$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/18ec7ab6-0281-3fb7-b732-9c14896f7479.roa File: 18ec7ab6-0281-3fb7-b732-9c14896f7479.roa (raw, json) Hash identifier: ObS4XpKX8X88MS570YGMoyv2/V98e/dJCY/0Fz10GZ8= Subject key identifier: 5A:81:B0:C3:74:A9:C2:46:56:79:CE:0E:2B:80:9A:03:67:DD:5D:52 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BBA1056C4E66DDEE3E2EFF280 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/18ec7ab6-0281-3fb7-b732-9c14896f7479.roa Signing time: Sun 02 Nov 2025 14:00:38 +0000 ROA not before: Sun 02 Nov 2025 14:00:38 +0000 ROA not after: Sat 31 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 2606:4700:3115::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ba:10:56:c4:e6:6d:de:e3:e2:ef:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Nov 2 14:00:38 2025 GMT Not After : Jan 31 14:00:38 2026 GMT Subject: CN=b2d196b3-b798-4f0c-af1b-708a4dd59130 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:04:65:88:dc:c4:70:2f:9c:d9:76:96:73:42: 5a:37:14:0c:e7:80:23:12:93:08:ad:15:40:2d:64: 5a:f9:8a:95:1d:25:0c:8e:44:5f:02:85:6b:b4:71: ec:8d:f9:af:83:4e:bb:d2:b8:a6:75:a8:4f:16:07: c9:47:6a:b8:1a:37:66:77:2f:14:be:c9:c7:da:51: cb:48:5b:7d:04:f0:33:8d:41:b8:2c:1d:c5:34:38: d2:a4:8d:3e:e3:83:ae:0f:c5:ee:7d:47:98:2a:59: 1b:08:46:28:de:30:c1:43:00:5e:5e:bc:65:c0:36: 76:88:5d:d3:e2:5a:8d:90:46:8e:47:f8:d2:4c:e1: 64:91:c5:4e:3c:2d:c9:a1:d0:dd:e4:b2:b4:6d:d6: 25:1b:a0:71:0a:77:ab:cb:d0:85:4d:86:ea:7f:14: f0:90:c6:70:be:e6:f6:e6:c9:ee:0e:48:aa:1e:61: 78:fb:77:ac:57:73:93:92:30:49:0e:80:77:40:b2: 06:0d:24:af:df:41:ec:62:d1:35:d2:05:dd:d0:02: a0:ab:c9:6f:34:1d:04:94:8b:75:9a:b3:69:09:ab: f5:e7:40:ca:55:c4:89:a0:fe:fc:08:0a:ce:0c:29: 82:e7:40:b7:2f:73:41:fe:54:f2:83:a2:73:16:28: ca:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:81:B0:C3:74:A9:C2:46:56:79:CE:0E:2B:80:9A:03:67:DD:5D:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/18ec7ab6-0281-3fb7-b732-9c14896f7479.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv6: 2606:4700:3115::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:f7:9c:6a:23:6c:c2:ef:3c:07:8c:19:d2:30:e6:aa:47:6a: d6:3e:a9:52:fe:bb:68:e8:d4:ff:a6:4b:1c:bf:21:ff:36:0d: b1:c9:99:32:28:e4:24:44:a2:f0:68:92:b8:b4:1f:4b:19:1f: 3b:43:44:74:48:c3:96:ed:d7:38:46:13:6a:05:3e:24:7c:a4: a1:b0:86:39:03:71:0a:4d:be:19:c0:80:e7:6d:00:51:68:36: 37:74:5c:a4:a8:09:17:f9:f5:97:e5:cf:60:46:6d:54:1e:d5: 7b:ff:1e:b4:29:12:6d:64:8a:6f:eb:2d:0a:d7:39:ec:41:ea: a4:4c:da:bc:72:50:bd:7a:15:83:9c:67:0d:7c:f8:e9:f4:22: f8:38:8b:5a:4c:47:31:79:03:25:df:60:c6:11:e6:c8:b7:7b: 59:94:ea:4d:6b:97:9a:ba:a3:b4:3b:ea:1b:e7:40:11:d7:af: c8:e7:8f:2c:e8:a8:0c:4f:45:ec:f5:ee:5b:1c:54:04:e5:de: 88:ec:45:18:b4:ee:83:93:ce:f2:e7:a5:6b:ba:70:d7:41:a0: b6:56:87:b0:b4:25:c9:a3:4d:ec:10:89:3b:ff:fe:b0:af:c5: 78:ef:3d:33:8f:ff:17:81:f0:42:ea:27:74:c0:a3:15:12:f7: 61:85:8c:ae -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEu6EFbE5m3e4+Lv8oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTEwMjE0MDAzOFoXDTI2MDEzMTE0MDAzOFowLzEtMCsGA1UEAxMk YjJkMTk2YjMtYjc5OC00ZjBjLWFmMWItNzA4YTRkZDU5MTMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsARliNzEcC+c2XaWc0JaNxQM54AjEpMIrRVA LWRa+YqVHSUMjkRfAoVrtHHsjfmvg0670rimdahPFgfJR2q4Gjdmdy8UvsnH2lHL SFt9BPAzjUG4LB3FNDjSpI0+44OuD8XufUeYKlkbCEYo3jDBQwBeXrxlwDZ2iF3T 4lqNkEaOR/jSTOFkkcVOPC3JodDd5LK0bdYlG6BxCnery9CFTYbqfxTwkMZwvub2 5snuDkiqHmF4+3esV3OTkjBJDoB3QLIGDSSv30HsYtE10gXd0AKgq8lvNB0ElIt1 mrNpCav150DKVcSJoP78CArODCmC50C3L3NB/lTyg6JzFijKDwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFqBsMN0qcJGVnnODiuAmgNn3V1SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMThlYzdhYjYtMDI4MS0z ZmI3LWI3MzItOWMxNDg5NmY3NDc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZHADEV MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGP3nGojbMLvPAeMGdIw5qpHatY+qVL+u2jo1P+mSxy/If82DbHJ mTIo5CREovBokri0H0sZHztDRHRIw5bt1zhGE2oFPiR8pKGwhjkDcQpNvhnAgOdt AFFoNjd0XKSoCRf59Zflz2BGbVQe1Xv/HrQpEm1kim/rLQrXOexB6qRM2rxyUL16 FYOcZw18+On0Ivg4i1pMRzF5AyXfYMYR5si3e1mU6k1rl5q6o7Q76hvnQBHXr8jn jyzoqAxPRez17lscVATl3ojsRRi07oOTzvLnpWu6cNdBoLZWh7C0JcmjTewQiTv/ /rCvxXjvPTOP/xeB8ELqJ3TAoxUS92GFjK4= -----END CERTIFICATE-----Generated at Wed Nov 5 09:32:36 2025 by rpki-client