$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/593f93b4-eea3-4f8b-a272-fca95f2691d2/b449aea6-9e44-3a16-81d3-a102dccb47d9.roa File: b449aea6-9e44-3a16-81d3-a102dccb47d9.roa (raw, json) Hash identifier: y1W73FVnehPd1bxwkCKLxvpNmnBnGGt+QMlhvbphFl8= Subject key identifier: 2E:9B:85:37:3A:9B:35:53:40:40:B9:6D:E0:8F:C7:6E:71:2F:BD:C2 Certificate issuer: /CN=593f93b4-eea3-4f8b-a272-fca95f2691d2 Certificate serial: 010D0C9F4328584B821CD385AF0DB37EA5B152C0 Authority key identifier: 97:0B:8C:B5:7E:12:DB:A2:F1:49:9A:0D:13:91:5C:1B:B6:3B:C0:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/593f93b4-eea3-4f8b-a272-fca95f2691d2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/593f93b4-eea3-4f8b-a272-fca95f2691d2/b449aea6-9e44-3a16-81d3-a102dccb47d9.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 293 IP address blocks: 2001:400::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/593f93b4-eea3-4f8b-a272-fca95f2691d2/593f93b4-eea3-4f8b-a272-fca95f2691d2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/593f93b4-eea3-4f8b-a272-fca95f2691d2/593f93b4-eea3-4f8b-a272-fca95f2691d2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/593f93b4-eea3-4f8b-a272-fca95f2691d2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1c:d3:85:af:0d:b3:7e:a5:b1:52:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=593f93b4-eea3-4f8b-a272-fca95f2691d2 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=9b3f5e2d-2f3c-4892-85bb-3fe7ae91d632 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:88:b1:71:7f:63:63:8f:64:1a:32:22:c1:04: 8f:92:7f:00:b5:48:b6:e2:50:35:e8:ea:cd:f9:77: e5:10:84:1e:bd:72:e4:99:8f:ba:ed:31:39:26:12: 9e:91:09:b1:ed:22:cb:e7:8b:d6:56:e1:26:04:66: 0a:ca:59:33:a8:f0:ae:33:d2:11:74:55:aa:50:3b: 66:75:0c:ea:c3:14:4c:75:2e:f0:d5:24:4d:c9:23: c5:9a:2b:92:27:63:99:56:7e:bb:b1:ae:1b:5a:f1: b4:f5:a0:7b:d5:e4:58:e9:b0:8b:d2:c8:fd:13:04: f7:8e:af:a4:3d:e9:4a:94:3c:2e:72:4e:e4:c7:a9: 5d:2d:c3:46:8a:f9:77:ce:74:1e:a3:a6:82:e3:68: 85:32:2b:a3:fe:2d:cd:5c:7e:3d:30:5f:d0:21:6d: 2f:4f:7b:a3:e7:81:d5:73:ad:7d:0b:64:13:d5:bc: f9:f3:3c:d4:0c:7a:1b:80:44:dd:37:8f:76:00:79: 05:1e:fd:7e:ac:07:eb:c7:41:f9:4b:bd:37:c3:1e: 6c:fa:09:89:90:f2:78:6a:ea:90:d9:e9:62:29:aa: f2:b6:bc:c2:34:4d:0d:89:7f:e8:2d:30:c7:d0:73: d5:d8:03:ed:a1:8e:f6:16:d9:ab:84:3d:43:2e:39: 2e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:9B:85:37:3A:9B:35:53:40:40:B9:6D:E0:8F:C7:6E:71:2F:BD:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/593f93b4-eea3-4f8b-a272-fca95f2691d2/b449aea6-9e44-3a16-81d3-a102dccb47d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/593f93b4-eea3-4f8b-a272-fca95f2691d2/593f93b4-eea3-4f8b-a272-fca95f2691d2.crl X509v3 Authority Key Identifier: keyid:97:0B:8C:B5:7E:12:DB:A2:F1:49:9A:0D:13:91:5C:1B:B6:3B:C0:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/593f93b4-eea3-4f8b-a272-fca95f2691d2.cer sbgp-ipAddrBlock: critical IPv6: 2001:400::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:c9:0e:dd:92:b8:49:bc:0e:1b:a0:61:c8:2e:59:0f:23:4b: b8:17:b3:8e:86:9a:5c:ff:f1:d1:c6:4f:2b:87:aa:68:3f:f9: ce:a7:e0:8a:98:96:bc:90:28:05:a9:70:84:a0:4f:43:62:03: eb:44:9b:bb:2b:29:b3:42:ff:fa:fa:b4:6f:db:7c:b6:e8:b0: 1c:63:0c:60:0e:1e:45:04:06:8c:cc:2f:05:23:47:fc:d7:a2: 90:af:d0:23:9d:2d:70:67:0d:dd:2a:55:6e:77:a9:f3:2d:6c: 2c:93:77:22:8f:f0:05:39:65:0a:e5:ca:38:89:6e:ab:4c:8e: 96:05:26:12:3a:52:48:1a:8a:83:d8:6e:b1:80:44:9b:e6:91: 00:06:f6:24:94:60:e7:ca:74:9d:f6:e6:7b:f2:9b:d8:21:03: 5a:82:2e:6f:b5:ac:1d:0a:b5:b6:05:c7:d9:c2:da:1b:29:5f: 5e:28:55:c0:f4:af:43:34:3e:69:f4:d6:98:d8:13:2e:8f:0e: 59:5f:e9:b9:f5:99:73:c8:09:ef:1e:5b:a0:b5:99:b6:13:a4: 71:5c:04:65:b8:c8:70:72:3d:0c:ae:09:12:c3:cd:d7:26:f9: ac:18:45:e1:e5:c7:ed:56:33:d4:df:d2:6d:ff:f4:d3:21:1c: 20:2e:ff:09 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEuCHNOFrw2zfqWxUsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTkzZjkzYjQtZWVhMy00ZjhiLWEyNzItZmNhOTVmMjY5 MWQyMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk OWIzZjVlMmQtMmYzYy00ODkyLTg1YmItM2ZlN2FlOTFkNjMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4ixcX9jY49kGjIiwQSPkn8AtUi24lA16OrN +XflEIQevXLkmY+67TE5JhKekQmx7SLL54vWVuEmBGYKylkzqPCuM9IRdFWqUDtm dQzqwxRMdS7w1SRNySPFmiuSJ2OZVn67sa4bWvG09aB71eRY6bCL0sj9EwT3jq+k PelKlDwuck7kx6ldLcNGivl3znQeo6aC42iFMiuj/i3NXH49MF/QIW0vT3uj54HV c619C2QT1bz58zzUDHobgETdN492AHkFHv1+rAfrx0H5S703wx5s+gmJkPJ4auqQ 2eliKarytrzCNE0NiX/oLTDH0HPV2APtoY72FtmrhD1DLjkubwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFC6bhTc6mzVTQEC5beCPx25xL73CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81OTNm OTNiNC1lZWEzLTRmOGItYTI3Mi1mY2E5NWYyNjkxZDIvYjQ0OWFlYTYtOWU0NC0z YTE2LTgxZDMtYTEwMmRjY2I0N2Q5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTkzZjkzYjQtZWVhMy00ZjhiLWEy NzItZmNhOTVmMjY5MWQyLzU5M2Y5M2I0LWVlYTMtNGY4Yi1hMjcyLWZjYTk1ZjI2 OTFkMi5jcmwwHwYDVR0jBBgwFoAUlwuMtX4S26LxSZoNE5FcG7Y7wN0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81OTNmOTNiNC1lZWEzLTRmOGItYTI3Mi1mY2E5 NWYyNjkxZDIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAEEADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA7yQ7dkrhJvA4boGHILlkPI0u4F7OOhppc//HRxk8rh6poP/nOp+CK mJa8kCgFqXCEoE9DYgPrRJu7KymzQv/6+rRv23y26LAcYwxgDh5FBAaMzC8FI0f8 16KQr9AjnS1wZw3dKlVud6nzLWwsk3cij/AFOWUK5co4iW6rTI6WBSYSOlJIGoqD 2G6xgESb5pEABvYklGDnynSd9uZ78pvYIQNagi5vtawdCrW2BcfZwtobKV9eKFXA 9K9DND5p9NaY2BMujw5ZX+m59ZlzyAnvHlugtZm2E6RxXARluMhwcj0MrgkSw83X JvmsGEXh5cftVjPU39Jt//TTIRwgLv8J -----END CERTIFICATE-----Generated at Mon Nov 3 14:46:00 2025 by rpki-client