$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/439bc7e7-91fb-38f8-a989-24f8d55cf5f9.roa File: 439bc7e7-91fb-38f8-a989-24f8d55cf5f9.roa (raw, json) Hash identifier: oOKZi3koCkBpcCbj9gVRn1LHmYDuBYBHFfFPT63t2m0= Subject key identifier: CA:0A:E7:9B:02:C8:34:AC:D0:00:5A:37:04:B8:FF:C9:80:2B:80:36 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB88D5151A2544B9EB08BCCC0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/439bc7e7-91fb-38f8-a989-24f8d55cf5f9.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 13335 IP address blocks: 2606:4700:4043::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:51:51:a2:54:4b:9e:b0:8b:cc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=63c6613a-714e-4d11-94fc-0b2bd63cd940 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:dd:7b:c7:69:d8:0d:8d:81:bd:92:0c:97:a2: 7a:f0:fc:34:27:1d:72:ff:35:4d:61:92:a2:3e:77: af:48:d9:de:cc:d3:19:3d:04:6b:74:6e:fa:d3:6d: 58:2e:92:bc:ed:41:7e:9c:79:df:28:ce:b1:ff:82: 3a:74:97:11:70:5c:49:6f:f4:9a:9f:f3:51:6d:f6: e6:5e:39:b7:e9:8a:f4:1b:4f:f5:cc:c6:72:7d:32: ef:c6:02:e0:1d:51:c5:98:b2:1c:2c:50:59:dc:b0: 1a:79:e5:f0:8f:5d:39:52:0a:ca:de:0d:32:f5:c4: c8:9d:e9:be:a1:1a:f8:6a:4f:83:10:e2:a5:6a:68: 6e:5a:98:b6:f2:a5:36:a0:50:1a:83:11:a0:00:06: b7:d3:39:3c:ce:fa:4a:15:ce:12:d2:49:fe:b6:0a: 6e:82:0f:24:34:f1:7f:3e:43:ef:f7:52:f4:2b:91: 99:96:a4:ca:e8:ea:41:31:89:c9:54:ad:b9:a8:7b: 1d:6a:b0:35:8a:eb:65:00:80:ba:57:4b:03:94:fe: 35:80:ce:85:de:48:ac:3f:d3:af:6e:59:52:e4:8f: 41:ae:f1:5f:ca:61:f7:45:9a:3c:02:8c:0d:34:1b: 24:16:b5:07:54:d5:20:e3:8b:25:f0:ea:48:98:2e: 1c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:0A:E7:9B:02:C8:34:AC:D0:00:5A:37:04:B8:FF:C9:80:2B:80:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/439bc7e7-91fb-38f8-a989-24f8d55cf5f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv6: 2606:4700:4043::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:fb:df:e2:6b:5d:63:39:c7:d8:79:64:f7:94:6b:26:53:7c: 14:b0:37:ba:a2:d0:0d:39:6a:11:84:7f:3b:46:79:25:2e:64: b3:6a:1b:8a:be:c1:43:07:6b:2c:82:66:f3:ab:3d:48:98:ec: bd:f4:8d:f7:ad:7a:77:eb:98:0f:0a:a2:83:e1:a5:95:bc:b6: e7:0c:50:ef:82:75:a6:07:a7:8f:1c:2d:39:13:34:e0:d2:13: 4e:3c:20:fa:fc:63:7b:2f:00:ec:81:87:95:dd:92:e0:a3:d0: 27:ee:b5:73:50:b7:63:26:59:2b:0d:91:ef:f5:07:73:35:55: 97:3e:fa:f5:a6:85:34:67:3d:ac:08:22:de:3c:5e:b0:fd:9c: fc:6c:bd:f3:03:4c:64:97:bb:5e:72:6c:94:31:20:b7:72:a9: f7:70:63:77:a8:6b:72:ff:74:1a:f0:a3:84:4b:c0:9f:df:76: 9c:84:f3:90:12:59:53:40:9d:cd:61:23:04:3f:67:8a:d9:06: de:b0:99:5a:cb:24:5b:f0:66:66:a0:a3:7f:de:35:a0:16:71: 53:29:3d:c3:d2:c3:80:9e:38:aa:15:56:28:02:37:09:d1:6d: dd:8e:e4:61:a6:93:ad:a2:56:01:e5:a5:aa:08:08:30:b6:35: bd:35:8c:87 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEu4jVFRolRLnrCLzMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk NjNjNjYxM2EtNzE0ZS00ZDExLTk0ZmMtMGIyYmQ2M2NkOTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvt17x2nYDY2BvZIMl6J68Pw0Jx1y/zVNYZKi PnevSNnezNMZPQRrdG76021YLpK87UF+nHnfKM6x/4I6dJcRcFxJb/San/NRbfbm Xjm36Yr0G0/1zMZyfTLvxgLgHVHFmLIcLFBZ3LAaeeXwj105UgrK3g0y9cTInem+ oRr4ak+DEOKlamhuWpi28qU2oFAagxGgAAa30zk8zvpKFc4S0kn+tgpugg8kNPF/ PkPv91L0K5GZlqTK6OpBMYnJVK25qHsdarA1iutlAIC6V0sDlP41gM6F3kisP9Ov bllS5I9BrvFfymH3RZo8AowNNBskFrUHVNUg44sl8OpImC4cLQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMoK55sCyDSs0ABaNwS4/8mAK4A2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNDM5YmM3ZTctOTFmYi0z OGY4LWE5ODktMjRmOGQ1NWNmNWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZHAEBD MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJP73+JrXWM5x9h5ZPeUayZTfBSwN7qi0A05ahGEfztGeSUuZLNq G4q+wUMHayyCZvOrPUiY7L30jfetenfrmA8KooPhpZW8tucMUO+CdaYHp48cLTkT NODSE048IPr8Y3svAOyBh5XdkuCj0CfutXNQt2MmWSsNke/1B3M1VZc++vWmhTRn PawIIt48XrD9nPxsvfMDTGSXu15ybJQxILdyqfdwY3eoa3L/dBrwo4RLwJ/fdpyE 85ASWVNAnc1hIwQ/Z4rZBt6wmVrLJFvwZmago3/eNaAWcVMpPcPSw4CeOKoVVigC NwnRbd2O5GGmk62iVgHlpaoICDC2Nb01jIc= -----END CERTIFICATE-----Generated at Wed Nov 5 02:42:05 2025 by rpki-client