$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f3d9dbf9-0454-3830-b46b-05b5333a1441.roa File: f3d9dbf9-0454-3830-b46b-05b5333a1441.roa (raw, json) Hash identifier: 0emyUAbOaqDF3M0WDV6fe0APz6SFIg+bCtcc/4jA4Bc= Subject key identifier: CF:05:67:1C:9C:E7:B4:E8:C2:9D:21:03:96:C5:10:F9:C8:80:02:3A Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BBA1057126E31B2A5B1278300 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f3d9dbf9-0454-3830-b46b-05b5333a1441.roa Signing time: Sun 02 Nov 2025 14:00:38 +0000 ROA not before: Sun 02 Nov 2025 14:00:38 +0000 ROA not after: Sat 31 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 2606:4700:311c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ba:10:57:12:6e:31:b2:a5:b1:27:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Nov 2 14:00:38 2025 GMT Not After : Jan 31 14:00:38 2026 GMT Subject: CN=ff2378b7-3bc5-4a18-89dd-0e36cb2113df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:5c:49:68:e4:d6:83:ce:fb:7b:37:f1:f7:2a: 73:9e:74:9c:8c:d1:02:80:18:52:d7:ab:1f:a1:22: 27:63:d6:6d:ea:88:52:af:5b:80:1a:13:50:5b:d2: b7:c8:99:1c:9f:16:70:0a:24:7c:3d:55:7d:a0:9a: 53:b7:88:76:b8:93:e1:fa:e9:03:de:70:36:ad:5b: 19:ad:9e:e5:f2:70:d7:cb:b2:e0:d7:bf:22:09:92: 8f:25:dc:05:7d:38:16:80:a1:c8:b5:46:7a:8e:ad: 1f:b1:f3:96:29:9e:91:67:b1:18:a3:3c:0b:af:4d: 6a:80:66:7d:70:0c:7d:e3:e7:9f:0c:d9:92:2f:6e: 17:07:33:3d:02:ee:3d:9d:81:82:3d:06:77:22:d9: 94:96:f5:3b:bb:44:3e:a4:7f:b1:76:bf:43:db:b0: 6d:ea:59:20:6d:dc:b2:8b:5d:02:89:b6:5b:b1:da: 45:74:88:67:ae:a4:c5:0a:da:15:4b:c2:dd:df:b1: 5b:97:fb:b7:54:37:7a:42:60:d0:a9:01:09:67:91: e2:2a:cc:79:d0:b2:ea:82:7a:23:3c:73:c5:40:b3: 6a:1b:30:7e:6a:52:88:c6:0f:ca:49:86:7b:8d:3a: d6:30:94:9f:f1:e5:c3:0f:14:ba:14:9d:b6:1e:cc: 9b:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:05:67:1C:9C:E7:B4:E8:C2:9D:21:03:96:C5:10:F9:C8:80:02:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f3d9dbf9-0454-3830-b46b-05b5333a1441.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv6: 2606:4700:311c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:7b:59:84:49:d5:b5:2d:e1:28:8b:4a:d0:65:1a:33:22:74: 61:15:a6:ab:1f:d8:c7:ae:1d:64:fe:73:50:a7:c2:d5:d5:26: 7b:34:5e:5a:12:75:2a:d3:92:9c:4e:60:8f:0f:62:2f:5d:99: b6:fa:6c:2c:2f:9b:21:00:b6:10:d3:aa:02:df:82:8c:e6:42: 9b:85:7e:b0:2e:89:90:7e:ab:fa:b2:2b:25:f7:9b:48:b6:72: df:52:09:96:6d:be:f2:17:c6:23:6c:6a:20:fa:70:c2:69:19: 66:5a:ff:72:e6:a8:c5:75:60:85:53:e9:32:82:af:c3:81:a2: 20:fa:c7:99:23:40:82:b5:68:5b:c8:c1:21:c0:d2:3e:fb:a6: fb:8c:7e:89:ba:32:27:ef:75:18:ed:19:af:9d:0a:6c:43:ac: b3:04:63:d4:73:46:6f:e7:55:7b:e3:b0:85:7f:93:8f:cd:61: 75:09:cc:af:29:f7:30:97:e3:d9:81:31:96:87:b0:fa:f8:5e: 33:2a:96:4e:07:2b:4c:c7:74:0a:93:be:ef:f6:7f:6b:a8:6d: 7a:02:af:59:7a:83:ea:1a:cb:20:5f:a8:91:88:79:09:c6:20: 92:00:4f:a7:30:48:3e:86:41:e4:12:31:49:6b:4f:f5:0f:f5: 44:21:2d:d0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEu6EFcSbjGypbEngwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTEwMjE0MDAzOFoXDTI2MDEzMTE0MDAzOFowLzEtMCsGA1UEAxMk ZmYyMzc4YjctM2JjNS00YTE4LTg5ZGQtMGUzNmNiMjExM2RmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlxJaOTWg877ezfx9ypznnScjNECgBhS16sf oSInY9Zt6ohSr1uAGhNQW9K3yJkcnxZwCiR8PVV9oJpTt4h2uJPh+ukD3nA2rVsZ rZ7l8nDXy7Lg178iCZKPJdwFfTgWgKHItUZ6jq0fsfOWKZ6RZ7EYozwLr01qgGZ9 cAx94+efDNmSL24XBzM9Au49nYGCPQZ3ItmUlvU7u0Q+pH+xdr9D27Bt6lkgbdyy i10CibZbsdpFdIhnrqTFCtoVS8Ld37Fbl/u3VDd6QmDQqQEJZ5HiKsx50LLqgnoj PHPFQLNqGzB+alKIxg/KSYZ7jTrWMJSf8eXDDxS6FJ22HsybKwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFM8FZxyc57Towp0hA5bFEPnIgAI6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZjNkOWRiZjktMDQ1NC0z ODMwLWI0NmItMDViNTMzM2ExNDQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZHADEc MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMJ7WYRJ1bUt4SiLStBlGjMidGEVpqsf2MeuHWT+c1CnwtXVJns0 XloSdSrTkpxOYI8PYi9dmbb6bCwvmyEAthDTqgLfgozmQpuFfrAuiZB+q/qyKyX3 m0i2ct9SCZZtvvIXxiNsaiD6cMJpGWZa/3LmqMV1YIVT6TKCr8OBoiD6x5kjQIK1 aFvIwSHA0j77pvuMfom6MifvdRjtGa+dCmxDrLMEY9RzRm/nVXvjsIV/k4/NYXUJ zK8p9zCX49mBMZaHsPr4XjMqlk4HK0zHdAqTvu/2f2uobXoCr1l6g+oayyBfqJGI eQnGIJIAT6cwSD6GQeQSMUlrT/UP9UQhLdA= -----END CERTIFICATE-----Generated at Wed Nov 5 03:19:05 2025 by rpki-client