$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/18b69f1d-e346-4275-b5e5-d496c35fa747/96f45a6e-998c-3a43-815b-0f1a14ad0050.roa File: 96f45a6e-998c-3a43-815b-0f1a14ad0050.roa (raw, json) Hash identifier: jL/9rd46T56a8tQMpIc5+cosSOFAzJ4ihgu3DdR+DCA= Subject key identifier: 4A:6B:7F:84:B2:15:23:3E:1C:40:AA:19:5E:7D:CD:A9:5F:F8:C8:DC Certificate issuer: /CN=18b69f1d-e346-4275-b5e5-d496c35fa747 Certificate serial: 010D0C9F4328584BAF9E268056F1FCE1F5AC8E80 Authority key identifier: 47:96:86:96:07:48:4F:E8:AF:A3:75:75:6A:DD:55:EA:AB:56:CF:4F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/18b69f1d-e346-4275-b5e5-d496c35fa747.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/18b69f1d-e346-4275-b5e5-d496c35fa747/96f45a6e-998c-3a43-815b-0f1a14ad0050.roa Signing time: Wed 29 Oct 2025 20:12:49 +0000 ROA not before: Wed 29 Oct 2025 20:12:49 +0000 ROA not after: Tue 27 Jan 2026 21:12:49 +0000 asID: 399970 IP address blocks: 2602:fc3b:f500::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/18b69f1d-e346-4275-b5e5-d496c35fa747/18b69f1d-e346-4275-b5e5-d496c35fa747.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/18b69f1d-e346-4275-b5e5-d496c35fa747/18b69f1d-e346-4275-b5e5-d496c35fa747.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/18b69f1d-e346-4275-b5e5-d496c35fa747.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:af:9e:26:80:56:f1:fc:e1:f5:ac:8e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18b69f1d-e346-4275-b5e5-d496c35fa747 Validity Not Before: Oct 29 20:12:49 2025 GMT Not After : Jan 27 21:12:49 2026 GMT Subject: CN=5b8a2f4b-a090-4d04-b4b3-4781542beb20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:ea:89:f5:fd:4f:94:cc:65:c8:c9:0d:1e:93: 70:9d:cf:73:bf:51:79:98:ae:39:77:5f:b0:74:b3: 1f:02:48:30:b6:e9:8f:90:31:fb:72:d9:a2:c1:72: 88:8d:72:13:5c:a1:f7:f4:44:bb:c3:13:46:7f:cd: 0a:24:0c:bd:5b:5d:e2:6c:19:fb:9f:c1:a1:06:11: dc:6e:1f:19:24:28:64:6a:8c:d0:25:45:6b:05:98: d5:45:a4:e6:6a:7c:9b:08:fd:62:8b:3b:67:15:9f: dd:5c:16:3a:80:62:fa:3c:ae:1f:9b:72:74:4b:0a: 05:90:34:ff:8f:5d:94:9c:0f:e1:f7:26:b6:d5:70: 28:9c:ef:86:33:8f:41:64:ea:56:1c:4e:6e:d6:90: 4d:8f:45:0b:1e:36:c5:a9:9f:e5:7e:5c:44:5c:16: f5:76:7e:61:49:a1:9d:24:bf:1d:ec:60:a8:6a:f7: 92:07:cd:ea:1a:13:a1:d0:af:b0:f8:e7:0f:a7:a0: b6:20:c7:48:97:34:7f:e4:c9:5b:ea:8d:32:a9:4e: 68:44:36:85:4a:31:85:bb:06:56:b1:cb:b4:6e:21: 2e:05:7c:91:36:5c:bc:90:1f:79:d9:78:3e:2b:2f: fb:1b:f5:02:35:35:aa:20:a5:00:12:95:0d:74:d1: d1:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:6B:7F:84:B2:15:23:3E:1C:40:AA:19:5E:7D:CD:A9:5F:F8:C8:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/18b69f1d-e346-4275-b5e5-d496c35fa747/96f45a6e-998c-3a43-815b-0f1a14ad0050.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/18b69f1d-e346-4275-b5e5-d496c35fa747/18b69f1d-e346-4275-b5e5-d496c35fa747.crl X509v3 Authority Key Identifier: keyid:47:96:86:96:07:48:4F:E8:AF:A3:75:75:6A:DD:55:EA:AB:56:CF:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/18b69f1d-e346-4275-b5e5-d496c35fa747.cer sbgp-ipAddrBlock: critical IPv6: 2602:fc3b:f500::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:18:e2:2b:7c:a2:72:a6:8b:53:33:28:bf:66:e8:88:b5:89: 95:64:72:61:50:72:31:73:4b:c3:93:ef:e2:ae:64:58:2d:f0: 55:78:31:47:00:87:20:40:cd:0d:33:63:c0:1c:02:7b:39:6f: 6c:a1:47:3f:25:ef:d6:ce:b0:87:40:56:b1:5b:8e:c5:b1:b8: d4:10:ef:d3:9c:e3:54:d6:20:a0:1c:25:a4:85:26:88:be:d5: 69:ce:b0:c0:2a:65:cb:48:d4:ea:9e:0c:a6:e5:4e:92:4c:5c: ee:55:db:43:88:86:04:e2:b0:7e:67:04:da:75:fe:7a:a8:18: 79:cb:bc:10:16:01:4f:e3:19:0c:c0:d3:b0:a8:99:12:d5:90: 1b:de:43:fb:ec:06:7c:af:3d:17:7b:af:7e:ec:a2:7b:1f:ed: 03:65:db:68:38:44:2b:10:38:e6:4f:bc:bf:ea:e5:bb:85:e9: 5e:fc:ed:02:62:f6:b8:1f:9c:f4:91:d4:ff:71:73:27:28:d8: d6:cf:bd:c8:25:af:20:4c:75:a2:66:df:5a:bc:94:96:74:e3: 23:e1:35:52:d7:75:80:af:09:2d:de:81:98:12:b9:26:a6:4e: 96:d1:43:c8:98:9e:01:d5:89:7e:f1:fe:fd:fe:de:67:39:64: 63:94:14:41 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEuvniaAVvH84fWsjoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMThiNjlmMWQtZTM0Ni00Mjc1LWI1ZTUtZDQ5NmMzNWZh NzQ3MB4XDTI1MTAyOTIwMTI0OVoXDTI2MDEyNzIxMTI0OVowLzEtMCsGA1UEAxMk NWI4YTJmNGItYTA5MC00ZDA0LWI0YjMtNDc4MTU0MmJlYjIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgeqJ9f1PlMxlyMkNHpNwnc9zv1F5mK45d1+w dLMfAkgwtumPkDH7ctmiwXKIjXITXKH39ES7wxNGf80KJAy9W13ibBn7n8GhBhHc bh8ZJChkaozQJUVrBZjVRaTmanybCP1iiztnFZ/dXBY6gGL6PK4fm3J0SwoFkDT/ j12UnA/h9ya21XAonO+GM49BZOpWHE5u1pBNj0ULHjbFqZ/lflxEXBb1dn5hSaGd JL8d7GCoaveSB83qGhOh0K+w+OcPp6C2IMdIlzR/5Mlb6o0yqU5oRDaFSjGFuwZW scu0biEuBXyRNly8kB952Xg+Ky/7G/UCNTWqIKUAEpUNdNHRSwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFEprf4SyFSM+HECqGV59zalf+MjcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8xOGI2 OWYxZC1lMzQ2LTQyNzUtYjVlNS1kNDk2YzM1ZmE3NDcvOTZmNDVhNmUtOTk4Yy0z YTQzLTgxNWItMGYxYTE0YWQwMDUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMThiNjlmMWQtZTM0Ni00Mjc1LWI1 ZTUtZDQ5NmMzNWZhNzQ3LzE4YjY5ZjFkLWUzNDYtNDI3NS1iNWU1LWQ0OTZjMzVm YTc0Ny5jcmwwHwYDVR0jBBgwFoAUR5aGlgdIT+ivo3V1at1V6qtWz08wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8xOGI2OWYxZC1lMzQ2LTQyNzUtYjVlNS1kNDk2 YzM1ZmE3NDcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL8O/Uw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAKBjiK3yicqaLUzMov2boiLWJlWRyYVByMXNLw5Pv4q5kWC3wVXgx RwCHIEDNDTNjwBwCezlvbKFHPyXv1s6wh0BWsVuOxbG41BDv05zjVNYgoBwlpIUm iL7Vac6wwCply0jU6p4MpuVOkkxc7lXbQ4iGBOKwfmcE2nX+eqgYecu8EBYBT+MZ DMDTsKiZEtWQG95D++wGfK89F3uvfuyiex/tA2XbaDhEKxA45k+8v+rlu4XpXvzt AmL2uB+c9JHU/3FzJyjY1s+9yCWvIEx1ombfWryUlnTjI+E1Utd1gK8JLd6BmBK5 JqZOltFDyJieAdWJfvH+/f7eZzlkY5QUQQ== -----END CERTIFICATE-----Generated at Wed Nov 5 04:01:13 2025 by rpki-client