$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2245f89a-e298-3cf0-ad95-ae8459f6b003.roa File: 2245f89a-e298-3cf0-ad95-ae8459f6b003.roa (raw, json) Hash identifier: CEttsl6ZuT3+Sm1uIgoTp/qryJcYJ0RmcIr1KLPvkuQ= Subject key identifier: 24:0A:FC:44:78:F6:2A:4E:A1:A7:FD:D1:F4:E1:01:E0:72:DF:6A:B9 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB88D3A4E19430A35ACE3CB80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2245f89a-e298-3cf0-ad95-ae8459f6b003.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 13335 IP address blocks: 2606:4700:3031::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:3a:4e:19:43:0a:35:ac:e3:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=b6ca3d93-9e3d-4855-bf7e-15997a101373 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:f7:4f:cb:f9:c0:a8:cb:2b:41:07:8e:66:ed: da:f7:31:0f:2f:b3:44:e4:a3:2a:a6:52:f4:ed:24: bd:83:9f:15:64:ea:28:85:78:0b:10:8b:de:51:12: 14:74:7c:a6:39:86:6d:e7:06:5b:4f:20:14:ad:99: a7:d8:54:8d:49:f7:2d:ba:76:bb:b7:54:64:85:41: ba:30:df:6f:76:a7:4e:c3:cd:08:f6:01:88:c1:14: b0:5f:69:6c:6d:a3:3a:24:93:91:0f:5b:fa:40:92: 8b:93:00:4e:c2:10:ab:14:b1:e1:e9:e4:52:89:8a: f1:fc:54:8d:3d:c5:af:d0:20:e1:53:89:2d:d6:d8: 6f:b2:ed:a0:91:b1:a0:b1:46:36:e3:6f:37:22:ca: f9:8c:6f:b7:12:5d:1d:14:c5:40:4c:b6:c7:91:3e: 9d:f1:4e:aa:ae:26:fe:47:9f:16:12:32:64:96:09: 64:2d:52:60:7c:ef:c6:87:37:38:43:49:0f:50:e5: 85:79:91:7e:a4:57:c4:7f:fe:23:56:6e:4b:3a:88: fd:31:f6:e7:1c:94:27:ac:5c:35:b0:79:9f:a7:20: 46:ac:79:d3:d6:33:d6:ee:2b:e5:9b:9f:bc:eb:a4: 46:00:be:7d:3d:35:84:e5:fa:1c:a2:de:44:c4:1b: 38:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:0A:FC:44:78:F6:2A:4E:A1:A7:FD:D1:F4:E1:01:E0:72:DF:6A:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2245f89a-e298-3cf0-ad95-ae8459f6b003.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv6: 2606:4700:3031::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:bc:f2:1c:c5:a8:4c:98:e7:bf:74:1e:6f:cd:36:3d:ac:06: ce:4f:6b:4c:cd:87:5c:0d:b5:b2:cb:54:e4:7c:45:ec:63:4a: e3:2e:c0:6a:07:83:ed:c4:c5:2e:3d:c1:65:3a:d2:f7:68:d0: d2:f2:79:95:9b:fc:a3:1d:26:c9:7a:17:1a:23:a6:49:86:99: 53:6b:e3:f1:25:41:0e:80:ff:4f:d6:78:ca:d6:cc:6f:a2:f9: 6d:7f:e2:f1:47:e0:0c:08:15:55:33:8c:46:33:f6:90:24:0d: 56:7a:60:c2:78:ee:19:89:e4:46:41:36:58:0f:46:75:9c:ed: bb:66:de:3c:95:76:86:78:6e:6b:c5:7c:5a:57:01:54:90:25: 72:5e:1d:13:7d:e8:b9:4b:95:da:4f:22:28:86:62:2e:8c:83: 3e:40:25:79:66:4f:9f:95:e5:f2:93:68:12:be:2e:1d:9d:3e: b4:7d:ac:ad:3c:d5:4c:95:96:59:4f:54:13:73:40:b8:0f:cb: 07:22:17:d6:e8:bc:d0:ef:68:1a:a4:2d:be:16:67:98:4b:fd: 98:a9:e8:98:f4:4b:ef:e1:2f:9b:1f:f4:1f:47:d2:8e:23:28: 23:fb:12:d2:cd:b8:23:c5:99:5b:cf:51:45:a7:a3:3c:68:80: 20:9f:fd:84 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEu4jTpOGUMKNazjy4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk YjZjYTNkOTMtOWUzZC00ODU1LWJmN2UtMTU5OTdhMTAxMzczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/dPy/nAqMsrQQeOZu3a9zEPL7NE5KMqplL0 7SS9g58VZOoohXgLEIveURIUdHymOYZt5wZbTyAUrZmn2FSNSfctuna7t1RkhUG6 MN9vdqdOw80I9gGIwRSwX2lsbaM6JJORD1v6QJKLkwBOwhCrFLHh6eRSiYrx/FSN PcWv0CDhU4kt1thvsu2gkbGgsUY24283Isr5jG+3El0dFMVATLbHkT6d8U6qrib+ R58WEjJklglkLVJgfO/Ghzc4Q0kPUOWFeZF+pFfEf/4jVm5LOoj9MfbnHJQnrFw1 sHmfpyBGrHnT1jPW7ivlm5+866RGAL59PTWE5focot5ExBs4XQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCQK/ER49ipOoaf90fThAeBy32q5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMjI0NWY4OWEtZTI5OC0z Y2YwLWFkOTUtYWU4NDU5ZjZiMDAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZHADAx MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFe88hzFqEyY5790Hm/NNj2sBs5Pa0zNh1wNtbLLVOR8RexjSuMu wGoHg+3ExS49wWU60vdo0NLyeZWb/KMdJsl6FxojpkmGmVNr4/ElQQ6A/0/WeMrW zG+i+W1/4vFH4AwIFVUzjEYz9pAkDVZ6YMJ47hmJ5EZBNlgPRnWc7btm3jyVdoZ4 bmvFfFpXAVSQJXJeHRN96LlLldpPIiiGYi6Mgz5AJXlmT5+V5fKTaBK+Lh2dPrR9 rK081UyVlllPVBNzQLgPywciF9bovNDvaBqkLb4WZ5hL/Zip6Jj0S+/hL5sf9B9H 0o4jKCP7EtLNuCPFmVvPUUWnozxogCCf/YQ= -----END CERTIFICATE-----Generated at Wed Nov 5 03:18:49 2025 by rpki-client