$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/cf037d60-0dfe-32e7-9823-3312e744a034.roa File: cf037d60-0dfe-32e7-9823-3312e744a034.roa (raw, json) Hash identifier: npwQg9b7xWd85Znvyq4vsH4ne30wF+0jbsdMP57L+Fo= Subject key identifier: C3:19:AF:C6:83:A8:2A:69:DD:97:FA:89:DB:32:7A:C8:A7:5C:46:98 Certificate issuer: /CN=84ee337c-42c7-4207-b916-5028c8c62f82 Certificate serial: 010D0C9F4328584B821CC1F9D96FC2A79DBE6800 Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/cf037d60-0dfe-32e7-9823-3312e744a034.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 22742 IP address blocks: 2001:468:2650::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1c:c1:f9:d9:6f:c2:a7:9d:be:68:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=1b38441c-bfaf-4af6-96b2-d5bf624a6510 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:49:7c:61:2d:4b:79:82:b9:30:78:68:71:30: 5d:f4:34:92:ee:93:d1:d1:e7:b8:01:eb:5e:83:55: e4:55:1b:29:80:1f:20:ac:67:94:47:11:c2:59:fe: 72:08:a9:ca:3e:f3:10:0c:13:f1:40:38:33:4f:72: 1a:cc:4f:1d:d0:39:9b:1b:9d:40:83:87:db:10:0b: f5:c8:f2:82:4b:0b:16:7b:36:5f:76:14:73:d6:a5: 0f:f6:5e:22:b4:4b:71:bf:ca:15:ec:f9:16:fb:41: 13:3a:26:b1:f8:2d:3b:ae:1b:99:77:ef:eb:8a:b4: 14:5b:cb:f6:dc:05:bb:06:9e:fc:53:46:43:5c:f1: 8e:6d:64:fc:05:e1:b9:c1:e8:75:ea:1f:d3:ef:b4: be:c4:05:d2:48:15:4b:d4:87:a3:20:99:3b:05:96: 55:37:7d:47:88:a4:a0:08:7b:c1:85:b1:c3:26:f8: 4e:55:17:16:ce:31:88:53:88:ff:59:ea:4e:c5:82: a0:3b:41:a3:12:32:f6:f8:d0:43:1c:50:52:20:b1: df:89:2b:68:ef:9f:98:ba:57:16:e8:21:a7:44:48: a8:1c:bf:a9:e0:f3:5a:36:92:02:7d:74:6c:80:d0: 49:40:fd:db:0c:28:3a:4f:bd:78:35:4b:e5:4b:67: 15:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:19:AF:C6:83:A8:2A:69:DD:97:FA:89:DB:32:7A:C8:A7:5C:46:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/cf037d60-0dfe-32e7-9823-3312e744a034.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl X509v3 Authority Key Identifier: keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer sbgp-ipAddrBlock: critical IPv6: 2001:468:2650::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:c0:f7:89:97:60:bb:7b:23:55:27:be:55:79:84:78:db:f9: 3a:f3:d0:7b:41:8c:20:09:4e:16:aa:ee:e2:c1:43:97:f0:61: 02:c4:d5:d8:c5:1b:45:bc:37:19:e2:20:79:92:5f:b9:28:f2: 5c:c6:f3:c5:79:06:b9:e9:a2:ae:54:90:31:2c:36:fb:82:9a: ac:60:ea:f2:c1:02:12:e6:79:c8:5e:84:3f:94:6e:60:46:70: 25:19:ff:a8:23:17:71:df:2f:4e:d8:ae:bd:52:cb:38:a6:d9: 98:a7:17:da:d0:ca:35:5d:5b:d6:2c:41:9c:72:41:45:77:77: f1:93:24:c1:3d:8d:cb:d8:06:80:b4:05:0f:0c:13:4d:c7:63: 30:f1:b0:4d:e4:9c:48:90:ab:73:f7:a7:3c:68:1c:e8:22:90: 22:7c:06:07:33:2f:95:c4:72:f2:5d:fb:d9:b7:5a:b4:94:3c: e7:be:07:b0:16:42:04:6f:31:de:97:c0:65:2b:45:46:5d:21: a4:2a:da:16:6e:63:da:d6:c9:ac:6b:45:aa:43:77:38:b7:e4: 3d:f1:64:9b:2f:18:b1:c5:94:63:3b:43:ae:bd:f9:2b:57:c5: bd:7a:8f:2b:a2:dd:ee:17:0b:b9:7f:cd:35:f2:c2:d0:9a:02: 4d:9b:7d:91 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuCHMH52W/Cp52+aAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODRlZTMzN2MtNDJjNy00MjA3LWI5MTYtNTAyOGM4YzYy ZjgyMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk MWIzODQ0MWMtYmZhZi00YWY2LTk2YjItZDViZjYyNGE2NTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkl8YS1LeYK5MHhocTBd9DSS7pPR0ee4Aete g1XkVRspgB8grGeURxHCWf5yCKnKPvMQDBPxQDgzT3IazE8d0DmbG51Ag4fbEAv1 yPKCSwsWezZfdhRz1qUP9l4itEtxv8oV7PkW+0ETOiax+C07rhuZd+/rirQUW8v2 3AW7Bp78U0ZDXPGObWT8BeG5weh16h/T77S+xAXSSBVL1IejIJk7BZZVN31HiKSg CHvBhbHDJvhOVRcWzjGIU4j/WepOxYKgO0GjEjL2+NBDHFBSILHfiSto75+YulcW 6CGnREioHL+p4PNaNpICfXRsgNBJQP3bDCg6T714NUvlS2cVawIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMMZr8aDqCpp3Zf6idsyesinXEaYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVl MzM3Yy00MmM3LTQyMDctYjkxNi01MDI4YzhjNjJmODIvY2YwMzdkNjAtMGRmZS0z MmU3LTk4MjMtMzMxMmU3NDRhMDM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODRlZTMzN2MtNDJjNy00MjA3LWI5 MTYtNTAyOGM4YzYyZjgyLzg0ZWUzMzdjLTQyYzctNDIwNy1iOTE2LTUwMjhjOGM2 MmY4Mi5jcmwwHwYDVR0jBBgwFoAUocWrpVSDlo0zNHR8acBfKZbeJfgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVlMzM3Yy00MmM3LTQyMDctYjkxNi01MDI4 YzhjNjJmODIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEaCZQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGXA94mXYLt7I1UnvlV5hHjb+Trz0HtBjCAJThaq7uLBQ5fwYQLE 1djFG0W8NxniIHmSX7ko8lzG88V5Brnpoq5UkDEsNvuCmqxg6vLBAhLmechehD+U bmBGcCUZ/6gjF3HfL07Yrr1Syzim2ZinF9rQyjVdW9YsQZxyQUV3d/GTJME9jcvY BoC0BQ8ME03HYzDxsE3knEiQq3P3pzxoHOgikCJ8BgczL5XEcvJd+9m3WrSUPOe+ B7AWQgRvMd6XwGUrRUZdIaQq2hZuY9rWyaxrRapDdzi35D3xZJsvGLHFlGM7Q669 +StXxb16jyui3e4XC7l/zTXywtCaAk2bfZE= -----END CERTIFICATE-----Generated at Mon Oct 20 09:43:10 2025 by rpki-client