$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1d7e1471-9d25-3a62-a434-f22e9e6f4b9a.roa File: 1d7e1471-9d25-3a62-a434-f22e9e6f4b9a.roa (raw, json) Hash identifier: uo3wFmBs4JSWUacSd02XMhCUfpTosm0qPcJMUeLs3Os= Subject key identifier: 0C:18:28:F2:CB:24:7F:3F:00:8A:EE:89:D7:97:76:F2:B1:21:C5:E5 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB88D4EE69134A4869D992700 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1d7e1471-9d25-3a62-a434-f22e9e6f4b9a.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 13335 IP address blocks: 2606:4700:3000::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:4e:e6:91:34:a4:86:9d:99:27:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=2ddebe17-0012-4b27-ba4c-4207d02faa01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:63:38:17:4c:33:5e:6c:ec:6e:ef:32:68:c4: 07:5f:43:75:45:c0:5f:3f:1c:8d:bd:fd:e1:4f:51: e8:eb:fd:7c:b7:be:7a:3d:30:40:98:3f:c8:27:c5: b1:ba:9d:63:84:8f:14:49:25:77:79:5a:bf:56:55: 17:f9:49:1d:d8:df:3a:3b:cc:48:0e:eb:8d:7e:5f: 33:b4:64:5e:2f:4b:49:11:a0:ae:30:35:bf:34:c6: 58:04:65:bc:5d:b6:59:63:60:aa:08:c6:cf:f8:58: 3b:4a:c4:47:a9:7a:9e:f9:85:6e:19:ab:0f:f4:b3: 26:77:9e:d8:a5:12:e8:74:25:44:21:01:8a:77:e0: d8:ab:30:b8:b2:dc:c3:2a:69:22:73:36:bf:2f:5f: 1e:ac:12:a9:9e:f0:86:b6:5b:7e:de:b7:99:e4:93: 21:a6:d7:08:2d:b8:77:07:ad:9c:5b:9b:ef:0c:6d: 7f:cc:0e:89:78:c7:b3:87:32:3e:23:48:74:d7:c3: f1:44:bf:59:ff:8d:12:bd:3f:9b:e7:3a:dd:47:1b: 91:89:05:d0:02:38:19:5d:01:0b:0a:79:6a:a2:17: 6a:a3:84:97:a7:39:fe:3d:49:d4:66:7a:0b:25:16: 4c:c3:6b:d5:ba:6a:90:48:66:ab:31:4e:e1:4b:b8: 4d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:18:28:F2:CB:24:7F:3F:00:8A:EE:89:D7:97:76:F2:B1:21:C5:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1d7e1471-9d25-3a62-a434-f22e9e6f4b9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv6: 2606:4700:3000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:01:e2:49:1b:07:b1:b5:18:71:cc:e5:00:41:ce:74:3c:10: 44:67:ad:81:5b:22:b2:05:9f:2f:c9:9a:93:ca:80:6a:7b:2d: a5:59:7c:c9:6d:b1:a5:ac:87:4f:74:f8:9e:bd:39:2b:c5:39: ae:8b:8f:42:de:68:ab:7b:09:d0:df:32:6b:bb:53:04:35:25: e1:ca:cd:f8:aa:bc:8a:9b:f4:8e:6b:a6:52:17:94:70:73:6c: d9:44:c4:63:c8:0f:de:fd:da:ce:e8:9e:8c:88:5e:35:4e:84: 6e:11:4f:b5:c0:ab:a5:e4:ad:19:7e:9a:78:60:b2:94:16:86: d2:34:26:52:19:c5:e5:b5:4e:b8:76:a8:77:7e:71:b4:a4:11: 40:db:98:07:c4:e5:ab:e8:f4:19:58:24:48:76:d3:37:f8:2d: 3c:2d:c2:9d:08:fe:cd:58:87:13:a2:4d:4f:2e:6e:14:93:45: dc:30:04:d7:a2:d7:c3:b4:e0:6c:bc:6d:89:69:40:23:5c:ec: 5e:76:79:6e:4d:56:4c:da:62:a1:70:2d:e6:be:11:01:d8:34: 8e:3b:44:ba:46:dd:f1:44:f7:97:f1:44:2d:9d:44:54:58:7c: 92:f2:16:ce:11:c1:25:69:44:a7:40:3a:df:94:49:f0:e8:f7: ba:9b:ba:4b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEu4jU7mkTSkhp2ZJwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk MmRkZWJlMTctMDAxMi00YjI3LWJhNGMtNDIwN2QwMmZhYTAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWM4F0wzXmzsbu8yaMQHX0N1RcBfPxyNvf3h T1Ho6/18t756PTBAmD/IJ8Wxup1jhI8USSV3eVq/VlUX+Ukd2N86O8xIDuuNfl8z tGReL0tJEaCuMDW/NMZYBGW8XbZZY2CqCMbP+Fg7SsRHqXqe+YVuGasP9LMmd57Y pRLodCVEIQGKd+DYqzC4stzDKmkicza/L18erBKpnvCGtlt+3reZ5JMhptcILbh3 B62cW5vvDG1/zA6JeMezhzI+I0h018PxRL9Z/40SvT+b5zrdRxuRiQXQAjgZXQEL Cnlqohdqo4SXpzn+PUnUZnoLJRZMw2vVumqQSGarMU7hS7hN1QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAwYKPLLJH8/AIruideXdvKxIcXlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMWQ3ZTE0NzEtOWQyNS0z YTYyLWE0MzQtZjIyZTllNmY0YjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgZHADAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACcB4kkbB7G1GHHM5QBBznQ8EERnrYFbIrIFny/JmpPKgGp7LaVZ fMltsaWsh090+J69OSvFOa6Lj0LeaKt7CdDfMmu7UwQ1JeHKzfiqvIqb9I5rplIX lHBzbNlExGPID9792s7onoyIXjVOhG4RT7XAq6XkrRl+mnhgspQWhtI0JlIZxeW1 Trh2qHd+cbSkEUDbmAfE5avo9BlYJEh20zf4LTwtwp0I/s1YhxOiTU8ubhSTRdww BNei18O04Gy8bYlpQCNc7F52eW5NVkzaYqFwLea+EQHYNI47RLpG3fFE95fxRC2d RFRYfJLyFs4RwSVpRKdAOt+USfDo97qbuks= -----END CERTIFICATE-----Generated at Wed Nov 5 07:02:22 2025 by rpki-client