$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/56cebcdc-927a-3736-9d88-f396a9cdd6e9.roa File: 56cebcdc-927a-3736-9d88-f396a9cdd6e9.roa (raw, json) Hash identifier: 3CvnpAPMl/drrLeGxZsiAfGMy7ultglFhwWQqC2CPMo= Subject key identifier: A4:00:72:52:D0:78:B6:34:01:72:EA:F4:59:80:C2:1C:8C:CC:2E:72 Certificate issuer: /CN=8eda9035-7c9b-45a0-b98b-a45be535f082 Certificate serial: 010D0C9F4328584B715CA58A39CF4270475B4E80 Authority key identifier: 64:FD:D2:B4:D5:A9:0A:A0:F5:66:68:E4:2B:96:51:54:E7:7A:66:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/56cebcdc-927a-3736-9d88-f396a9cdd6e9.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 399728 IP address blocks: 2620:98:e008::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:a5:8a:39:cf:42:70:47:5b:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8eda9035-7c9b-45a0-b98b-a45be535f082 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=eb1c6d7e-dece-4d8a-84d8-3b4c73b88d0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ed:c6:07:24:84:dc:b9:02:47:cb:79:65:3c: c0:17:0c:a9:f9:36:be:69:a4:08:e5:68:48:05:ec: 54:58:c9:2c:0a:3b:b9:ec:1a:2a:69:87:ad:e4:b4: a0:98:55:95:62:a1:5d:b7:e3:ba:3c:28:ac:0f:ed: 7f:f1:1f:ab:f1:4d:b4:e7:0f:79:03:1a:39:8c:32: 50:b7:96:3b:87:8a:7c:87:d5:2b:5f:23:78:c8:52: be:f2:6b:0f:1e:6f:c0:77:d3:04:6f:a3:33:41:8d: 42:8a:80:1c:37:6e:a0:bb:e3:08:29:11:e6:78:e2: e8:6c:4d:4f:71:13:3b:ab:be:6e:38:ff:a4:9c:d2: 21:08:d6:89:36:0b:47:c4:6d:87:75:89:05:2e:ba: 08:86:86:87:93:53:7e:f6:1b:3f:d8:b8:a7:09:1d: 93:83:8a:6d:ce:72:8e:b6:02:24:03:a7:2c:da:d6: 38:09:01:49:5a:b1:88:d9:4f:31:56:01:a7:e5:3f: 77:8b:cc:df:e6:b0:79:ac:b4:87:cf:7e:a8:9c:3f: ee:de:27:a7:92:41:79:1f:0c:d4:f5:d0:be:2c:13: ec:47:34:bd:2d:fe:1b:c2:13:4b:22:57:58:17:1a: bb:a8:cc:4c:87:a7:d1:b1:18:05:fa:4a:c5:50:56: 57:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:00:72:52:D0:78:B6:34:01:72:EA:F4:59:80:C2:1C:8C:CC:2E:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/56cebcdc-927a-3736-9d88-f396a9cdd6e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.crl X509v3 Authority Key Identifier: keyid:64:FD:D2:B4:D5:A9:0A:A0:F5:66:68:E4:2B:96:51:54:E7:7A:66:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer sbgp-ipAddrBlock: critical IPv6: 2620:98:e008::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:26:b7:61:b4:03:8c:9d:e9:73:f0:e3:d9:20:68:2a:ae:ee: 51:93:19:60:5a:f1:2a:f5:07:87:72:c5:ef:1c:cf:e9:94:4d: 02:d7:ae:d1:e5:04:63:e8:ed:8f:b7:16:9f:6d:65:42:39:0e: 9d:ca:96:b2:28:29:08:49:4b:33:53:53:ed:11:00:01:1e:bb: 20:7d:85:f3:57:2c:a9:2a:94:09:4f:19:65:4f:f2:25:07:6d: 6c:69:01:14:87:da:cc:a3:71:a8:55:33:fd:88:5d:fe:62:31: 14:03:5a:71:f6:23:03:7c:0d:d8:81:89:22:26:b1:69:08:ee: ec:36:64:d1:75:cd:cf:ca:8d:20:83:c8:4f:bc:e9:d6:98:ab: 3c:e2:bf:42:62:76:c1:cc:bf:6d:e4:5d:ae:0d:ee:2d:ad:13: 61:bc:a6:6c:ba:7e:9c:d8:36:4a:22:23:a4:2a:a4:3d:f0:7a: 5a:d6:ca:76:66:74:9c:a0:86:6b:40:20:58:4d:fe:97:64:be: 66:bd:46:4f:23:b8:e2:1b:40:12:61:05:f1:2b:ee:86:28:6b: bf:af:f3:f8:44:52:bc:4e:cd:5f:02:5a:18:3e:33:8f:35:23: 0c:d7:58:18:a3:9b:49:30:0a:1d:36:72:a8:16:9d:f7:96:38: 8a:df:cd:7c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtxXKWKOc9CcEdbToAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGVkYTkwMzUtN2M5Yi00NWEwLWI5OGItYTQ1YmU1MzVm MDgyMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk ZWIxYzZkN2UtZGVjZS00ZDhhLTg0ZDgtM2I0YzczYjg4ZDBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAou3GBySE3LkCR8t5ZTzAFwyp+Ta+aaQI5WhI BexUWMksCju57BoqaYet5LSgmFWVYqFdt+O6PCisD+1/8R+r8U205w95Axo5jDJQ t5Y7h4p8h9UrXyN4yFK+8msPHm/Ad9MEb6MzQY1CioAcN26gu+MIKRHmeOLobE1P cRM7q75uOP+knNIhCNaJNgtHxG2HdYkFLroIhoaHk1N+9hs/2LinCR2Tg4ptznKO tgIkA6cs2tY4CQFJWrGI2U8xVgGn5T93i8zf5rB5rLSHz36onD/u3ienkkF5HwzU 9dC+LBPsRzS9Lf4bwhNLIldYFxq7qMxMh6fRsRgF+krFUFZX+QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKQAclLQeLY0AXLq9FmAwhyMzC5yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZWRh OTAzNS03YzliLTQ1YTAtYjk4Yi1hNDViZTUzNWYwODIvNTZjZWJjZGMtOTI3YS0z NzM2LTlkODgtZjM5NmE5Y2RkNmU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGVkYTkwMzUtN2M5Yi00NWEwLWI5 OGItYTQ1YmU1MzVmMDgyLzhlZGE5MDM1LTdjOWItNDVhMC1iOThiLWE0NWJlNTM1 ZjA4Mi5jcmwwHwYDVR0jBBgwFoAUZP3StNWpCqD1ZmjkK5ZRVOd6ZnMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZWRhOTAzNS03YzliLTQ1YTAtYjk4Yi1hNDVi ZTUzNWYwODIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAmOAI MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALImt2G0A4yd6XPw49kgaCqu7lGTGWBa8Sr1B4dyxe8cz+mUTQLX rtHlBGPo7Y+3Fp9tZUI5Dp3KlrIoKQhJSzNTU+0RAAEeuyB9hfNXLKkqlAlPGWVP 8iUHbWxpARSH2syjcahVM/2IXf5iMRQDWnH2IwN8DdiBiSImsWkI7uw2ZNF1zc/K jSCDyE+86daYqzziv0JidsHMv23kXa4N7i2tE2G8pmy6fpzYNkoiI6QqpD3welrW ynZmdJyghmtAIFhN/pdkvma9Rk8juOIbQBJhBfEr7oYoa7+v8/hEUrxOzV8CWhg+ M481IwzXWBijm0kwCh02cqgWnfeWOIrfzXw= -----END CERTIFICATE-----Generated at Wed Nov 5 14:43:22 2025 by rpki-client