$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/ac48a2d3-854c-3155-92d9-311295bde213.roa File: ac48a2d3-854c-3155-92d9-311295bde213.roa (raw, json) Hash identifier: AhEXOdSoa9DdTxLgNgQkAPcbQckv7/7LtC9+4iR1GFk= Subject key identifier: 8D:83:9F:64:77:4F:52:11:9F:21:A8:E4:C2:5D:C2:EF:21:33:D2:CD Certificate issuer: /CN=84ee337c-42c7-4207-b916-5028c8c62f82 Certificate serial: 010D0C9F4328584B636748576C3332A61BA36067 Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/ac48a2d3-854c-3155-92d9-311295bde213.roa Signing time: Thu 02 Oct 2025 13:00:40 +0000 ROA not before: Thu 02 Oct 2025 13:00:40 +0000 ROA not after: Wed 31 Dec 2025 14:00:40 +0000 asID: 11537 IP address blocks: 2001:468:17::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:63:67:48:57:6c:33:32:a6:1b:a3:60:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82 Validity Not Before: Oct 2 13:00:40 2025 GMT Not After : Dec 31 14:00:40 2025 GMT Subject: CN=631d9962-f3ec-4cf3-89e8-4cceed374094 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a7:c8:77:b0:1d:8a:06:da:25:3f:6c:20:ee: 01:0d:3f:2e:04:e0:fa:6e:be:79:78:4a:35:32:28: 57:39:fd:f7:66:22:21:64:bc:fd:ae:ab:3d:f3:1d: dc:f3:c9:3a:e5:54:46:c2:c4:c3:65:86:1b:d4:9e: f8:40:f0:42:af:d6:8d:29:ae:f2:77:ff:93:d5:de: 90:03:a7:0f:d3:9a:d5:78:c4:2f:29:77:c2:79:ca: 04:93:fd:ce:ab:8b:66:a6:16:cd:f5:fc:df:3a:27: a8:34:bc:db:ca:48:4e:8a:e1:67:e9:dc:56:3f:1d: df:01:39:3c:94:a6:da:e5:d2:2e:0e:7d:85:04:d7: df:42:23:77:5d:9b:ef:f3:1e:cb:34:00:a4:c0:01: db:ab:d4:c9:1c:0b:9f:34:eb:43:3c:a9:2f:5b:b1: 15:04:04:bd:80:ed:c4:c0:fd:cc:90:a8:fc:e7:d1: e8:cf:8a:41:2c:18:df:47:29:7e:02:e0:d0:df:fa: 3c:e0:aa:03:fe:bf:81:43:fd:2b:b2:84:7b:a1:44: 7d:f3:dd:86:f4:1e:87:6d:98:a1:36:2e:52:cc:d7: cc:0d:b2:f6:f3:25:7f:79:6e:6a:a4:63:70:31:90: 30:cf:70:bc:65:1f:00:3f:2a:f1:e1:63:73:05:0d: 54:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:83:9F:64:77:4F:52:11:9F:21:A8:E4:C2:5D:C2:EF:21:33:D2:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/ac48a2d3-854c-3155-92d9-311295bde213.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl X509v3 Authority Key Identifier: keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer sbgp-ipAddrBlock: critical IPv6: 2001:468:17::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:cb:ed:f7:b1:bd:18:c9:eb:c9:cf:29:bd:7b:45:0a:0c:10: d3:de:d2:d9:59:97:9b:03:03:07:4a:25:ad:d1:f5:ba:af:ae: 59:da:60:62:1b:24:5c:55:20:87:0c:cd:b5:51:58:f9:e5:3a: 97:a5:41:78:31:af:7a:76:ef:cd:fe:5f:4e:21:87:58:42:ea: 2c:a7:ce:80:8a:e9:38:35:e6:7f:23:72:a2:0b:36:19:79:b3: 51:de:5d:3a:9e:a9:13:f9:6a:c6:67:ae:80:f2:7f:af:80:c2: cb:ad:20:8c:9a:71:64:06:d6:97:e2:be:08:d3:e7:91:3b:7d: de:e6:04:e5:fd:98:b7:ea:e5:fd:fd:34:db:34:8a:f7:9b:a3: f6:52:f7:7a:db:97:3b:1d:07:68:ea:6e:ae:4b:74:2e:a3:81: b3:f6:fb:22:74:e9:ea:63:7d:dc:53:39:da:54:7b:b0:1f:dc: a1:5a:47:64:32:73:6a:b5:3a:bd:d6:1d:52:51:59:17:8b:d1: 18:87:00:1b:2d:e7:5a:d7:19:a8:f1:0a:52:fd:cc:28:44:19: dd:cb:9a:2a:c1:d0:59:89:a7:9d:19:fe:0a:4a:91:82:1c:80: 1d:3d:3b:e2:19:2b:c3:01:a2:0e:51:f7:34:79:81:cd:03:00: ae:82:92:f1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtjZ0hXbDMyphujYGcwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODRlZTMzN2MtNDJjNy00MjA3LWI5MTYtNTAyOGM4YzYy ZjgyMB4XDTI1MTAwMjEzMDA0MFoXDTI1MTIzMTE0MDA0MFowLzEtMCsGA1UEAxMk NjMxZDk5NjItZjNlYy00Y2YzLTg5ZTgtNGNjZWVkMzc0MDk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqfId7AdigbaJT9sIO4BDT8uBOD6br55eEo1 MihXOf33ZiIhZLz9rqs98x3c88k65VRGwsTDZYYb1J74QPBCr9aNKa7yd/+T1d6Q A6cP05rVeMQvKXfCecoEk/3Oq4tmphbN9fzfOieoNLzbykhOiuFn6dxWPx3fATk8 lKba5dIuDn2FBNffQiN3XZvv8x7LNACkwAHbq9TJHAufNOtDPKkvW7EVBAS9gO3E wP3MkKj859Hoz4pBLBjfRyl+AuDQ3/o84KoD/r+BQ/0rsoR7oUR9892G9B6HbZih Ni5SzNfMDbL28yV/eW5qpGNwMZAwz3C8ZR8APyrx4WNzBQ1UDwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFI2Dn2R3T1IRnyGo5MJdwu8hM9LNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVl MzM3Yy00MmM3LTQyMDctYjkxNi01MDI4YzhjNjJmODIvYWM0OGEyZDMtODU0Yy0z MTU1LTkyZDktMzExMjk1YmRlMjEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODRlZTMzN2MtNDJjNy00MjA3LWI5 MTYtNTAyOGM4YzYyZjgyLzg0ZWUzMzdjLTQyYzctNDIwNy1iOTE2LTUwMjhjOGM2 MmY4Mi5jcmwwHwYDVR0jBBgwFoAUocWrpVSDlo0zNHR8acBfKZbeJfgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVlMzM3Yy00MmM3LTQyMDctYjkxNi01MDI4 YzhjNjJmODIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEaAAX MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACbL7fexvRjJ68nPKb17RQoMENPe0tlZl5sDAwdKJa3R9bqvrlna YGIbJFxVIIcMzbVRWPnlOpelQXgxr3p2783+X04hh1hC6iynzoCK6Tg15n8jcqIL Nhl5s1HeXTqeqRP5asZnroDyf6+AwsutIIyacWQG1pfivgjT55E7fd7mBOX9mLfq 5f39NNs0ivebo/ZS93rblzsdB2jqbq5LdC6jgbP2+yJ06epjfdxTOdpUe7Af3KFa R2Qyc2q1Or3WHVJRWReL0RiHABst51rXGajxClL9zChEGd3LmirB0FmJp50Z/gpK kYIcgB09O+IZK8MBog5R9zR5gc0DAK6CkvE= -----END CERTIFICATE-----Generated at Mon Oct 20 10:02:07 2025 by rpki-client