$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/32338cb2-3c70-397b-b8b5-73c63ad6e834.roa File: 32338cb2-3c70-397b-b8b5-73c63ad6e834.roa (raw, json) Hash identifier: 9/upOvFRwUAo3LYDZVtGutsovJp8o2QttRIduJwZUMA= Subject key identifier: D0:89:20:5A:32:1E:F7:B9:F0:5C:BA:BC:1A:21:8E:99:E8:A7:E5:C6 Certificate issuer: /CN=84ee337c-42c7-4207-b916-5028c8c62f82 Certificate serial: 010D0C9F4328584B970CDCBB23578F3EC4F7E600 Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/32338cb2-3c70-397b-b8b5-73c63ad6e834.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 10466 IP address blocks: 2001:468:1800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:dc:bb:23:57:8f:3e:c4:f7:e6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82 Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=2b0c6798-d364-44b1-8dbe-a612a80bd415 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f7:43:7b:14:60:21:14:f4:1b:cf:2b:7f:e2: c6:40:95:e8:a8:f1:e2:7b:fe:d6:23:a5:39:3d:73: b9:32:8d:2f:a7:ee:e3:be:7b:2a:de:10:43:3a:9c: 92:08:15:63:6f:c8:a7:0b:9f:57:a8:92:05:1e:e3: 5e:87:6d:8b:85:49:9e:b3:be:ea:ec:86:16:cc:d0: ef:5e:65:d6:42:0d:18:b9:42:e1:7e:11:30:d2:98: da:9f:87:3e:de:fa:c2:c1:c4:32:62:98:9e:b7:47: 09:9a:fe:15:3a:63:1d:fc:c9:32:47:d9:f1:0b:9c: 1e:1f:4a:a8:04:8b:9c:79:bc:03:6a:dd:e0:67:53: 3a:48:5d:70:ff:85:4f:ce:af:8d:4d:ec:b2:62:59: e9:33:1f:56:ce:5e:53:fd:c4:b2:24:a2:fd:25:1e: 1b:c6:f0:ec:1f:aa:9f:7c:b7:d0:18:40:1c:b1:8e: 1f:d0:34:dd:25:70:7c:ec:29:71:04:18:77:76:ce: 9f:dc:d3:99:d0:06:2d:be:41:53:ed:d8:2d:1c:6a: d1:b0:f4:90:52:7b:61:c7:8d:4f:20:4d:d4:14:b5: a4:df:fe:27:37:7a:bf:97:3d:4f:7e:73:e7:9b:7a: c6:78:a3:65:3d:26:a3:6c:3a:76:8a:42:39:a9:44: 2f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:89:20:5A:32:1E:F7:B9:F0:5C:BA:BC:1A:21:8E:99:E8:A7:E5:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/32338cb2-3c70-397b-b8b5-73c63ad6e834.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl X509v3 Authority Key Identifier: keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer sbgp-ipAddrBlock: critical IPv6: 2001:468:1800::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:97:98:11:f6:fa:69:78:3e:e6:76:5c:b3:64:d2:92:18:de: c8:35:b0:26:ac:7d:99:d7:fa:83:48:16:19:91:3c:7a:88:75: 61:32:a6:ac:b6:07:0a:f5:44:1c:d9:c4:b1:4b:cb:c2:da:bb: 84:c3:d6:57:b1:73:c1:67:4d:88:f4:de:13:6f:af:ee:2e:d7: f1:36:39:6b:d8:51:26:3f:79:00:cf:13:60:3f:cb:1f:a1:bd: 92:00:f7:b2:c4:c8:e8:ba:14:24:5e:55:60:80:18:80:cf:17: 73:74:de:1e:9f:10:a0:75:a5:81:0a:e5:27:5a:d3:bb:de:1c: 16:08:5e:80:b1:51:7c:65:e9:8b:ef:f3:11:7a:fa:ab:28:78: 66:6e:f1:cb:43:f8:3f:68:ea:ec:da:74:c5:74:23:cf:c9:27: 16:6b:77:a2:e8:6b:a3:0a:61:20:fe:72:5c:b5:cf:91:c0:ca: 3a:db:00:0f:10:9f:0f:d9:f9:ca:b7:87:65:e1:77:f4:06:b1: 7d:7b:34:f6:02:41:ae:11:b4:16:c6:04:7b:bb:aa:0d:40:8c: 12:e1:ff:59:35:54:54:fc:db:d4:49:7b:fb:f3:a8:6d:f1:21: c0:0d:72:d1:9d:9e:86:b1:0d:d5:70:45:99:d7:82:80:1c:55: a3:b5:50:45 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEuXDNy7I1ePPsT35gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODRlZTMzN2MtNDJjNy00MjA3LWI5MTYtNTAyOGM4YzYy ZjgyMB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk MmIwYzY3OTgtZDM2NC00NGIxLThkYmUtYTYxMmE4MGJkNDE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvdDexRgIRT0G88rf+LGQJXoqPHie/7WI6U5 PXO5Mo0vp+7jvnsq3hBDOpySCBVjb8inC59XqJIFHuNeh22LhUmes77q7IYWzNDv XmXWQg0YuULhfhEw0pjan4c+3vrCwcQyYpiet0cJmv4VOmMd/MkyR9nxC5weH0qo BIucebwDat3gZ1M6SF1w/4VPzq+NTeyyYlnpMx9Wzl5T/cSyJKL9JR4bxvDsH6qf fLfQGEAcsY4f0DTdJXB87ClxBBh3ds6f3NOZ0AYtvkFT7dgtHGrRsPSQUnthx41P IE3UFLWk3/4nN3q/lz1PfnPnm3rGeKNlPSajbDp2ikI5qUQvBwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFNCJIFoyHve58Fy6vBohjpnop+XGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVl MzM3Yy00MmM3LTQyMDctYjkxNi01MDI4YzhjNjJmODIvMzIzMzhjYjItM2M3MC0z OTdiLWI4YjUtNzNjNjNhZDZlODM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODRlZTMzN2MtNDJjNy00MjA3LWI5 MTYtNTAyOGM4YzYyZjgyLzg0ZWUzMzdjLTQyYzctNDIwNy1iOTE2LTUwMjhjOGM2 MmY4Mi5jcmwwHwYDVR0jBBgwFoAUocWrpVSDlo0zNHR8acBfKZbeJfgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVlMzM3Yy00MmM3LTQyMDctYjkxNi01MDI4 YzhjNjJmODIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAIAEEaBgw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAHpeYEfb6aXg+5nZcs2TSkhjeyDWwJqx9mdf6g0gWGZE8eoh1YTKm rLYHCvVEHNnEsUvLwtq7hMPWV7FzwWdNiPTeE2+v7i7X8TY5a9hRJj95AM8TYD/L H6G9kgD3ssTI6LoUJF5VYIAYgM8Xc3TeHp8QoHWlgQrlJ1rTu94cFghegLFRfGXp i+/zEXr6qyh4Zm7xy0P4P2jq7Np0xXQjz8knFmt3ouhrowphIP5yXLXPkcDKOtsA DxCfD9n5yreHZeF39AaxfXs09gJBrhG0FsYEe7uqDUCMEuH/WTVUVPzb1El7+/Oo bfEhwA1y0Z2ehrEN1XBFmdeCgBxVo7VQRQ== -----END CERTIFICATE-----Generated at Tue Nov 4 13:36:23 2025 by rpki-client