$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/ec99fea1-6f14-3e3f-b8ee-d1e305b669f4.roa File: ec99fea1-6f14-3e3f-b8ee-d1e305b669f4.roa (raw, json) Hash identifier: zBHoUm7Zsr0yxPKY8mL8SNjqPCWFf+aTjBJUwPms+os= Subject key identifier: D9:B4:70:14:36:35:A5:CD:EC:F2:2F:44:48:C7:FB:DF:47:07:1E:25 Certificate issuer: /CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72 Certificate serial: 010D0C9F4328584B9E079D9B1CDF0E61E9189200 Authority key identifier: 57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/ec99fea1-6f14-3e3f-b8ee-d1e305b669f4.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 212105 IP address blocks: 2605:f440:beef::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:9d:9b:1c:df:0e:61:e9:18:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=307f863f-9211-4db4-abfb-a40bf2e13fad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:c0:85:65:42:ec:3d:6f:41:83:f6:72:5b:67: 87:4b:8b:6b:46:66:e8:5b:8c:f3:f5:d1:e5:70:df: 88:8b:70:08:7f:33:2c:ff:ce:bc:56:b1:05:79:40: 99:d9:79:6b:5f:11:60:3e:29:26:d8:ef:fb:98:f9: 4e:0c:5b:36:c0:62:6f:63:da:7b:05:2e:84:d6:95: 20:48:cd:2b:6d:a8:d1:88:ec:e9:70:9a:a0:6d:c2: a8:f7:4a:14:fe:76:bf:62:0f:d4:d3:80:00:cc:7b: 0f:42:50:ca:51:e5:b3:77:b0:96:a3:bf:d0:9d:d7: de:23:83:0a:67:cc:9d:92:2d:c1:39:72:89:ae:2e: 88:1c:1a:5d:5c:e8:3c:cf:7c:c6:ea:72:f8:4c:37: b2:aa:f8:48:5f:36:e3:19:31:00:7b:49:ab:7d:92: 9f:58:8b:1e:a3:df:ef:10:b1:88:c9:a6:9d:b0:36: f6:c7:45:82:77:50:01:1d:bb:df:21:1c:33:d5:5c: ab:ce:15:4f:50:92:18:02:5c:3f:ed:f6:97:72:83: 06:6f:ac:c5:fc:71:a2:ae:d0:dd:7c:e1:ee:f8:fd: 82:be:83:f4:95:e9:34:8d:7d:36:5e:4d:a3:3d:0a: b2:9f:2c:45:19:cf:f2:14:13:f5:94:f6:5d:3a:27: a7:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:B4:70:14:36:35:A5:CD:EC:F2:2F:44:48:C7:FB:DF:47:07:1E:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/ec99fea1-6f14-3e3f-b8ee-d1e305b669f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl X509v3 Authority Key Identifier: keyid:57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer sbgp-ipAddrBlock: critical IPv6: 2605:f440:beef::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:0d:65:10:ef:d7:61:76:98:e2:16:bc:5d:2e:77:71:5d:32: 2b:3e:8a:b9:67:ee:66:59:fd:46:56:e7:61:45:21:7d:76:94: 4d:c5:46:4d:93:b4:c0:5a:18:96:cb:c3:5c:07:d3:78:9f:d5: 16:f7:bc:55:25:2b:5d:b3:45:d8:a0:35:28:54:ba:8a:e0:66: 56:65:e7:44:89:cf:32:d7:58:44:0b:10:05:87:46:c1:9e:6b: 8a:b7:1e:19:91:ee:34:66:d5:c7:d5:5c:9e:ea:ef:ab:10:52: 2b:41:8c:e2:f3:87:7b:bc:e8:73:4a:ec:a9:c9:d5:99:df:b5: d7:a9:ce:4c:ee:bb:b0:01:c8:1b:08:f0:bf:77:34:97:da:75: ba:a8:96:9b:52:80:0f:a5:42:f3:2a:6f:c2:c5:29:91:a9:3a: 4d:21:20:85:d1:2b:19:7b:be:d7:65:cb:6c:02:9d:ab:e5:ef: 91:36:7a:d0:1e:07:70:3b:c7:e4:ac:83:55:8b:b6:a6:cf:dd: bc:ff:da:df:42:04:4a:dc:74:26:dc:9e:ad:f6:a2:c8:df:47: da:12:aa:62:da:0a:45:45:43:a8:ff:44:17:4c:fe:47:86:82: af:28:30:7e:63:5d:b1:2f:08:c1:f3:ae:eb:07:48:cb:f7:3f: f8:2a:ca:bd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEueB52bHN8OYekYkgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmYzZDI1YTAtZjdlNS00MjFkLTg4NDItZmM5NjdiZjA4 ZjcyMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk MzA3Zjg2M2YtOTIxMS00ZGI0LWFiZmItYTQwYmYyZTEzZmFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcCFZULsPW9Bg/ZyW2eHS4trRmboW4zz9dHl cN+Ii3AIfzMs/868VrEFeUCZ2XlrXxFgPikm2O/7mPlODFs2wGJvY9p7BS6E1pUg SM0rbajRiOzpcJqgbcKo90oU/na/Yg/U04AAzHsPQlDKUeWzd7CWo7/QndfeI4MK Z8ydki3BOXKJri6IHBpdXOg8z3zG6nL4TDeyqvhIXzbjGTEAe0mrfZKfWIseo9/v ELGIyaadsDb2x0WCd1ABHbvfIRwz1VyrzhVPUJIYAlw/7faXcoMGb6zF/HGirtDd fOHu+P2CvoP0lek0jX02Xk2jPQqynyxFGc/yFBP1lPZdOien1wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNm0cBQ2NaXN7PIvREjH+99HBx4lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82ZjNk MjVhMC1mN2U1LTQyMWQtODg0Mi1mYzk2N2JmMDhmNzIvZWM5OWZlYTEtNmYxNC0z ZTNmLWI4ZWUtZDFlMzA1YjY2OWY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNmYzZDI1YTAtZjdlNS00MjFkLTg4 NDItZmM5NjdiZjA4ZjcyLzZmM2QyNWEwLWY3ZTUtNDIxZC04ODQyLWZjOTY3YmYw OGY3Mi5jcmwwHwYDVR0jBBgwFoAUV9Ck+WN+PQBHgSzdpn7Mfk696aowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC82ZjNkMjVhMC1mN2U1LTQyMWQtODg0Mi1mYzk2 N2JmMDhmNzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgX0QL7v MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFwNZRDv12F2mOIWvF0ud3FdMis+irln7mZZ/UZW52FFIX12lE3F Rk2TtMBaGJbLw1wH03if1Rb3vFUlK12zRdigNShUuorgZlZl50SJzzLXWEQLEAWH RsGea4q3HhmR7jRm1cfVXJ7q76sQUitBjOLzh3u86HNK7KnJ1Znftdepzkzuu7AB yBsI8L93NJfadbqolptSgA+lQvMqb8LFKZGpOk0hIIXRKxl7vtdly2wCnavl75E2 etAeB3A7x+Ssg1WLtqbP3bz/2t9CBErcdCbcnq32osjfR9oSqmLaCkVFQ6j/RBdM /keGgq8oMH5jXbEvCMHzrusHSMv3P/gqyr0= -----END CERTIFICATE-----Generated at Sun Oct 26 20:23:49 2025 by rpki-client