$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9b044dce-dc34-33b7-beaa-1f08a8e9834a.roa File: 9b044dce-dc34-33b7-beaa-1f08a8e9834a.roa (raw, json) Hash identifier: LFxYTqrZlPah95XJr/H3tPTBF/s2QGGA4nEJNPowxSU= Subject key identifier: F5:FA:FD:0B:F4:8A:51:F7:70:EF:AF:5F:B8:71:3C:D2:73:79:65:D1 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA667BD5132F8EA4671A08640 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9b044dce-dc34-33b7-beaa-1f08a8e9834a.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 2606:4700:4409::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:bd:51:32:f8:ea:46:71:a0:86:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=b30b9f13-8faa-483d-8fce-56da4ae5a398 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:7b:bc:4c:92:0a:d9:59:29:6e:78:2f:23:32: 2f:ad:44:ca:5b:05:34:53:77:c9:ea:a7:54:7b:f9: 45:34:3f:9f:16:09:24:55:41:bc:6a:d9:73:26:e7: f3:8d:33:8e:cf:80:b7:31:ee:60:30:6e:a2:0c:5d: 1a:eb:23:4b:44:f0:d5:e5:3a:54:2e:42:a3:35:80: 28:25:6c:f2:81:57:85:e3:5a:24:d8:df:56:74:23: 49:99:ae:81:df:6f:08:91:7a:7e:7b:5a:ff:5f:30: 13:40:a5:5c:f8:85:d3:99:36:76:78:52:10:a7:b3: 4e:75:72:d6:7c:99:d5:27:e8:8b:b1:5d:50:d5:07: 3d:47:89:2f:78:56:3e:68:8d:a5:6f:99:45:53:f7: e4:24:77:5c:af:34:2e:51:e3:3a:2c:a5:97:86:ea: b7:fa:af:57:4c:3b:0a:12:a3:cb:8c:38:d5:cb:81: 83:dc:3f:28:4e:24:0a:b6:0a:5d:a7:67:34:a8:de: 9c:06:d1:ca:d7:5c:a2:3c:7b:1a:ac:e7:54:7c:19: 88:48:0f:b9:b9:6e:ad:77:71:ae:cb:8c:e9:78:4f: c1:ae:80:e1:19:43:ed:75:34:d3:6e:1c:8e:79:21: ed:f3:36:81:b8:ff:3c:c9:4e:02:40:f0:aa:42:7b: aa:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:FA:FD:0B:F4:8A:51:F7:70:EF:AF:5F:B8:71:3C:D2:73:79:65:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9b044dce-dc34-33b7-beaa-1f08a8e9834a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv6: 2606:4700:4409::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:c6:4e:17:76:51:1c:da:fa:0f:0f:02:64:5f:5d:a1:02:ec: 80:1a:a9:90:e7:e8:f4:ea:7e:f5:60:c5:85:e3:7f:21:df:92: 78:2f:49:b4:b9:62:59:e7:eb:ae:fb:a8:2b:d8:78:2a:e1:4f: 8c:31:6b:a4:cf:32:a8:76:15:d2:c8:de:64:bc:1c:9b:24:b9: ac:a7:75:e6:40:17:6f:cf:2d:c1:9e:5e:c5:ad:65:1e:12:4c: ec:38:8c:83:cd:f0:e2:37:3e:0a:66:d7:da:fd:ff:f2:0e:86: 62:99:0d:8a:9c:39:bd:86:3c:48:ca:78:46:a3:31:00:a5:99: 21:9a:34:49:42:0f:e0:1f:4d:d9:ab:88:39:67:7e:7b:af:66: 1b:81:5a:dc:95:71:29:90:25:0a:36:25:fe:b6:05:7f:2b:60: 1d:d2:cf:e2:6d:ff:c9:f4:44:ec:6e:3e:d3:19:81:46:c2:cf: 34:78:f6:a9:3e:1a:29:16:b9:27:27:bf:ef:51:1f:20:29:10: a3:10:07:b9:cb:f6:90:5a:5f:fe:d3:d7:8d:9b:6f:40:a3:87: 26:95:41:d8:6c:87:66:f6:8a:4d:1e:9f:c9:41:f6:68:61:0d: ee:c9:b7:a2:98:1c:19:c9:a1:ce:9d:e7:20:6b:e8:b8:03:01: b5:72:b1:c3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEumZ71RMvjqRnGghkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk YjMwYjlmMTMtOGZhYS00ODNkLThmY2UtNTZkYTRhZTVhMzk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAznu8TJIK2VkpbngvIzIvrUTKWwU0U3fJ6qdU e/lFND+fFgkkVUG8atlzJufzjTOOz4C3Me5gMG6iDF0a6yNLRPDV5TpULkKjNYAo JWzygVeF41ok2N9WdCNJma6B328IkXp+e1r/XzATQKVc+IXTmTZ2eFIQp7NOdXLW fJnVJ+iLsV1Q1Qc9R4kveFY+aI2lb5lFU/fkJHdcrzQuUeM6LKWXhuq3+q9XTDsK EqPLjDjVy4GD3D8oTiQKtgpdp2c0qN6cBtHK11yiPHsarOdUfBmISA+5uW6td3Gu y4zpeE/BroDhGUPtdTTTbhyOeSHt8zaBuP88yU4CQPCqQnuqLQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPX6/Qv0ilH3cO+vX7hxPNJzeWXRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOWIwNDRkY2UtZGMzNC0z M2I3LWJlYWEtMWYwOGE4ZTk4MzRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZHAEQJ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAXGThd2URza+g8PAmRfXaEC7IAaqZDn6PTqfvVgxYXjfyHfkngv SbS5Ylnn6677qCvYeCrhT4wxa6TPMqh2FdLI3mS8HJskuayndeZAF2/PLcGeXsWt ZR4STOw4jIPN8OI3Pgpm19r9//IOhmKZDYqcOb2GPEjKeEajMQClmSGaNElCD+Af TdmriDlnfnuvZhuBWtyVcSmQJQo2Jf62BX8rYB3Sz+Jt/8n0ROxuPtMZgUbCzzR4 9qk+GikWuScnv+9RHyApEKMQB7nL9pBaX/7T142bb0CjhyaVQdhsh2b2ik0en8lB 9mhhDe7Jt6KYHBnJoc6d5yBr6LgDAbVyscM= -----END CERTIFICATE-----Generated at Sat Nov 1 10:02:50 2025 by rpki-client