$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2f645575-2d7b-3b33-a072-dd2ef121f50b.roa File: 2f645575-2d7b-3b33-a072-dd2ef121f50b.roa (raw, json) Hash identifier: 1Oxfr7yjSniHlVx+5I0Ct02PrQCgK529m9k/ktS6pHc= Subject key identifier: ED:07:DF:AA:5D:4E:07:4E:6F:CC:A8:EC:38:5E:F6:3D:FC:94:59:EB Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA667BD1DB7F3FA692334BC00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2f645575-2d7b-3b33-a072-dd2ef121f50b.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 2606:4700:4405::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:bd:1d:b7:f3:fa:69:23:34:bc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=d7cfdee3-0a67-4af6-84ef-571fa761c2c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:07:ef:74:2d:3e:4f:ed:33:39:ab:61:d0:4d: a7:68:8a:76:31:65:cb:ae:2b:4d:3a:63:3e:c8:d8: 2d:5c:0a:f4:bc:28:3e:b2:34:87:07:9e:03:e7:7d: f2:c8:78:63:85:d3:42:28:60:2a:62:24:aa:dc:a2: 1a:94:fb:a5:d0:eb:fe:c9:22:ef:2d:e7:d6:d5:f5: d1:89:eb:3b:41:c1:ec:68:bc:7f:af:98:ab:51:3c: 88:a3:c6:d9:dd:c6:c4:b1:c5:20:89:00:39:bc:1b: d8:2f:49:e6:99:6e:61:29:d7:6c:5a:26:71:2e:ea: c4:fd:ad:ba:5e:72:ee:a7:1f:33:53:c4:c4:ea:b6: 9c:e8:af:57:7f:9b:46:c4:f0:82:85:6f:e4:08:34: 4c:c5:98:4c:0d:16:83:60:cb:66:29:32:80:95:9e: 08:2f:a9:99:89:7d:ac:6e:60:a6:ad:8d:2e:ae:ea: 13:5b:0f:00:34:b2:0d:c3:2f:5f:09:63:65:95:ca: 10:08:e5:2c:57:00:fc:b4:24:3c:c0:ec:02:8e:68: 38:0e:24:c2:ee:9b:c2:10:85:e3:9b:82:95:8a:9a: 10:d1:10:54:d2:6d:4b:2e:29:a5:5d:d9:e0:57:9e: 5f:e2:c7:ca:4d:a3:d4:30:4b:6a:ad:63:d1:97:9e: 1c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:07:DF:AA:5D:4E:07:4E:6F:CC:A8:EC:38:5E:F6:3D:FC:94:59:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2f645575-2d7b-3b33-a072-dd2ef121f50b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv6: 2606:4700:4405::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:82:98:de:11:2d:14:8c:b8:c0:b3:9f:f8:3d:6f:a7:d6:f3: 79:25:59:3b:88:4c:89:0b:f0:39:e7:d6:21:75:75:bf:9d:f0: 88:92:32:e7:0e:ed:16:65:07:b9:1b:33:3f:a3:b6:a4:c8:d9: a4:55:19:c4:5a:c0:04:d0:5f:28:60:85:33:7c:e1:a1:8d:dc: 7a:b3:0e:38:4d:a1:c5:7b:50:18:4d:da:81:de:88:44:f9:2c: c0:59:a3:d1:71:e5:a6:17:13:bd:e2:b6:fa:b3:ac:e1:80:e2: 45:d4:da:ec:b6:e3:bb:43:fe:09:e4:81:42:8d:08:f9:f2:0d: 35:29:a4:53:f5:0b:ab:ed:dd:5c:5b:5a:a5:85:0f:99:4c:a7: a6:d1:20:a0:8a:72:08:43:55:df:ae:8f:7f:7b:61:be:b2:c2: 5e:90:03:fa:48:80:b4:11:19:15:ea:6a:2d:d2:98:42:cb:7f: 35:fa:98:91:93:f9:bd:fd:fc:20:1c:92:77:55:c6:63:16:c4: 96:c0:85:34:33:14:1e:6b:6b:bf:fb:d8:ae:de:b3:94:cf:59: 78:8a:47:8d:28:10:d8:f5:26:65:31:f2:4b:b1:6e:8c:43:36: 17:2a:7d:5c:2c:80:0b:9c:6d:3f:3c:d1:98:fc:8d:d1:fc:40: b0:8e:e6:59 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEumZ70dt/P6aSM0vAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk ZDdjZmRlZTMtMGE2Ny00YWY2LTg0ZWYtNTcxZmE3NjFjMmMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywfvdC0+T+0zOath0E2naIp2MWXLritNOmM+ yNgtXAr0vCg+sjSHB54D533yyHhjhdNCKGAqYiSq3KIalPul0Ov+ySLvLefW1fXR ies7QcHsaLx/r5irUTyIo8bZ3cbEscUgiQA5vBvYL0nmmW5hKddsWiZxLurE/a26 XnLupx8zU8TE6rac6K9Xf5tGxPCChW/kCDRMxZhMDRaDYMtmKTKAlZ4IL6mZiX2s bmCmrY0uruoTWw8ANLINwy9fCWNllcoQCOUsVwD8tCQ8wOwCjmg4DiTC7pvCEIXj m4KVipoQ0RBU0m1LLimlXdngV55f4sfKTaPUMEtqrWPRl54cbwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFO0H36pdTgdOb8yo7Dhe9j38lFnrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMmY2NDU1NzUtMmQ3Yi0z YjMzLWEwNzItZGQyZWYxMjFmNTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZHAEQF MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKqCmN4RLRSMuMCzn/g9b6fW83klWTuITIkL8Dnn1iF1db+d8IiS MucO7RZlB7kbMz+jtqTI2aRVGcRawATQXyhghTN84aGN3HqzDjhNocV7UBhN2oHe iET5LMBZo9Fx5aYXE73itvqzrOGA4kXU2uy247tD/gnkgUKNCPnyDTUppFP1C6vt 3VxbWqWFD5lMp6bRIKCKcghDVd+uj397Yb6ywl6QA/pIgLQRGRXqai3SmELLfzX6 mJGT+b39/CAckndVxmMWxJbAhTQzFB5ra7/72K7es5TPWXiKR40oENj1JmUx8kux boxDNhcqfVwsgAucbT880Zj8jdH8QLCO5lk= -----END CERTIFICATE-----Generated at Sat Nov 1 12:31:07 2025 by rpki-client