$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eb3726d7-0f8c-4949-99b6-eecda94a0675/f61adb1e-bc9e-34ec-80fb-4d5ecf11e1dd.roa File: f61adb1e-bc9e-34ec-80fb-4d5ecf11e1dd.roa (raw, json) Hash identifier: vBfOKclxhgFGOeEy1z5zaMqo9W7gCpCijVGb6zy+B6M= Subject key identifier: 49:A9:BB:BD:D3:2A:A0:98:C4:0A:67:14:F3:35:30:50:4F:3E:62:6E Certificate issuer: /CN=eb3726d7-0f8c-4949-99b6-eecda94a0675 Certificate serial: 010D0C9F4328584BB45D1701BCE31EC85E2DE780 Authority key identifier: 9E:F0:8D:44:A7:A6:26:F4:A9:17:81:5E:EA:26:57:FC:D8:00:89:E1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eb3726d7-0f8c-4949-99b6-eecda94a0675.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eb3726d7-0f8c-4949-99b6-eecda94a0675/f61adb1e-bc9e-34ec-80fb-4d5ecf11e1dd.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 194 IP address blocks: 2620:117:2000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eb3726d7-0f8c-4949-99b6-eecda94a0675/eb3726d7-0f8c-4949-99b6-eecda94a0675.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eb3726d7-0f8c-4949-99b6-eecda94a0675/eb3726d7-0f8c-4949-99b6-eecda94a0675.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eb3726d7-0f8c-4949-99b6-eecda94a0675.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:17:01:bc:e3:1e:c8:5e:2d:e7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb3726d7-0f8c-4949-99b6-eecda94a0675 Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=99f7f31e-3a34-4bad-8753-f080eb43432d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:5e:4a:da:df:14:83:b4:0e:81:b1:8b:e2:f8: 17:5e:9e:d7:36:91:7a:80:90:7d:6e:a6:f2:b6:91: 3e:73:f6:f3:05:e2:df:ee:65:b7:5a:71:d7:ac:37: 10:a2:40:32:1d:b9:b2:ad:25:3c:75:64:3d:3d:72: 3c:c5:64:b1:e0:d8:58:28:d2:bf:8a:f9:90:36:3c: 4b:9d:1d:e7:d9:cc:0e:13:26:a0:4e:3d:90:b1:89: 01:51:2c:bf:dd:d0:2d:8c:72:6e:85:48:17:22:b4: 68:ce:69:0f:6e:87:81:db:aa:f4:ad:9e:c0:c9:05: d5:ae:24:a7:85:d9:fe:e8:c3:05:8a:3d:30:37:6a: e8:57:c8:11:f0:df:cf:83:1a:49:5e:bd:89:97:da: 2d:94:41:25:0f:a1:ac:4f:99:0d:26:9e:6b:db:6d: ee:5e:14:f8:c8:02:c3:9b:bb:70:63:e4:d5:93:b6: cd:ac:46:d8:54:7a:e9:de:09:b8:16:28:ae:60:7f: 0e:c5:ad:d5:25:b7:98:0f:a8:e1:9f:44:ce:af:b1: bc:20:5d:57:aa:0c:b2:6e:62:b9:6c:48:82:98:75: 21:b3:cd:6a:fd:18:3b:cc:31:a2:19:4c:9f:df:a1: d4:96:49:3a:eb:e2:75:e7:e1:f9:89:a5:b8:54:ca: 7d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:A9:BB:BD:D3:2A:A0:98:C4:0A:67:14:F3:35:30:50:4F:3E:62:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eb3726d7-0f8c-4949-99b6-eecda94a0675/f61adb1e-bc9e-34ec-80fb-4d5ecf11e1dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eb3726d7-0f8c-4949-99b6-eecda94a0675/eb3726d7-0f8c-4949-99b6-eecda94a0675.crl X509v3 Authority Key Identifier: keyid:9E:F0:8D:44:A7:A6:26:F4:A9:17:81:5E:EA:26:57:FC:D8:00:89:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eb3726d7-0f8c-4949-99b6-eecda94a0675.cer sbgp-ipAddrBlock: critical IPv6: 2620:117:2000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:07:62:de:56:14:2c:71:b7:b3:b2:05:b1:1f:7d:0e:63:df: cd:15:6c:6a:0f:7b:13:ac:8a:a9:13:3c:4a:ba:13:47:1b:02: ba:ed:f2:9c:83:6d:1c:d5:75:39:92:e4:55:80:1b:b7:ba:50: 4a:d4:f4:cd:6b:5d:b1:78:d8:70:85:6b:21:1b:53:f0:28:ce: 52:f2:72:a5:f9:f7:97:a4:07:f4:d3:e4:73:94:22:a6:0e:16: b7:4c:3a:1b:58:1b:9c:f2:be:f0:64:01:b9:a3:79:5c:7d:0a: 14:54:69:8f:0f:0c:e2:3b:19:99:3f:59:2f:5b:f9:cb:02:db: 72:4e:df:84:f2:56:83:1e:df:a5:cb:dc:07:b3:d6:90:07:f5: 89:57:47:19:4a:d1:9b:6a:d8:73:33:69:ac:fc:44:78:20:c4: 69:81:0d:b4:ef:cf:b5:c3:0b:35:26:f3:83:ce:6e:1c:ff:5e: a0:95:10:a2:1b:55:33:c2:62:7a:dc:26:6f:26:ed:c7:9f:e2: f9:9f:18:99:9b:28:22:9b:2c:31:8e:6f:53:0d:42:22:b4:5f: 9a:df:c4:b5:3c:b5:e6:d5:39:c0:0c:79:79:57:0b:db:5b:04: d1:2b:1e:89:01:f2:19:b0:17:05:51:82:89:ba:39:a4:a2:e8: e0:72:0e:f8 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEu0XRcBvOMeyF4t54AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWIzNzI2ZDctMGY4Yy00OTQ5LTk5YjYtZWVjZGE5NGEw Njc1MB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk OTlmN2YzMWUtM2EzNC00YmFkLTg3NTMtZjA4MGViNDM0MzJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj15K2t8Ug7QOgbGL4vgXXp7XNpF6gJB9bqby tpE+c/bzBeLf7mW3WnHXrDcQokAyHbmyrSU8dWQ9PXI8xWSx4NhYKNK/ivmQNjxL nR3n2cwOEyagTj2QsYkBUSy/3dAtjHJuhUgXIrRozmkPboeB26r0rZ7AyQXVriSn hdn+6MMFij0wN2roV8gR8N/PgxpJXr2Jl9otlEElD6GsT5kNJp5r223uXhT4yALD m7twY+TVk7bNrEbYVHrp3gm4FiiuYH8Oxa3VJbeYD6jhn0TOr7G8IF1XqgyybmK5 bEiCmHUhs81q/Rg7zDGiGUyf36HUlkk66+J15+H5iaW4VMp9ywIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFEmpu73TKqCYxApnFPM1MFBPPmJuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lYjM3 MjZkNy0wZjhjLTQ5NDktOTliNi1lZWNkYTk0YTA2NzUvZjYxYWRiMWUtYmM5ZS0z NGVjLTgwZmItNGQ1ZWNmMTFlMWRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZWIzNzI2ZDctMGY4Yy00OTQ5LTk5 YjYtZWVjZGE5NGEwNjc1L2ViMzcyNmQ3LTBmOGMtNDk0OS05OWI2LWVlY2RhOTRh MDY3NS5jcmwwHwYDVR0jBBgwFoAUnvCNRKemJvSpF4Fe6iZX/NgAieEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lYjM3MjZkNy0wZjhjLTQ5NDktOTliNi1lZWNk YTk0YTA2NzUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJiABFyAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAWAdi3lYULHG3s7IFsR99DmPfzRVsag97E6yKqRM8SroTRxsCuu3y nINtHNV1OZLkVYAbt7pQStT0zWtdsXjYcIVrIRtT8CjOUvJypfn3l6QH9NPkc5Qi pg4Wt0w6G1gbnPK+8GQBuaN5XH0KFFRpjw8M4jsZmT9ZL1v5ywLbck7fhPJWgx7f pcvcB7PWkAf1iVdHGUrRm2rYczNprPxEeCDEaYENtO/PtcMLNSbzg85uHP9eoJUQ ohtVM8Jietwmbybtx5/i+Z8YmZsoIpssMY5vUw1CIrRfmt/EtTy15tU5wAx5eVcL 21sE0SseiQHyGbAXBVGCibo5pKLo4HIO+A== -----END CERTIFICATE-----Generated at Sun Nov 2 21:28:00 2025 by rpki-client