$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4e558afa-39f1-3e84-a72c-fcb6f2d602f7.roa File: 4e558afa-39f1-3e84-a72c-fcb6f2d602f7.roa (raw, json) Hash identifier: lkBCcmsksJdDBxtHupM7NCEWte1DKcO0xK3u22yHM3w= Subject key identifier: ED:45:EA:58:90:76:6B:A9:5B:68:A5:72:B4:27:0F:2D:CC:6F:57:8D Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB88D3873C1A215F1FB964D80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4e558afa-39f1-3e84-a72c-fcb6f2d602f7.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 13335 IP address blocks: 2606:4700:e4::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:38:73:c1:a2:15:f1:fb:96:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=a48a6ce8-4adc-406b-b0e0-d492cb6d57f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:fc:29:3d:a3:1d:0e:ff:2b:72:d5:65:18:6e: 47:ff:3c:e3:ac:f5:f3:0a:da:71:ff:97:22:b3:f2: a4:92:55:eb:81:84:2e:d8:c8:2c:63:c0:3d:ff:77: 95:81:f0:c3:0f:28:1d:d9:cf:8d:20:e1:83:93:bb: 98:62:d2:96:cd:c2:8d:39:d7:3b:4a:e3:0c:75:a0: 03:0c:35:c3:94:5e:61:fc:a4:8d:09:82:1f:84:7f: 84:49:30:e8:6c:6f:6d:51:9c:db:32:fa:c6:56:56: 5e:76:7a:67:eb:0e:48:1b:e7:56:19:51:5a:50:f9: 2a:5b:09:64:3a:66:3b:47:94:40:49:c4:28:90:9d: d1:18:c0:c7:db:da:a8:5f:96:43:15:17:77:3a:51: 5e:f5:a3:f8:f6:26:21:4b:5a:e6:fa:0a:27:9c:6f: b6:e5:8c:90:56:92:39:cf:77:c2:ba:fb:71:6c:87: 8f:7a:cb:0e:1e:cc:38:3a:92:b5:a3:eb:58:12:31: d9:0a:52:52:36:d5:4b:dc:da:66:57:5e:c5:df:04: 77:79:43:0d:6c:e5:b8:07:da:ca:7b:77:38:8d:11: 07:8f:4a:cb:e6:41:5b:89:d2:b8:ad:35:7f:00:a3: 19:b3:73:b7:7d:02:06:1e:34:e0:73:95:75:dd:0c: ad:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:45:EA:58:90:76:6B:A9:5B:68:A5:72:B4:27:0F:2D:CC:6F:57:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4e558afa-39f1-3e84-a72c-fcb6f2d602f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv6: 2606:4700:e4::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:5a:f1:e2:5b:bd:c4:12:44:f9:39:c4:61:fb:4f:2c:08:08: 0e:e8:21:71:16:b0:c6:1a:98:db:0d:e6:16:ed:9b:ca:c2:6e: 2e:ba:86:33:28:79:a7:07:b5:13:78:b0:a2:07:31:f4:eb:c1: 10:f2:e0:0c:af:72:a1:fe:14:b2:fd:cc:21:8f:3c:e5:9b:45: 69:41:18:17:a8:e6:06:f6:a0:fb:36:01:c1:da:92:4b:26:3f: 93:14:34:b0:50:f7:a2:12:9b:72:56:36:99:d9:33:a6:31:1a: b9:c9:e9:24:84:4a:7c:df:89:76:79:90:68:e9:92:6e:87:6b: b8:2a:98:09:0b:16:47:b2:90:ec:11:10:d2:21:c4:e4:d1:3e: de:95:e7:a4:33:48:a3:6e:d5:f2:72:45:57:bc:0e:fe:8c:82: c5:80:fd:70:d8:bd:cd:b3:94:33:49:49:99:2c:39:81:53:ba: 7d:9d:4b:0c:ab:8c:50:53:31:41:38:13:92:46:18:78:8f:02: 88:9c:73:25:65:34:4d:6c:af:3a:1e:90:b6:ac:26:6a:ad:24: 66:69:66:29:47:24:10:fb:ff:4f:a8:f5:d5:dd:38:46:66:13: f2:5c:44:df:84:99:d7:96:0b:65:7b:e0:b6:59:a1:84:0b:bf: 78:40:cc:51 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEu4jThzwaIV8fuWTYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk YTQ4YTZjZTgtNGFkYy00MDZiLWIwZTAtZDQ5MmNiNmQ1N2YzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/wpPaMdDv8rctVlGG5H/zzjrPXzCtpx/5ci s/KkklXrgYQu2MgsY8A9/3eVgfDDDygd2c+NIOGDk7uYYtKWzcKNOdc7SuMMdaAD DDXDlF5h/KSNCYIfhH+ESTDobG9tUZzbMvrGVlZednpn6w5IG+dWGVFaUPkqWwlk OmY7R5RAScQokJ3RGMDH29qoX5ZDFRd3OlFe9aP49iYhS1rm+gonnG+25YyQVpI5 z3fCuvtxbIePessOHsw4OpK1o+tYEjHZClJSNtVL3NpmV17F3wR3eUMNbOW4B9rK e3c4jREHj0rL5kFbidK4rTV/AKMZs3O3fQIGHjTgc5V13QytNQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFO1F6liQdmupW2ilcrQnDy3Mb1eNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNGU1NThhZmEtMzlmMS0z ZTg0LWE3MmMtZmNiNmYyZDYwMmY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgZHAADk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGda8eJbvcQSRPk5xGH7TywICA7oIXEWsMYamNsN5hbtm8rCbi66 hjMoeacHtRN4sKIHMfTrwRDy4AyvcqH+FLL9zCGPPOWbRWlBGBeo5gb2oPs2AcHa kksmP5MUNLBQ96ISm3JWNpnZM6YxGrnJ6SSESnzfiXZ5kGjpkm6Ha7gqmAkLFkey kOwRENIhxOTRPt6V56QzSKNu1fJyRVe8Dv6MgsWA/XDYvc2zlDNJSZksOYFTun2d SwyrjFBTMUE4E5JGGHiPAoiccyVlNE1srzoekLasJmqtJGZpZilHJBD7/0+o9dXd OEZmE/JcRN+EmdeWC2V74LZZoYQLv3hAzFE= -----END CERTIFICATE-----Generated at Wed Nov 5 13:50:27 2025 by rpki-client