$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2847747-8d46-4da2-bb9e-4c72860e7bcd/4cfdb82e-3453-30f8-91c0-041d67fdb1ea.roa File: 4cfdb82e-3453-30f8-91c0-041d67fdb1ea.roa (raw, json) Hash identifier: p8BNeen2NjNsEPg4+mI1iATVEM93GVlSGU7L0EgNXkg= Subject key identifier: 67:50:DF:B8:0B:58:B6:CE:11:DB:D0:3C:F7:50:C5:5E:88:8E:59:AD Certificate issuer: /CN=a2847747-8d46-4da2-bb9e-4c72860e7bcd Certificate serial: 010D0C9F4328584BBB75806D3D463244BF4DF080 Authority key identifier: CC:21:3E:58:74:F4:E7:E4:17:39:FB:8B:91:FE:79:BA:A9:33:8C:EC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2847747-8d46-4da2-bb9e-4c72860e7bcd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2847747-8d46-4da2-bb9e-4c72860e7bcd/4cfdb82e-3453-30f8-91c0-041d67fdb1ea.roa Signing time: Mon 03 Nov 2025 02:00:31 +0000 ROA not before: Mon 03 Nov 2025 02:00:31 +0000 ROA not after: Sun 01 Feb 2026 02:00:31 +0000 asID: 398017 IP address blocks: 2602:fc42:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2847747-8d46-4da2-bb9e-4c72860e7bcd/a2847747-8d46-4da2-bb9e-4c72860e7bcd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2847747-8d46-4da2-bb9e-4c72860e7bcd/a2847747-8d46-4da2-bb9e-4c72860e7bcd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2847747-8d46-4da2-bb9e-4c72860e7bcd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bb:75:80:6d:3d:46:32:44:bf:4d:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2847747-8d46-4da2-bb9e-4c72860e7bcd Validity Not Before: Nov 3 02:00:31 2025 GMT Not After : Feb 1 02:00:31 2026 GMT Subject: CN=090b2b4b-341b-4f80-acf0-d0c95d1b9ecd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ca:33:62:b1:16:c5:08:fc:f9:da:89:94:ca: b3:c7:93:9b:c6:62:dd:ff:40:30:d7:fb:3c:34:3d: 9c:14:ea:d5:ed:95:fd:62:59:ed:70:c6:75:7b:75: 83:15:42:fd:9a:e5:e5:85:c4:a2:08:3b:3c:60:2f: a2:48:7b:2b:66:d1:91:f0:ab:9f:89:15:90:ef:32: e2:59:4d:db:a9:65:63:7c:f2:78:ed:0e:3f:8a:71: 34:56:3d:81:4b:60:56:91:2a:c2:73:8c:40:aa:9a: 6a:ab:3d:26:d6:8f:c9:14:e3:bd:77:7b:52:32:dd: 3d:1f:b6:14:53:37:b5:89:ca:f4:46:9a:4b:3a:bf: c4:f0:74:82:a3:3b:19:54:bc:9a:3a:2d:d8:79:64: 60:b6:88:17:f8:fe:5d:a7:02:ef:80:d5:d7:2c:cf: d3:0f:ac:81:40:da:58:d9:a2:20:50:16:57:b1:86: 81:39:9c:19:0e:26:a1:15:22:45:94:60:d4:1e:c2: 47:42:c4:44:77:63:d2:99:db:c5:c7:b5:64:81:31: 06:af:3a:e4:b5:ae:9e:ac:f8:69:23:81:3e:18:98: 5c:50:d5:09:8c:46:69:fb:c8:ba:e9:65:2c:0c:0f: 9b:5b:3b:6b:ea:b0:83:9d:55:4a:f2:bd:e0:93:9c: 3c:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:50:DF:B8:0B:58:B6:CE:11:DB:D0:3C:F7:50:C5:5E:88:8E:59:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2847747-8d46-4da2-bb9e-4c72860e7bcd/4cfdb82e-3453-30f8-91c0-041d67fdb1ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2847747-8d46-4da2-bb9e-4c72860e7bcd/a2847747-8d46-4da2-bb9e-4c72860e7bcd.crl X509v3 Authority Key Identifier: keyid:CC:21:3E:58:74:F4:E7:E4:17:39:FB:8B:91:FE:79:BA:A9:33:8C:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2847747-8d46-4da2-bb9e-4c72860e7bcd.cer sbgp-ipAddrBlock: critical IPv6: 2602:fc42:1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:7e:80:64:03:3a:a9:1c:43:1f:f1:26:6f:8b:a5:72:01:a6: bc:c4:cb:71:c5:21:af:c8:be:e9:a3:4e:77:4e:0c:17:51:a9: 81:c0:7e:c9:0f:40:4b:89:a8:36:2b:9e:c9:f9:f8:9e:fb:ec: a1:9e:7a:be:33:93:3c:5f:88:f1:fc:40:67:f7:f4:ad:8f:96: 39:79:4b:ec:89:f0:47:08:7e:c6:a1:80:55:c6:db:70:ee:97: c4:0d:aa:0b:76:6b:18:62:3c:c3:11:01:3a:c0:fc:3b:b0:f4: 86:69:1d:16:06:d1:ad:59:c7:52:2c:47:52:36:ef:d1:0b:28: 91:27:b2:ac:c3:64:d6:f5:c5:64:b8:b5:e6:af:fd:d9:0c:8e: 1e:1b:75:91:73:96:c3:c1:f6:2f:e8:2e:e5:1a:1b:1b:3d:04: 60:76:23:63:10:17:1e:2f:37:8e:70:d9:e9:5e:66:45:a7:7a: ee:9a:2e:7d:d4:8c:13:4d:81:06:e3:90:ec:8f:80:33:d6:77: cc:c8:47:e7:1f:57:a3:4a:7c:27:db:c7:e5:75:ed:45:ff:b4: 5f:c2:d4:90:ba:24:6c:b6:7e:f2:68:71:d3:c9:01:84:ac:7f: f5:2f:1a:14:20:7a:a2:b1:02:86:31:44:c5:49:8c:71:25:32: 33:1f:d4:d0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEu7dYBtPUYyRL9N8IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTI4NDc3NDctOGQ0Ni00ZGEyLWJiOWUtNGM3Mjg2MGU3 YmNkMB4XDTI1MTEwMzAyMDAzMVoXDTI2MDIwMTAyMDAzMVowLzEtMCsGA1UEAxMk MDkwYjJiNGItMzQxYi00ZjgwLWFjZjAtZDBjOTVkMWI5ZWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMozYrEWxQj8+dqJlMqzx5ObxmLd/0Aw1/s8 ND2cFOrV7ZX9YlntcMZ1e3WDFUL9muXlhcSiCDs8YC+iSHsrZtGR8KufiRWQ7zLi WU3bqWVjfPJ47Q4/inE0Vj2BS2BWkSrCc4xAqppqqz0m1o/JFOO9d3tSMt09H7YU Uze1icr0RppLOr/E8HSCozsZVLyaOi3YeWRgtogX+P5dpwLvgNXXLM/TD6yBQNpY 2aIgUBZXsYaBOZwZDiahFSJFlGDUHsJHQsREd2PSmdvFx7VkgTEGrzrkta6erPhp I4E+GJhcUNUJjEZp+8i66WUsDA+bWztr6rCDnVVK8r3gk5w83QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGdQ37gLWLbOEdvQPPdQxV6IjlmtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hMjg0 Nzc0Ny04ZDQ2LTRkYTItYmI5ZS00YzcyODYwZTdiY2QvNGNmZGI4MmUtMzQ1My0z MGY4LTkxYzAtMDQxZDY3ZmRiMWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTI4NDc3NDctOGQ0Ni00ZGEyLWJi OWUtNGM3Mjg2MGU3YmNkL2EyODQ3NzQ3LThkNDYtNGRhMi1iYjllLTRjNzI4NjBl N2JjZC5jcmwwHwYDVR0jBBgwFoAUzCE+WHT05+QXOfuLkf55uqkzjOwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hMjg0Nzc0Ny04ZDQ2LTRkYTItYmI5ZS00Yzcy ODYwZTdiY2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL8QgAB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADp+gGQDOqkcQx/xJm+LpXIBprzEy3HFIa/IvumjTndODBdRqYHA fskPQEuJqDYrnsn5+J777KGeer4zkzxfiPH8QGf39K2Pljl5S+yJ8EcIfsahgFXG 23Dul8QNqgt2axhiPMMRATrA/Duw9IZpHRYG0a1Zx1IsR1I279ELKJEnsqzDZNb1 xWS4teav/dkMjh4bdZFzlsPB9i/oLuUaGxs9BGB2I2MQFx4vN45w2eleZkWneu6a Ln3UjBNNgQbjkOyPgDPWd8zIR+cfV6NKfCfbx+V17UX/tF/C1JC6JGy2fvJocdPJ AYSsf/UvGhQgeqKxAoYxRMVJjHElMjMf1NA= -----END CERTIFICATE-----Generated at Wed Nov 5 16:10:39 2025 by rpki-client