$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aab30367-68c3-4c5c-b455-f82d7f7bfc72/f5abc079-9b79-3ea8-801b-77d1ad581908.roa File: f5abc079-9b79-3ea8-801b-77d1ad581908.roa (raw, json) Hash identifier: 4PXxesTsxMkMwYOHn39ndoShibHuKr3qAjRO268se/s= Subject key identifier: E5:4B:BB:E2:0C:A4:84:B2:05:E8:E6:D2:1D:B0:AF:91:67:84:50:48 Certificate issuer: /CN=aab30367-68c3-4c5c-b455-f82d7f7bfc72 Certificate serial: 010D0C9F4328584BB2F7A629977C5365BA530200 Authority key identifier: 31:87:8D:A0:BB:03:F2:0D:E0:52:2A:93:1E:B8:60:02:8A:1F:1B:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aab30367-68c3-4c5c-b455-f82d7f7bfc72.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aab30367-68c3-4c5c-b455-f82d7f7bfc72/f5abc079-9b79-3ea8-801b-77d1ad581908.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 401308 IP address blocks: 2606:2b40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aab30367-68c3-4c5c-b455-f82d7f7bfc72/aab30367-68c3-4c5c-b455-f82d7f7bfc72.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aab30367-68c3-4c5c-b455-f82d7f7bfc72/aab30367-68c3-4c5c-b455-f82d7f7bfc72.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aab30367-68c3-4c5c-b455-f82d7f7bfc72.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 01 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:a6:29:97:7c:53:65:ba:53:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aab30367-68c3-4c5c-b455-f82d7f7bfc72 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=27204940-9c41-4798-9aca-b5d45470b349 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:32:b1:d6:e5:fe:d3:74:eb:a2:bf:d7:e8:3b: 72:1b:cb:18:3e:87:68:ae:0c:45:d7:29:91:96:aa: d5:fd:3f:ed:62:dd:2d:2b:66:f1:93:99:a9:d9:d7: 88:65:1b:7f:5f:ce:9c:49:06:91:0d:8f:1d:50:70: 2d:57:50:52:0c:eb:66:69:f2:cf:dd:06:63:6b:1d: 1e:b9:ec:39:a5:33:10:68:68:d4:99:97:07:54:94: ce:9a:1e:4a:81:b3:02:0d:17:14:36:cd:ba:6b:65: 0b:dd:6a:43:ae:7a:9d:e2:ba:00:de:3f:a6:13:c6: 4d:d8:e3:08:f1:ae:b9:23:93:c2:0b:bb:23:bd:50: a3:58:bc:55:0c:49:66:dc:59:bd:e5:62:4e:36:da: 3d:29:da:6b:9a:93:0a:39:1e:bd:21:9c:8c:d1:a7: 0a:97:fc:5f:b0:15:e5:99:af:22:19:33:d9:19:0a: af:5d:88:ac:81:66:60:58:90:17:25:61:06:bb:f8: 3e:b3:b0:cc:b8:b6:d9:8e:71:eb:d7:f4:cb:4f:a5: 1b:fe:df:08:6a:2a:6d:b0:e5:d7:51:6e:d7:36:fe: 15:45:c6:95:df:b5:25:71:d1:88:a5:15:93:a6:14: 50:f2:85:c8:6b:b9:ce:a3:42:12:36:7e:61:7d:0b: 9e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:4B:BB:E2:0C:A4:84:B2:05:E8:E6:D2:1D:B0:AF:91:67:84:50:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aab30367-68c3-4c5c-b455-f82d7f7bfc72/f5abc079-9b79-3ea8-801b-77d1ad581908.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aab30367-68c3-4c5c-b455-f82d7f7bfc72/aab30367-68c3-4c5c-b455-f82d7f7bfc72.crl X509v3 Authority Key Identifier: keyid:31:87:8D:A0:BB:03:F2:0D:E0:52:2A:93:1E:B8:60:02:8A:1F:1B:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aab30367-68c3-4c5c-b455-f82d7f7bfc72.cer sbgp-ipAddrBlock: critical IPv6: 2606:2b40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:31:e6:ee:20:0c:ee:58:4b:b0:e5:22:38:3b:ac:c9:5e:88: 72:d5:a5:bf:5f:91:f0:43:64:4a:0f:11:38:2f:93:f1:a8:31: a1:ac:85:28:26:74:c8:8c:34:2c:7d:a9:77:3b:11:c1:97:6f: 29:17:aa:0b:ed:73:45:c6:f7:0c:21:60:1b:73:b9:f3:8d:f6: 9e:ac:9a:de:04:cb:f7:f6:d6:0b:96:9c:41:2b:69:fb:8c:ae: a8:47:f2:80:df:fa:d2:54:85:27:c2:0f:72:d8:76:a1:0d:5b: 4e:06:3b:e9:3a:6b:8e:23:47:d7:69:8d:c1:42:2c:a0:e4:d8: 64:55:01:8c:66:e5:3a:1e:b8:20:1a:b8:39:87:f4:a9:b7:c6: 54:1e:fc:71:ba:f1:a2:9f:d2:97:21:05:18:46:3c:34:94:2d: f7:86:3e:dc:44:61:e9:d7:8e:af:c2:f9:d5:2f:15:0b:8d:22: 9a:b0:92:fd:66:f7:0c:91:2e:11:cf:d1:94:d8:e3:57:0d:8d: 7e:3f:f2:6e:cf:50:02:81:3b:b5:45:51:fb:9f:fd:2f:22:ee: 05:9e:d5:48:ed:47:24:35:16:d4:dc:1d:54:4e:b0:9c:19:82: 8a:3b:5e:89:27:ac:9b:63:de:19:5f:f7:c0:76:a0:f2:04:00: 54:2a:93:72 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEuy96Ypl3xTZbpTAgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFiMzAzNjctNjhjMy00YzVjLWI0NTUtZjgyZDdmN2Jm YzcyMB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk MjcyMDQ5NDAtOWM0MS00Nzk4LTlhY2EtYjVkNDU0NzBiMzQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6TKx1uX+03Tror/X6DtyG8sYPodorgxF1ymR lqrV/T/tYt0tK2bxk5mp2deIZRt/X86cSQaRDY8dUHAtV1BSDOtmafLP3QZjax0e uew5pTMQaGjUmZcHVJTOmh5KgbMCDRcUNs26a2UL3WpDrnqd4roA3j+mE8ZN2OMI 8a65I5PCC7sjvVCjWLxVDElm3Fm95WJONto9KdprmpMKOR69IZyM0acKl/xfsBXl ma8iGTPZGQqvXYisgWZgWJAXJWEGu/g+s7DMuLbZjnHr1/TLT6Ub/t8IaiptsOXX UW7XNv4VRcaV37UlcdGIpRWTphRQ8oXIa7nOo0ISNn5hfQueRQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOVLu+IMpISyBejm0h2wr5FnhFBIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWIz MDM2Ny02OGMzLTRjNWMtYjQ1NS1mODJkN2Y3YmZjNzIvZjVhYmMwNzktOWI3OS0z ZWE4LTgwMWItNzdkMWFkNTgxOTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFiMzAzNjctNjhjMy00YzVjLWI0 NTUtZjgyZDdmN2JmYzcyL2FhYjMwMzY3LTY4YzMtNGM1Yy1iNDU1LWY4MmQ3Zjdi ZmM3Mi5jcmwwHwYDVR0jBBgwFoAUMYeNoLsD8g3gUiqTHrhgAoofG2swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWIzMDM2Ny02OGMzLTRjNWMtYjQ1NS1mODJk N2Y3YmZjNzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgYrQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA7MebuIAzuWEuw5SI4O6zJXohy1aW/X5HwQ2RKDxE4L5PxqDGhrIUo JnTIjDQsfal3OxHBl28pF6oL7XNFxvcMIWAbc7nzjfaerJreBMv39tYLlpxBK2n7 jK6oR/KA3/rSVIUnwg9y2HahDVtOBjvpOmuOI0fXaY3BQiyg5NhkVQGMZuU6Hrgg Grg5h/Spt8ZUHvxxuvGin9KXIQUYRjw0lC33hj7cRGHp146vwvnVLxULjSKasJL9 ZvcMkS4Rz9GU2ONXDY1+P/Juz1ACgTu1RVH7n/0vIu4FntVI7UckNRbU3B1UTrCc GYKKO16JJ6ybY94ZX/fAdqDyBABUKpNy -----END CERTIFICATE-----Generated at Fri Oct 31 14:04:54 2025 by rpki-client