$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/faf5c4eb-8cde-3c07-be5a-b96ab533ca41.roa File: faf5c4eb-8cde-3c07-be5a-b96ab533ca41.roa (raw, json) Hash identifier: bh00tkMLTn3sTAOdupQou3VsS+TvW8r4cfLO0xZa6DU= Subject key identifier: 32:27:34:99:7B:82:48:D3:95:E0:16:BD:B1:DA:39:E6:21:D8:3A:5C Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BC2709F75BF8D81C4BFBE0880 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/faf5c4eb-8cde-3c07-be5a-b96ab533ca41.roa Signing time: Wed 05 Nov 2025 14:00:38 +0000 ROA not before: Wed 05 Nov 2025 14:00:38 +0000 ROA not after: Tue 03 Feb 2026 14:00:38 +0000 asID: 22394 IP address blocks: 2001:4888:8064::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c2:70:9f:75:bf:8d:81:c4:bf:be:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Nov 5 14:00:38 2025 GMT Not After : Feb 3 14:00:38 2026 GMT Subject: CN=58b77c34-550b-4dde-8aad-f65a8cb809dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:2b:99:31:3e:c1:6e:1a:e3:a0:42:cc:b5:5f: 14:b5:81:80:f5:ba:72:56:e0:ab:ff:fc:7d:b2:1b: ad:d6:c1:f7:18:7d:2e:b0:72:8e:6d:6b:72:37:b9: 19:15:e6:c2:ad:a0:ba:7a:92:87:0c:fe:8f:61:f0: ef:d5:3b:6f:5a:a4:5d:b1:fe:37:52:42:64:ed:bc: 3b:d4:e1:d9:72:cc:0a:89:43:1f:a0:1b:61:25:b5: 82:7a:1c:22:5c:a9:6d:44:ca:3f:8a:4f:78:50:7e: 3a:d1:34:5f:66:2c:8a:9e:52:de:3d:5b:85:c3:5d: 15:e2:a3:70:b2:00:3e:c1:2b:39:92:51:a1:8f:1a: 6a:68:d2:3a:db:16:b3:c7:11:ba:10:e4:59:f2:c3: c3:f9:df:ca:bd:5c:f7:cd:64:e8:6d:93:3f:0b:95: 70:aa:3c:0f:70:72:6e:45:a0:c7:17:62:38:98:35: 8c:80:92:30:ff:88:58:67:d3:ac:ec:a2:b3:f1:94: ff:e0:8c:9b:1f:f1:93:f3:00:e5:57:61:c8:48:48: 1a:ad:35:6b:a7:5e:fd:ac:a5:6a:79:85:75:d2:80: d1:d1:fe:51:d1:3d:f5:b6:25:16:58:c4:bf:4d:e1: 45:22:b9:0c:62:6f:16:9c:06:03:51:7b:c6:09:7a: 42:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:27:34:99:7B:82:48:D3:95:E0:16:BD:B1:DA:39:E6:21:D8:3A:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/faf5c4eb-8cde-3c07-be5a-b96ab533ca41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2001:4888:8064::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:b5:bb:49:88:3a:f8:2f:b4:40:61:d5:c6:00:2a:48:9d:2c: 84:79:18:63:88:5d:41:2d:00:05:97:07:7d:7b:bf:2d:32:6d: 72:f9:59:69:c4:50:b2:da:b7:c4:a6:e0:b9:84:25:99:69:b5: 72:ef:34:ae:21:a6:dd:9e:9f:10:00:40:89:de:1e:13:bf:b5: 0c:7e:b3:94:62:bc:4c:29:12:aa:18:64:d0:7f:05:fe:3f:72: bf:77:5a:bb:57:f4:10:15:7d:29:c5:8e:bd:c3:e1:0c:c9:81: c5:df:8e:15:9d:da:2a:e1:49:32:ea:1c:0b:e6:33:53:4a:f5: 89:0a:31:ed:95:63:51:99:c3:cd:26:4d:03:9a:72:20:29:2c: 71:ef:8f:49:3e:9d:ad:5d:32:b8:e1:d9:9e:2f:6f:89:48:70: 5c:20:f1:2a:e5:67:65:7c:b4:62:83:d2:d8:28:1e:3c:6a:7d: 40:ca:d4:29:5a:d2:d2:92:9a:13:4e:51:c6:2a:1c:47:80:6a: ba:a1:49:1b:1b:ea:f0:18:b1:96:6a:22:f2:aa:55:e4:bc:b0: 4c:10:f0:15:58:58:76:6a:09:79:b3:80:60:75:e2:c4:45:1e: 01:c5:39:c1:e1:57:e7:7a:f0:27:4e:5e:88:c7:5d:1e:46:a7: 59:41:1c:c7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEvCcJ91v42BxL++CIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTEwNTE0MDAzOFoXDTI2MDIwMzE0MDAzOFowLzEtMCsGA1UEAxMk NThiNzdjMzQtNTUwYi00ZGRlLThhYWQtZjY1YThjYjgwOWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5CuZMT7BbhrjoELMtV8UtYGA9bpyVuCr//x9 shut1sH3GH0usHKObWtyN7kZFebCraC6epKHDP6PYfDv1TtvWqRdsf43UkJk7bw7 1OHZcswKiUMfoBthJbWCehwiXKltRMo/ik94UH460TRfZiyKnlLePVuFw10V4qNw sgA+wSs5klGhjxpqaNI62xazxxG6EORZ8sPD+d/KvVz3zWTobZM/C5VwqjwPcHJu RaDHF2I4mDWMgJIw/4hYZ9Os7KKz8ZT/4IybH/GT8wDlV2HISEgarTVrp179rKVq eYV10oDR0f5R0T31tiUWWMS/TeFFIrkMYm8WnAYDUXvGCXpCWQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDInNJl7gkjTleAWvbHaOeYh2DpcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZmFmNWM0ZWItOGNkZS0z YzA3LWJlNWEtYjk2YWI1MzNjYTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIiIBk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAS1u0mIOvgvtEBh1cYAKkidLIR5GGOIXUEtAAWXB317vy0ybXL5 WWnEULLat8Sm4LmEJZlptXLvNK4hpt2enxAAQIneHhO/tQx+s5RivEwpEqoYZNB/ Bf4/cr93WrtX9BAVfSnFjr3D4QzJgcXfjhWd2irhSTLqHAvmM1NK9YkKMe2VY1GZ w80mTQOaciApLHHvj0k+na1dMrjh2Z4vb4lIcFwg8SrlZ2V8tGKD0tgoHjxqfUDK 1Cla0tKSmhNOUcYqHEeAarqhSRsb6vAYsZZqIvKqVeS8sEwQ8BVYWHZqCXmzgGB1 4sRFHgHFOcHhV+d68CdOXojHXR5Gp1lBHMc= -----END CERTIFICATE-----Generated at Wed Nov 5 19:21:46 2025 by rpki-client