$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2b2880f6-3011-3457-91e9-f1dd0625ae49.roa File: 2b2880f6-3011-3457-91e9-f1dd0625ae49.roa (raw, json) Hash identifier: m7E8qWzxYuj5T1Uih6EuIZu66iORcvzalZOEXiTFAy4= Subject key identifier: 21:23:D7:62:73:25:FC:67:C8:CD:37:FF:BB:E2:F7:59:2D:86:75:39 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB19272C75AB3F936FD66B7C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2b2880f6-3011-3457-91e9-f1dd0625ae49.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 2606:4700:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:72:c7:5a:b3:f9:36:fd:66:b7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=28a3c646-9406-4755-ac16-d6e81a6a0026 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:62:73:fa:dd:1b:08:cd:06:e5:10:0c:20:28: b5:86:7c:ff:3d:7d:50:c1:6f:75:42:df:45:78:3c: f7:07:87:b0:bc:d5:e6:61:78:40:44:03:4b:43:71: d3:3c:d9:9f:6b:6f:4c:2c:cd:b3:2b:09:a9:27:30: c7:1e:1c:fe:0e:3d:64:be:80:04:14:08:5b:1f:dd: f4:b9:90:46:67:54:ce:74:b5:b7:43:b2:73:7a:28: e2:23:1b:75:b0:14:ec:dc:70:2e:84:c3:0e:a8:2c: 0e:22:dd:00:f8:7f:bc:2d:ce:42:a4:d3:57:5a:20: 24:fd:59:d4:27:65:8b:73:bc:fd:f6:fc:aa:16:49: 5a:fd:e4:3c:88:6b:44:57:5c:1a:60:85:08:ca:88: 59:9c:e5:0c:cc:74:78:59:e9:5b:63:29:42:5e:f7: a3:ef:c6:5f:a6:b5:9b:11:c2:2a:7f:70:89:03:b9: bb:40:27:6d:29:d9:ec:3a:03:5b:dd:f8:c2:31:95: 1d:41:15:7a:31:ac:84:a2:82:4b:eb:d4:47:bf:14: 36:11:9f:eb:f6:ac:cb:76:2f:75:d4:4f:c3:e0:69: 33:48:7b:87:61:ac:8c:36:df:d3:0c:9b:f4:f6:67: c8:d5:48:33:d3:6c:c5:34:96:80:24:b3:e3:22:0e: 9a:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:23:D7:62:73:25:FC:67:C8:CD:37:FF:BB:E2:F7:59:2D:86:75:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2b2880f6-3011-3457-91e9-f1dd0625ae49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv6: 2606:4700:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:b7:67:b8:5c:84:2d:85:96:63:4a:ec:0d:a7:19:8d:bc:55: 18:c1:f1:0a:ab:aa:a9:56:b1:b9:0b:9c:59:e2:3b:6b:ce:e9: 79:25:eb:eb:9b:e6:a3:dc:41:a4:55:b3:ec:13:49:94:8c:da: b8:cd:f8:4a:ca:b9:ce:3c:b5:3b:1a:34:f0:0f:01:ad:d2:9a: 16:20:39:cb:a7:78:84:6e:4c:9e:2a:03:a1:72:bb:e0:3e:b2: db:f2:2a:b2:8b:0e:ac:d9:25:7d:c1:90:b8:8c:0a:64:68:9e: 13:3c:81:f7:f1:14:d1:29:28:ff:37:83:dc:61:bd:df:33:fa: 5b:09:84:89:fe:0d:57:9e:b3:7a:7b:ea:dc:69:cc:49:01:46: 8a:6d:35:ed:1c:9e:67:86:aa:98:c3:3d:f5:63:48:35:5b:53: 5f:36:6e:94:91:1b:00:cd:ec:a5:ee:b1:3c:4a:5b:56:2f:e1: 81:06:6b:9d:48:e7:51:94:16:48:2f:1d:9e:59:05:a4:51:e3: 3b:96:85:56:2c:4e:39:99:d0:81:c4:7c:39:85:f3:97:3e:40: c8:3b:3f:8a:f9:6d:5d:13:17:11:96:9c:f5:07:f5:3b:29:87: dc:f1:40:ab:bc:a8:18:17:6a:03:7b:42:ad:de:f1:30:20:eb: 87:37:fb:33 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuxknLHWrP5Nv1mt8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk MjhhM2M2NDYtOTQwNi00NzU1LWFjMTYtZDZlODFhNmEwMDI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2Jz+t0bCM0G5RAMICi1hnz/PX1QwW91Qt9F eDz3B4ewvNXmYXhARANLQ3HTPNmfa29MLM2zKwmpJzDHHhz+Dj1kvoAEFAhbH930 uZBGZ1TOdLW3Q7JzeijiIxt1sBTs3HAuhMMOqCwOIt0A+H+8Lc5CpNNXWiAk/VnU J2WLc7z99vyqFkla/eQ8iGtEV1waYIUIyohZnOUMzHR4WelbYylCXvej78ZfprWb EcIqf3CJA7m7QCdtKdnsOgNb3fjCMZUdQRV6MayEooJL69RHvxQ2EZ/r9qzLdi91 1E/D4GkzSHuHYayMNt/TDJv09mfI1Ugz02zFNJaAJLPjIg6aMwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCEj12JzJfxnyM03/7vi91kthnU5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMmIyODgwZjYtMzAxMS0z NDU3LTkxZTktZjFkZDA2MjVhZTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZHAAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJ63Z7hchC2FlmNK7A2nGY28VRjB8QqrqqlWsbkLnFniO2vO6Xkl 6+ub5qPcQaRVs+wTSZSM2rjN+ErKuc48tTsaNPAPAa3SmhYgOcuneIRuTJ4qA6Fy u+A+stvyKrKLDqzZJX3BkLiMCmRonhM8gffxFNEpKP83g9xhvd8z+lsJhIn+DVee s3p76txpzEkBRoptNe0cnmeGqpjDPfVjSDVbU182bpSRGwDN7KXusTxKW1Yv4YEG a51I51GUFkgvHZ5ZBaRR4zuWhVYsTjmZ0IHEfDmF85c+QMg7P4r5bV0TFxGWnPUH 9Tsph9zxQKu8qBgXagN7Qq3e8TAg64c3+zM= -----END CERTIFICATE-----Generated at Sat Nov 1 10:00:48 2025 by rpki-client