$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/f8be61da-f3ce-3aab-9dee-3c1cde967597.roa File: f8be61da-f3ce-3aab-9dee-3c1cde967597.roa (raw, json) Hash identifier: vm4fFtcvaSF4A/29ionqnwym/xR9i9kbx1VCTlcCRkc= Subject key identifier: 8A:A4:F6:5D:2C:35:04:70:6C:90:37:D4:88:58:66:63:AD:AC:6B:BC Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584BBB75A4D95867CD61E9076910 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/f8be61da-f3ce-3aab-9dee-3c1cde967597.roa Signing time: Mon 03 Nov 2025 02:00:31 +0000 ROA not before: Mon 03 Nov 2025 02:00:31 +0000 ROA not after: Sun 01 Feb 2026 02:00:31 +0000 asID: 16509 IP address blocks: 2605:4300:3905::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bb:75:a4:d9:58:67:cd:61:e9:07:69:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Nov 3 02:00:31 2025 GMT Not After : Feb 1 02:00:31 2026 GMT Subject: CN=0dfbaa44-fa03-4ff8-8277-ff11fded2de6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:5b:72:ae:f0:8c:18:62:aa:19:7b:5c:25:ba: d3:b1:2f:f1:75:28:dc:29:25:11:6c:3e:62:49:3a: 8a:35:4f:07:bb:aa:71:ee:3b:1f:64:26:3e:e0:4e: 1b:ac:31:3e:a3:43:5a:71:76:b0:fe:a4:dc:00:64: 9e:7c:f6:0f:2f:fc:63:5e:0b:d8:ea:74:9f:3e:fc: 3e:8e:b1:a2:fe:5f:73:31:56:e9:8f:1d:b1:24:3f: 66:c7:f0:78:c5:d1:ce:4f:da:bd:e9:77:df:cf:3a: 32:01:95:59:2e:36:ad:b5:eb:78:bd:ae:e2:84:c5: 9d:80:cd:87:ce:2f:62:01:d8:94:4e:82:15:0b:55: 22:28:f9:3f:72:de:4a:07:d5:33:a3:3a:9a:b4:fe: 43:a8:30:38:11:98:76:73:23:98:a7:dc:1d:ce:34: 7a:59:d5:9a:60:87:e7:fa:06:56:d3:eb:cb:c6:f0: c4:ca:4a:f9:6f:5c:64:12:58:98:c4:40:79:e8:80: e6:b2:93:2e:67:e1:a7:7a:70:fd:fd:06:71:6c:16: 70:20:9f:1f:8d:91:83:18:0e:dd:73:8a:28:35:83: c2:89:0a:1e:05:80:bb:cb:9b:ea:2a:1b:3b:af:5e: e6:6b:f7:67:52:f4:a7:5e:5a:19:92:f3:4a:ae:6d: ab:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:A4:F6:5D:2C:35:04:70:6C:90:37:D4:88:58:66:63:AD:AC:6B:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/f8be61da-f3ce-3aab-9dee-3c1cde967597.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv6: 2605:4300:3905::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:c4:1b:75:f2:c7:bd:ff:48:59:48:b2:9a:1b:d4:9e:65:bb: 35:11:e5:f4:f8:55:ec:b8:69:3c:54:8a:90:0e:31:0e:fb:9d: 56:39:27:06:cf:e4:bf:59:b7:b7:dd:bc:d7:5f:68:5d:42:5b: 38:9e:7d:1d:8d:84:bf:23:64:55:08:2e:b2:99:eb:07:84:40: 3a:cf:27:b7:8e:f4:8c:19:be:ae:ed:75:15:0f:af:4b:df:97: d1:50:36:ab:0b:d9:91:57:a7:71:e9:f3:92:4b:8a:bc:57:a8: a4:c4:aa:33:b5:29:20:28:60:33:ca:48:20:76:7e:12:74:2b: ba:e2:7a:90:33:e9:1d:85:5f:ae:de:3e:e6:11:d9:77:fa:d4: 4b:31:1c:8f:5e:f4:29:12:25:ea:37:b8:26:ab:88:ab:47:78: d6:3e:26:af:e3:49:af:73:3d:b6:6c:76:61:91:50:e7:2d:6b: 3b:f7:96:6e:5a:79:4f:15:99:be:f5:8d:c7:78:ac:35:68:fa: 2b:04:5a:a8:f9:4a:d2:ab:12:aa:b2:cd:75:70:86:61:45:c3: 8f:ed:fc:24:81:42:ee:36:31:73:b2:52:98:d8:a9:86:4f:c5: 0a:11:22:55:51:fb:38:e9:fc:a2:1b:e6:94:f5:cd:9c:0f:15: 36:9c:4a:6f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEu7daTZWGfNYekHaRAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTEwMzAyMDAzMVoXDTI2MDIwMTAyMDAzMVowLzEtMCsGA1UEAxMk MGRmYmFhNDQtZmEwMy00ZmY4LTgyNzctZmYxMWZkZWQyZGU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFtyrvCMGGKqGXtcJbrTsS/xdSjcKSURbD5i STqKNU8Hu6px7jsfZCY+4E4brDE+o0NacXaw/qTcAGSefPYPL/xjXgvY6nSfPvw+ jrGi/l9zMVbpjx2xJD9mx/B4xdHOT9q96XffzzoyAZVZLjattet4va7ihMWdgM2H zi9iAdiUToIVC1UiKPk/ct5KB9UzozqatP5DqDA4EZh2cyOYp9wdzjR6WdWaYIfn +gZW0+vLxvDEykr5b1xkEliYxEB56IDmspMuZ+GnenD9/QZxbBZwIJ8fjZGDGA7d c4ooNYPCiQoeBYC7y5vqKhs7r17ma/dnUvSnXloZkvNKrm2rIQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIqk9l0sNQRwbJA31IhYZmOtrGu8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvZjhiZTYxZGEtZjNjZS0z YWFiLTlkZWUtM2MxY2RlOTY3NTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgVDADkF MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGbEG3Xyx73/SFlIspob1J5luzUR5fT4Vey4aTxUipAOMQ77nVY5 JwbP5L9Zt7fdvNdfaF1CWziefR2NhL8jZFUILrKZ6weEQDrPJ7eO9IwZvq7tdRUP r0vfl9FQNqsL2ZFXp3Hp85JLirxXqKTEqjO1KSAoYDPKSCB2fhJ0K7riepAz6R2F X67ePuYR2Xf61EsxHI9e9CkSJeo3uCariKtHeNY+Jq/jSa9zPbZsdmGRUOctazv3 lm5aeU8Vmb71jcd4rDVo+isEWqj5StKrEqqyzXVwhmFFw4/t/CSBQu42MXOyUpjY qYZPxQoRIlVR+zjp/KIb5pT1zZwPFTacSm8= -----END CERTIFICATE-----Generated at Wed Nov 5 09:53:41 2025 by rpki-client