$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/5a43cba6-014f-340f-bcdd-067f86dc02be.roa File: 5a43cba6-014f-340f-bcdd-067f86dc02be.roa (raw, json) Hash identifier: QH0QO66V96ncCGkqQ10Jtr7NBvduW1zgmIePkWoCyW0= Subject key identifier: 3A:AB:FB:D2:88:20:96:B4:66:3A:2D:C5:1D:6C:D2:66:38:7E:E1:95 Certificate issuer: /CN=8eda9035-7c9b-45a0-b98b-a45be535f082 Certificate serial: 010D0C9F4328584BB2F7A8C7168044472D4A4800 Authority key identifier: 64:FD:D2:B4:D5:A9:0A:A0:F5:66:68:E4:2B:96:51:54:E7:7A:66:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/5a43cba6-014f-340f-bcdd-067f86dc02be.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 399728 IP address blocks: 2620:98:e002::/48 maxlen: 48 2620:98:e006::/48 maxlen: 48 2620:98:e009::/48 maxlen: 48 2620:98:e00b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:a8:c7:16:80:44:47:2d:4a:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8eda9035-7c9b-45a0-b98b-a45be535f082 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=d3c52cae-a729-48c4-9531-c035b0bc1b7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:41:ad:fe:ff:54:67:5e:7d:e7:49:17:f3:35: 4e:eb:5d:04:40:68:91:f0:c3:38:1c:79:e9:81:76: ae:0a:9b:c3:8f:32:53:2a:dd:d0:d6:1e:6a:ed:83: 5a:e6:c7:9b:de:11:0d:4d:9c:d1:2b:1b:16:e1:a1: d1:b0:56:07:db:62:b9:b4:17:df:ef:75:ff:29:ef: 46:f9:1a:5a:dd:19:7f:85:e6:b2:8e:03:33:1d:7a: c9:0b:78:55:50:ea:37:34:87:73:7f:32:95:4c:e2: fa:30:75:2c:4f:60:de:60:0f:3b:71:11:1b:63:2e: cf:71:02:23:3f:f6:1e:fb:5f:36:d5:52:74:ca:be: 69:79:79:e9:14:fb:2b:32:08:78:e9:4d:ac:b9:1e: 63:ee:d6:2b:56:20:57:f5:7b:e1:d8:08:cb:7e:8c: 49:8e:a3:73:fd:6c:9c:8d:35:bb:a2:4e:0e:24:f4: 27:73:0c:03:e5:e5:00:92:41:10:0a:05:b6:89:c9: 30:b2:06:19:13:2c:2b:48:41:7f:22:96:b7:e2:a7: ab:fa:49:e0:60:ef:75:28:19:53:21:fb:04:a0:03: 1f:4e:96:04:a5:21:7f:34:1d:33:e9:b9:67:44:82: b2:ee:da:2b:b1:a4:84:42:97:8a:63:eb:04:d1:1a: e8:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:AB:FB:D2:88:20:96:B4:66:3A:2D:C5:1D:6C:D2:66:38:7E:E1:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/5a43cba6-014f-340f-bcdd-067f86dc02be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.crl X509v3 Authority Key Identifier: keyid:64:FD:D2:B4:D5:A9:0A:A0:F5:66:68:E4:2B:96:51:54:E7:7A:66:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer sbgp-ipAddrBlock: critical IPv6: 2620:98:e002::/48 2620:98:e006::/48 2620:98:e009::/48 2620:98:e00b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:e2:79:65:54:13:06:1d:c6:35:3b:bf:d3:19:ee:5e:2c:e9: 68:57:50:3e:c5:c8:84:21:f0:ee:86:b5:ec:44:b4:e6:35:d8: d7:f9:80:50:9e:ce:5e:9b:4b:7a:ee:2d:69:1a:9b:7b:83:2e: 41:da:9a:44:7a:42:b6:2a:a2:6d:76:cf:c7:1b:ef:1c:e0:71: 66:32:ef:af:8e:a4:3c:55:93:d0:8d:5e:d7:cf:9a:1a:28:2d: 86:9c:42:db:73:82:25:7d:c7:46:99:c2:a5:2c:39:15:78:58: 31:ac:a4:ae:09:0f:41:39:10:0c:46:3b:3e:bf:e5:9c:19:a7: 40:4a:bf:9c:dd:5d:4a:ce:8f:5a:4f:3a:05:6b:44:fe:1d:36: 52:29:e9:ac:94:4f:0c:7b:5f:48:c5:d0:07:cc:7f:f7:db:3e: 24:4e:48:72:14:cd:bd:a6:f0:d8:d4:21:c1:de:5f:0c:84:b0: a6:c2:0e:87:a3:02:fd:13:0b:b8:77:21:a1:ca:3a:0b:ae:08: b0:ad:4d:45:9d:77:90:a0:31:92:59:30:8c:f7:1a:c3:54:de: 8a:02:ac:66:42:da:c2:81:db:e4:8f:bc:61:dc:3a:ba:87:b0: 85:c1:6e:4e:b4:73:d3:30:79:b2:ee:1c:b9:c8:23:58:98:ed: cc:bd:c5:23 -----BEGIN CERTIFICATE----- MIIGYTCCBUmgAwIBAgIUAQ0Mn0MoWEuy96jHFoBERy1KSAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGVkYTkwMzUtN2M5Yi00NWEwLWI5OGItYTQ1YmU1MzVm MDgyMB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk ZDNjNTJjYWUtYTcyOS00OGM0LTk1MzEtYzAzNWIwYmMxYjdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA40Gt/v9UZ15950kX8zVO610EQGiR8MM4HHnp gXauCpvDjzJTKt3Q1h5q7YNa5seb3hENTZzRKxsW4aHRsFYH22K5tBff73X/Ke9G +Rpa3Rl/heayjgMzHXrJC3hVUOo3NIdzfzKVTOL6MHUsT2DeYA87cREbYy7PcQIj P/Ye+1821VJ0yr5peXnpFPsrMgh46U2suR5j7tYrViBX9Xvh2AjLfoxJjqNz/Wyc jTW7ok4OJPQncwwD5eUAkkEQCgW2ickwsgYZEywrSEF/Ipa34qer+kngYO91KBlT IfsEoAMfTpYEpSF/NB0z6blnRIKy7torsaSEQpeKY+sE0RroMQIDAQABo4IDczCC A28wHQYDVR0OBBYEFDqr+9KIIJa0ZjotxR1s0mY4fuGVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZWRh OTAzNS03YzliLTQ1YTAtYjk4Yi1hNDViZTUzNWYwODIvNWE0M2NiYTYtMDE0Zi0z NDBmLWJjZGQtMDY3Zjg2ZGMwMmJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGVkYTkwMzUtN2M5Yi00NWEwLWI5 OGItYTQ1YmU1MzVmMDgyLzhlZGE5MDM1LTdjOWItNDVhMC1iOThiLWE0NWJlNTM1 ZjA4Mi5jcmwwHwYDVR0jBBgwFoAUZP3StNWpCqD1ZmjkK5ZRVOd6ZnMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZWRhOTAzNS03YzliLTQ1YTAtYjk4Yi1hNDVi ZTUzNWYwODIuY2VyMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAAjAkAwcAJiAAmOAC AwcAJiAAmOAGAwcAJiAAmOAJAwcAJiAAmOALMFQGA1UdIAEB/wRKMEgwRgYIKwYB BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAAnieWVUEwYdxjU7 v9MZ7l4s6WhXUD7FyIQh8O6GtexEtOY12Nf5gFCezl6bS3ruLWkam3uDLkHamkR6 QrYqom12z8cb7xzgcWYy76+OpDxVk9CNXtfPmhooLYacQttzgiV9x0aZwqUsORV4 WDGspK4JD0E5EAxGOz6/5ZwZp0BKv5zdXUrOj1pPOgVrRP4dNlIp6ayUTwx7X0jF 0AfMf/fbPiROSHIUzb2m8NjUIcHeXwyEsKbCDoejAv0TC7h3IaHKOguuCLCtTUWd d5CgMZJZMIz3GsNU3ooCrGZC2sKB2+SPvGHcOrqHsIXBbk60c9MwebLuHLnII1iY 7cy9xSM= -----END CERTIFICATE-----Generated at Wed Nov 5 06:24:26 2025 by rpki-client