$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/406f90cf-ccd8-3ca6-ab6d-70834a6ba455.roa File: 406f90cf-ccd8-3ca6-ab6d-70834a6ba455.roa (raw, json) Hash identifier: YReAvJZj24CLWJz+AoZiO9hNMvAsdrDE1N1i+gm2J9s= Subject key identifier: 33:DF:CD:D5:DB:06:2E:BC:53:2D:0C:88:34:43:89:24:59:23:3D:A5 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB88D38BAC887F492E3C70680 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/406f90cf-ccd8-3ca6-ab6d-70834a6ba455.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 13335 IP address blocks: 2606:4700:f1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:38:ba:c8:87:f4:92:e3:c7:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=47f9efcc-67b7-454e-8ea3-010343c978ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:35:b5:95:24:74:21:7b:53:7f:5e:57:f1:27: 0d:92:81:3d:82:68:db:e9:3e:c0:dd:b0:75:d6:46: 60:a7:55:54:9d:b5:50:3a:c0:ee:13:fc:e6:70:ff: a9:0b:ea:36:6b:aa:d6:bd:d8:4c:dc:2c:e1:b4:bf: ee:b8:aa:5f:e0:31:be:cf:93:3f:3b:88:75:67:ae: 4a:57:7a:ee:52:96:55:54:4f:75:dc:b1:30:96:bc: 53:03:72:75:5c:b4:e6:c5:fc:bc:7d:23:93:2c:43: 88:88:08:53:0f:f3:4c:a2:50:53:08:10:bd:35:ba: f7:7a:24:f2:b4:ba:9d:5d:56:b8:4c:8e:d3:8d:c8: 50:d9:43:5e:b2:dc:a2:7d:05:da:29:33:02:20:50: 62:a6:58:5c:59:f5:1e:82:51:ef:ef:44:ca:ad:8e: aa:9f:0b:b1:c8:1d:b5:4b:07:bf:53:85:ef:da:29: d4:b8:51:25:ea:b1:34:0b:6b:8f:77:a4:43:0c:aa: 7f:03:13:85:ff:0a:b4:df:82:be:3a:7e:40:f7:16: 4f:e9:bc:70:3b:58:76:21:a3:be:3a:41:91:b5:13: 36:c7:92:7b:6b:2b:04:17:ad:28:cf:4f:c3:23:8f: ac:88:49:3b:7a:19:6b:51:d2:6c:46:7f:17:70:c0: 61:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:DF:CD:D5:DB:06:2E:BC:53:2D:0C:88:34:43:89:24:59:23:3D:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/406f90cf-ccd8-3ca6-ab6d-70834a6ba455.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv6: 2606:4700:f1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:76:90:e3:dd:94:10:7e:2c:83:bf:04:b8:49:19:87:c7:4e: b8:2f:ce:e9:bf:36:b5:fb:91:0a:51:d0:90:2f:8f:77:85:f1: b4:3c:4d:14:4f:76:89:76:51:d7:89:ed:db:7f:c8:68:0a:fb: 9e:d9:96:23:e0:d9:40:e8:3e:44:d1:9b:c0:5b:2f:3e:65:34: 3a:e5:13:b8:cb:37:34:2a:ba:47:ac:2d:90:48:c7:f6:a2:d7: c4:14:6e:c6:07:f7:74:9e:92:86:24:4b:8f:12:73:9f:f8:f9: c4:9d:3e:54:03:58:63:e9:c6:e7:df:c8:dd:b3:ec:00:53:dc: 5d:51:5f:80:f5:5c:54:66:59:d6:1c:4d:6a:03:33:80:99:9f: c0:ec:8a:50:0d:5f:45:34:b6:f3:33:5d:89:3e:0b:04:51:c0: 5c:62:1a:be:8a:d1:12:d0:55:23:dd:7a:e1:d5:4f:5d:89:f5: 84:7e:0c:fd:c3:26:6c:22:e3:b8:67:5e:06:c1:19:8c:12:3b: 8a:7a:0a:c0:8b:44:d1:c2:58:87:11:3f:db:68:0d:7e:0c:12: 40:37:11:fc:e5:d5:2d:c8:94:e6:0e:1d:49:00:ab:47:2d:f5: 2c:c7:d1:00:63:8f:c5:93:93:ae:54:71:4d:72:e6:af:0f:52: ea:f6:49:5a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEu4jTi6yIf0kuPHBoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk NDdmOWVmY2MtNjdiNy00NTRlLThlYTMtMDEwMzQzYzk3OGNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3jW1lSR0IXtTf15X8ScNkoE9gmjb6T7A3bB1 1kZgp1VUnbVQOsDuE/zmcP+pC+o2a6rWvdhM3CzhtL/uuKpf4DG+z5M/O4h1Z65K V3ruUpZVVE913LEwlrxTA3J1XLTmxfy8fSOTLEOIiAhTD/NMolBTCBC9Nbr3eiTy tLqdXVa4TI7TjchQ2UNestyifQXaKTMCIFBiplhcWfUeglHv70TKrY6qnwuxyB21 Swe/U4Xv2inUuFEl6rE0C2uPd6RDDKp/AxOF/wq034K+On5A9xZP6bxwO1h2IaO+ OkGRtRM2x5J7aysEF60oz0/DI4+siEk7ehlrUdJsRn8XcMBhzwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDPfzdXbBi68Uy0MiDRDiSRZIz2lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNDA2ZjkwY2YtY2NkOC0z Y2E2LWFiNmQtNzA4MzRhNmJhNDU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZHAADx MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIx2kOPdlBB+LIO/BLhJGYfHTrgvzum/NrX7kQpR0JAvj3eF8bQ8 TRRPdol2UdeJ7dt/yGgK+57ZliPg2UDoPkTRm8BbLz5lNDrlE7jLNzQqukesLZBI x/ai18QUbsYH93SekoYkS48Sc5/4+cSdPlQDWGPpxuffyN2z7ABT3F1RX4D1XFRm WdYcTWoDM4CZn8DsilANX0U0tvMzXYk+CwRRwFxiGr6K0RLQVSPdeuHVT12J9YR+ DP3DJmwi47hnXgbBGYwSO4p6CsCLRNHCWIcRP9toDX4MEkA3Efzl1S3IlOYOHUkA q0ct9SzH0QBjj8WTk65UcU1y5q8PUur2SVo= -----END CERTIFICATE-----Generated at Wed Nov 5 13:44:12 2025 by rpki-client