$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5311ad24-87c1-3f2b-99ca-8a69266c0972.roa File: 5311ad24-87c1-3f2b-99ca-8a69266c0972.roa (raw, json) Hash identifier: dbsfdMga6xpSnywr5vG4Q1XeenWawq4tnC1nWNN6Q6c= Subject key identifier: CD:F2:E4:CF:BC:58:80:EA:35:B6:B2:C2:38:37:A4:EE:52:00:FD:92 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB1927300CAE9B901426E0560 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5311ad24-87c1-3f2b-99ca-8a69266c0972.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 2606:4700:40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:73:00:ca:e9:b9:01:42:6e:05:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=bd75507f-b810-4c29-8251-21f8bd4c4199 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:9d:90:b3:99:1d:25:79:1d:d7:80:5b:f8:7d: 40:a8:1d:ee:73:82:c8:0c:cc:f2:31:cb:c4:16:c0: e3:ea:91:2b:81:df:8c:ff:12:d3:7d:9c:6f:7a:88: 24:bc:69:df:02:eb:80:50:d6:3a:31:de:5e:fc:ad: 9c:69:88:94:0c:4f:68:a3:f0:ad:15:fc:33:49:07: a8:5c:50:17:20:c9:19:83:1d:ae:63:dd:82:17:2d: e5:76:45:22:a2:2f:df:11:79:be:45:43:21:64:01: 2a:25:d7:d9:ec:6d:8c:94:32:dc:3e:18:a9:ee:53: 94:50:94:41:d4:00:82:38:f1:c5:0c:81:15:79:85: 8d:63:cf:64:63:9f:55:8f:63:57:14:ac:b6:6d:4e: ca:7b:7b:e3:c3:dc:45:b3:09:7d:00:4a:13:fe:be: d2:88:f6:ed:5f:4d:3f:5c:fc:71:13:a6:72:33:09: 6a:25:9a:cb:a5:85:95:84:5c:6c:1b:8a:52:7a:17: ba:82:01:c2:1d:df:6d:8b:f2:ba:b0:b1:df:ab:76: d1:fe:c8:f7:9f:28:85:7c:95:b7:67:fd:c8:e2:fb: 0a:68:6d:02:dd:52:ff:17:c9:1e:4d:a5:f4:00:56: 4b:cf:75:75:34:f5:92:da:da:a6:a6:4a:99:c8:23: 69:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:F2:E4:CF:BC:58:80:EA:35:B6:B2:C2:38:37:A4:EE:52:00:FD:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5311ad24-87c1-3f2b-99ca-8a69266c0972.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv6: 2606:4700:40::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:6a:58:c4:5a:0d:79:09:47:6d:78:2d:69:fd:7e:7c:4a:5e: 03:76:56:0e:d2:8a:95:df:7a:2f:9f:00:67:82:15:15:05:58: d5:d2:95:a8:3d:34:36:34:5d:ba:1f:76:4e:ec:47:3c:6f:bf: 3b:84:73:3a:6a:91:a2:43:98:a9:5e:33:79:46:ee:2c:c8:9f: 66:a6:d9:30:1a:f9:67:c2:2c:44:e4:19:5f:79:5e:48:fe:c2: ba:0c:dd:e5:c5:1f:8b:ed:df:7e:29:41:67:20:f6:a8:8e:4d: 43:fc:cb:04:74:43:d8:e4:d8:ee:df:de:03:ce:45:07:41:25: 81:f4:87:da:02:8d:e5:65:c5:2f:44:63:e4:c8:54:2c:81:37: 8b:c2:5c:bb:53:ed:39:ae:d5:7c:dd:b8:33:f8:b5:ad:d1:aa: f6:2d:ed:eb:f2:b7:8c:62:43:b3:fc:99:b2:9e:53:9c:8a:63: ec:f1:9f:8e:09:68:25:eb:10:26:47:24:1d:9a:ea:0a:32:4a: b5:f7:27:3c:96:23:f4:8d:00:82:35:92:58:de:10:ac:79:85: e0:94:ab:bc:00:48:04:42:b1:37:1b:09:eb:49:1c:9f:5c:dd: 4b:d0:c7:9c:d7:db:8f:c2:9b:a6:0e:6c:4e:b5:73:81:df:df: 80:9d:5e:c4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuxknMAyum5AUJuBWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk YmQ3NTUwN2YtYjgxMC00YzI5LTgyNTEtMjFmOGJkNGM0MTk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAip2Qs5kdJXkd14Bb+H1AqB3uc4LIDMzyMcvE FsDj6pErgd+M/xLTfZxveogkvGnfAuuAUNY6Md5e/K2caYiUDE9oo/CtFfwzSQeo XFAXIMkZgx2uY92CFy3ldkUioi/fEXm+RUMhZAEqJdfZ7G2MlDLcPhip7lOUUJRB 1ACCOPHFDIEVeYWNY89kY59Vj2NXFKy2bU7Ke3vjw9xFswl9AEoT/r7SiPbtX00/ XPxxE6ZyMwlqJZrLpYWVhFxsG4pSehe6ggHCHd9ti/K6sLHfq3bR/sj3nyiFfJW3 Z/3I4vsKaG0C3VL/F8keTaX0AFZLz3V1NPWS2tqmpkqZyCNpJQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFM3y5M+8WIDqNbaywjg3pO5SAP2SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNTMxMWFkMjQtODdjMS0z ZjJiLTk5Y2EtOGE2OTI2NmMwOTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZHAABA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAL5qWMRaDXkJR214LWn9fnxKXgN2Vg7SipXfei+fAGeCFRUFWNXS lag9NDY0Xbofdk7sRzxvvzuEczpqkaJDmKleM3lG7izIn2am2TAa+WfCLETkGV95 Xkj+wroM3eXFH4vt334pQWcg9qiOTUP8ywR0Q9jk2O7f3gPORQdBJYH0h9oCjeVl xS9EY+TIVCyBN4vCXLtT7Tmu1XzduDP4ta3RqvYt7evyt4xiQ7P8mbKeU5yKY+zx n44JaCXrECZHJB2a6goySrX3JzyWI/SNAII1kljeEKx5heCUq7wASARCsTcbCetJ HJ9c3UvQx5zX24/Cm6YObE61c4Hf34CdXsQ= -----END CERTIFICATE-----Generated at Sat Nov 1 12:34:44 2025 by rpki-client