$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/901a0472-6710-3856-abd4-2432486d0fa3.roa File: 901a0472-6710-3856-abd4-2432486d0fa3.roa (raw, json) Hash identifier: pa2OLCIGNgJETv2OEClOosVCIHkEonK9uA0D0gjcIMY= Subject key identifier: AF:FE:96:15:A5:FD:54:0E:78:18:7A:FD:A2:2E:10:04:6F:19:C4:77 Certificate issuer: /CN=6e9c5894-f794-4209-a00d-cf232363d7c6 Certificate serial: 010D0C9F4328584B9B3CE240FD805F53271EF200 Authority key identifier: EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/901a0472-6710-3856-abd4-2432486d0fa3.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 14618 IP address blocks: 2605:b040:b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3c:e2:40:fd:80:5f:53:27:1e:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e9c5894-f794-4209-a00d-cf232363d7c6 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=9ddb3d93-9a71-4f6d-9407-9a28fcba8a62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:35:1a:83:d6:1b:4d:77:3d:a6:a1:c4:43:4c: 61:ce:ea:c6:1e:03:83:d0:c3:28:16:a7:69:b1:5b: bb:bd:17:8f:63:25:e6:0b:fa:7c:ba:3f:7c:1a:bf: 76:b8:4f:06:fa:83:29:33:75:6f:f1:54:30:0c:fc: b9:98:c2:04:0a:db:6d:3c:df:1a:08:29:39:6b:12: c7:23:b2:6e:c6:d7:a6:67:77:28:29:bc:d8:e1:69: 78:7e:19:c9:65:36:37:7f:51:a5:45:d0:b4:ac:1b: 7e:b0:34:e0:03:b6:eb:09:64:bc:f3:ac:52:24:ac: 1c:87:3f:fe:a0:8e:30:b7:46:1f:a9:c5:6d:84:c0: 75:0e:d7:23:46:7e:59:c3:72:3a:a1:30:33:c2:69: c3:08:12:f6:a3:1b:0a:84:4f:77:9c:7b:ed:a1:98: b5:31:a1:cb:cf:db:da:6c:1c:0f:67:58:b0:c2:c0: 7f:b5:dc:12:47:25:7a:fb:ea:8f:be:9c:87:ab:80: 6f:d2:6d:30:86:a0:95:e5:da:5e:fa:68:84:78:dd: e8:bc:82:a8:0f:69:d0:f2:53:ef:bc:60:f2:f4:0c: 5b:35:ef:a8:f8:9d:cc:1f:07:dd:2c:df:4f:c7:ec: 3d:9e:9e:a1:94:88:da:80:b5:0b:81:be:13:ce:93: 5e:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:FE:96:15:A5:FD:54:0E:78:18:7A:FD:A2:2E:10:04:6F:19:C4:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/901a0472-6710-3856-abd4-2432486d0fa3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl X509v3 Authority Key Identifier: keyid:EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer sbgp-ipAddrBlock: critical IPv6: 2605:b040:b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:fb:70:bf:bd:da:e7:de:ac:f2:72:95:30:bb:84:4c:ae:ef: b0:4a:22:03:0c:3f:ea:68:7f:6e:b3:71:e4:fc:8a:2a:c2:38: eb:33:21:f0:ff:17:7d:8d:d8:e7:e8:b9:d2:1d:e6:f6:ae:a0: 7a:0e:34:3f:c6:94:2d:50:57:5d:74:c7:62:35:26:87:5a:d3: 02:a3:b6:3d:25:b7:77:1e:e3:1c:90:03:1e:09:ab:5d:40:4c: d0:71:09:bd:98:30:24:92:93:2d:c6:5c:81:6d:94:54:9c:f6: 7b:78:0c:5d:df:fc:01:07:89:fe:dc:91:95:98:3d:48:53:70: 14:ff:74:4e:76:8e:96:67:d2:66:2b:87:25:87:4b:50:61:a8: 74:12:97:3e:3b:73:ff:59:d8:4c:ca:d2:73:87:eb:24:9b:66: df:26:b5:cf:8a:a5:50:4f:d7:f1:32:64:bb:a2:58:e8:ee:de: 79:7a:5d:3d:e3:a8:9a:f7:bd:3a:f3:5f:d4:ea:de:ac:89:3f: a4:a3:38:10:f9:fd:a6:ac:4b:aa:54:18:c8:8d:50:84:95:ce: 83:be:dc:bd:9f:49:f5:16:3e:1e:e6:60:ae:7f:ca:14:1a:f4: 03:b6:48:a3:2b:30:28:fb:75:7c:03:f8:83:c9:6a:35:77:7d: 74:60:86:ef -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEubPOJA/YBfUyce8gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmU5YzU4OTQtZjc5NC00MjA5LWEwMGQtY2YyMzIzNjNk N2M2MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk OWRkYjNkOTMtOWE3MS00ZjZkLTk0MDctOWEyOGZjYmE4YTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDUag9YbTXc9pqHEQ0xhzurGHgOD0MMoFqdp sVu7vRePYyXmC/p8uj98Gr92uE8G+oMpM3Vv8VQwDPy5mMIECtttPN8aCCk5axLH I7JuxtemZ3coKbzY4Wl4fhnJZTY3f1GlRdC0rBt+sDTgA7brCWS886xSJKwchz/+ oI4wt0YfqcVthMB1DtcjRn5Zw3I6oTAzwmnDCBL2oxsKhE93nHvtoZi1MaHLz9va bBwPZ1iwwsB/tdwSRyV6++qPvpyHq4Bv0m0whqCV5dpe+miEeN3ovIKoD2nQ8lPv vGDy9AxbNe+o+J3MHwfdLN9Px+w9np6hlIjagLULgb4TzpNeuwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFK/+lhWl/VQOeBh6/aIuEARvGcR3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82ZTlj NTg5NC1mNzk0LTQyMDktYTAwZC1jZjIzMjM2M2Q3YzYvOTAxYTA0NzItNjcxMC0z ODU2LWFiZDQtMjQzMjQ4NmQwZmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNmU5YzU4OTQtZjc5NC00MjA5LWEw MGQtY2YyMzIzNjNkN2M2LzZlOWM1ODk0LWY3OTQtNDIwOS1hMDBkLWNmMjMyMzYz ZDdjNi5jcmwwHwYDVR0jBBgwFoAU620+1MghuZYRngwJ/123iIBSlIUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82ZTljNTg5NC1mNzk0LTQyMDktYTAwZC1jZjIz MjM2M2Q3YzYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWwQAAL MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAv7cL+92uferPJylTC7hEyu77BKIgMMP+pof26zceT8iirCOOsz IfD/F32N2OfoudId5vauoHoOND/GlC1QV110x2I1Joda0wKjtj0lt3ce4xyQAx4J q11ATNBxCb2YMCSSky3GXIFtlFSc9nt4DF3f/AEHif7ckZWYPUhTcBT/dE52jpZn 0mYrhyWHS1BhqHQSlz47c/9Z2EzK0nOH6ySbZt8mtc+KpVBP1/EyZLuiWOju3nl6 XT3jqJr3vTrzX9Tq3qyJP6SjOBD5/aasS6pUGMiNUISVzoO+3L2fSfUWPh7mYK5/ yhQa9AO2SKMrMCj7dXwD+IPJajV3fXRghu8= -----END CERTIFICATE-----Generated at Wed Nov 5 08:01:29 2025 by rpki-client