$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/67048a6f-0b33-331e-bd40-ef959d53de7a.roa File: 67048a6f-0b33-331e-bd40-ef959d53de7a.roa (raw, json) Hash identifier: QxRGtl1dphhLjKaAEHQRps97/d1tSw7RB8KZWiTRxKw= Subject key identifier: FE:04:06:A9:F9:CF:4E:F7:05:7D:98:AB:32:48:25:A8:49:46:78:0A Certificate issuer: /CN=84ee337c-42c7-4207-b916-5028c8c62f82 Certificate serial: 010D0C9F4328584B821CC948A3B5F6FEED14E0C0 Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/67048a6f-0b33-331e-bd40-ef959d53de7a.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 13436 IP address blocks: 2001:468:26f0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1c:c9:48:a3:b5:f6:fe:ed:14:e0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=7941f578-aaa6-4491-894b-d63a261166e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:46:90:d2:a4:f0:5a:c9:b4:f1:ac:cd:ef:d0: d8:b4:7c:eb:f6:67:10:f7:43:04:07:34:6f:a3:90: c4:8d:08:e2:7d:6f:43:7c:a0:bb:6a:fe:5e:09:d0: 71:88:08:f6:a7:f4:88:3c:22:46:a2:3e:5d:06:3f: 36:36:d3:63:08:71:f4:e6:2b:63:2f:4d:93:1d:57: be:62:02:da:b1:82:2d:09:0d:bb:d6:e9:ea:d0:02: c6:18:e9:e5:a0:51:ef:56:3c:51:21:fd:02:1d:f3: 0c:40:d9:a3:d3:92:de:c9:19:32:c4:15:10:33:32: 60:11:87:70:9d:a0:10:99:75:47:70:57:6a:ef:f5: 67:b8:9f:90:7d:2a:d2:39:ea:d5:be:b8:0e:87:1e: 51:9f:cf:89:db:11:27:19:a2:ac:39:03:79:aa:44: 23:92:f4:db:91:ba:6c:e1:ae:2b:bd:0e:ca:ac:d4: 5f:34:d9:52:9c:84:39:2e:45:2e:4f:be:e6:d3:31: 0f:08:99:f1:66:e0:38:4c:ce:c1:63:ac:3a:2c:34: 82:36:dc:89:13:2f:8b:f0:8e:5d:92:8b:78:89:97: 09:2d:f2:a7:d9:ef:e3:e9:cd:72:9f:0a:ce:65:d0: 13:4e:7b:52:dc:25:64:cf:05:bf:97:ad:92:b0:4d: 20:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:04:06:A9:F9:CF:4E:F7:05:7D:98:AB:32:48:25:A8:49:46:78:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/67048a6f-0b33-331e-bd40-ef959d53de7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl X509v3 Authority Key Identifier: keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer sbgp-ipAddrBlock: critical IPv6: 2001:468:26f0::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:ac:36:81:9e:92:4c:bf:bd:fb:f3:b0:9e:fa:0a:a5:ad:e7: 2d:34:66:6c:c6:27:65:cf:bf:a3:1d:b0:fe:9b:60:79:59:dd: cb:6f:df:a9:f2:5b:c1:53:eb:57:a2:65:2d:8c:45:34:89:7f: cf:1f:75:b2:b2:75:67:1b:f1:d3:dc:5d:da:03:48:77:e0:f5: ee:2a:6b:b0:57:d6:1a:5b:a7:18:3c:5d:f3:fc:38:4c:0f:bb: 43:66:c4:53:37:43:f3:18:e2:65:15:16:c6:45:9a:c0:07:1e: 72:94:c1:ec:c4:3c:ec:ae:2b:71:92:1d:9d:04:c9:cb:0b:d9: 7e:d1:a5:27:88:c6:fd:48:8a:7a:27:21:28:27:15:36:84:8c: b8:90:47:b0:08:d4:24:52:de:24:94:0c:78:c0:bf:20:e5:09: cc:54:bb:ab:ed:16:af:92:0a:97:8a:42:0b:95:d5:2a:5c:78: dd:58:d6:0e:ef:38:83:5c:4d:a1:c7:29:43:06:d4:78:9b:03: 17:7b:3d:a9:44:40:ec:45:08:9c:a1:9a:56:a0:1f:cb:ba:be: ae:96:70:9b:78:59:24:e4:c5:dd:03:1a:52:44:af:98:1a:b1: 41:3f:55:87:4a:d2:98:dd:52:45:e9:97:84:b9:3f:1e:d6:ca: 57:94:75:62 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuCHMlIo7X2/u0U4MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODRlZTMzN2MtNDJjNy00MjA3LWI5MTYtNTAyOGM4YzYy ZjgyMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk Nzk0MWY1NzgtYWFhNi00NDkxLTg5NGItZDYzYTI2MTE2NmU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUaQ0qTwWsm08azN79DYtHzr9mcQ90MEBzRv o5DEjQjifW9DfKC7av5eCdBxiAj2p/SIPCJGoj5dBj82NtNjCHH05itjL02THVe+ YgLasYItCQ271unq0ALGGOnloFHvVjxRIf0CHfMMQNmj05LeyRkyxBUQMzJgEYdw naAQmXVHcFdq7/VnuJ+QfSrSOerVvrgOhx5Rn8+J2xEnGaKsOQN5qkQjkvTbkbps 4a4rvQ7KrNRfNNlSnIQ5LkUuT77m0zEPCJnxZuA4TM7BY6w6LDSCNtyJEy+L8I5d kot4iZcJLfKn2e/j6c1ynwrOZdATTntS3CVkzwW/l62SsE0gtQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFP4EBqn5z073BX2YqzJIJahJRngKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVl MzM3Yy00MmM3LTQyMDctYjkxNi01MDI4YzhjNjJmODIvNjcwNDhhNmYtMGIzMy0z MzFlLWJkNDAtZWY5NTlkNTNkZTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODRlZTMzN2MtNDJjNy00MjA3LWI5 MTYtNTAyOGM4YzYyZjgyLzg0ZWUzMzdjLTQyYzctNDIwNy1iOTE2LTUwMjhjOGM2 MmY4Mi5jcmwwHwYDVR0jBBgwFoAUocWrpVSDlo0zNHR8acBfKZbeJfgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVlMzM3Yy00MmM3LTQyMDctYjkxNi01MDI4 YzhjNjJmODIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEaCbw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALGsNoGekky/vfvzsJ76CqWt5y00ZmzGJ2XPv6MdsP6bYHlZ3ctv 36nyW8FT61eiZS2MRTSJf88fdbKydWcb8dPcXdoDSHfg9e4qa7BX1hpbpxg8XfP8 OEwPu0NmxFM3Q/MY4mUVFsZFmsAHHnKUwezEPOyuK3GSHZ0EycsL2X7RpSeIxv1I inonISgnFTaEjLiQR7AI1CRS3iSUDHjAvyDlCcxUu6vtFq+SCpeKQguV1SpceN1Y 1g7vOINcTaHHKUMG1HibAxd7PalEQOxFCJyhmlagH8u6vq6WcJt4WSTkxd0DGlJE r5gasUE/VYdK0pjdUkXpl4S5Px7WyleUdWI= -----END CERTIFICATE-----Generated at Mon Oct 20 07:15:01 2025 by rpki-client