$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/87132220-d69c-4e1c-9689-e9ecb5a1d847/037252f7-a099-30b5-8c97-1f4b1f9549ac.roa File: 037252f7-a099-30b5-8c97-1f4b1f9549ac.roa (raw, json) Hash identifier: rWWMPg6Q5OcdD1ho4VyhTMPnaAp+LvQtzsewvZdeqVg= Subject key identifier: 84:01:EB:8C:D7:ED:ED:15:2F:79:0D:21:BE:3B:02:52:C5:DB:4A:68 Certificate issuer: /CN=87132220-d69c-4e1c-9689-e9ecb5a1d847 Certificate serial: 010D0C9F4328584BAFA0AA3F9B5047B035B53F00 Authority key identifier: 12:E6:93:7E:46:63:C3:D9:3A:4D:D3:DB:68:2B:F6:89:C7:15:F8:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/87132220-d69c-4e1c-9689-e9ecb5a1d847.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/87132220-d69c-4e1c-9689-e9ecb5a1d847/037252f7-a099-30b5-8c97-1f4b1f9549ac.roa Signing time: Wed 29 Oct 2025 20:17:53 +0000 ROA not before: Wed 29 Oct 2025 20:17:53 +0000 ROA not after: Tue 27 Jan 2026 21:17:53 +0000 asID: 714 IP address blocks: 2001:506:2ff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/87132220-d69c-4e1c-9689-e9ecb5a1d847/87132220-d69c-4e1c-9689-e9ecb5a1d847.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/87132220-d69c-4e1c-9689-e9ecb5a1d847/87132220-d69c-4e1c-9689-e9ecb5a1d847.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/87132220-d69c-4e1c-9689-e9ecb5a1d847.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:af:a0:aa:3f:9b:50:47:b0:35:b5:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87132220-d69c-4e1c-9689-e9ecb5a1d847 Validity Not Before: Oct 29 20:17:53 2025 GMT Not After : Jan 27 21:17:53 2026 GMT Subject: CN=2a06d348-81b3-4b1c-9a0a-1192efe63b1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f3:48:23:a8:8b:dd:09:e3:13:f8:1d:8c:56: 4a:6d:0b:3e:db:19:12:10:2d:f5:e6:0a:51:23:8e: 31:68:18:03:fd:71:8e:60:bb:c8:0b:09:63:3f:36: ea:9f:9e:dd:2c:42:7f:d2:e4:ca:7b:31:51:9a:86: c4:53:92:7f:a8:99:58:c5:a4:5e:2d:da:06:cf:d1: 9d:6c:cf:ec:de:f8:ba:ed:80:9f:96:6b:02:a0:45: f8:40:8e:06:ca:7d:cb:b2:ba:41:ac:b6:eb:7f:c3: 7d:9e:50:84:75:7d:af:99:e3:4b:0a:8a:a9:8a:e5: 06:9f:cc:8f:cb:ed:76:9d:02:61:da:b1:71:8e:26: 5b:4e:a9:a1:9d:7b:4c:5d:8f:0b:80:1b:57:55:66: e3:f0:a7:22:90:49:10:df:5d:44:d0:4a:b5:65:25: 14:e8:69:15:75:2b:d0:af:13:25:ad:b7:a9:9f:8f: 9b:f9:54:b8:28:a9:2a:1b:fa:b1:27:a2:4e:78:b6: 45:e2:0b:16:e0:ce:fd:91:9e:96:40:2f:0b:11:17: 64:15:13:78:63:53:85:c2:54:09:95:8a:dd:ed:07: b9:84:ae:2d:d5:6c:a9:08:dc:d9:57:71:87:3c:c3: af:a3:01:1a:27:1d:1b:8e:49:cb:55:e9:ea:0b:1d: b0:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:01:EB:8C:D7:ED:ED:15:2F:79:0D:21:BE:3B:02:52:C5:DB:4A:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/87132220-d69c-4e1c-9689-e9ecb5a1d847/037252f7-a099-30b5-8c97-1f4b1f9549ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/87132220-d69c-4e1c-9689-e9ecb5a1d847/87132220-d69c-4e1c-9689-e9ecb5a1d847.crl X509v3 Authority Key Identifier: keyid:12:E6:93:7E:46:63:C3:D9:3A:4D:D3:DB:68:2B:F6:89:C7:15:F8:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/87132220-d69c-4e1c-9689-e9ecb5a1d847.cer sbgp-ipAddrBlock: critical IPv6: 2001:506:2ff::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:1e:fe:44:ac:a0:2f:b0:1a:0c:a7:7e:b6:27:9c:df:64:e3: c1:80:34:82:a8:9a:c1:ef:49:6e:d5:84:19:58:e0:85:7a:6b: ad:f6:80:ab:8c:e9:f3:51:20:fc:12:99:3d:b2:6e:e8:a5:91: 60:a4:a1:e3:23:6e:3c:f1:20:41:57:e1:80:7e:74:c5:a1:c9: 21:18:4d:0f:19:29:b6:ff:60:a6:e6:28:8c:77:2a:54:a6:4f: 5b:cc:c9:ff:bc:cc:f6:09:75:2c:df:d0:a9:67:5b:8c:cb:13: 9f:d2:fa:7f:07:ed:57:05:59:26:51:1d:48:94:51:9c:67:2d: c5:9c:42:b2:18:db:51:b8:48:8c:05:26:a8:3c:98:ad:c6:45: 6e:f5:40:0e:e0:39:a4:13:32:29:b9:9a:06:4b:aa:df:bd:43: 0a:5f:c1:91:ba:b6:86:46:3a:e5:c8:21:9a:a3:84:b5:09:3a: 6c:81:c8:af:67:25:ac:9c:60:cc:2c:97:c6:42:dc:eb:76:fc: 03:f6:67:2e:a9:7e:47:83:85:9d:f3:a1:7c:c2:54:74:6a:86: 12:93:42:05:38:0a:bd:da:4f:0d:a6:48:5d:a1:af:e5:ee:88: 3e:b7:96:8f:91:41:18:56:e6:9f:cd:a7:7b:b9:09:63:3c:07: 05:a5:2b:6a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuvoKo/m1BHsDW1PwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxMzIyMjAtZDY5Yy00ZTFjLTk2ODktZTllY2I1YTFk ODQ3MB4XDTI1MTAyOTIwMTc1M1oXDTI2MDEyNzIxMTc1M1owLzEtMCsGA1UEAxMk MmEwNmQzNDgtODFiMy00YjFjLTlhMGEtMTE5MmVmZTYzYjFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/NII6iL3QnjE/gdjFZKbQs+2xkSEC315gpR I44xaBgD/XGOYLvICwljPzbqn57dLEJ/0uTKezFRmobEU5J/qJlYxaReLdoGz9Gd bM/s3vi67YCflmsCoEX4QI4Gyn3LsrpBrLbrf8N9nlCEdX2vmeNLCoqpiuUGn8yP y+12nQJh2rFxjiZbTqmhnXtMXY8LgBtXVWbj8KcikEkQ311E0Eq1ZSUU6GkVdSvQ rxMlrbepn4+b+VS4KKkqG/qxJ6JOeLZF4gsW4M79kZ6WQC8LERdkFRN4Y1OFwlQJ lYrd7Qe5hK4t1WypCNzZV3GHPMOvowEaJx0bjknLVenqCx2wRQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIQB64zX7e0VL3kNIb47AlLF20poMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84NzEz MjIyMC1kNjljLTRlMWMtOTY4OS1lOWVjYjVhMWQ4NDcvMDM3MjUyZjctYTA5OS0z MGI1LThjOTctMWY0YjFmOTU0OWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODcxMzIyMjAtZDY5Yy00ZTFjLTk2 ODktZTllY2I1YTFkODQ3Lzg3MTMyMjIwLWQ2OWMtNGUxYy05Njg5LWU5ZWNiNWEx ZDg0Ny5jcmwwHwYDVR0jBBgwFoAUEuaTfkZjw9k6TdPbaCv2iccV+CIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84NzEzMjIyMC1kNjljLTRlMWMtOTY4OS1lOWVj YjVhMWQ4NDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFBgL/ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHce/kSsoC+wGgynfrYnnN9k48GANIKomsHvSW7VhBlY4IV6a632 gKuM6fNRIPwSmT2ybuilkWCkoeMjbjzxIEFX4YB+dMWhySEYTQ8ZKbb/YKbmKIx3 KlSmT1vMyf+8zPYJdSzf0KlnW4zLE5/S+n8H7VcFWSZRHUiUUZxnLcWcQrIY21G4 SIwFJqg8mK3GRW71QA7gOaQTMim5mgZLqt+9QwpfwZG6toZGOuXIIZqjhLUJOmyB yK9nJaycYMwsl8ZC3Ot2/AP2Zy6pfkeDhZ3zoXzCVHRqhhKTQgU4Cr3aTw2mSF2h r+XuiD63lo+RQRhW5p/Np3u5CWM8BwWlK2o= -----END CERTIFICATE-----Generated at Wed Nov 5 12:49:27 2025 by rpki-client