$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/06a7f297-c95d-3dff-a3d6-9e7649e794ea.roa File: 06a7f297-c95d-3dff-a3d6-9e7649e794ea.roa (raw, json) Hash identifier: pcYbamua5NVEnGODJcfkNLfurncBixyNv6BVXeeyOKI= Subject key identifier: 3D:AD:34:1D:CE:63:E0:3E:EE:F1:9F:31:33:E8:C4:21:1C:F3:1E:1C Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB88D527AB7D787A235BC8800 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/06a7f297-c95d-3dff-a3d6-9e7649e794ea.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 132892 IP address blocks: 2606:4700:1100::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:52:7a:b7:d7:87:a2:35:bc:88:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=429a3607-6524-4bce-bac4-5ea35ed44b1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:18:9e:09:85:25:4a:2c:aa:0d:6d:30:08:e5: 0a:e6:61:3c:b7:d6:5e:40:de:d2:2d:b9:72:f5:35: 1c:88:31:a6:a7:63:00:b5:a4:09:6b:21:cd:c7:3e: e6:9f:65:b8:cd:03:00:d3:2a:95:68:f1:b0:b2:82: 22:9c:62:c5:6a:36:c6:fe:74:5c:a0:6d:cb:2c:9a: a0:f6:a8:98:8f:e3:ba:6c:f8:6f:cd:9c:e8:0d:ea: aa:8e:fa:eb:3c:2b:30:cb:04:c9:e6:b7:62:aa:fd: f6:79:50:75:3d:24:6e:cd:bb:d7:c6:22:ba:37:af: b9:51:fe:4e:86:74:30:20:ac:4f:3b:2c:68:60:21: d9:cf:68:5d:86:fb:b7:2a:f5:ce:6e:72:f5:66:8a: b2:91:bd:13:60:0e:11:8c:4e:69:7d:22:1d:b7:7b: 9b:75:b5:14:b8:26:d5:03:e7:78:84:db:ac:8b:89: 06:a3:8d:a7:dc:28:6e:1b:02:03:73:b2:65:ae:25: 9c:6a:63:a6:22:20:c5:7e:cb:e1:78:d5:f2:60:bf: b7:fb:14:ee:0d:f6:33:49:c2:f8:2a:b7:30:9c:79: 7b:ba:70:50:16:36:45:8b:71:6e:31:74:44:fd:88: 96:52:aa:82:a4:6d:f5:3c:26:b1:93:22:66:fb:09: d6:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:AD:34:1D:CE:63:E0:3E:EE:F1:9F:31:33:E8:C4:21:1C:F3:1E:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/06a7f297-c95d-3dff-a3d6-9e7649e794ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv6: 2606:4700:1100::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:1e:86:f7:7d:c6:55:3f:41:0d:c5:00:43:ae:4d:42:bd:e1: c8:c6:d9:11:68:be:45:3e:2e:1f:eb:a5:8c:8e:72:3b:55:8f: e8:52:62:89:be:43:75:3c:a9:37:ba:66:94:77:93:94:6e:2d: 4a:2e:19:52:ff:a4:79:4d:1c:c1:bf:11:7f:7d:fc:47:18:3a: 2e:81:d6:d7:cd:fc:46:64:d5:83:1f:14:17:8a:cc:18:ff:cd: c3:62:3d:2a:f7:52:f4:7e:d9:1b:8a:5e:e2:1a:e5:3d:dd:b8: 40:76:40:76:3a:36:b6:c4:51:91:c9:e0:ec:a2:67:c4:fd:59: 89:8d:ee:a8:6b:75:bd:ea:67:ad:53:47:04:3e:2f:06:49:4f: cc:87:14:79:44:f9:46:c9:4a:3d:48:78:eb:76:bb:ef:d8:0f: 9c:32:03:f9:5c:60:a8:20:37:ca:49:65:a5:62:1f:28:a7:7a: c2:e8:03:f4:ff:b8:1b:39:4e:70:1f:a8:c0:30:83:6b:24:5a: 03:99:94:cc:a7:70:d1:99:1f:8a:1d:1a:1a:c8:17:74:74:c3: 2a:e1:24:fd:35:ea:b0:6e:ba:2d:ce:0b:fb:25:70:a8:e0:e2: 49:c6:7f:88:c6:f8:0e:aa:ce:dd:2c:f7:43:44:61:97:83:fe: a1:47:3a:7e -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEu4jVJ6t9eHojW8iAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk NDI5YTM2MDctNjUyNC00YmNlLWJhYzQtNWVhMzVlZDQ0YjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRieCYUlSiyqDW0wCOUK5mE8t9ZeQN7SLbly 9TUciDGmp2MAtaQJayHNxz7mn2W4zQMA0yqVaPGwsoIinGLFajbG/nRcoG3LLJqg 9qiYj+O6bPhvzZzoDeqqjvrrPCswywTJ5rdiqv32eVB1PSRuzbvXxiK6N6+5Uf5O hnQwIKxPOyxoYCHZz2hdhvu3KvXObnL1Zoqykb0TYA4RjE5pfSIdt3ubdbUUuCbV A+d4hNusi4kGo42n3ChuGwIDc7JlriWcamOmIiDFfsvheNXyYL+3+xTuDfYzScL4 KrcwnHl7unBQFjZFi3FuMXRE/YiWUqqCpG31PCaxkyJm+wnWNQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFD2tNB3OY+A+7vGfMTPoxCEc8x4cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMDZhN2YyOTctYzk1ZC0z ZGZmLWEzZDYtOWU3NjQ5ZTc5NGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgZHABEw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAXx6G933GVT9BDcUAQ65NQr3hyMbZEWi+RT4uH+uljI5yO1WP6FJi ib5DdTypN7pmlHeTlG4tSi4ZUv+keU0cwb8Rf338Rxg6LoHW1838RmTVgx8UF4rM GP/Nw2I9KvdS9H7ZG4pe4hrlPd24QHZAdjo2tsRRkcng7KJnxP1ZiY3uqGt1vepn rVNHBD4vBklPzIcUeUT5RslKPUh463a779gPnDID+VxgqCA3ykllpWIfKKd6wugD 9P+4GzlOcB+owDCDayRaA5mUzKdw0Zkfih0aGsgXdHTDKuEk/TXqsG66Lc4L+yVw qODiScZ/iMb4DqrO3Sz3Q0Rhl4P+oUc6fg== -----END CERTIFICATE-----Generated at Wed Nov 5 11:52:45 2025 by rpki-client