$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/b2e53da8-5865-32f3-8e85-5c9b3fde9510.roa File: b2e53da8-5865-32f3-8e85-5c9b3fde9510.roa (raw, json) Hash identifier: OaR7kWVrmTv3wmf9ehNdBxaQs755RrIlAD5hhMEwjIc= Subject key identifier: 8D:85:7B:1C:91:36:55:47:86:84:3F:A5:25:BD:3C:68:66:DE:CA:1B Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B9B3D0AEAFB05BD8E7F24D480 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/b2e53da8-5865-32f3-8e85-5c9b3fde9510.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 22616 IP address blocks: 2605:4300:1400::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3d:0a:ea:fb:05:bd:8e:7f:24:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=e45e927e-ec0d-41d2-8589-c2a112e6ad5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d6:cd:d1:0b:54:05:15:9b:4d:14:8b:65:a5: 54:2f:01:68:15:d3:01:4d:7f:73:45:39:c2:72:0b: 3d:80:87:0f:ac:87:0d:aa:2c:28:48:26:ad:86:d7: 10:24:ec:5f:6d:ca:6a:37:f6:ed:4b:61:fa:5d:8f: b3:33:a1:2c:07:db:3a:8d:67:ee:56:69:3c:0f:a8: e4:71:0a:17:69:73:7e:32:54:4d:21:8f:3c:52:01: 94:79:d7:7c:30:9c:89:bf:9d:6d:92:f8:e1:ed:03: 96:4b:5e:9a:e5:eb:11:de:bd:c5:38:43:65:af:08: a5:c0:e6:9a:5c:c6:81:23:0a:99:63:72:4d:ca:96: e4:a3:45:c0:db:9e:fb:91:f6:d5:4f:3a:96:70:3b: e5:c1:1a:98:72:11:38:01:55:69:1e:8c:42:2e:b3: 09:38:01:04:3d:ff:7f:d6:81:bf:87:81:0f:82:50: 58:ab:a2:a8:a0:53:58:cb:73:67:c5:da:ef:ba:fe: cb:e9:3f:83:dd:99:e6:c0:56:ba:2d:7f:fb:bc:c6: 2a:45:4a:9e:04:c2:05:20:f6:a3:e7:8e:4b:10:fc: b7:c2:b7:69:79:85:cc:76:bc:34:3a:9b:ae:82:c5: 57:eb:a6:95:b1:f6:93:97:64:3d:29:84:19:34:96: fd:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:85:7B:1C:91:36:55:47:86:84:3F:A5:25:BD:3C:68:66:DE:CA:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/b2e53da8-5865-32f3-8e85-5c9b3fde9510.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv6: 2605:4300:1400::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:19:4c:6f:9d:f0:ce:ac:b4:77:d4:b2:00:6a:87:f7:2e:b2: 83:85:2a:a7:50:19:61:84:47:31:a2:2e:e6:e4:d5:bd:2e:2b: 08:b4:c2:75:ea:20:30:2e:91:cb:2a:2a:2f:38:b4:a2:13:2b: af:06:07:10:80:52:ce:77:93:11:b8:eb:61:73:57:4e:c0:cb: 96:35:d3:ed:5a:b2:b9:8d:44:e7:7f:d0:3c:61:55:bb:d5:8c: 00:6e:87:3e:73:d9:e2:6f:cb:d8:6b:a0:5e:a5:33:68:ae:6f: a9:15:dd:32:08:2f:7d:0f:04:78:51:8f:7c:58:c8:4f:8a:ba: 3b:9c:92:55:c5:b8:38:8f:ea:aa:33:61:4f:89:d9:94:54:24: bb:85:23:cd:9b:9a:7b:62:90:c2:2c:c7:46:05:7d:eb:6f:17: 0c:1d:6b:4c:81:5c:70:62:88:2f:69:47:0d:c0:15:f7:5d:6e: f4:e2:1b:68:6f:12:10:72:f3:45:a3:3a:1e:69:21:b8:4c:90: cb:6f:8d:93:32:1f:b5:0c:5b:18:bd:8e:fd:53:f8:a6:8a:da: f2:ea:21:b7:1f:ea:50:e8:a8:9f:50:da:fd:db:f4:20:7d:7e: ca:e3:35:9c:bd:eb:3c:c7:bf:84:e2:a4:7b:f9:9c:c1:66:3f: 91:53:32:41 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEubPQrq+wW9jn8k1IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk ZTQ1ZTkyN2UtZWMwZC00MWQyLTg1ODktYzJhMTEyZTZhZDVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9bN0QtUBRWbTRSLZaVULwFoFdMBTX9zRTnC cgs9gIcPrIcNqiwoSCathtcQJOxfbcpqN/btS2H6XY+zM6EsB9s6jWfuVmk8D6jk cQoXaXN+MlRNIY88UgGUedd8MJyJv51tkvjh7QOWS16a5esR3r3FOENlrwilwOaa XMaBIwqZY3JNypbko0XA2577kfbVTzqWcDvlwRqYchE4AVVpHoxCLrMJOAEEPf9/ 1oG/h4EPglBYq6KooFNYy3Nnxdrvuv7L6T+D3ZnmwFa6LX/7vMYqRUqeBMIFIPaj 545LEPy3wrdpeYXMdrw0OpuugsVX66aVsfaTl2Q9KYQZNJb9KQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFI2FexyRNlVHhoQ/pSW9PGhm3sobMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvYjJlNTNkYTgtNTg2NS0z MmYzLThlODUtNWM5YjNmZGU5NTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgVDABQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAsRlMb53wzqy0d9SyAGqH9y6yg4Uqp1AZYYRHMaIu5uTVvS4rCLTC deogMC6RyyoqLzi0ohMrrwYHEIBSzneTEbjrYXNXTsDLljXT7VqyuY1E53/QPGFV u9WMAG6HPnPZ4m/L2GugXqUzaK5vqRXdMggvfQ8EeFGPfFjIT4q6O5ySVcW4OI/q qjNhT4nZlFQku4UjzZuae2KQwizHRgV9628XDB1rTIFccGKIL2lHDcAV911u9OIb aG8SEHLzRaM6HmkhuEyQy2+NkzIftQxbGL2O/VP4pora8uohtx/qUOion1Da/dv0 IH1+yuM1nL3rPMe/hOKke/mcwWY/kVMyQQ== -----END CERTIFICATE-----Generated at Wed Nov 5 10:57:22 2025 by rpki-client