$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/689d0932-9e89-3a1e-87c9-e79053ebc7ab.roa File: 689d0932-9e89-3a1e-87c9-e79053ebc7ab.roa (raw, json) Hash identifier: LL5a3H1ffAS7eLAIRbvHEmKbT70Slb2M146VCRAzPgE= Subject key identifier: 0F:98:64:52:4D:49:B7:D1:41:91:62:39:05:F4:5F:85:18:C9:F0:C2 Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Certificate serial: 010D0C9F4328584B33F1A691BEF1114AED2AF4C5 Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/689d0932-9e89-3a1e-87c9-e79053ebc7ab.roa Signing time: Mon 15 Sep 2025 13:00:40 +0000 ROA not before: Mon 15 Sep 2025 13:00:40 +0000 ROA not after: Sun 14 Dec 2025 14:00:40 +0000 asID: 62896 IP address blocks: 2001:48f8:f300::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:33:f1:a6:91:be:f1:11:4a:ed:2a:f4:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Validity Not Before: Sep 15 13:00:40 2025 GMT Not After : Dec 14 14:00:40 2025 GMT Subject: CN=7da83f04-9813-499b-9b0b-be71e5de1284 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:b3:f6:7d:1c:95:14:c4:44:9a:16:9d:66:0d: 23:91:ee:5c:3c:41:68:76:83:d8:e6:e6:64:9a:d8: 05:6b:ba:0d:81:ab:c5:f7:15:8c:c1:cf:8e:c0:51: df:4c:93:97:00:34:b7:fa:a9:6c:98:8c:cd:70:e4: 03:cd:5d:4e:97:d8:cb:fa:f7:3e:3c:1e:39:13:45: c2:f6:2c:42:88:6c:a5:99:c0:dd:a0:2d:cc:41:9a: fb:2c:54:a3:82:dd:20:f7:11:a2:46:79:5f:8c:9b: d5:d7:7e:77:7b:90:26:4e:b8:ed:7d:8b:47:75:68: 5c:70:18:ff:68:d6:b1:8a:63:2d:31:a6:86:3d:f3: 90:3d:cd:86:0b:12:f3:51:76:66:1b:31:e9:df:97: c8:4c:49:76:ed:1e:bf:68:58:d3:76:10:76:5b:a7: d7:2c:08:4d:35:e8:e9:98:ac:25:0c:a3:e7:e8:44: 60:32:83:bf:35:76:37:1d:20:c5:45:e5:6f:e9:e5: 45:f8:66:68:57:f1:68:27:fb:e8:77:98:ce:77:ee: 38:da:14:68:54:b1:70:6e:36:c0:94:28:7e:2e:2a: 53:3e:49:73:93:8b:8a:ad:5b:bf:c4:53:81:d8:68: 84:56:3f:90:9b:7d:2a:d6:1a:3c:dd:2c:6d:b1:bd: 43:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:98:64:52:4D:49:B7:D1:41:91:62:39:05:F4:5F:85:18:C9:F0:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/689d0932-9e89-3a1e-87c9-e79053ebc7ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl X509v3 Authority Key Identifier: keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer sbgp-ipAddrBlock: critical IPv6: 2001:48f8:f300::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:32:92:cd:7b:7a:cd:22:98:94:18:65:ff:81:ff:cc:94:d0: b7:51:82:bc:46:4d:2a:73:a4:2d:ab:58:a7:13:0d:29:ec:f8: 07:3a:16:d7:0b:f5:b6:01:a6:46:d5:25:eb:cc:f4:6c:27:1e: c1:e4:fa:0a:8e:fd:5f:d8:b0:da:d4:9f:48:23:dc:0c:4b:02: 0f:cf:d6:4d:d7:09:82:de:0c:b1:7c:f8:3e:c8:26:f6:00:5a: 3f:9d:fb:0c:65:91:78:88:0d:96:62:2d:20:d9:d8:b2:67:8c: b7:df:24:7c:6e:9d:71:ab:4c:71:dd:6b:b8:09:40:42:08:fc: c1:9a:78:19:9d:bf:0c:f6:17:a2:02:5d:35:b2:50:a5:8a:b6: e3:4e:a4:de:41:e0:9d:96:28:4f:53:bf:75:8a:f1:69:65:28: 37:45:3f:30:72:3a:2e:81:e8:f1:7d:e7:be:23:7c:fb:1a:1f: 6d:f9:ba:98:ab:32:2d:9b:67:7c:41:ea:53:ff:63:88:d0:03: d2:9f:71:ba:21:7f:a5:43:d9:1a:69:4c:2c:28:d0:6e:83:b1: fb:f1:ee:c0:da:66:7b:e1:9e:62:84:a4:c7:88:6d:22:d2:a8: 0c:72:98:f0:22:24:77:fc:b3:e6:ea:b1:ea:42:08:58:4f:8e: a2:69:de:61 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsz8aaRvvERSu0q9MUwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3 MDg1MB4XDTI1MDkxNTEzMDA0MFoXDTI1MTIxNDE0MDA0MFowLzEtMCsGA1UEAxMk N2RhODNmMDQtOTgxMy00OTliLTliMGItYmU3MWU1ZGUxMjg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbP2fRyVFMREmhadZg0jke5cPEFodoPY5uZk mtgFa7oNgavF9xWMwc+OwFHfTJOXADS3+qlsmIzNcOQDzV1Ol9jL+vc+PB45E0XC 9ixCiGylmcDdoC3MQZr7LFSjgt0g9xGiRnlfjJvV1353e5AmTrjtfYtHdWhccBj/ aNaximMtMaaGPfOQPc2GCxLzUXZmGzHp35fITEl27R6/aFjTdhB2W6fXLAhNNejp mKwlDKPn6ERgMoO/NXY3HSDFReVv6eVF+GZoV/FoJ/vod5jOd+442hRoVLFwbjbA lCh+LipTPklzk4uKrVu/xFOB2GiEVj+Qm30q1ho83Sxtsb1DLwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFA+YZFJNSbfRQZFiOQX0X4UYyfDCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2 M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvNjg5ZDA5MzItOWU4OS0z YTFlLTg3YzktZTc5MDUzZWJjN2FiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3 NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2 NDNhNzcwODUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEIAFI+PMA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHMyks17es0imJQYZf+B/8yU0LdRgrxGTSpzpC2rWKcTDSns+Ac6 FtcL9bYBpkbVJevM9GwnHsHk+gqO/V/YsNrUn0gj3AxLAg/P1k3XCYLeDLF8+D7I JvYAWj+d+wxlkXiIDZZiLSDZ2LJnjLffJHxunXGrTHHda7gJQEII/MGaeBmdvwz2 F6ICXTWyUKWKtuNOpN5B4J2WKE9Tv3WK8WllKDdFPzByOi6B6PF9574jfPsaH235 upirMi2bZ3xB6lP/Y4jQA9Kfcbohf6VD2RppTCwo0G6Dsfvx7sDaZnvhnmKEpMeI bSLSqAxymPAiJHf8s+bqsepCCFhPjqJp3mE= -----END CERTIFICATE-----Generated at Tue Nov 4 20:06:48 2025 by rpki-client