$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/86e71912-fe62-3d1f-8426-62001a9a1fa3.roa File: 86e71912-fe62-3d1f-8426-62001a9a1fa3.roa (raw, json) Hash identifier: hHLPdt5zPtHOAtSPAtGus9WhcIsqdaeoejk2GlAaMP4= Subject key identifier: 4F:E5:E5:37:5D:FD:89:E7:E2:8D:A9:9D:C2:26:8D:E1:11:84:9F:EE Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BC2709FA7A15C022AC4A80980 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/86e71912-fe62-3d1f-8426-62001a9a1fa3.roa Signing time: Wed 05 Nov 2025 14:00:38 +0000 ROA not before: Wed 05 Nov 2025 14:00:38 +0000 ROA not after: Tue 03 Feb 2026 14:00:38 +0000 asID: 22394 IP address blocks: 2001:4888:8067::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c2:70:9f:a7:a1:5c:02:2a:c4:a8:09:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Nov 5 14:00:38 2025 GMT Not After : Feb 3 14:00:38 2026 GMT Subject: CN=f01dd419-59c5-43c6-ac65-d4a7807326a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:eb:47:b1:7f:a2:6b:aa:c4:75:31:42:46:0c: 38:67:0b:24:2b:1a:4b:e7:91:3d:04:80:ee:49:b2: fd:32:8d:ca:52:c6:6e:9b:c2:b4:55:fb:ad:a0:c0: f6:18:fa:d0:0d:15:a1:db:0a:2a:8e:fb:59:15:85: d5:7b:aa:73:b7:af:29:4f:4b:9a:cb:a3:22:c0:e8: 1f:82:fc:66:51:17:a2:12:eb:b5:a6:1b:9b:a4:bb: 3e:82:71:19:aa:75:9e:81:9d:a7:39:9e:96:7a:49: e9:e9:ba:3f:62:64:f6:a4:9f:c6:99:fa:84:c6:9c: b1:1a:ed:ff:d9:a0:d7:e5:b3:e3:6e:be:08:67:67: c1:6a:a0:a5:d5:75:22:8b:39:9f:41:e0:49:2c:fd: b1:1f:c3:10:8f:78:44:e0:7d:3c:d2:bd:8f:85:38: 46:b9:12:4e:dc:2b:aa:6d:25:4a:9a:5f:2a:d3:f4: c6:da:c7:45:e0:4f:f3:78:51:fc:d6:ee:58:2d:15: 24:ca:f3:e1:e8:89:82:f2:c5:98:a0:13:f0:29:ae: e8:b9:87:0e:ad:9d:e5:df:0b:ab:53:ca:b9:19:ed: 6c:93:2d:16:d6:96:de:43:90:ec:47:09:41:66:33: 7a:5e:ad:6f:da:2d:2f:93:3f:68:f9:9d:92:78:f6: 43:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:E5:E5:37:5D:FD:89:E7:E2:8D:A9:9D:C2:26:8D:E1:11:84:9F:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/86e71912-fe62-3d1f-8426-62001a9a1fa3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2001:4888:8067::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:1c:0e:b0:31:00:9c:29:27:ac:08:82:bc:86:fe:4b:b1:12: b5:1b:ad:9c:91:a5:f4:c4:9b:c3:79:84:ec:55:b9:93:c8:c1: 49:d8:cd:59:cb:05:3f:26:88:ad:5f:ff:c5:39:7d:e8:a5:56: 3c:6e:74:5b:22:93:6d:71:3e:c3:8f:b0:17:e6:ac:09:59:90: b6:58:8a:6c:b4:ad:2b:9a:81:70:7e:1c:d7:84:72:20:6a:95: 8d:8d:ba:e6:13:51:47:b4:e3:ab:bd:6c:ae:33:29:e4:b3:8e: d7:9c:40:08:49:4a:14:31:c1:d0:fd:b1:93:8d:18:28:e8:68: 7d:f1:49:f6:b9:2d:6f:4f:79:86:fe:10:73:18:bd:fd:25:ea: e0:2f:68:83:c1:46:d2:7d:97:89:5c:83:c4:dc:cf:64:11:21: 8b:9b:18:c4:5c:2c:f9:d6:a9:68:fa:4c:29:a9:ba:69:b0:22: 5f:bc:fa:1a:d2:9e:5e:2f:9f:cd:f1:70:3a:18:25:1f:da:35: 33:1d:e1:f4:20:29:be:b9:0e:0c:29:89:bf:c8:0c:bb:5b:40: 1b:fd:1a:32:49:d0:73:7d:bc:d1:24:f7:1b:7f:62:bd:23:bd: 3b:c4:02:4d:bf:fe:98:62:87:95:c7:28:b5:73:f4:76:72:21: b1:da:67:34 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEvCcJ+noVwCKsSoCYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTEwNTE0MDAzOFoXDTI2MDIwMzE0MDAzOFowLzEtMCsGA1UEAxMk ZjAxZGQ0MTktNTljNS00M2M2LWFjNjUtZDRhNzgwNzMyNmExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOtHsX+ia6rEdTFCRgw4ZwskKxpL55E9BIDu SbL9Mo3KUsZum8K0VfutoMD2GPrQDRWh2woqjvtZFYXVe6pzt68pT0uay6MiwOgf gvxmUReiEuu1phubpLs+gnEZqnWegZ2nOZ6Weknp6bo/YmT2pJ/GmfqExpyxGu3/ 2aDX5bPjbr4IZ2fBaqCl1XUiizmfQeBJLP2xH8MQj3hE4H080r2PhThGuRJO3Cuq bSVKml8q0/TG2sdF4E/zeFH81u5YLRUkyvPh6ImC8sWYoBPwKa7ouYcOrZ3l3wur U8q5Ge1sky0W1pbeQ5DsRwlBZjN6Xq1v2i0vkz9o+Z2SePZDIQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFE/l5Tdd/Ynn4o2pncImjeERhJ/uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvODZlNzE5MTItZmU2Mi0z ZDFmLTg0MjYtNjIwMDFhOWExZmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIiIBn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKIcDrAxAJwpJ6wIgryG/kuxErUbrZyRpfTEm8N5hOxVuZPIwUnY zVnLBT8miK1f/8U5feilVjxudFsik21xPsOPsBfmrAlZkLZYimy0rSuagXB+HNeE ciBqlY2NuuYTUUe046u9bK4zKeSzjtecQAhJShQxwdD9sZONGCjoaH3xSfa5LW9P eYb+EHMYvf0l6uAvaIPBRtJ9l4lcg8Tcz2QRIYubGMRcLPnWqWj6TCmpummwIl+8 +hrSnl4vn83xcDoYJR/aNTMd4fQgKb65Dgwpib/IDLtbQBv9GjJJ0HN9vNEk9xt/ Yr0jvTvEAk2//phih5XHKLVz9HZyIbHaZzQ= -----END CERTIFICATE-----Generated at Wed Nov 5 20:52:21 2025 by rpki-client