$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/84eba332-7cf8-3813-9951-e44ab46403d4.roa File: 84eba332-7cf8-3813-9951-e44ab46403d4.roa (raw, json) Hash identifier: yJhAdcg46s4JzxlVKSf3ftzuJV65ep9WiANOOclFzGs= Subject key identifier: DA:B8:2D:3A:4B:00:A0:76:DB:04:4B:B2:41:AE:E1:29:31:12:A3:81 Certificate issuer: /CN=e601b694-6242-4b1c-a841-d0a7214cd9c7 Certificate serial: 010D0C9F4328584BA39D191E6DED0D2005B2F360 Authority key identifier: 96:7A:A6:3B:2E:D3:AA:65:44:0B:7E:8B:F5:4B:BA:F1:ED:95:50:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/84eba332-7cf8-3813-9951-e44ab46403d4.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 14618 IP address blocks: 2607:f368:804::/47 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/e601b694-6242-4b1c-a841-d0a7214cd9c7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/e601b694-6242-4b1c-a841-d0a7214cd9c7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:19:1e:6d:ed:0d:20:05:b2:f3:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e601b694-6242-4b1c-a841-d0a7214cd9c7 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=69d90985-e107-4ae7-881d-04d77e42aeef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:da:1e:23:a9:13:e3:c0:31:9b:d2:64:a1:21: 19:3d:75:4e:0d:b3:5e:0c:dc:e6:94:40:7b:13:24: 1e:c6:b4:57:fe:9a:86:19:24:23:1b:44:80:9a:1e: 05:6a:76:88:9c:7c:cf:bb:e5:80:26:30:5d:66:4f: d3:38:77:d8:f8:94:48:8d:21:65:ec:8d:65:d8:1c: b1:1b:10:69:86:e5:3c:1d:b2:98:9d:10:6e:25:a4: 0a:96:29:eb:c7:e0:d0:a9:29:b8:ce:d6:f1:39:7e: 28:a0:92:79:8a:f8:bd:52:65:16:63:61:ad:ae:08: 79:9f:70:7c:46:b7:c8:43:be:a5:a7:00:78:63:65: 8c:8f:42:20:7f:be:db:97:c5:f6:80:47:f0:d7:a0: 5c:9d:17:f8:11:92:77:5c:1c:55:12:ce:d6:5d:1a: 29:85:84:8c:b0:68:d9:cf:73:ea:bb:f4:14:04:34: 4a:bd:84:32:01:0f:7e:74:07:ef:1f:bc:36:03:07: 22:3c:43:5a:c0:61:84:81:8d:04:1d:19:07:34:c1: 32:e9:1d:7d:80:bb:76:63:f2:34:2b:e8:ab:0e:52: 54:db:1d:ef:c7:12:ff:cf:c3:45:1c:95:1b:0e:78: df:8f:64:29:b9:55:b0:9b:39:c7:2f:01:ec:b0:2b: 52:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:B8:2D:3A:4B:00:A0:76:DB:04:4B:B2:41:AE:E1:29:31:12:A3:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/84eba332-7cf8-3813-9951-e44ab46403d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/e601b694-6242-4b1c-a841-d0a7214cd9c7.crl X509v3 Authority Key Identifier: keyid:96:7A:A6:3B:2E:D3:AA:65:44:0B:7E:8B:F5:4B:BA:F1:ED:95:50:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7.cer sbgp-ipAddrBlock: critical IPv6: 2607:f368:804::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:21:64:3f:d1:2c:38:6e:45:70:ea:a8:3e:23:c2:a3:fd:bc: e7:5b:9f:11:02:a0:0d:db:9d:47:eb:61:0c:42:09:62:01:17: 70:83:5f:41:a0:2e:dc:fd:69:31:c8:d4:24:f6:b7:76:5a:9d: a4:a2:b3:74:81:c7:28:ca:c0:02:0c:59:55:d2:88:e5:a3:01: 28:2e:fb:d7:26:8b:51:86:fe:08:6b:ec:a7:22:75:e0:35:69: e6:7a:10:52:3c:cc:66:97:26:dd:fb:a9:3c:12:a6:b2:bc:ff: 34:17:80:01:4b:20:41:a4:78:2f:bc:4d:06:3b:51:c6:ee:41: 5c:eb:2c:f0:ca:c2:cb:79:6d:62:f2:51:33:f8:3d:66:0c:6f: f7:22:d5:58:1f:f4:1f:d8:c2:7a:ec:eb:f3:ec:cf:8a:0b:ca: 09:c4:21:79:9e:d9:a3:7a:b5:22:ca:f0:34:f4:f6:4a:fe:97: d6:12:74:93:a2:ae:98:cb:d8:91:16:5f:be:1f:34:43:5d:f2: 30:3d:56:ae:26:86:fe:96:9d:0d:c3:8a:59:94:00:ff:25:ba: 13:7c:8e:a4:77:5a:21:66:3f:db:67:28:4a:10:82:64:cd:74: e7:50:c7:8f:6b:69:c8:3f:b0:4f:75:75:62:bf:f1:69:cb:35: f9:11:32:44 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEujnRkebe0NIAWy82AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwMWI2OTQtNjI0Mi00YjFjLWE4NDEtZDBhNzIxNGNk OWM3MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk NjlkOTA5ODUtZTEwNy00YWU3LTg4MWQtMDRkNzdlNDJhZWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdoeI6kT48Axm9JkoSEZPXVODbNeDNzmlEB7 EyQexrRX/pqGGSQjG0SAmh4FanaInHzPu+WAJjBdZk/TOHfY+JRIjSFl7I1l2Byx GxBphuU8HbKYnRBuJaQKlinrx+DQqSm4ztbxOX4ooJJ5ivi9UmUWY2Gtrgh5n3B8 RrfIQ76lpwB4Y2WMj0Igf77bl8X2gEfw16BcnRf4EZJ3XBxVEs7WXRophYSMsGjZ z3Pqu/QUBDRKvYQyAQ9+dAfvH7w2AwciPENawGGEgY0EHRkHNMEy6R19gLt2Y/I0 K+irDlJU2x3vxxL/z8NFHJUbDnjfj2QpuVWwmznHLwHssCtSwwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNq4LTpLAKB22wRLskGu4SkxEqOBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lNjAx YjY5NC02MjQyLTRiMWMtYTg0MS1kMGE3MjE0Y2Q5YzcvODRlYmEzMzItN2NmOC0z ODEzLTk5NTEtZTQ0YWI0NjQwM2Q0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTYwMWI2OTQtNjI0Mi00YjFjLWE4 NDEtZDBhNzIxNGNkOWM3L2U2MDFiNjk0LTYyNDItNGIxYy1hODQxLWQwYTcyMTRj ZDljNy5jcmwwHwYDVR0jBBgwFoAUlnqmOy7TqmVEC36L9Uu68e2VUAcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lNjAxYjY5NC02MjQyLTRiMWMtYTg0MS1kMGE3 MjE0Y2Q5YzcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgfzaAgE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH0hZD/RLDhuRXDqqD4jwqP9vOdbnxECoA3bnUfrYQxCCWIBF3CD X0GgLtz9aTHI1CT2t3ZanaSis3SBxyjKwAIMWVXSiOWjASgu+9cmi1GG/ghr7Kci deA1aeZ6EFI8zGaXJt37qTwSprK8/zQXgAFLIEGkeC+8TQY7UcbuQVzrLPDKwst5 bWLyUTP4PWYMb/ci1Vgf9B/Ywnrs6/Psz4oLygnEIXme2aN6tSLK8DT09kr+l9YS dJOirpjL2JEWX74fNENd8jA9Vq4mhv6WnQ3DilmUAP8luhN8jqR3WiFmP9tnKEoQ gmTNdOdQx49racg/sE91dWK/8WnLNfkRMkQ= -----END CERTIFICATE-----Generated at Wed Nov 5 16:16:22 2025 by rpki-client