$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c7f6eb25-fdf7-3801-8270-d5d4a836be33.roa File: c7f6eb25-fdf7-3801-8270-d5d4a836be33.roa (raw, json) Hash identifier: 1g4GMgR+/snYFQ/xBPp34M0f6KpI9iF2DsnrAW9GEcU= Subject key identifier: 7A:63:18:76:FE:A1:26:21:09:EA:B8:55:72:A2:00:7B:33:97:1E:AE Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BC270A066FA4A7CEEBE974C00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c7f6eb25-fdf7-3801-8270-d5d4a836be33.roa Signing time: Wed 05 Nov 2025 14:00:38 +0000 ROA not before: Wed 05 Nov 2025 14:00:38 +0000 ROA not after: Tue 03 Feb 2026 14:00:38 +0000 asID: 22394 IP address blocks: 2001:4888:803d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c2:70:a0:66:fa:4a:7c:ee:be:97:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Nov 5 14:00:38 2025 GMT Not After : Feb 3 14:00:38 2026 GMT Subject: CN=34e807a6-f116-4a57-bbdf-482b260bb41d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:5e:43:21:25:a8:48:17:65:3c:e9:a1:01:43: 60:93:fd:74:36:80:c9:6d:07:e8:d4:8a:ad:a2:ca: 11:ee:e9:6f:66:00:6a:6a:96:b9:14:05:14:6d:18: 6f:01:57:b5:0a:30:70:47:fe:ec:1c:db:a1:b0:ea: cc:14:94:b0:03:84:7c:0c:ba:06:04:e8:7d:6e:c0: f8:1f:87:0f:38:61:ef:6a:32:25:c5:5d:52:4a:89: 19:11:1c:1b:fa:20:36:15:d8:44:e1:bf:39:da:34: c0:44:fe:5a:c7:8c:9a:78:5d:3b:d5:4c:c6:6a:28: 1e:bd:de:5d:a9:0c:c6:36:29:14:1d:64:62:ec:61: 55:1f:20:cf:98:0d:ca:67:37:ee:ef:07:78:a9:58: 54:41:6f:27:f3:47:72:2c:8e:5a:99:54:c0:b9:e8: 72:cf:8f:a5:b9:29:65:5f:05:84:7d:27:df:bc:1d: 10:44:bf:4e:01:f0:b3:5d:d0:b1:ff:86:2a:b9:fa: 56:52:62:6b:af:d7:9c:19:cf:07:61:e9:6a:12:35: 8c:22:eb:0a:11:ee:81:e0:f9:86:7c:06:26:79:09: 8e:4c:95:db:06:98:fb:3a:cc:59:f7:bc:5d:06:de: 04:36:34:8e:23:56:07:9c:14:f3:e9:2c:af:f0:57: b1:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:63:18:76:FE:A1:26:21:09:EA:B8:55:72:A2:00:7B:33:97:1E:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c7f6eb25-fdf7-3801-8270-d5d4a836be33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2001:4888:803d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:f1:b9:d3:47:f0:59:b1:6d:59:63:c3:5c:12:22:8c:c5:45: ba:b3:8b:6d:ab:96:ee:79:ac:fb:59:7c:e4:42:aa:b3:ee:0b: 02:6c:5d:73:cc:75:01:4a:fc:08:07:14:2b:0b:d6:3f:01:dc: ad:37:0a:51:97:b8:53:6d:10:84:73:e6:68:e4:03:4a:28:e1: 9b:d0:62:6a:ad:64:e2:cc:3f:03:d9:ab:6d:b0:d8:33:ab:ee: 21:eb:fc:b5:ca:09:7a:14:c5:05:82:f9:c7:11:88:8f:21:0a: fe:81:f0:4f:23:18:4f:e9:d8:c4:95:58:1f:dc:a7:68:ec:af: da:f9:44:27:68:49:e8:af:a2:d7:6d:80:00:bc:0a:ce:f9:f4: 05:3c:96:98:4d:9c:2e:74:24:43:d8:7d:2b:5b:76:c0:6f:a7: 27:33:e5:22:cb:67:d6:1e:ff:a0:f6:75:54:86:fa:af:91:51: 3f:99:83:98:e7:45:23:b0:79:9a:41:0d:a4:94:0e:8d:57:2a: 35:ee:51:7c:d9:69:07:3f:97:9a:5d:99:91:89:ca:c1:b1:a5: d2:dc:e0:b6:6c:32:e8:4d:16:76:cb:9b:74:c6:70:a0:60:49: 2d:dc:5b:2a:23:a2:1e:a7:93:8a:d2:5a:99:22:40:3d:8d:56: e9:8c:c6:a9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEvCcKBm+kp87r6XTAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTEwNTE0MDAzOFoXDTI2MDIwMzE0MDAzOFowLzEtMCsGA1UEAxMk MzRlODA3YTYtZjExNi00YTU3LWJiZGYtNDgyYjI2MGJiNDFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw15DISWoSBdlPOmhAUNgk/10NoDJbQfo1Iqt osoR7ulvZgBqapa5FAUUbRhvAVe1CjBwR/7sHNuhsOrMFJSwA4R8DLoGBOh9bsD4 H4cPOGHvajIlxV1SSokZERwb+iA2FdhE4b852jTARP5ax4yaeF071UzGaigevd5d qQzGNikUHWRi7GFVHyDPmA3KZzfu7wd4qVhUQW8n80dyLI5amVTAuehyz4+luSll XwWEfSffvB0QRL9OAfCzXdCx/4YqufpWUmJrr9ecGc8HYelqEjWMIusKEe6B4PmG fAYmeQmOTJXbBpj7OsxZ97xdBt4ENjSOI1YHnBTz6Syv8FexSwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHpjGHb+oSYhCeq4VXKiAHszlx6uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYzdmNmViMjUtZmRmNy0z ODAxLTgyNzAtZDVkNGE4MzZiZTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIiIA9 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALDxudNH8FmxbVljw1wSIozFRbqzi22rlu55rPtZfORCqrPuCwJs XXPMdQFK/AgHFCsL1j8B3K03ClGXuFNtEIRz5mjkA0oo4ZvQYmqtZOLMPwPZq22w 2DOr7iHr/LXKCXoUxQWC+ccRiI8hCv6B8E8jGE/p2MSVWB/cp2jsr9r5RCdoSeiv otdtgAC8Cs759AU8lphNnC50JEPYfStbdsBvpycz5SLLZ9Ye/6D2dVSG+q+RUT+Z g5jnRSOweZpBDaSUDo1XKjXuUXzZaQc/l5pdmZGJysGxpdLc4LZsMuhNFnbLm3TG cKBgSS3cWyojoh6nk4rSWpkiQD2NVumMxqk= -----END CERTIFICATE-----Generated at Wed Nov 5 19:21:47 2025 by rpki-client