$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83/a68416c0-1952-319d-8981-4f1a935dc45c.roa File: a68416c0-1952-319d-8981-4f1a935dc45c.roa (raw, json) Hash identifier: LV1xUyzu4Gcn2ImYly4JI9Y1TnZ/Nqg0KwOTIqHhVXM= Subject key identifier: EC:9E:27:6B:0C:CD:69:3F:97:E5:2E:53:36:52:A6:2A:DD:F1:32:98 Certificate issuer: /CN=e89b44b0-a151-49f2-b4a6-d917e3c95e83 Certificate serial: 010D0C9F4328584B970CE2735221E819DBDEBD00 Authority key identifier: 65:DE:38:46:E6:89:94:A2:11:8F:52:2F:F6:E4:DD:24:48:A6:04:60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83/a68416c0-1952-319d-8981-4f1a935dc45c.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 0 IP address blocks: 2001:504:3f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83/e89b44b0-a151-49f2-b4a6-d917e3c95e83.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83/e89b44b0-a151-49f2-b4a6-d917e3c95e83.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:e2:73:52:21:e8:19:db:de:bd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e89b44b0-a151-49f2-b4a6-d917e3c95e83 Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=39f4011e-66ae-4b8f-8ede-b8100d6720e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ee:5e:1a:74:cf:0b:fe:63:8d:b6:ba:5e:25: 1e:8a:b7:6d:95:78:0d:45:5c:9f:35:65:17:be:15: f1:13:ca:a3:5a:cd:4f:8c:84:7d:0b:94:45:1b:08: 97:30:81:4f:b6:d8:de:82:22:e3:f5:1f:b0:10:83: f3:b0:f5:ad:3d:b1:7c:fb:64:58:ed:9f:7b:3e:8f: 7b:db:cb:b6:d7:5c:8d:6a:cd:fa:18:c5:c0:29:32: 82:c2:ae:8c:4a:61:f1:bf:df:72:8a:12:e1:06:45: bc:4e:e2:73:9b:ca:21:92:d2:d8:70:ee:fc:81:15: 9d:9c:c0:23:fb:04:75:dc:f9:2d:0e:c9:b1:16:81: 3c:cd:46:4a:a3:e7:13:19:11:2e:89:0a:8e:41:0c: fb:ff:f0:bb:fe:1a:22:7e:2c:44:e2:4a:bd:bf:bd: 38:83:73:aa:ed:cf:ea:1a:e3:68:85:a3:c2:e1:d1: d9:12:b9:cf:18:44:44:c9:4a:03:4f:4e:e3:54:c6: 87:41:37:e0:74:cb:c7:02:78:7a:4c:d1:66:d3:2e: 1a:d9:0f:a9:06:b3:02:cb:ac:92:a9:6d:38:6d:89: e8:50:c5:2d:1c:0f:5d:86:56:67:3e:a0:37:f6:ef: 70:a0:7b:bc:c2:25:c0:da:8c:52:09:6e:30:83:58: e6:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:9E:27:6B:0C:CD:69:3F:97:E5:2E:53:36:52:A6:2A:DD:F1:32:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83/a68416c0-1952-319d-8981-4f1a935dc45c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83/e89b44b0-a151-49f2-b4a6-d917e3c95e83.crl X509v3 Authority Key Identifier: keyid:65:DE:38:46:E6:89:94:A2:11:8F:52:2F:F6:E4:DD:24:48:A6:04:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e89b44b0-a151-49f2-b4a6-d917e3c95e83.cer sbgp-ipAddrBlock: critical IPv6: 2001:504:3f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:71:98:05:7d:37:7e:e4:c6:7c:18:49:49:f8:30:b1:61:34: 66:f0:98:36:4a:b2:02:9a:d1:be:51:d7:cf:cd:9e:ae:9a:e7: 32:f6:c0:58:26:6c:db:ca:3b:72:c9:99:6e:17:9b:5a:75:06: c5:c6:c2:a0:17:ed:fe:9d:0b:95:55:40:1b:69:fa:df:7e:31: 30:9a:cf:20:41:8d:bc:c6:9a:36:ce:ba:0c:b9:9f:18:3b:94: 51:71:62:54:06:90:f0:ab:7a:38:a5:bc:a2:9b:b8:9a:1d:da: 12:55:61:99:ed:70:2f:8f:7c:f5:36:18:d0:a8:59:ec:56:8d: fe:0a:31:68:89:0d:71:22:42:6b:04:23:0b:17:32:f2:1a:2e: a4:21:6b:54:d0:55:69:d7:27:71:d6:c5:42:dc:e0:b4:f6:9a: 11:4a:8e:b5:f3:57:3f:a8:b2:a0:45:cd:9f:fc:13:aa:65:79: d0:62:ac:52:c0:2d:71:ca:fe:32:46:9a:30:c1:9e:32:6c:04: 41:f7:56:ec:04:81:32:74:ec:f6:91:66:91:ac:e7:c8:4f:65: ce:8f:ea:9f:16:ea:31:bf:b7:f2:0c:78:3a:ec:57:cd:0a:a6: df:34:a6:11:74:ef:eb:fa:44:60:76:19:5b:be:ad:4a:a4:fc: 90:b3:f1:11 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuXDOJzUiHoGdvevQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTg5YjQ0YjAtYTE1MS00OWYyLWI0YTYtZDkxN2UzYzk1 ZTgzMB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk MzlmNDAxMWUtNjZhZS00YjhmLThlZGUtYjgxMDBkNjcyMGUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqe5eGnTPC/5jjba6XiUeirdtlXgNRVyfNWUX vhXxE8qjWs1PjIR9C5RFGwiXMIFPttjegiLj9R+wEIPzsPWtPbF8+2RY7Z97Po97 28u211yNas36GMXAKTKCwq6MSmHxv99yihLhBkW8TuJzm8ohktLYcO78gRWdnMAj +wR13PktDsmxFoE8zUZKo+cTGREuiQqOQQz7//C7/hoifixE4kq9v704g3Oq7c/q GuNohaPC4dHZErnPGEREyUoDT07jVMaHQTfgdMvHAnh6TNFm0y4a2Q+pBrMCy6yS qW04bYnoUMUtHA9dhlZnPqA39u9woHu8wiXA2oxSCW4wg1jmiQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOyeJ2sMzWk/l+UuUzZSpird8TKYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lODli NDRiMC1hMTUxLTQ5ZjItYjRhNi1kOTE3ZTNjOTVlODMvYTY4NDE2YzAtMTk1Mi0z MTlkLTg5ODEtNGYxYTkzNWRjNDVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTg5YjQ0YjAtYTE1MS00OWYyLWI0 YTYtZDkxN2UzYzk1ZTgzL2U4OWI0NGIwLWExNTEtNDlmMi1iNGE2LWQ5MTdlM2M5 NWU4My5jcmwwHwYDVR0jBBgwFoAUZd44RuaJlKIRj1Iv9uTdJEimBGAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9lODliNDRiMC1hMTUxLTQ5ZjItYjRhNi1kOTE3 ZTNjOTVlODMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFBAA/ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALJxmAV9N37kxnwYSUn4MLFhNGbwmDZKsgKa0b5R18/Nnq6a5zL2 wFgmbNvKO3LJmW4Xm1p1BsXGwqAX7f6dC5VVQBtp+t9+MTCazyBBjbzGmjbOugy5 nxg7lFFxYlQGkPCrejilvKKbuJod2hJVYZntcC+PfPU2GNCoWexWjf4KMWiJDXEi QmsEIwsXMvIaLqQha1TQVWnXJ3HWxULc4LT2mhFKjrXzVz+osqBFzZ/8E6pledBi rFLALXHK/jJGmjDBnjJsBEH3VuwEgTJ07PaRZpGs58hPZc6P6p8W6jG/t/IMeDrs V80Kpt80phF07+v6RGB2GVu+rUqk/JCz8RE= -----END CERTIFICATE-----Generated at Tue Oct 28 07:06:39 2025 by rpki-client