:2f:ec:62:de:c5: d3:4f:51:db:56:8d:2e:76:50:c1:50:08:d4:6d:3b:c5:ca:6d: df:bb:88:b8:a1:cd:41:05:58:b6:7e:f9:ff:f7:65:3b:d9:f9: 93:9d:54:9e -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEueB7XD7JvX9TITPIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWZmNzMzNDUtYjc3MS00NWZkLWJlODEtMWY0MWE3Zjc3 N2VjMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk MWZjZTQwMDAtZWM3Zi00MGZmLTg3NjUtZDIzNjcyMmFhZmVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkZY2fG6+0qlo4uLgcrFjaIanuzNJk1j2O0n ojbkUCmH/FGcwVghf9IKKVcUKon0YvYgXtk8xJBlS8BtTLjeWPV6x/H2SDM0SYNW OSoob3WKBOp4Jkr5F32ltPYtI6Z5Rd6vBfM3hTJ2A5YuOoFBoXCZrtSjRBRpsUYG G/pvYaqyVlAwGZH9flPRprZ+NcE/isQQUE3bzLMPoA1uWHhjT52qqmTd5j0XKR5u 7pFneymSpSLV5Q3Md76rh99Q3GjpRmjd7pZVifG7YRATjIhN8P0UgsbQz3Q8Yx+v yn1qcfk+bxktdTCDHq8EZht9V5ufsMTzJo+XYicMGuobRs2c1wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFBJod+AdevHXGOiiPV5L5N9OvEf0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lZmY3 MzM0NS1iNzcxLTQ1ZmQtYmU4MS0xZjQxYTdmNzc3ZWMvYjU4ZmE2MTUtNWU4Yy0z NWQwLTkwMDUtZTExOWU5NjZmNDFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZWZmNzMzNDUtYjc3MS00NWZkLWJl ODEtMWY0MWE3Zjc3N2VjL2VmZjczMzQ1LWI3NzEtNDVmZC1iZTgxLTFmNDFhN2Y3 NzdlYy5jcmwwHwYDVR0jBBgwFoAUmmU/aXxyav0itCAZwUUwlk0VckYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lZmY3MzM0NS1iNzcxLTQ1ZmQtYmU4MS0xZjQx YTdmNzc3ZWMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL5IgAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAOOvpnqf4pOJCAdbdv8DaLM84DeZDt2FpyV9Fh2yOBVI6ob0GtJQy Vt4AQCZoSzBC3GUlHN5I9NXcgoOsqGpt/UswOGzlZ63imCHgFTtJy3G4dbd5gcc0 bXRksdzfOmi/XNGAXC+E45YcukhYKG56hWFBZjfH7LQ4s69Fnr/pJyTbMsCCOPCB lxnY4b0nEQWMPvx5KG+0JK8a1S8BXL5VJ7xIj6kyCaQL6+tc18ayETLFffuyrXiO Fg4sVhAV1FbiLLgR32Oy+BtSjSdAUr7YAT+f2C/sYt7F009R21aNLnZQwVAI1G07 xcpt37uIuKHNQQVYtn75//dlO9n5k51Ung== -----END CERTIFICATE-----Generated at Wed Nov 5 16:17:11 2025 by rpki-client