$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8f78a1e2-1d0b-37d9-9fe5-8ed913fac3f5.roa File: 8f78a1e2-1d0b-37d9-9fe5-8ed913fac3f5.roa (raw, json) Hash identifier: 5nhoIXoSnSSGHM25C9PgsjG1M1Kj2zFOMQAeQ0hmzUo= Subject key identifier: B4:9A:ED:09:CB:00:EA:00:F2:2B:4A:F8:39:92:C6:F9:BB:CE:59:E5 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB88D3B088A5BF32BC69B70F0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8f78a1e2-1d0b-37d9-9fe5-8ed913fac3f5.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 13335 IP address blocks: 2606:4700:4021::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:3b:08:8a:5b:f3:2b:c6:9b:70:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=2d5d7498-8813-4dd8-a7c9-42f6ef463885 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:58:64:d9:5b:27:44:f8:56:47:f7:93:8c:8f: 36:db:23:41:6f:58:b9:7c:be:74:4c:fa:3f:bb:79: fd:01:19:dd:04:57:cd:54:6c:6b:5c:ff:16:ee:aa: ad:95:7f:25:6a:90:b0:2b:12:75:9c:42:14:96:87: c0:ec:65:0c:5e:30:41:f0:f7:82:b1:fd:26:b2:cf: 4b:94:d9:cb:19:16:1b:ad:dc:e4:3e:cf:d3:72:66: fb:36:f9:da:b8:e2:f6:e7:b0:a2:04:0f:6b:a6:6a: 4b:4b:99:3d:03:d2:3e:16:eb:5b:4b:15:d2:1c:9c: 26:d8:19:15:d9:fa:40:9a:e5:cc:4e:65:75:14:c5: 82:4b:75:da:5b:55:ac:66:8d:08:7f:66:28:63:28: 1a:be:18:35:bb:c9:fa:c0:12:c9:b9:7b:26:c7:ef: 4d:07:48:9e:53:f6:e0:eb:32:1c:df:c3:05:c0:f0: cb:c8:3a:8c:07:ef:42:84:bd:f2:ee:8a:63:e4:6f: 4c:68:f9:95:11:59:05:12:f6:43:27:8d:9d:02:13: 49:e5:d2:ff:28:8e:2d:8f:ad:cf:b3:c0:13:8f:e5: 80:dc:8b:8c:a1:c4:d8:db:ed:fd:f6:41:34:86:45: ea:43:25:00:ba:34:03:f2:5a:ce:f8:92:93:25:12: f3:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:9A:ED:09:CB:00:EA:00:F2:2B:4A:F8:39:92:C6:F9:BB:CE:59:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8f78a1e2-1d0b-37d9-9fe5-8ed913fac3f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv6: 2606:4700:4021::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:25:07:b9:85:af:61:fe:88:54:a0:76:ed:66:68:0f:e0:27: 8b:45:a1:88:13:5c:1e:65:6f:3c:e4:4f:ed:f0:18:5f:b9:44: fb:d0:2c:75:0a:0d:58:19:bc:f7:ba:b0:60:04:50:52:87:0c: a3:84:16:31:69:ac:38:5c:bd:a6:bd:ad:c9:2d:0d:db:95:4e: 5f:15:cc:11:1a:de:bd:5e:83:04:de:9b:94:27:78:3e:fc:37: a7:90:89:cc:44:01:3f:00:42:1f:1e:db:26:ec:66:f3:53:35: d4:e5:d2:d1:c5:f5:9d:00:e3:53:db:51:3f:b2:39:c8:68:eb: 5d:46:73:ff:c4:11:d1:5c:97:2d:07:3e:fe:c5:2b:8d:49:f6: bf:2a:c0:45:96:e2:61:37:c4:60:df:7c:8f:a4:e3:2b:1c:f6: 4d:7b:a4:94:b7:e1:5d:f5:bb:2b:f5:c1:a0:c1:48:6f:38:68: 36:76:08:96:7e:6d:fe:ae:ba:c1:c2:5f:1f:27:c5:08:2c:a3: 37:07:61:f9:a3:79:47:00:03:2c:94:1c:0c:81:67:2f:4c:b0: 09:07:3d:92:63:5a:8b:f8:58:bd:49:5d:f1:f5:65:f1:f3:7f: 6f:82:ab:a1:af:22:8e:07:b6:b1:f0:e1:69:7b:3a:f3:cb:36: 47:30:b1:2a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEu4jTsIilvzK8abcPAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk MmQ1ZDc0OTgtODgxMy00ZGQ4LWE3YzktNDJmNmVmNDYzODg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlhk2VsnRPhWR/eTjI822yNBb1i5fL50TPo/ u3n9ARndBFfNVGxrXP8W7qqtlX8lapCwKxJ1nEIUlofA7GUMXjBB8PeCsf0mss9L lNnLGRYbrdzkPs/Tcmb7NvnauOL257CiBA9rpmpLS5k9A9I+FutbSxXSHJwm2BkV 2fpAmuXMTmV1FMWCS3XaW1WsZo0If2YoYygavhg1u8n6wBLJuXsmx+9NB0ieU/bg 6zIc38MFwPDLyDqMB+9ChL3y7opj5G9MaPmVEVkFEvZDJ42dAhNJ5dL/KI4tj63P s8ATj+WA3IuMocTY2+399kE0hkXqQyUAujQD8lrO+JKTJRLzjwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLSa7QnLAOoA8itK+DmSxvm7zlnlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOGY3OGExZTItMWQwYi0z N2Q5LTlmZTUtOGVkOTEzZmFjM2Y1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZHAEAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGklB7mFr2H+iFSgdu1maA/gJ4tFoYgTXB5lbzzkT+3wGF+5RPvQ LHUKDVgZvPe6sGAEUFKHDKOEFjFprDhcvaa9rcktDduVTl8VzBEa3r1egwTem5Qn eD78N6eQicxEAT8AQh8e2ybsZvNTNdTl0tHF9Z0A41PbUT+yOcho611Gc//EEdFc ly0HPv7FK41J9r8qwEWW4mE3xGDffI+k4ysc9k17pJS34V31uyv1waDBSG84aDZ2 CJZ+bf6uusHCXx8nxQgsozcHYfmjeUcAAyyUHAyBZy9MsAkHPZJjWov4WL1JXfH1 ZfHzf2+Cq6GvIo4HtrHw4Wl7OvPLNkcwsSo= -----END CERTIFICATE-----Generated at Wed Nov 5 12:15:59 2025 by rpki-client