$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/ba69d26a-7894-3495-bdb5-7db977ec90ec.roa File: ba69d26a-7894-3495-bdb5-7db977ec90ec.roa (raw, json) Hash identifier: JifwjbQLwyrOV7HSJKfyGeLfP3VCDM1je/1bQO0CBZw= Subject key identifier: 4C:EC:CF:88:8C:C8:DE:F8:7F:EE:48:48:26:4E:CA:BD:2B:A1:47:02 Certificate issuer: /CN=208edf3a-73a5-4614-9c76-5702d5c88977 Certificate serial: 010D0C9F4328584BA39D0B7D7BAC0FE9E52BE680 Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/ba69d26a-7894-3495-bdb5-7db977ec90ec.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 16509 IP address blocks: 2605:dd40:8f00::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:0b:7d:7b:ac:0f:e9:e5:2b:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=92f1976f-d5a9-43be-95b8-70a24cb08ba3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:fb:72:36:d9:9a:6e:30:23:f6:f9:ea:76:ca: 0e:a6:cd:5a:3c:6b:32:88:d4:25:71:09:bf:54:87: ff:7c:4d:64:b6:ba:8d:ad:9a:27:50:04:59:e8:19: 3a:87:07:bd:6b:8b:c7:bf:fb:87:e8:15:01:97:db: f1:fb:66:c1:cb:5f:cd:84:14:02:b1:28:a3:a3:54: cb:19:da:cb:cd:67:40:44:1b:84:2c:18:f5:93:94: f3:44:9d:d6:37:03:d8:ce:ea:fc:bf:e8:b7:17:0b: 78:a1:4a:d3:a3:4b:50:a4:5e:dd:9b:b8:1b:4b:31: f8:c4:1d:36:bd:6e:4d:33:6a:90:a4:a9:20:17:74: 43:9e:0d:36:bc:b5:ec:a1:67:26:41:e8:ec:43:05: c8:33:89:a5:e3:c3:9d:c7:35:fb:51:2a:62:8e:6c: e0:e1:7c:a8:88:4c:05:95:09:b6:17:fd:24:c4:1a: dc:a1:7c:9a:25:2b:53:78:93:a2:c7:05:8f:b7:c9: 54:d3:6a:ef:73:f3:e6:27:d5:be:eb:1c:5b:36:1d: 8a:52:3b:2b:b3:f8:67:99:d9:30:19:35:b2:8d:81: e7:b1:b9:7c:93:9f:c5:6d:ee:4c:1b:8b:70:f9:c1: c8:e9:0d:46:72:27:30:0b:c5:0d:b1:86:77:13:d4: 5e:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:EC:CF:88:8C:C8:DE:F8:7F:EE:48:48:26:4E:CA:BD:2B:A1:47:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/ba69d26a-7894-3495-bdb5-7db977ec90ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl X509v3 Authority Key Identifier: keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer sbgp-ipAddrBlock: critical IPv6: 2605:dd40:8f00::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:b2:c1:f6:d9:8b:e8:a9:dd:ca:58:90:41:82:28:ff:24:c4: d7:7c:ea:3e:7a:b4:fc:d2:f5:34:e4:68:13:2f:5e:33:30:e0: 08:21:1c:1d:f6:cd:db:71:a8:23:9a:13:cc:d0:57:66:fe:16: 6e:fd:db:5b:e6:9a:1b:58:52:0b:64:fa:c2:78:9f:d7:31:6b: 01:71:18:04:26:fb:68:ae:d4:32:d1:8b:90:78:37:91:e3:17: 92:7c:ae:81:ec:b4:57:d8:03:27:9f:70:10:ed:be:46:53:1b: a6:0b:3e:fb:03:29:11:f9:8d:85:a4:5e:c9:07:ad:35:9d:d5: 7e:33:e8:ff:c9:1e:89:76:c5:d0:35:4a:22:60:5c:ec:27:fa: e7:8f:87:4f:d8:b8:fb:68:dd:9f:fa:9d:08:f5:a3:9d:68:6a: 61:5a:43:41:ba:53:79:fd:09:8e:75:c3:31:56:38:56:cc:0c: 0a:7d:b0:7e:60:a2:2f:0f:2b:cf:ad:74:f8:e2:9c:77:80:ba: 58:1b:9a:16:04:42:8d:a5:b8:c5:0a:f3:52:8a:1b:9f:1e:a1: 79:44:86:2a:de:0a:56:4d:bc:e1:5c:26:57:61:07:ad:32:21: aa:14:fb:cb:49:03:a7:a4:1e:03:29:6b:af:66:f4:0d:fc:e5: 4c:4d:94:4d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEujnQt9e6wP6eUr5oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjA4ZWRmM2EtNzNhNS00NjE0LTljNzYtNTcwMmQ1Yzg4 OTc3MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk OTJmMTk3NmYtZDVhOS00M2JlLTk1YjgtNzBhMjRjYjA4YmEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPtyNtmabjAj9vnqdsoOps1aPGsyiNQlcQm/ VIf/fE1ktrqNrZonUARZ6Bk6hwe9a4vHv/uH6BUBl9vx+2bBy1/NhBQCsSijo1TL GdrLzWdARBuELBj1k5TzRJ3WNwPYzur8v+i3Fwt4oUrTo0tQpF7dm7gbSzH4xB02 vW5NM2qQpKkgF3RDng02vLXsoWcmQejsQwXIM4ml48OdxzX7USpijmzg4XyoiEwF lQm2F/0kxBrcoXyaJStTeJOixwWPt8lU02rvc/PmJ9W+6xxbNh2KUjsrs/hnmdkw GTWyjYHnsbl8k5/Fbe5MG4tw+cHI6Q1GcicwC8UNsYZ3E9ReDQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEzsz4iMyN74f+5ISCZOyr0roUcCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yMDhl ZGYzYS03M2E1LTQ2MTQtOWM3Ni01NzAyZDVjODg5NzcvYmE2OWQyNmEtNzg5NC0z NDk1LWJkYjUtN2RiOTc3ZWM5MGVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjA4ZWRmM2EtNzNhNS00NjE0LTlj NzYtNTcwMmQ1Yzg4OTc3LzIwOGVkZjNhLTczYTUtNDYxNC05Yzc2LTU3MDJkNWM4 ODk3Ny5jcmwwHwYDVR0jBBgwFoAUjiG5m/w/KlKClNSwhb33vM87VUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yMDhlZGYzYS03M2E1LTQ2MTQtOWM3Ni01NzAy ZDVjODg5NzcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgXdQI8A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACqywfbZi+ip3cpYkEGCKP8kxNd86j56tPzS9TTkaBMvXjMw4Agh HB32zdtxqCOaE8zQV2b+Fm7921vmmhtYUgtk+sJ4n9cxawFxGAQm+2iu1DLRi5B4 N5HjF5J8roHstFfYAyefcBDtvkZTG6YLPvsDKRH5jYWkXskHrTWd1X4z6P/JHol2 xdA1SiJgXOwn+uePh0/YuPto3Z/6nQj1o51oamFaQ0G6U3n9CY51wzFWOFbMDAp9 sH5goi8PK8+tdPjinHeAulgbmhYEQo2luMUK81KKG58eoXlEhireClZNvOFcJldh B60yIaoU+8tJA6ekHgMpa69m9A385UxNlE0= -----END CERTIFICATE-----Generated at Tue Nov 4 09:08:35 2025 by rpki-client