$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/292b0ea2-c721-3020-88a5-8f52f4301277.roa File: 292b0ea2-c721-3020-88a5-8f52f4301277.roa (raw, json) Hash identifier: Z3T8jT0ul7gjdXX/n/KGFRxB5PZ2O5LTvfi02bq5OtI= Subject key identifier: 6D:75:DA:72:C5:22:30:21:73:04:17:18:0D:93:7D:D9:71:94:09:B6 Certificate issuer: /CN=84ee337c-42c7-4207-b916-5028c8c62f82 Certificate serial: 010D0C9F4328584B821CC938EEA54D11EC704780 Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/292b0ea2-c721-3020-88a5-8f52f4301277.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 11164 IP address blocks: 2001:468:2640::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1c:c9:38:ee:a5:4d:11:ec:70:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=8271b4f2-c605-49d3-b4fa-c76ebf91baef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:68:8b:e5:4c:54:4e:89:eb:1c:4e:11:a4:80: a2:d0:6f:c5:6a:0b:f2:72:74:f7:34:f5:c0:00:ae: 61:91:31:59:b0:fc:4d:34:db:ee:6b:b9:c2:bf:2c: a4:42:01:c2:6e:c2:7c:45:f4:5d:e7:6c:dd:81:82: bf:47:be:cf:c3:54:18:6b:4a:07:a0:a1:06:0e:81: 49:f4:4b:da:67:f7:bc:a6:9b:b5:ff:6c:4f:b9:30: f6:bb:f7:23:69:7d:1c:a4:7f:a6:0e:db:e4:fa:b8: d1:b0:9c:4c:8b:39:58:93:d8:76:bb:28:8b:f0:d0: 5a:c8:60:24:02:35:6e:d8:c0:60:8e:09:6d:0b:7b: 41:8d:bd:25:a0:81:a0:b8:e8:3d:ad:4a:7c:e1:97: 94:5f:dd:e9:d9:96:b1:ca:55:31:f5:0a:87:7d:bc: fa:35:54:8e:85:c2:8b:f5:c6:0f:5e:4b:59:2b:ab: d7:0e:7e:4d:53:16:93:86:91:94:99:a3:b0:79:28: dd:1a:90:65:6e:9c:78:fa:81:31:12:3b:e6:8b:0e: 5b:7a:62:93:eb:86:56:90:07:f8:43:bf:0e:27:90: 8c:fd:02:89:49:7e:38:e1:20:52:b4:dc:76:99:b6: ba:32:20:a1:45:76:51:f0:31:d7:cb:c7:d8:05:35: 5f:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:75:DA:72:C5:22:30:21:73:04:17:18:0D:93:7D:D9:71:94:09:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/292b0ea2-c721-3020-88a5-8f52f4301277.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl X509v3 Authority Key Identifier: keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer sbgp-ipAddrBlock: critical IPv6: 2001:468:2640::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:ed:00:bf:b4:61:ff:a5:ea:88:dd:df:15:cb:25:38:8c:43: f0:45:da:41:66:a5:93:41:a1:d1:a0:96:fa:a3:07:28:f1:a1: 3a:bc:55:78:77:a5:ed:2a:4e:b3:98:5c:e1:9b:34:7f:3e:d7: c8:35:9b:08:55:76:6f:03:cd:7e:df:22:e2:dd:11:65:13:12: 53:17:dd:01:58:61:b5:46:33:9a:09:d7:52:0a:31:f1:4c:16: 91:c8:68:30:df:2b:a9:18:33:07:e2:76:54:ab:5d:c4:2b:9a: b4:bc:98:66:dc:d2:01:e0:44:4b:ca:4c:08:b9:78:a5:96:a2: f0:5a:d1:3d:d5:33:d6:b2:ff:1c:04:08:ee:31:41:3b:22:f9: df:86:9c:a9:ab:b6:f4:7f:56:ba:6b:86:87:0f:8c:a7:5c:26: dd:f3:23:51:e2:f7:0e:50:1d:9c:c1:ec:29:8a:64:19:e8:bc: 7f:4a:d8:06:99:e8:90:a6:3e:c8:90:48:f8:cc:f5:55:68:e1: 6f:66:74:24:0b:4c:d4:5f:3a:b8:a1:2b:33:4d:4b:d5:95:54: 68:0d:4b:ee:c3:8a:a7:24:92:e6:7e:ca:0e:c2:9f:44:c0:77: 13:e0:ae:c3:b1:8b:fe:30:df:48:de:92:45:aa:dc:3b:66:a8: 2a:01:55:0d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuCHMk47qVNEexwR4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODRlZTMzN2MtNDJjNy00MjA3LWI5MTYtNTAyOGM4YzYy ZjgyMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk ODI3MWI0ZjItYzYwNS00OWQzLWI0ZmEtYzc2ZWJmOTFiYWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGiL5UxUTonrHE4RpICi0G/FagvycnT3NPXA AK5hkTFZsPxNNNvua7nCvyykQgHCbsJ8RfRd52zdgYK/R77Pw1QYa0oHoKEGDoFJ 9EvaZ/e8ppu1/2xPuTD2u/cjaX0cpH+mDtvk+rjRsJxMizlYk9h2uyiL8NBayGAk AjVu2MBgjgltC3tBjb0loIGguOg9rUp84ZeUX93p2ZaxylUx9QqHfbz6NVSOhcKL 9cYPXktZK6vXDn5NUxaThpGUmaOweSjdGpBlbpx4+oExEjvmiw5bemKT64ZWkAf4 Q78OJ5CM/QKJSX444SBStNx2mba6MiChRXZR8DHXy8fYBTVfHQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFG112nLFIjAhcwQXGA2TfdlxlAm2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVl MzM3Yy00MmM3LTQyMDctYjkxNi01MDI4YzhjNjJmODIvMjkyYjBlYTItYzcyMS0z MDIwLTg4YTUtOGY1MmY0MzAxMjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODRlZTMzN2MtNDJjNy00MjA3LWI5 MTYtNTAyOGM4YzYyZjgyLzg0ZWUzMzdjLTQyYzctNDIwNy1iOTE2LTUwMjhjOGM2 MmY4Mi5jcmwwHwYDVR0jBBgwFoAUocWrpVSDlo0zNHR8acBfKZbeJfgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVlMzM3Yy00MmM3LTQyMDctYjkxNi01MDI4 YzhjNjJmODIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEaCZA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALntAL+0Yf+l6ojd3xXLJTiMQ/BF2kFmpZNBodGglvqjByjxoTq8 VXh3pe0qTrOYXOGbNH8+18g1mwhVdm8DzX7fIuLdEWUTElMX3QFYYbVGM5oJ11IK MfFMFpHIaDDfK6kYMwfidlSrXcQrmrS8mGbc0gHgREvKTAi5eKWWovBa0T3VM9ay /xwECO4xQTsi+d+GnKmrtvR/VrprhocPjKdcJt3zI1Hi9w5QHZzB7CmKZBnovH9K 2AaZ6JCmPsiQSPjM9VVo4W9mdCQLTNRfOrihKzNNS9WVVGgNS+7DiqckkuZ+yg7C n0TAdxPgrsOxi/4w30jekkWq3DtmqCoBVQ0= -----END CERTIFICATE-----Generated at Mon Oct 20 15:21:35 2025 by rpki-client