$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f89bb17c-40ad-356a-b6f8-4dd3fe6bb459.roa File: f89bb17c-40ad-356a-b6f8-4dd3fe6bb459.roa (raw, json) Hash identifier: CXAUI6OtYM+ycx4VEoR9FkKUYykQIodmafJ7BsYrTAY= Subject key identifier: 56:37:22:FE:E0:E3:43:56:BF:58:02:53:7F:D4:6F:8B:35:06:6C:FE Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BC2709E26B65FDE424FB9FEC0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f89bb17c-40ad-356a-b6f8-4dd3fe6bb459.roa Signing time: Wed 05 Nov 2025 14:00:38 +0000 ROA not before: Wed 05 Nov 2025 14:00:38 +0000 ROA not after: Tue 03 Feb 2026 14:00:38 +0000 asID: 22394 IP address blocks: 2001:4888:8032::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c2:70:9e:26:b6:5f:de:42:4f:b9:fe:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Nov 5 14:00:38 2025 GMT Not After : Feb 3 14:00:38 2026 GMT Subject: CN=e5bbf0be-95a0-40aa-8081-a2741c6cddf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:3c:46:2b:6d:84:12:bf:27:cb:be:99:38:81: 0c:0f:a7:2c:92:59:89:2c:b6:81:ff:3c:b3:b2:e2: 91:76:dd:7c:c2:70:ad:3f:05:d5:59:61:c3:79:ed: 26:0f:b7:a3:4c:be:82:19:34:aa:94:1e:33:09:51: 3f:d3:83:1d:e9:ac:01:bb:cf:09:05:50:85:d3:82: 75:55:b4:ee:19:98:ad:7e:9a:20:d2:f8:05:8a:87: ff:60:34:d7:d2:99:02:3e:08:22:34:00:2a:76:83: 1f:c6:97:92:0c:a2:ba:93:bd:a0:49:19:07:10:01: 1b:9e:50:b6:2e:35:f6:6c:0c:52:bc:03:04:47:7d: 8f:26:f2:f7:0b:79:9e:4a:2b:1b:75:53:2a:be:9a: 31:56:b0:77:cf:35:ca:a8:e4:54:84:a5:f3:ae:ae: 3d:03:a4:08:76:da:27:de:5f:42:29:6b:a2:30:65: a0:84:2a:57:f7:b3:0e:df:c4:ad:66:11:1d:eb:f1: ca:03:a0:fa:62:d7:a8:ff:fd:61:c7:d9:d9:a1:91: 74:0f:10:ef:14:53:3c:11:10:31:2c:be:28:3d:ee: 8f:0e:e7:38:a9:95:b1:9b:95:94:54:ac:ea:d7:bc: 09:ca:db:22:c0:c4:d3:c1:49:01:0b:ae:3e:c9:3b: e4:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:37:22:FE:E0:E3:43:56:BF:58:02:53:7F:D4:6F:8B:35:06:6C:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f89bb17c-40ad-356a-b6f8-4dd3fe6bb459.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2001:4888:8032::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:33:90:fe:b5:f1:4f:dc:68:12:11:97:fa:b9:ff:90:a5:30: 69:cb:02:a7:73:56:cd:05:2f:8b:6d:99:92:b7:0e:27:03:30: ab:22:21:ad:04:d1:d6:24:f0:51:72:ca:f2:87:9e:65:f9:60: 80:07:c8:1b:b0:6c:b2:8f:27:50:01:27:6f:08:d6:da:7b:84: aa:95:1b:4e:1b:d8:45:d2:4b:91:1d:b3:63:85:2e:22:60:f9: e6:11:39:70:3b:bf:9f:85:a0:0d:23:ce:64:aa:4f:4e:98:58: b8:02:ca:13:91:69:ec:f0:31:78:85:25:40:87:9c:6c:e3:a4: 78:73:cd:32:bd:9c:95:0d:54:dd:61:5f:34:1e:4d:e2:80:8f: d2:6a:0d:dd:22:2a:18:df:61:45:fd:ec:a4:5a:ee:25:92:0a: f2:98:ed:a0:e0:f2:e5:01:7f:bd:45:b7:d7:8f:a9:5d:52:ac: 0b:02:4c:8c:c6:e0:9e:d5:b8:54:1f:96:ec:33:9d:13:c4:83: ae:df:40:db:f0:ea:5b:c1:82:1c:6c:0e:b8:bf:a4:6f:d0:a6: 7e:2e:c4:1d:30:96:7e:82:2a:8c:7b:46:54:4d:c8:83:71:d0: 76:b3:78:6e:86:30:48:57:d6:07:92:4a:60:81:bd:38:c6:10: 23:4f:ed:7b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEvCcJ4mtl/eQk+5/sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTEwNTE0MDAzOFoXDTI2MDIwMzE0MDAzOFowLzEtMCsGA1UEAxMk ZTViYmYwYmUtOTVhMC00MGFhLTgwODEtYTI3NDFjNmNkZGY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDxGK22EEr8ny76ZOIEMD6csklmJLLaB/zyz suKRdt18wnCtPwXVWWHDee0mD7ejTL6CGTSqlB4zCVE/04Md6awBu88JBVCF04J1 VbTuGZitfpog0vgFiof/YDTX0pkCPggiNAAqdoMfxpeSDKK6k72gSRkHEAEbnlC2 LjX2bAxSvAMER32PJvL3C3meSisbdVMqvpoxVrB3zzXKqORUhKXzrq49A6QIdton 3l9CKWuiMGWghCpX97MO38StZhEd6/HKA6D6Yteo//1hx9nZoZF0DxDvFFM8ERAx LL4oPe6PDuc4qZWxm5WUVKzq17wJytsiwMTTwUkBC64+yTvkTQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFY3Iv7g40NWv1gCU3/Ub4s1Bmz+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZjg5YmIxN2MtNDBhZC0z NTZhLWI2ZjgtNGRkM2ZlNmJiNDU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIiIAy MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB8zkP618U/caBIRl/q5/5ClMGnLAqdzVs0FL4ttmZK3DicDMKsi Ia0E0dYk8FFyyvKHnmX5YIAHyBuwbLKPJ1ABJ28I1tp7hKqVG04b2EXSS5Eds2OF LiJg+eYROXA7v5+FoA0jzmSqT06YWLgCyhORaezwMXiFJUCHnGzjpHhzzTK9nJUN VN1hXzQeTeKAj9JqDd0iKhjfYUX97KRa7iWSCvKY7aDg8uUBf71Ft9ePqV1SrAsC TIzG4J7VuFQfluwznRPEg67fQNvw6lvBghxsDri/pG/Qpn4uxB0wln6CKox7RlRN yINx0HazeG6GMEhX1geSSmCBvTjGECNP7Xs= -----END CERTIFICATE-----Generated at Wed Nov 5 17:50:10 2025 by rpki-client