$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/0da84922-8804-3c61-a964-754768dd0b31.roa File: 0da84922-8804-3c61-a964-754768dd0b31.roa (raw, json) Hash identifier: 2h4sa7uOdIK3DtGp8hXpdfpnkahSn2jCap9DmMkAtUQ= Subject key identifier: 2E:8E:6C:9F:13:82:9E:E6:06:9F:84:C5:31:B0:21:31:52:D8:5F:4F Certificate issuer: /CN=84ee337c-42c7-4207-b916-5028c8c62f82 Certificate serial: 010D0C9F4328584BBE402BD3243F6AAA66984CC0 Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/0da84922-8804-3c61-a964-754768dd0b31.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 11537 IP address blocks: 2001:468:2640::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:2b:d3:24:3f:6a:aa:66:98:4c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82 Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=7eb0302a-927b-4091-b7cf-83b1e01f8129 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ca:64:88:15:a8:19:1c:ca:1a:d9:ca:46:a0: ba:dd:84:96:7f:49:d6:c7:9a:41:56:f7:7b:e9:ec: c0:09:74:ff:c5:3d:6b:ed:36:05:94:37:af:92:3f: f7:f7:b6:f2:b4:5e:9d:10:b8:df:76:fd:e1:4f:d9: 0c:aa:d9:ab:e1:22:66:11:70:bf:f4:d0:37:a6:03: c8:d2:a6:f9:8b:8d:07:7c:39:db:fa:17:31:e2:53: 79:de:25:32:2e:6b:73:81:f0:df:a3:0e:20:04:57: b7:f4:2d:09:3e:d1:92:7f:bf:54:06:45:2b:b8:3c: 34:37:2c:18:43:65:fe:f5:36:c8:96:9d:fb:0e:6f: bb:05:6e:59:d9:37:f8:9b:5d:e9:2c:36:a6:28:1f: ad:5b:b7:4b:21:6e:6a:e9:f7:a0:12:aa:76:4b:11: 79:71:91:08:69:c9:23:ea:3e:63:d1:87:0e:95:c7: d6:62:5d:c6:35:07:a7:6c:8b:78:64:02:2e:6e:d6: 83:e8:89:2a:35:0b:d0:ab:db:ba:e6:58:46:27:7a: d7:c6:ba:cd:63:4c:cb:ce:fc:1a:e1:1a:b4:8f:d3: cd:48:05:52:e8:b3:dd:56:b2:27:de:34:99:00:e3: 07:54:5f:67:1a:f5:6f:ae:1c:bd:bc:0a:ab:ab:21: 6f:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:8E:6C:9F:13:82:9E:E6:06:9F:84:C5:31:B0:21:31:52:D8:5F:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/0da84922-8804-3c61-a964-754768dd0b31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl X509v3 Authority Key Identifier: keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer sbgp-ipAddrBlock: critical IPv6: 2001:468:2640::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:57:e3:9d:ae:db:ce:92:1a:13:84:70:5f:bc:79:f6:d5:48: d8:c7:d8:82:b1:f4:2c:4b:56:38:bd:5b:ac:7a:1d:66:1e:a6: 76:43:35:48:1f:40:35:6a:b1:67:c3:26:c3:c1:2b:0d:58:fa: 61:66:19:bb:2c:f7:71:d8:3b:1c:f6:c6:34:18:8f:5f:80:45: 77:e8:39:df:04:89:71:98:3d:79:9d:0d:70:a0:ac:89:de:7d: 51:1f:45:50:8c:75:ba:38:16:56:44:df:22:17:45:c6:ba:15: 39:2c:28:54:06:97:30:06:2d:bb:bf:90:08:48:45:75:cb:99: df:a1:1d:99:5f:07:c7:e8:04:f2:a5:0c:1c:1c:41:2a:19:81: cb:db:1d:a5:5e:68:e7:79:56:ff:4b:01:96:34:f4:72:70:a0: e5:6e:2f:ca:38:db:08:ef:41:93:0c:97:ba:ad:4f:4e:2b:bf: 61:34:4f:a7:87:0d:f4:84:4f:e8:0c:ea:3d:5f:26:e4:ed:5f: d0:04:2a:78:45:47:19:9f:c7:79:77:91:ea:f2:3a:d9:61:2e: 29:9b:e3:66:ca:15:60:5d:c1:ef:5b:94:ef:1f:ae:06:7e:dc: 09:e8:e6:06:69:d0:e1:ce:70:e8:23:c4:1d:88:07:4d:2c:13: ac:1d:f3:e9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEu+QCvTJD9qqmaYTMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODRlZTMzN2MtNDJjNy00MjA3LWI5MTYtNTAyOGM4YzYy ZjgyMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk N2ViMDMwMmEtOTI3Yi00MDkxLWI3Y2YtODNiMWUwMWY4MTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1MpkiBWoGRzKGtnKRqC63YSWf0nWx5pBVvd7 6ezACXT/xT1r7TYFlDevkj/397bytF6dELjfdv3hT9kMqtmr4SJmEXC/9NA3pgPI 0qb5i40HfDnb+hcx4lN53iUyLmtzgfDfow4gBFe39C0JPtGSf79UBkUruDw0NywY Q2X+9TbIlp37Dm+7BW5Z2Tf4m13pLDamKB+tW7dLIW5q6fegEqp2SxF5cZEIackj 6j5j0YcOlcfWYl3GNQenbIt4ZAIubtaD6IkqNQvQq9u65lhGJ3rXxrrNY0zLzvwa 4Rq0j9PNSAVS6LPdVrIn3jSZAOMHVF9nGvVvrhy9vAqrqyFvbwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFC6ObJ8Tgp7mBp+ExTGwITFS2F9PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVl MzM3Yy00MmM3LTQyMDctYjkxNi01MDI4YzhjNjJmODIvMGRhODQ5MjItODgwNC0z YzYxLWE5NjQtNzU0NzY4ZGQwYjMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODRlZTMzN2MtNDJjNy00MjA3LWI5 MTYtNTAyOGM4YzYyZjgyLzg0ZWUzMzdjLTQyYzctNDIwNy1iOTE2LTUwMjhjOGM2 MmY4Mi5jcmwwHwYDVR0jBBgwFoAUocWrpVSDlo0zNHR8acBfKZbeJfgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVlMzM3Yy00MmM3LTQyMDctYjkxNi01MDI4 YzhjNjJmODIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEaCZA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADlX452u286SGhOEcF+8efbVSNjH2IKx9CxLVji9W6x6HWYepnZD NUgfQDVqsWfDJsPBKw1Y+mFmGbss93HYOxz2xjQYj1+ARXfoOd8EiXGYPXmdDXCg rInefVEfRVCMdbo4FlZE3yIXRca6FTksKFQGlzAGLbu/kAhIRXXLmd+hHZlfB8fo BPKlDBwcQSoZgcvbHaVeaOd5Vv9LAZY09HJwoOVuL8o42wjvQZMMl7qtT04rv2E0 T6eHDfSET+gM6j1fJuTtX9AEKnhFRxmfx3l3keryOtlhLimb42bKFWBdwe9blO8f rgZ+3Ano5gZp0OHOcOgjxB2IB00sE6wd8+k= -----END CERTIFICATE-----Generated at Tue Nov 4 13:39:50 2025 by rpki-client