$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d28ae3a1-b2e8-38ce-9a01-d2fb0de3ef95.roa File: d28ae3a1-b2e8-38ce-9a01-d2fb0de3ef95.roa (raw, json) Hash identifier: cF0sWuLjMqApI+fNYhj31yFD4oUu+lpDrfsaesS5Q7s= Subject key identifier: 9E:3F:F6:57:54:06:97:A5:4C:2C:D5:14:A4:2E:6E:36:4C:E7:D3:BB Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB88D39DE66D0A156A4B93D40 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d28ae3a1-b2e8-38ce-9a01-d2fb0de3ef95.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 13335 IP address blocks: 2606:4700:3017::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:39:de:66:d0:a1:56:a4:b9:3d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=c6d447d4-540f-4b39-ab46-edfc66676d2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c3:dd:23:87:53:15:4b:e3:d3:c5:32:50:29: f9:6c:6b:86:e6:11:7e:e8:6d:25:42:72:af:11:5f: a5:a4:12:6a:82:bc:ef:47:20:a1:dd:65:dd:22:58: 86:92:47:75:ce:1d:78:95:2d:ed:e2:3b:40:85:79: 2c:b5:21:71:c0:e3:59:28:f7:18:df:15:80:2a:e8: 12:2f:f2:b5:09:17:b5:7c:1d:37:2d:eb:21:19:87: 0f:ff:55:44:96:d1:a6:25:15:dd:bc:4c:f6:43:28: ce:15:78:a0:84:b7:79:61:a0:d6:53:d8:9a:28:6a: 27:d4:2c:9a:43:56:1a:8b:ac:27:16:e1:5e:de:46: 92:7d:f3:55:de:43:aa:dd:9a:e0:6c:b1:25:37:f6: e9:c5:75:e4:2d:f0:37:8e:22:81:6d:4f:1d:62:ea: 44:1a:02:e9:44:24:ed:2a:02:2d:c6:4c:dd:c2:e3: cb:d4:97:28:90:8d:76:df:5b:f1:b5:dd:9f:f5:3c: 2d:d1:1b:81:cf:a6:3a:ad:5f:7f:cf:1c:a8:b1:69: 29:24:91:56:d3:2d:e6:68:e8:29:67:94:63:4d:a8: de:5b:21:17:dd:e6:a3:7c:b8:1c:ea:b2:54:80:f8: 90:a2:7e:7f:d7:b0:04:41:c3:eb:b1:92:f9:b0:da: 65:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:3F:F6:57:54:06:97:A5:4C:2C:D5:14:A4:2E:6E:36:4C:E7:D3:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d28ae3a1-b2e8-38ce-9a01-d2fb0de3ef95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv6: 2606:4700:3017::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:04:fe:cd:ec:11:27:a5:fc:56:c2:9a:56:9d:3a:b0:c4:a4: 27:d7:01:f5:69:02:01:db:a6:27:49:a6:23:89:ee:26:aa:27: 16:0a:0f:75:d2:b5:b6:ea:86:53:fd:0f:ef:80:11:1e:d9:82: 4b:5f:09:2a:da:72:1d:b4:43:ed:b1:2b:fa:07:fd:6a:05:b1: 36:57:aa:d9:56:03:f2:42:6c:0e:6b:62:4d:67:7d:d0:7a:c4: bc:80:b9:bc:c3:09:39:ea:45:ec:ed:29:a7:2b:3b:db:28:69: 73:fe:61:ac:67:ec:ee:f6:ed:05:18:0f:fb:df:dc:3c:1e:af: ab:cf:7c:53:81:fc:5c:fa:f4:51:87:55:01:94:86:a2:fb:df: 5b:71:56:68:58:a8:1a:8d:4e:40:a0:60:64:d7:30:cd:c9:72: 76:de:29:7a:ce:78:65:3b:1e:bb:57:03:e9:d6:ab:a7:7d:07: 06:44:0d:55:b5:0c:66:56:85:77:9e:05:59:2e:ad:c4:50:2d: 16:41:15:4a:fb:3e:1b:5b:8b:7c:9c:61:39:a0:e8:e2:42:a7: 1f:70:50:95:73:6b:d6:ce:ed:41:fc:5c:c4:29:b1:4d:d5:97: 0b:0a:78:64:81:f2:1d:27:4b:18:51:b9:07:d7:96:f7:35:9b: 2d:82:2c:a8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEu4jTneZtChVqS5PUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk YzZkNDQ3ZDQtNTQwZi00YjM5LWFiNDYtZWRmYzY2Njc2ZDJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusPdI4dTFUvj08UyUCn5bGuG5hF+6G0lQnKv EV+lpBJqgrzvRyCh3WXdIliGkkd1zh14lS3t4jtAhXkstSFxwONZKPcY3xWAKugS L/K1CRe1fB03LeshGYcP/1VEltGmJRXdvEz2QyjOFXighLd5YaDWU9iaKGon1Cya Q1Yai6wnFuFe3kaSffNV3kOq3ZrgbLElN/bpxXXkLfA3jiKBbU8dYupEGgLpRCTt KgItxkzdwuPL1JcokI1231vxtd2f9Twt0RuBz6Y6rV9/zxyosWkpJJFW0y3maOgp Z5RjTajeWyEX3eajfLgc6rJUgPiQon5/17AEQcPrsZL5sNplbwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJ4/9ldUBpelTCzVFKQubjZM59O7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZDI4YWUzYTEtYjJlOC0z OGNlLTlhMDEtZDJmYjBkZTNlZjk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZHADAX MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGgE/s3sESel/FbCmladOrDEpCfXAfVpAgHbpidJpiOJ7iaqJxYK D3XStbbqhlP9D++AER7ZgktfCSrach20Q+2xK/oH/WoFsTZXqtlWA/JCbA5rYk1n fdB6xLyAubzDCTnqReztKacrO9soaXP+Yaxn7O727QUYD/vf3Dwer6vPfFOB/Fz6 9FGHVQGUhqL731txVmhYqBqNTkCgYGTXMM3JcnbeKXrOeGU7HrtXA+nWq6d9BwZE DVW1DGZWhXeeBVkurcRQLRZBFUr7Phtbi3ycYTmg6OJCpx9wUJVza9bO7UH8XMQp sU3VlwsKeGSB8h0nSxhRuQfXlvc1my2CLKg= -----END CERTIFICATE-----Generated at Wed Nov 5 07:03:49 2025 by rpki-client