$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/252abf47-6efa-3e1b-ae6f-7b8afc5adf80.roa File: 252abf47-6efa-3e1b-ae6f-7b8afc5adf80.roa (raw, json) Hash identifier: oSIOEvKKIVbKStBJGDvdYwkovVbsfqKAlvXFqJxo8uE= Subject key identifier: 2D:59:82:AE:4E:F5:9C:3E:B5:8B:7B:D6:F4:23:1F:0A:9C:3B:FE:21 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584B477C9BD50B435E1DF0C99800 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/252abf47-6efa-3e1b-ae6f-7b8afc5adf80.roa Signing time: Mon 22 Sep 2025 13:00:42 +0000 ROA not before: Mon 22 Sep 2025 13:00:42 +0000 ROA not after: Sun 21 Dec 2025 14:00:42 +0000 asID: 13335 IP address blocks: 2606:4700:402b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:7c:9b:d5:0b:43:5e:1d:f0:c9:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Sep 22 13:00:42 2025 GMT Not After : Dec 21 14:00:42 2025 GMT Subject: CN=6e136ded-9824-4a8e-92f7-b1d27fa964c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:73:81:77:0e:99:94:e4:19:88:bb:f4:a7:d7: 69:b7:c1:2f:b2:77:19:08:ea:2f:a2:c3:9c:ea:67: 08:18:05:37:fc:1d:40:f2:81:e7:06:79:5c:dc:47: 0e:f1:65:9f:22:7e:80:c2:33:20:42:46:fb:95:78: fe:da:3a:f6:10:eb:be:e0:18:c5:52:aa:db:82:fd: 71:bb:74:9a:9f:d6:ad:b2:d2:03:9f:ab:92:a7:21: ed:e9:03:94:43:9d:7d:0f:82:eb:fe:38:72:9a:11: f1:81:99:11:ac:6b:54:58:ea:b5:37:0d:88:de:81: 31:e5:f4:bc:ce:7d:59:1f:d2:ef:de:45:06:24:0a: 8e:64:88:0e:cf:32:dc:01:48:92:1e:d8:75:81:d8: 5a:c7:a4:de:65:91:7f:d9:b8:14:a9:64:07:bc:29: 00:61:b3:70:65:bb:c0:09:4d:95:ec:77:17:f1:ac: 7a:ca:57:a9:a8:c9:21:74:25:9b:65:78:12:08:61: 14:63:cf:11:f6:0a:4f:fe:99:b5:a5:02:eb:ac:76: 20:8e:af:01:a4:18:d2:91:9b:73:10:62:d7:4d:88: a4:59:f5:2b:b3:f7:cb:25:9c:bc:b1:ba:6b:6b:2c: 82:64:dd:8c:36:54:72:3b:ff:22:fe:3a:a3:7e:8d: 4c:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:59:82:AE:4E:F5:9C:3E:B5:8B:7B:D6:F4:23:1F:0A:9C:3B:FE:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/252abf47-6efa-3e1b-ae6f-7b8afc5adf80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv6: 2606:4700:402b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:37:4b:a4:3b:4b:73:f1:b6:1f:41:53:50:e5:e2:eb:4f:c6: b2:13:5e:22:86:c0:58:45:fe:4f:29:e5:b7:4e:f0:ce:dd:a0: 60:82:4f:c6:6a:4c:75:cc:8e:4b:ef:65:2a:80:df:bd:f4:91: a7:14:ab:45:43:30:f7:b6:60:2b:c5:aa:d9:fc:75:d1:fd:58: bb:25:0c:0d:94:b6:cb:85:ac:5c:00:ca:17:47:05:4b:41:25: 3d:c9:71:bf:97:98:a5:f2:07:73:f5:0f:f3:ec:d3:0b:a2:43: cd:67:78:67:89:5b:20:a6:93:89:1d:d8:ad:3b:94:9f:8b:a9: 8f:ba:3d:e7:69:46:10:62:07:7d:c2:a6:37:12:fc:0a:fb:c1: 6f:d7:38:33:2f:58:c9:57:f1:fb:f7:c1:5f:68:a8:fe:99:3b: 05:ac:ab:ac:a5:8c:93:88:da:ae:15:16:12:ee:b9:a0:8f:18: b6:60:25:6a:12:39:0b:a5:3d:a1:70:2f:ea:1b:4a:da:71:74: 58:67:0d:9b:b0:2e:dd:72:35:7d:d2:23:26:c0:29:b1:e7:7c: dd:7b:6e:66:6a:f9:3b:89:b6:81:49:b0:8e:c6:07:20:e2:59: b1:c9:1c:a7:83:a1:e7:03:f9:67:e5:a3:38:55:ff:27:78:2b: c6:01:96:80 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtHfJvVC0NeHfDJmAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk NmUxMzZkZWQtOTgyNC00YThlLTkyZjctYjFkMjdmYTk2NGM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnOBdw6ZlOQZiLv0p9dpt8EvsncZCOovosOc 6mcIGAU3/B1A8oHnBnlc3EcO8WWfIn6AwjMgQkb7lXj+2jr2EOu+4BjFUqrbgv1x u3San9atstIDn6uSpyHt6QOUQ519D4Lr/jhymhHxgZkRrGtUWOq1Nw2I3oEx5fS8 zn1ZH9Lv3kUGJAqOZIgOzzLcAUiSHth1gdhax6TeZZF/2bgUqWQHvCkAYbNwZbvA CU2V7HcX8ax6ylepqMkhdCWbZXgSCGEUY88R9gpP/pm1pQLrrHYgjq8BpBjSkZtz EGLXTYikWfUrs/fLJZy8sbprayyCZN2MNlRyO/8i/jqjfo1M9QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFC1Zgq5O9Zw+tYt71vQjHwqcO/4hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMjUyYWJmNDctNmVmYS0z ZTFiLWFlNmYtN2I4YWZjNWFkZjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZHAEAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALQ3S6Q7S3Pxth9BU1Dl4utPxrITXiKGwFhF/k8p5bdO8M7doGCC T8ZqTHXMjkvvZSqA3730kacUq0VDMPe2YCvFqtn8ddH9WLslDA2UtsuFrFwAyhdH BUtBJT3Jcb+XmKXyB3P1D/Ps0wuiQ81neGeJWyCmk4kd2K07lJ+LqY+6PedpRhBi B33CpjcS/Ar7wW/XODMvWMlX8fv3wV9oqP6ZOwWsq6yljJOI2q4VFhLuuaCPGLZg JWoSOQulPaFwL+obStpxdFhnDZuwLt1yNX3SIybAKbHnfN17bmZq+TuJtoFJsI7G ByDiWbHJHKeDoecD+WflozhV/yd4K8YBloA= -----END CERTIFICATE-----Generated at Sat Nov 1 10:03:11 2025 by rpki-client