$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/987e77f7-2387-3132-b3e4-091864915016.roa File: 987e77f7-2387-3132-b3e4-091864915016.roa (raw, json) Hash identifier: Zw28XAxpUpH5fOs14PZPSPsbH08vaU8rJpVXtop9pfA= Subject key identifier: 53:8E:14:96:CC:87:A1:F4:AE:F7:03:FA:09:0E:61:CE:08:5B:33:BA Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB192805CEACFB2645FC0ACE0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/987e77f7-2387-3132-b3e4-091864915016.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 2606:4700:90::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:80:5c:ea:cf:b2:64:5f:c0:ac:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=ff4bd45e-7df1-43e1-af9d-3b8f25653b15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ad:82:a8:92:bb:6f:7b:92:2d:46:95:02:c3: 3f:fe:4a:47:57:58:74:0f:a8:b6:44:e8:44:5c:bb: b1:c5:7f:18:d1:3b:68:7a:aa:94:d7:57:b3:90:5f: 66:f0:d2:4b:c3:7c:7a:1a:3e:4d:0d:60:ad:bc:9f: 38:eb:40:6d:63:93:b6:c2:dd:d5:3a:9a:3b:e5:af: 70:2d:ee:22:e8:6e:39:3b:dc:08:fa:ff:4f:10:e8: 74:fe:c3:d5:fc:c2:87:8b:0b:23:23:c9:70:a0:3c: c5:8d:16:ea:12:c6:34:dd:ea:9d:ff:7c:5f:4c:ea: 32:f4:94:01:7d:49:5f:be:78:dc:7b:b1:08:44:20: 31:95:2b:8e:d2:70:4a:6d:1f:0a:d9:38:f8:4f:58: d8:7f:23:69:72:9c:5e:5f:59:fe:8e:55:77:9c:f3: 94:51:64:fc:6a:ea:47:6d:55:28:cd:fa:82:cf:8b: 86:ec:a1:c5:f9:33:7a:57:cf:7a:99:56:dc:5e:93: d9:38:32:22:09:aa:b6:76:ff:9c:65:4c:8c:a2:89: be:17:ef:33:b2:7f:3e:04:67:62:cf:3b:07:d4:ba: 48:c7:f9:59:44:d8:6b:38:c6:de:68:d1:e4:94:eb: 8d:6b:9a:2a:f2:ff:b6:15:f7:df:fb:fd:d4:40:d3: c6:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:8E:14:96:CC:87:A1:F4:AE:F7:03:FA:09:0E:61:CE:08:5B:33:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/987e77f7-2387-3132-b3e4-091864915016.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv6: 2606:4700:90::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:2b:59:70:30:4a:27:f4:ca:cf:de:74:74:64:fe:a4:a6:56: 51:56:02:d7:39:f3:3d:55:ca:9e:85:b5:c8:b5:0b:74:b6:e6: 41:4c:68:ea:06:dd:73:b3:21:68:77:4e:eb:53:1a:65:49:64: 60:ff:ef:af:cb:3c:13:fa:9f:1d:56:93:a8:06:f5:33:34:14: 3a:c5:07:bc:cb:48:39:0c:9a:9f:ee:2c:f0:55:57:58:81:6e: 6b:78:51:33:ca:06:7b:cf:b6:5d:70:d9:0e:8d:4b:cb:71:2d: 40:ad:ad:d3:86:e3:84:a9:fc:3e:72:a4:88:f7:3e:36:a1:af: 42:fc:b7:64:1a:85:6d:c2:85:e7:80:e4:9c:27:37:82:13:29: ab:05:ab:00:42:32:ad:ae:b4:21:59:72:2b:59:e1:6e:a1:3f: 97:96:1e:1d:01:03:a7:e5:b1:50:f4:c5:5c:a9:d1:89:61:88: e7:0e:58:ea:ee:af:28:cc:e3:7f:87:a6:6e:c4:2f:7b:d4:9a: d0:a3:5d:c7:fe:65:72:33:96:de:12:66:bf:e0:36:4b:4b:7b: d0:cf:ae:bc:16:70:54:e4:e6:ef:2e:43:0b:86:dd:52:97:7f: 33:6b:5b:83:0d:60:4a:c8:b3:04:38:24:f2:33:a9:3b:d2:a2: 70:d6:42:7d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuxkoBc6s+yZF/ArOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk ZmY0YmQ0NWUtN2RmMS00M2UxLWFmOWQtM2I4ZjI1NjUzYjE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuK2CqJK7b3uSLUaVAsM//kpHV1h0D6i2ROhE XLuxxX8Y0TtoeqqU11ezkF9m8NJLw3x6Gj5NDWCtvJ8460BtY5O2wt3VOpo75a9w Le4i6G45O9wI+v9PEOh0/sPV/MKHiwsjI8lwoDzFjRbqEsY03eqd/3xfTOoy9JQB fUlfvnjce7EIRCAxlSuO0nBKbR8K2Tj4T1jYfyNpcpxeX1n+jlV3nPOUUWT8aupH bVUozfqCz4uG7KHF+TN6V896mVbcXpPZODIiCaq2dv+cZUyMoom+F+8zsn8+BGdi zzsH1LpIx/lZRNhrOMbeaNHklOuNa5oq8v+2Ffff+/3UQNPG3wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFOOFJbMh6H0rvcD+gkOYc4IWzO6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOTg3ZTc3ZjctMjM4Ny0z MTMyLWIzZTQtMDkxODY0OTE1MDE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgZHAACQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHgrWXAwSif0ys/edHRk/qSmVlFWAtc58z1Vyp6Ftci1C3S25kFM aOoG3XOzIWh3TutTGmVJZGD/76/LPBP6nx1Wk6gG9TM0FDrFB7zLSDkMmp/uLPBV V1iBbmt4UTPKBnvPtl1w2Q6NS8txLUCtrdOG44Sp/D5ypIj3Pjahr0L8t2QahW3C heeA5JwnN4ITKasFqwBCMq2utCFZcitZ4W6hP5eWHh0BA6flsVD0xVyp0YlhiOcO WOruryjM43+Hpm7EL3vUmtCjXcf+ZXIzlt4SZr/gNktLe9DPrrwWcFTk5u8uQwuG 3VKXfzNrW4MNYErIswQ4JPIzqTvSonDWQn0= -----END CERTIFICATE-----Generated at Sat Nov 1 12:34:47 2025 by rpki-client