$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/308fdebd-55e3-3c5a-99b7-a06760224d7a.roa File: 308fdebd-55e3-3c5a-99b7-a06760224d7a.roa (raw, json) Hash identifier: WgYytUoP4bdxkF4BUiMVd/jsRxAUmttbTJsEUPWZukU= Subject key identifier: 33:6B:A7:6C:F3:68:FB:B8:02:65:73:40:35:C5:9C:13:1F:8B:10:A6 Certificate issuer: /CN=4eab7524-ab79-46c8-aea6-96b100eb245d Certificate serial: 010D0C9F4328584BA39D196230BDA6AED69235E0 Authority key identifier: 02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/308fdebd-55e3-3c5a-99b7-a06760224d7a.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 400097 IP address blocks: 2606:3d40:5d01::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:19:62:30:bd:a6:ae:d6:92:35:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4eab7524-ab79-46c8-aea6-96b100eb245d Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=48e70644-4b8e-460f-b6ae-4fa7fc0a6e2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:40:ea:8a:1d:68:90:00:cd:a2:68:32:df:0d: e8:c6:b3:61:10:22:d8:74:28:fb:f9:5f:95:e4:3c: d7:1f:ae:cc:94:38:c6:11:90:3c:cf:2f:23:dd:15: 86:48:ad:2b:cc:49:49:7e:5d:82:6c:e3:88:64:0e: 8e:37:93:b5:05:d5:79:cb:da:6d:f2:fe:bc:cb:e5: 74:47:b6:ed:14:e0:1b:ee:fa:a6:50:a7:c9:e3:1f: 94:f8:a2:f7:ec:73:3c:0a:32:bf:28:1d:4f:ef:b1: 3b:47:91:7e:38:7d:54:6b:ce:50:b6:5e:7c:3c:57: 2d:5b:53:57:1c:3b:96:8f:e1:1a:39:88:33:63:2c: 09:a7:16:e6:75:8d:f7:48:54:76:20:df:f8:15:c9: 67:00:d6:81:d4:a6:97:ad:0e:61:54:4f:43:9a:2a: e7:68:6e:dc:8b:e6:69:56:c8:f7:92:2d:2e:3c:25: 1b:86:dc:c7:22:85:21:73:36:b1:c5:ce:52:8d:25: db:0f:d2:1f:d6:04:ac:57:b5:d1:bf:a5:25:7c:2b: 0a:2f:f5:a9:5f:29:57:96:5d:90:f7:94:a2:97:31: 00:4d:b4:ca:37:c9:d9:28:1b:75:b3:dd:51:a6:27: 85:68:99:bd:5c:cb:5b:67:82:70:89:a1:ea:82:2e: 9b:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:6B:A7:6C:F3:68:FB:B8:02:65:73:40:35:C5:9C:13:1F:8B:10:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/308fdebd-55e3-3c5a-99b7-a06760224d7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl X509v3 Authority Key Identifier: keyid:02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer sbgp-ipAddrBlock: critical IPv6: 2606:3d40:5d01::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:1d:15:ca:fd:1c:16:39:30:e1:74:0f:41:56:76:73:9e:6f: ce:f6:08:09:08:ae:de:0e:f2:19:d6:d3:9b:41:11:3e:ef:15: 48:2c:92:ca:af:37:4d:3d:b5:30:39:2c:e7:71:9c:dc:2d:94: c6:eb:2a:ba:34:a1:67:84:89:46:68:03:85:62:14:c8:1c:22: 01:89:74:e8:17:00:14:05:0d:c4:60:38:58:c9:85:8e:d8:a5: b3:81:ce:47:69:f9:36:04:14:e5:0e:6c:98:e1:92:fb:bd:30: 5d:a1:2e:7a:7e:97:d5:01:33:e8:7f:17:28:72:67:22:8f:a6: 4d:d3:90:85:a3:6b:80:d1:c7:8c:25:73:c8:67:c3:50:bf:81: fb:4a:2a:93:ad:8a:d2:97:c2:4c:6a:64:1a:58:ac:a2:cd:5c: c3:2d:1f:cd:dd:e8:e3:c8:74:95:b4:ca:6f:a7:2f:33:95:88: 7d:a8:19:34:30:eb:16:68:dc:fa:ad:26:69:38:be:79:df:0a: 5b:ce:29:46:d6:9d:a8:56:92:09:4e:2c:dc:76:74:5a:da:b5: 46:82:f7:ef:e7:d4:18:9b:9c:7a:c5:05:08:98:a9:62:9a:67: c0:a4:28:7c:6e:e9:49:f8:db:05:c1:ee:fe:01:55:d1:f3:5f: 15:fb:eb:f0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEujnRliML2mrtaSNeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGVhYjc1MjQtYWI3OS00NmM4LWFlYTYtOTZiMTAwZWIy NDVkMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk NDhlNzA2NDQtNGI4ZS00NjBmLWI2YWUtNGZhN2ZjMGE2ZTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA10Dqih1okADNomgy3w3oxrNhECLYdCj7+V+V 5DzXH67MlDjGEZA8zy8j3RWGSK0rzElJfl2CbOOIZA6ON5O1BdV5y9pt8v68y+V0 R7btFOAb7vqmUKfJ4x+U+KL37HM8CjK/KB1P77E7R5F+OH1Ua85Qtl58PFctW1NX HDuWj+EaOYgzYywJpxbmdY33SFR2IN/4FclnANaB1KaXrQ5hVE9DmirnaG7ci+Zp Vsj3ki0uPCUbhtzHIoUhczaxxc5SjSXbD9If1gSsV7XRv6UlfCsKL/WpXylXll2Q 95SilzEATbTKN8nZKBt1s91RpieFaJm9XMtbZ4JwiaHqgi6bcwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDNrp2zzaPu4AmVzQDXFnBMfixCmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80ZWFi NzUyNC1hYjc5LTQ2YzgtYWVhNi05NmIxMDBlYjI0NWQvMzA4ZmRlYmQtNTVlMy0z YzVhLTk5YjctYTA2NzYwMjI0ZDdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGVhYjc1MjQtYWI3OS00NmM4LWFl YTYtOTZiMTAwZWIyNDVkLzRlYWI3NTI0LWFiNzktNDZjOC1hZWE2LTk2YjEwMGVi MjQ1ZC5jcmwwHwYDVR0jBBgwFoAUAvAXN7tccDjst6Tnox+wrSnQ6+YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80ZWFiNzUyNC1hYjc5LTQ2YzgtYWVhNi05NmIx MDBlYjI0NWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgY9QF0B MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADcdFcr9HBY5MOF0D0FWdnOeb872CAkIrt4O8hnW05tBET7vFUgs ksqvN009tTA5LOdxnNwtlMbrKro0oWeEiUZoA4ViFMgcIgGJdOgXABQFDcRgOFjJ hY7YpbOBzkdp+TYEFOUObJjhkvu9MF2hLnp+l9UBM+h/FyhyZyKPpk3TkIWja4DR x4wlc8hnw1C/gftKKpOtitKXwkxqZBpYrKLNXMMtH83d6OPIdJW0ym+nLzOViH2o GTQw6xZo3PqtJmk4vnnfClvOKUbWnahWkglOLNx2dFratUaC9+/n1BibnHrFBQiY qWKaZ8CkKHxu6Un42wXB7v4BVdHzXxX76/A= -----END CERTIFICATE-----Generated at Wed Nov 5 21:36:09 2025 by rpki-client