$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/746d7fba-60c4-45bf-9ed4-90c6580e71f2/384a8667-7c8d-3e8f-817a-c1b8f96d1544.roa File: 384a8667-7c8d-3e8f-817a-c1b8f96d1544.roa (raw, json) Hash identifier: qclSIKXfoEjUXogKijQLXB61GUlodVymzDS8/QR6s68= Subject key identifier: 68:8E:07:8D:04:2B:DD:D7:0F:77:C9:69:93:57:6E:BA:98:05:FA:90 Certificate issuer: /CN=746d7fba-60c4-45bf-9ed4-90c6580e71f2 Certificate serial: 010D0C9F4328584BA39D3A1C6286D63FA3777F00 Authority key identifier: 69:43:44:A0:6D:1F:38:65:C4:E2:45:5E:1B:1D:2A:5A:BA:82:1D:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/746d7fba-60c4-45bf-9ed4-90c6580e71f2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/746d7fba-60c4-45bf-9ed4-90c6580e71f2/384a8667-7c8d-3e8f-817a-c1b8f96d1544.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 393770 IP address blocks: 2607:e4c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/746d7fba-60c4-45bf-9ed4-90c6580e71f2/746d7fba-60c4-45bf-9ed4-90c6580e71f2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/746d7fba-60c4-45bf-9ed4-90c6580e71f2/746d7fba-60c4-45bf-9ed4-90c6580e71f2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/746d7fba-60c4-45bf-9ed4-90c6580e71f2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:3a:1c:62:86:d6:3f:a3:77:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746d7fba-60c4-45bf-9ed4-90c6580e71f2 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=86f52696-42c8-4c03-9526-461d4c9413bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:8d:a2:9d:64:c2:0d:3b:d4:90:5c:a8:d0:59: 2e:d6:7b:01:d6:1e:36:dc:80:99:72:a4:57:8c:30: 80:78:7a:03:35:24:71:84:02:de:b7:0f:39:c3:84: 33:45:fb:74:5d:d5:6c:a1:e8:be:43:95:02:8e:41: 83:b6:f1:34:4d:22:30:11:44:a2:9b:23:e9:1a:31: dd:6d:af:bb:94:73:28:6f:24:38:5d:53:4b:90:2c: 5c:9e:a8:c9:65:76:37:cc:a5:47:a2:67:06:f5:8b: 08:dd:14:67:2b:05:d5:d5:ce:8e:66:c4:18:21:4a: 68:27:cf:fd:03:dd:0f:c7:1a:83:05:ce:45:5f:73: 03:70:bd:b8:92:5a:9f:6e:b1:c3:3b:a7:95:7b:1c: 46:95:ff:86:75:77:2f:d0:70:f0:c6:32:60:cc:de: f5:d7:33:05:38:b6:34:4c:92:df:2f:e8:2e:c8:3b: 5d:5d:a0:51:cf:b5:9e:19:a8:33:58:9f:de:d1:a0: 79:94:ab:99:17:86:71:b5:3d:35:7f:fd:10:62:b6: b3:fd:a3:f5:bd:59:76:3e:d9:bb:3f:9c:aa:a2:c4: 6c:af:38:5b:8d:46:ea:da:c0:e9:8e:6f:15:e6:cf: 7e:52:4e:43:ff:d2:05:a1:e0:82:af:50:8e:b5:13: f8:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:8E:07:8D:04:2B:DD:D7:0F:77:C9:69:93:57:6E:BA:98:05:FA:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/746d7fba-60c4-45bf-9ed4-90c6580e71f2/384a8667-7c8d-3e8f-817a-c1b8f96d1544.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/746d7fba-60c4-45bf-9ed4-90c6580e71f2/746d7fba-60c4-45bf-9ed4-90c6580e71f2.crl X509v3 Authority Key Identifier: keyid:69:43:44:A0:6D:1F:38:65:C4:E2:45:5E:1B:1D:2A:5A:BA:82:1D:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/746d7fba-60c4-45bf-9ed4-90c6580e71f2.cer sbgp-ipAddrBlock: critical IPv6: 2607:e4c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:d8:df:b6:b6:a3:65:69:c4:5f:d0:5f:79:dd:7d:90:21:dc: dd:51:88:2d:46:1d:32:45:f1:1f:75:e9:92:2b:2d:63:4b:0b: db:1f:75:8f:c2:34:76:8e:64:15:62:06:e8:06:fe:3c:e0:0c: c3:aa:fc:70:f4:34:44:4d:41:04:b9:d2:bf:c5:31:fc:24:95: cf:0b:cd:74:d2:83:ef:2b:9b:ff:02:c7:7e:22:a1:53:5d:49: d4:dc:70:a1:a9:ee:c3:bb:37:e6:57:4f:d3:c2:01:c6:68:61: 48:20:8d:1d:a6:f4:6c:23:94:5c:a8:10:b3:42:43:1c:97:5f: 80:c5:67:56:4c:d1:39:8f:0d:aa:b1:ea:37:06:5f:55:8b:37: 9b:d6:bf:a2:66:8d:8e:63:45:03:f0:a5:4c:be:76:63:56:f3: 3a:56:67:31:60:9f:23:5d:1d:bc:f9:b8:87:67:ab:d2:5d:2a: cf:d2:51:55:9d:bb:a9:c1:af:7f:93:ce:5a:3c:be:1a:31:c6: b0:d9:82:c9:56:d3:43:3a:95:8d:d9:73:48:32:90:71:9f:e7: cc:ec:38:d5:88:11:c7:ec:a0:5a:f0:ce:7a:47:03:87:d8:66: bd:fc:8c:7c:3b:a1:ab:c1:4c:03:c9:7c:3b:e6:b5:d9:83:70: 63:98:af:1c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEujnTocYobWP6N3fwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZDdmYmEtNjBjNC00NWJmLTllZDQtOTBjNjU4MGU3 MWYyMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk ODZmNTI2OTYtNDJjOC00YzAzLTk1MjYtNDYxZDRjOTQxM2JiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg42inWTCDTvUkFyo0Fku1nsB1h423ICZcqRX jDCAeHoDNSRxhALetw85w4QzRft0XdVsoei+Q5UCjkGDtvE0TSIwEUSimyPpGjHd ba+7lHMobyQ4XVNLkCxcnqjJZXY3zKVHomcG9YsI3RRnKwXV1c6OZsQYIUpoJ8/9 A90PxxqDBc5FX3MDcL24klqfbrHDO6eVexxGlf+GdXcv0HDwxjJgzN711zMFOLY0 TJLfL+guyDtdXaBRz7WeGagzWJ/e0aB5lKuZF4ZxtT01f/0QYraz/aP1vVl2Ptm7 P5yqosRsrzhbjUbq2sDpjm8V5s9+Uk5D/9IFoeCCr1COtRP43wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGiOB40EK93XD3fJaZNXbrqYBfqQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi83NDZk N2ZiYS02MGM0LTQ1YmYtOWVkNC05MGM2NTgwZTcxZjIvMzg0YTg2NjctN2M4ZC0z ZThmLTgxN2EtYzFiOGY5NmQxNTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNzQ2ZDdmYmEtNjBjNC00NWJmLTll ZDQtOTBjNjU4MGU3MWYyLzc0NmQ3ZmJhLTYwYzQtNDViZi05ZWQ0LTkwYzY1ODBl NzFmMi5jcmwwHwYDVR0jBBgwFoAUaUNEoG0fOGXE4kVeGx0qWrqCHbAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi83NDZkN2ZiYS02MGM0LTQ1YmYtOWVkNC05MGM2 NTgwZTcxZjIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgfkwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBv2N+2tqNlacRf0F953X2QIdzdUYgtRh0yRfEfdemSKy1jSwvbH3WP wjR2jmQVYgboBv484AzDqvxw9DRETUEEudK/xTH8JJXPC8100oPvK5v/Asd+IqFT XUnU3HChqe7DuzfmV0/TwgHGaGFIII0dpvRsI5RcqBCzQkMcl1+AxWdWTNE5jw2q seo3Bl9Vizeb1r+iZo2OY0UD8KVMvnZjVvM6VmcxYJ8jXR28+biHZ6vSXSrP0lFV nbupwa9/k85aPL4aMcaw2YLJVtNDOpWN2XNIMpBxn+fM7DjViBHH7KBa8M56RwOH 2Ga9/Ix8O6GrwUwDyXw75rXZg3BjmK8c -----END CERTIFICATE-----Generated at Wed Nov 5 23:03:38 2025 by rpki-client