$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/823e9778-e6e3-4d85-a2e2-7e92cbc99f39/9bea7452-63e0-35f4-8552-3d2fb19d0f7c.roa File: 9bea7452-63e0-35f4-8552-3d2fb19d0f7c.roa (raw, json) Hash identifier: Ajn81mj779lVrtGfeaYzVvRPAxtlI38NRCFo69Ol+Js= Subject key identifier: 69:4E:14:18:FD:AC:DA:78:FB:B3:2B:2F:CA:08:C7:E0:C2:23:2C:E1 Certificate issuer: /CN=823e9778-e6e3-4d85-a2e2-7e92cbc99f39 Certificate serial: 010D0C9F4328584BB2F7B2FAEB909EC206FA7E00 Authority key identifier: 0D:38:03:4E:C1:C3:CE:A7:F1:ED:C0:C2:D6:BE:CF:44:BD:DA:E3:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/823e9778-e6e3-4d85-a2e2-7e92cbc99f39.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/823e9778-e6e3-4d85-a2e2-7e92cbc99f39/9bea7452-63e0-35f4-8552-3d2fb19d0f7c.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 984 IP address blocks: 2606:fb40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/823e9778-e6e3-4d85-a2e2-7e92cbc99f39/823e9778-e6e3-4d85-a2e2-7e92cbc99f39.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/823e9778-e6e3-4d85-a2e2-7e92cbc99f39/823e9778-e6e3-4d85-a2e2-7e92cbc99f39.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/823e9778-e6e3-4d85-a2e2-7e92cbc99f39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:b2:fa:eb:90:9e:c2:06:fa:7e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=823e9778-e6e3-4d85-a2e2-7e92cbc99f39 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=97efd213-6903-446d-82d3-2b696b88a1b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:73:1e:6c:24:4d:51:5d:df:71:78:d4:92:4a: 85:77:3d:e3:2f:9a:86:dd:61:ef:5d:ce:f0:2f:02: 52:3d:f1:c3:be:7e:4d:b2:94:6b:a3:3c:32:af:44: e3:e2:64:77:e2:c9:c4:56:f2:84:58:85:d2:b8:e0: c3:1e:78:3e:d7:c5:50:98:d9:7d:77:c0:e1:a4:d6: d5:1b:7a:98:47:4a:91:17:d6:27:24:69:b9:f6:ad: c8:99:e9:6f:25:fe:19:79:88:6f:57:9b:a4:fa:78: 4b:9a:bc:54:57:ef:75:e2:43:5a:52:5a:a4:dc:32: 5f:a1:3e:29:c2:46:2a:cd:30:dc:fb:fc:14:2c:fa: ba:ea:5c:f6:30:af:77:77:2c:77:83:10:05:9d:b5: 3a:2d:96:ef:f2:6b:fe:38:e9:9b:ae:0c:08:b8:5d: 64:45:96:04:98:fe:4a:64:0d:1b:f5:b9:21:55:8c: 06:22:bc:18:40:be:f3:dd:6d:3c:00:a2:32:60:a0: 74:a2:5d:fb:81:04:60:b9:8a:77:b6:d5:dc:c9:51: 56:5a:a9:f2:9a:78:16:8b:2c:f2:1c:78:cc:33:96: 3b:04:bf:05:fc:72:73:8d:4b:a9:0e:fd:0e:05:4e: 61:a9:4d:31:0c:41:32:ce:de:7f:df:f9:d2:43:d2: b3:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:4E:14:18:FD:AC:DA:78:FB:B3:2B:2F:CA:08:C7:E0:C2:23:2C:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/823e9778-e6e3-4d85-a2e2-7e92cbc99f39/9bea7452-63e0-35f4-8552-3d2fb19d0f7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/823e9778-e6e3-4d85-a2e2-7e92cbc99f39/823e9778-e6e3-4d85-a2e2-7e92cbc99f39.crl X509v3 Authority Key Identifier: keyid:0D:38:03:4E:C1:C3:CE:A7:F1:ED:C0:C2:D6:BE:CF:44:BD:DA:E3:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/823e9778-e6e3-4d85-a2e2-7e92cbc99f39.cer sbgp-ipAddrBlock: critical IPv6: 2606:fb40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c7:52:45:64:34:21:5e:c3:c3:1b:8f:45:52:1b:94:f5:bb:46: 8f:6d:b4:cc:5e:67:cc:7a:aa:c9:d6:f4:b3:63:e6:e0:47:86: 02:7a:f4:b8:ef:f9:22:4a:2d:3b:37:93:49:9f:d0:78:17:16: fe:1e:d6:04:a4:aa:47:70:ba:c1:0c:27:e3:a2:eb:d6:8b:d0: 61:2c:8b:d0:cc:78:43:b7:3b:d2:9a:0e:1e:03:4b:62:26:10: 4b:1e:51:95:bf:84:34:45:bf:94:b8:b5:ae:4f:13:a0:22:d0: 37:04:2e:95:e7:17:1f:fe:3a:00:1c:95:ce:d7:b2:3c:ea:e6: 4f:88:51:6d:cf:1f:47:51:61:f9:f9:50:d5:32:a7:55:6d:94: 60:35:02:36:2b:d2:72:eb:eb:f4:26:d4:5b:b7:59:3d:9f:17: d9:50:92:29:9e:e9:1d:cf:13:be:25:e1:89:c6:63:7d:95:83: 4d:78:bb:09:da:84:b6:b7:4e:90:2a:28:70:d6:a2:7d:49:13: ce:23:7d:c3:2f:fb:64:e9:60:1e:41:fe:43:68:8f:ed:ad:79: ad:3d:96:fc:ee:34:df:b7:14:83:40:4d:55:84:97:aa:d0:66: 30:7f:97:17:e5:7d:ef:83:d3:38:ef:17:2c:fd:23:11:36:df: f8:f7:e9:80 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEuy97L665Cewgb6fgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODIzZTk3NzgtZTZlMy00ZDg1LWEyZTItN2U5MmNiYzk5 ZjM5MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk OTdlZmQyMTMtNjkwMy00NDZkLTgyZDMtMmI2OTZiODhhMWIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXMebCRNUV3fcXjUkkqFdz3jL5qG3WHvXc7w LwJSPfHDvn5NspRrozwyr0Tj4mR34snEVvKEWIXSuODDHng+18VQmNl9d8DhpNbV G3qYR0qRF9YnJGm59q3ImelvJf4ZeYhvV5uk+nhLmrxUV+914kNaUlqk3DJfoT4p wkYqzTDc+/wULPq66lz2MK93dyx3gxAFnbU6LZbv8mv+OOmbrgwIuF1kRZYEmP5K ZA0b9bkhVYwGIrwYQL7z3W08AKIyYKB0ol37gQRguYp3ttXcyVFWWqnymngWiyzy HHjMM5Y7BL8F/HJzjUupDv0OBU5hqU0xDEEyzt5/3/nSQ9KzQQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGlOFBj9rNp4+7MrL8oIx+DCIyzhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi84MjNl OTc3OC1lNmUzLTRkODUtYTJlMi03ZTkyY2JjOTlmMzkvOWJlYTc0NTItNjNlMC0z NWY0LTg1NTItM2QyZmIxOWQwZjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvODIzZTk3NzgtZTZlMy00ZDg1LWEy ZTItN2U5MmNiYzk5ZjM5LzgyM2U5Nzc4LWU2ZTMtNGQ4NS1hMmUyLTdlOTJjYmM5 OWYzOS5jcmwwHwYDVR0jBBgwFoAUDTgDTsHDzqfx7cDC1r7PRL3a43wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi84MjNlOTc3OC1lNmUzLTRkODUtYTJlMi03ZTky Y2JjOTlmMzkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgb7QDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQDHUkVkNCFew8Mbj0VSG5T1u0aPbbTMXmfMeqrJ1vSzY+bgR4YCevS4 7/kiSi07N5NJn9B4Fxb+HtYEpKpHcLrBDCfjouvWi9BhLIvQzHhDtzvSmg4eA0ti JhBLHlGVv4Q0Rb+UuLWuTxOgItA3BC6V5xcf/joAHJXO17I86uZPiFFtzx9HUWH5 +VDVMqdVbZRgNQI2K9Jy6+v0JtRbt1k9nxfZUJIpnukdzxO+JeGJxmN9lYNNeLsJ 2oS2t06QKihw1qJ9SRPOI33DL/tk6WAeQf5DaI/trXmtPZb87jTftxSDQE1VhJeq 0GYwf5cX5X3vg9M47xcs/SMRNt/49+mA -----END CERTIFICATE-----Generated at Mon Nov 3 14:34:53 2025 by rpki-client