$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0ca3eaa3-8ac6-34c7-9893-0b58490c2614.roa File: 0ca3eaa3-8ac6-34c7-9893-0b58490c2614.roa (raw, json) Hash identifier: W7fgtaUctSCv4le9vY/MubEvF/hjyFXWSZ2Lu6BRzYk= Subject key identifier: B1:B0:B8:E5:52:21:D5:43:12:43:1E:D1:CA:00:8C:70:B4:A2:C7:66 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA9327D00763E58712B9A02C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0ca3eaa3-8ac6-34c7-9893-0b58490c2614.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 2606:4700:d1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:7d:00:76:3e:58:71:2b:9a:02:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=f9979a94-b0df-4786-8c1d-570b45ced20d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:6f:77:f8:72:4e:dd:19:40:47:d1:75:fb:db: 17:15:0e:e9:f6:6d:9e:17:0c:64:66:b2:88:42:12: ee:b2:03:16:bc:98:1c:e2:19:8c:33:35:9c:c7:f0: 80:cb:f4:bd:a0:f2:bf:e2:3b:7f:24:0a:f5:9f:69: 4d:c5:f0:95:c0:c1:a8:38:5b:d9:50:b2:1f:36:19: cd:28:29:2e:54:21:00:84:ba:22:72:db:9a:67:01: b0:6a:59:e8:be:25:36:e6:ff:b9:89:64:33:4c:ef: 4a:53:9d:ea:26:58:0c:5d:76:54:a6:c9:7d:d5:a8: 88:6b:d6:a5:9d:b1:31:df:61:c1:db:3f:ca:0b:24: c5:f7:c3:ef:9d:ea:75:ae:67:d2:c7:87:e1:cb:80: d2:c9:47:48:cc:e4:c8:4b:68:3b:cd:86:f0:e5:da: 9c:4d:10:0d:65:81:50:e4:45:a5:f3:36:20:17:8c: 41:d9:dc:3b:a0:dd:35:06:d9:63:59:c4:a9:d1:7a: 75:0d:9f:39:45:72:d7:53:ee:5d:c6:7e:14:f0:0f: ad:1b:d5:f4:5f:bf:14:c7:df:6f:de:7a:0c:a7:23: c9:45:a7:7f:fa:e4:b6:09:ec:98:4b:13:2f:cc:22: a3:74:2d:33:71:29:b1:ad:8f:f8:73:f3:0e:8c:02: 81:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:B0:B8:E5:52:21:D5:43:12:43:1E:D1:CA:00:8C:70:B4:A2:C7:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0ca3eaa3-8ac6-34c7-9893-0b58490c2614.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv6: 2606:4700:d1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:8f:02:27:39:d2:56:fd:1d:47:40:c2:92:04:32:10:ad:36: 7f:fa:37:74:ce:69:93:d7:0f:18:aa:4e:3b:6a:92:de:9a:0b: 9e:f9:f1:f6:72:49:9a:12:2b:15:95:52:18:e0:d7:92:ce:73: 23:97:f7:60:b8:b0:9c:90:e4:e1:2c:a1:93:3e:a0:79:3a:de: 4b:87:cb:7f:9b:17:65:5a:5a:86:7b:73:1f:cb:42:c8:e6:4b: a0:54:8e:2f:60:cd:f2:47:70:a8:dc:57:77:cc:9e:61:0e:13: 24:30:57:c2:e4:bf:9c:fb:c1:a6:03:fe:71:0a:b4:ff:41:dd: d6:15:05:93:6f:9e:3f:36:48:77:6d:59:1e:ab:0f:11:82:89: f8:44:6f:7f:3f:3e:d8:df:df:ce:d7:8e:64:aa:3d:64:e3:50: bd:33:f2:33:0a:85:4c:6e:37:f7:ba:ab:7c:08:fd:68:92:f2: b7:55:bf:f1:5e:9e:1a:15:b1:33:c8:3c:78:50:5b:a5:3b:04: 61:2e:de:ac:c4:a6:63:51:b1:68:ab:1b:2b:e4:30:6d:09:3d: 16:b6:99:a4:ab:77:83:07:89:22:7c:aa:a3:e0:55:25:f6:61: 7c:d6:64:ba:11:9b:4b:19:d9:af:7c:0f:38:5f:3c:3a:3d:4e: 33:0d:de:aa -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEupMn0Adj5YcSuaAsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk Zjk5NzlhOTQtYjBkZi00Nzg2LThjMWQtNTcwYjQ1Y2VkMjBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgG93+HJO3RlAR9F1+9sXFQ7p9m2eFwxkZrKI QhLusgMWvJgc4hmMMzWcx/CAy/S9oPK/4jt/JAr1n2lNxfCVwMGoOFvZULIfNhnN KCkuVCEAhLoictuaZwGwalnoviU25v+5iWQzTO9KU53qJlgMXXZUpsl91aiIa9al nbEx32HB2z/KCyTF98Pvnep1rmfSx4fhy4DSyUdIzOTIS2g7zYbw5dqcTRANZYFQ 5EWl8zYgF4xB2dw7oN01BtljWcSp0Xp1DZ85RXLXU+5dxn4U8A+tG9X0X78Ux99v 3noMpyPJRad/+uS2CeyYSxMvzCKjdC0zcSmxrY/4c/MOjAKBqwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLGwuOVSIdVDEkMe0coAjHC0osdmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMGNhM2VhYTMtOGFjNi0z NGM3LTk4OTMtMGI1ODQ5MGMyNjE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZHAADR MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGSPAic50lb9HUdAwpIEMhCtNn/6N3TOaZPXDxiqTjtqkt6aC575 8fZySZoSKxWVUhjg15LOcyOX92C4sJyQ5OEsoZM+oHk63kuHy3+bF2VaWoZ7cx/L QsjmS6BUji9gzfJHcKjcV3fMnmEOEyQwV8Lkv5z7waYD/nEKtP9B3dYVBZNvnj82 SHdtWR6rDxGCifhEb38/Ptjf387XjmSqPWTjUL0z8jMKhUxuN/e6q3wI/WiS8rdV v/FenhoVsTPIPHhQW6U7BGEu3qzEpmNRsWirGyvkMG0JPRa2maSrd4MHiSJ8qqPg VSX2YXzWZLoRm0sZ2a98DzhfPDo9TjMN3qo= -----END CERTIFICATE-----Generated at Sat Nov 1 09:59:28 2025 by rpki-client