$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/b8ab3838-6b1f-3f4d-ae7b-7804f1116e8c.roa File: b8ab3838-6b1f-3f4d-ae7b-7804f1116e8c.roa (raw, json) Hash identifier: o+j+xhSexcpAuMCiQKvuJJBkFBDYlyhrVhzjc6e45YI= Subject key identifier: 4D:95:8D:79:96:DE:53:7F:B5:95:74:98:AE:FD:62:CC:DB:B2:B1:C8 Certificate issuer: /CN=6e9c5894-f794-4209-a00d-cf232363d7c6 Certificate serial: 010D0C9F4328584BDCF5E45372BC4434CA072B00 Authority key identifier: EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/b8ab3838-6b1f-3f4d-ae7b-7804f1116e8c.roa Signing time: Sat 15 Nov 2025 02:00:32 +0000 ROA not before: Sat 15 Nov 2025 02:00:32 +0000 ROA not after: Fri 13 Feb 2026 02:00:32 +0000 asID: 16509 IP address blocks: 2605:b040:c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:dc:f5:e4:53:72:bc:44:34:ca:07:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e9c5894-f794-4209-a00d-cf232363d7c6 Validity Not Before: Nov 15 02:00:32 2025 GMT Not After : Feb 13 02:00:32 2026 GMT Subject: CN=c42a3668-ec0a-4752-9205-0a4b61b1370b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:11:d2:7a:0c:c3:4a:50:41:67:60:e6:ea:c0: 01:b2:93:eb:be:6b:c9:25:d4:74:2a:0d:ce:75:0e: c5:65:04:cd:58:b3:9c:12:9f:09:6e:41:b4:59:04: fc:4e:46:6d:06:73:aa:2e:2e:82:ff:9f:83:83:a3: 69:9e:5f:81:ff:69:3f:86:f3:05:05:99:87:6d:f6: 27:f8:07:9d:35:14:b4:8c:69:f9:65:61:ad:ee:ea: 6d:d9:a3:0b:bf:cf:8d:47:3d:69:ae:21:b4:fe:84: 94:82:db:d7:57:4b:91:a6:47:6c:d1:5b:06:d9:88: b1:78:a5:fe:b2:04:f2:90:51:c5:85:bf:4f:63:95: 55:4d:fc:2d:86:a6:25:ff:f1:cd:c2:45:64:11:42: 25:7c:5f:ba:87:af:be:24:b5:5b:95:14:fd:59:e8: 07:5a:50:eb:49:24:fe:3f:78:9b:56:aa:b2:46:0f: c8:23:76:b2:92:22:c2:1f:df:59:35:a3:1b:e8:e5: 85:0c:fb:a7:12:4b:4d:f8:b1:8f:21:e9:d9:5f:52: 41:cd:ac:ce:da:85:72:18:16:f7:f4:95:a5:37:79: 2d:66:87:e2:9e:de:7b:95:6d:85:66:5f:d8:6b:c5: 36:d7:fa:0e:a0:de:ef:b9:db:ee:20:04:33:c0:df: b6:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:95:8D:79:96:DE:53:7F:B5:95:74:98:AE:FD:62:CC:DB:B2:B1:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/b8ab3838-6b1f-3f4d-ae7b-7804f1116e8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl X509v3 Authority Key Identifier: keyid:EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer sbgp-ipAddrBlock: critical IPv6: 2605:b040:c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:c9:32:0d:49:11:2c:bb:92:8b:59:bf:1e:13:18:03:91:a0: 7f:bb:fe:49:da:28:ff:e7:3d:9e:ec:3b:c4:cc:31:13:ee:d7: 50:5e:b4:f7:11:06:22:eb:06:e6:a2:9c:2e:99:37:93:43:ac: 45:97:f8:96:60:ea:10:bb:66:fc:4f:f6:b8:3d:ff:9e:8e:53: 01:4d:d7:e6:b6:ee:fa:46:10:2a:db:e6:c4:ee:77:2b:b2:c5: b0:a0:84:4b:ce:9c:17:16:3e:b0:be:82:f1:52:70:38:6f:8b: a6:f1:50:e2:ea:63:9f:62:33:09:d0:18:4a:55:36:75:d5:d9: 90:cd:81:b3:e1:49:ef:30:40:f0:3a:d8:ae:30:55:c6:c5:05: ff:97:87:2b:33:71:d8:58:c2:4b:18:3b:5e:50:81:65:59:5c: af:30:d1:1e:a6:f8:db:bd:30:96:54:d0:b7:f7:b6:a4:53:a8: b4:7b:51:ba:93:17:ec:5e:51:3f:02:a2:7e:eb:08:79:0d:82: 75:ed:4a:1a:88:a1:65:ed:b5:6a:5d:80:ea:ba:e0:a2:93:d9: 32:6c:af:ff:f8:b6:ad:9e:da:4f:d4:fe:eb:4b:48:ab:7d:17: 42:39:48:79:06:15:79:7e:10:12:14:4f:9f:bd:0d:55:87:72: 1d:d8:e0:a2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEvc9eRTcrxENMoHKwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmU5YzU4OTQtZjc5NC00MjA5LWEwMGQtY2YyMzIzNjNk N2M2MB4XDTI1MTExNTAyMDAzMloXDTI2MDIxMzAyMDAzMlowLzEtMCsGA1UEAxMk YzQyYTM2NjgtZWMwYS00NzUyLTkyMDUtMGE0YjYxYjEzNzBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhHSegzDSlBBZ2Dm6sABspPrvmvJJdR0Kg3O dQ7FZQTNWLOcEp8JbkG0WQT8TkZtBnOqLi6C/5+Dg6Npnl+B/2k/hvMFBZmHbfYn +AedNRS0jGn5ZWGt7upt2aMLv8+NRz1priG0/oSUgtvXV0uRpkds0VsG2YixeKX+ sgTykFHFhb9PY5VVTfwthqYl//HNwkVkEUIlfF+6h6++JLVblRT9WegHWlDrSST+ P3ibVqqyRg/II3aykiLCH99ZNaMb6OWFDPunEktN+LGPIenZX1JBzazO2oVyGBb3 9JWlN3ktZofint57lW2FZl/Ya8U21/oOoN7vudvuIAQzwN+21wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFE2VjXmW3lN/tZV0mK79YszbsrHIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82ZTlj NTg5NC1mNzk0LTQyMDktYTAwZC1jZjIzMjM2M2Q3YzYvYjhhYjM4MzgtNmIxZi0z ZjRkLWFlN2ItNzgwNGYxMTE2ZThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNmU5YzU4OTQtZjc5NC00MjA5LWEw MGQtY2YyMzIzNjNkN2M2LzZlOWM1ODk0LWY3OTQtNDIwOS1hMDBkLWNmMjMyMzYz ZDdjNi5jcmwwHwYDVR0jBBgwFoAU620+1MghuZYRngwJ/123iIBSlIUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82ZTljNTg5NC1mNzk0LTQyMDktYTAwZC1jZjIz MjM2M2Q3YzYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWwQAAM MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC3JMg1JESy7kotZvx4TGAORoH+7/knaKP/nPZ7sO8TMMRPu11Be tPcRBiLrBuainC6ZN5NDrEWX+JZg6hC7ZvxP9rg9/56OUwFN1+a27vpGECrb5sTu dyuyxbCghEvOnBcWPrC+gvFScDhvi6bxUOLqY59iMwnQGEpVNnXV2ZDNgbPhSe8w QPA62K4wVcbFBf+XhyszcdhYwksYO15QgWVZXK8w0R6m+Nu9MJZU0Lf3tqRTqLR7 UbqTF+xeUT8Con7rCHkNgnXtShqIoWXttWpdgOq64KKT2TJsr//4tq2e2k/U/utL SKt9F0I5SHkGFXl+EBIUT5+9DVWHch3Y4KI= -----END CERTIFICATE-----Generated at Tue Nov 18 10:39:42 2025 by rpki-client