$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b824dfb2-be33-4946-af95-2296acd823af/82e546db-2ee7-3746-a4b8-5528ff26ec78.roa File: 82e546db-2ee7-3746-a4b8-5528ff26ec78.roa (raw, json) Hash identifier: X1O3XIiEMb/1o1GATYFe/F/9JtL8A0pMvFUQWwvpjC0= Subject key identifier: C3:9D:D8:1D:92:FE:62:EE:1F:6C:57:00:92:D2:55:80:CD:AD:DF:20 Certificate issuer: /CN=b824dfb2-be33-4946-af95-2296acd823af Certificate serial: 010D0C9F4328584BA93272C3EF2D3EE1FEE4CE70 Authority key identifier: 39:D0:91:2E:FD:E1:4C:F5:51:46:22:F2:90:82:4D:17:A0:6C:85:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b824dfb2-be33-4946-af95-2296acd823af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b824dfb2-be33-4946-af95-2296acd823af/82e546db-2ee7-3746-a4b8-5528ff26ec78.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 10737 IP address blocks: 2607:4940::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b824dfb2-be33-4946-af95-2296acd823af/b824dfb2-be33-4946-af95-2296acd823af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b824dfb2-be33-4946-af95-2296acd823af/b824dfb2-be33-4946-af95-2296acd823af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b824dfb2-be33-4946-af95-2296acd823af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:72:c3:ef:2d:3e:e1:fe:e4:ce:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b824dfb2-be33-4946-af95-2296acd823af Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=5b93b642-7208-4930-89db-a30fbc0f0615 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:d2:84:37:33:ad:36:d2:ea:ca:d7:19:ef:14: 68:93:35:a6:c9:f8:15:35:cd:e7:ee:a2:6a:74:a3: 8c:46:55:9d:5d:b4:e4:72:7e:17:b0:78:96:91:a2: 4e:cd:00:b7:61:14:28:a3:4c:ad:a8:bf:76:dc:88: b1:a5:ee:8e:45:e9:f5:6b:80:3f:21:b0:25:81:d3: b1:57:bc:d6:dd:8a:db:ef:7b:06:68:84:d0:d9:11: 69:08:ac:e6:d6:17:df:85:a0:5c:9d:ca:2d:c2:a8: 89:ad:05:26:09:4d:ca:2a:b5:f5:64:df:70:32:4b: f3:31:c9:31:53:53:5b:94:b1:76:c5:c8:8f:54:76: 47:7e:72:cc:48:52:06:47:7f:ce:24:af:b6:f8:59: 0b:e7:0c:87:a1:f2:bf:36:c8:08:73:ec:f0:1d:3f: 74:f2:0b:7c:9c:52:45:43:11:06:b5:e2:82:d3:8a: 44:89:d5:f2:84:96:c2:d7:d9:0c:1a:d0:e5:44:c1: 3c:ae:58:68:0a:cd:9a:6e:ad:34:05:25:4c:d5:74: 0a:1a:9a:ce:53:92:ce:a1:73:d5:32:46:de:55:8a: f5:4c:b5:55:90:a9:71:5b:13:0f:da:81:f1:be:3d: 7f:f9:bd:fe:8c:2d:9a:aa:fc:f2:09:01:24:f6:2f: 39:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:9D:D8:1D:92:FE:62:EE:1F:6C:57:00:92:D2:55:80:CD:AD:DF:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b824dfb2-be33-4946-af95-2296acd823af/82e546db-2ee7-3746-a4b8-5528ff26ec78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b824dfb2-be33-4946-af95-2296acd823af/b824dfb2-be33-4946-af95-2296acd823af.crl X509v3 Authority Key Identifier: keyid:39:D0:91:2E:FD:E1:4C:F5:51:46:22:F2:90:82:4D:17:A0:6C:85:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b824dfb2-be33-4946-af95-2296acd823af.cer sbgp-ipAddrBlock: critical IPv6: 2607:4940::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:b5:e7:58:3e:6e:a3:99:90:75:90:66:37:50:05:27:b8:f3: 6d:51:ae:3e:9d:67:de:f0:bf:ab:ca:d6:fa:3c:41:cf:2b:ce: f7:83:d1:c9:90:ba:a3:d3:0f:d9:22:f3:be:3f:a9:58:7f:ce: cf:4a:ba:b1:33:da:45:53:3e:37:1e:4f:dc:d7:7a:57:f9:db: e6:ff:a1:ec:ac:9b:e7:49:fb:bb:8d:d5:cb:bd:7a:01:dd:5c: 33:b1:25:ca:3b:bc:63:be:5a:7a:90:36:f7:eb:3d:f4:64:07: a7:d3:29:26:70:8b:bd:5b:34:c3:3b:23:db:6f:c8:72:16:dc: 0b:49:4c:f3:e7:65:07:ee:26:37:5e:48:1f:23:7d:a2:74:30: 65:eb:10:b4:92:53:22:1f:ed:18:78:fb:67:fd:9a:75:a0:a1: 7e:51:b2:8f:c8:82:b2:b7:c6:08:8a:d0:14:06:54:7a:bb:28: c4:93:75:85:44:7b:76:25:bb:c6:96:c4:44:20:c2:72:6a:8f: 52:7e:1d:2e:73:22:ce:dc:1b:d9:cd:15:af:4d:07:ed:41:0b: dc:e5:97:ff:75:08:bb:32:a8:56:94:09:bd:82:32:9b:1c:73: 99:89:34:40:c7:55:81:33:61:e4:57:b7:a5:91:c3:d3:a2:c9: 44:32:67:be -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEupMnLD7y0+4f7kznAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjgyNGRmYjItYmUzMy00OTQ2LWFmOTUtMjI5NmFjZDgy M2FmMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk NWI5M2I2NDItNzIwOC00OTMwLTg5ZGItYTMwZmJjMGYwNjE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktKENzOtNtLqytcZ7xRokzWmyfgVNc3n7qJq dKOMRlWdXbTkcn4XsHiWkaJOzQC3YRQoo0ytqL923Iixpe6ORen1a4A/IbAlgdOx V7zW3Yrb73sGaITQ2RFpCKzm1hffhaBcncotwqiJrQUmCU3KKrX1ZN9wMkvzMckx U1NblLF2xciPVHZHfnLMSFIGR3/OJK+2+FkL5wyHofK/NsgIc+zwHT908gt8nFJF QxEGteKC04pEidXyhJbC19kMGtDlRME8rlhoCs2abq00BSVM1XQKGprOU5LOoXPV MkbeVYr1TLVVkKlxWxMP2oHxvj1/+b3+jC2aqvzyCQEk9i85RQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMOd2B2S/mLuH2xXAJLSVYDNrd8gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iODI0 ZGZiMi1iZTMzLTQ5NDYtYWY5NS0yMjk2YWNkODIzYWYvODJlNTQ2ZGItMmVlNy0z NzQ2LWE0YjgtNTUyOGZmMjZlYzc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjgyNGRmYjItYmUzMy00OTQ2LWFm OTUtMjI5NmFjZDgyM2FmL2I4MjRkZmIyLWJlMzMtNDk0Ni1hZjk1LTIyOTZhY2Q4 MjNhZi5jcmwwHwYDVR0jBBgwFoAUOdCRLv3hTPVRRiLykIJNF6Bsha4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iODI0ZGZiMi1iZTMzLTQ5NDYtYWY5NS0yMjk2 YWNkODIzYWYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgdJQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAgtedYPm6jmZB1kGY3UAUnuPNtUa4+nWfe8L+rytb6PEHPK873g9HJ kLqj0w/ZIvO+P6lYf87PSrqxM9pFUz43Hk/c13pX+dvm/6HsrJvnSfu7jdXLvXoB 3VwzsSXKO7xjvlp6kDb36z30ZAen0ykmcIu9WzTDOyPbb8hyFtwLSUzz52UH7iY3 XkgfI32idDBl6xC0klMiH+0YePtn/Zp1oKF+UbKPyIKyt8YIitAUBlR6uyjEk3WF RHt2JbvGlsREIMJyao9Sfh0ucyLO3BvZzRWvTQftQQvc5Zf/dQi7MqhWlAm9gjKb HHOZiTRAx1WBM2HkV7elkcPToslEMme+ -----END CERTIFICATE-----Generated at Mon Nov 3 08:27:22 2025 by rpki-client