$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f973a111-025c-3b67-af4a-66b87c67efe1.roa File: f973a111-025c-3b67-af4a-66b87c67efe1.roa (raw, json) Hash identifier: 90iMTd8/sftkPeEVYTlV/N9if2vAe9R2BTdk8b0+048= Subject key identifier: A9:54:5F:2C:1C:0D:12:6D:0A:A0:8C:6C:98:92:F5:92:FD:E9:F0:BC Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BBE405B21295F7F8F363D4E00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f973a111-025c-3b67-af4a-66b87c67efe1.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 395747 IP address blocks: 2606:54c1:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:5b:21:29:5f:7f:8f:36:3d:4e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=93ac40b9-0205-4ff8-a6a9-e3d39c7b3584 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c2:9c:d1:3a:d6:51:27:ab:a8:de:b8:28:c6: 57:44:13:4a:2e:10:42:65:d6:17:1e:07:9f:2e:a2: 45:50:4a:ae:b8:29:fc:e6:31:a1:98:f3:63:56:b9: d1:80:a1:d4:3b:18:8b:88:60:9c:96:cc:e2:cc:04: 13:71:7a:be:33:42:12:fa:ec:5f:a5:39:e2:e7:90: f9:e0:54:c2:70:c4:b0:21:4f:2e:19:ad:29:4a:86: 69:4d:0d:99:b5:65:e6:26:61:0e:9a:ee:f6:2c:3f: 47:3f:b5:45:00:e0:36:52:7d:89:16:43:b7:e0:d0: 62:48:6b:2b:6d:3d:c4:b8:3a:be:41:f0:8c:03:69: 7d:e5:75:76:08:c4:1d:aa:f4:af:50:b0:f8:ac:87: f6:0e:1b:2d:2e:45:b6:84:ec:31:0d:21:b4:96:3e: b9:dc:c1:84:60:27:aa:ed:14:c2:0e:fa:93:a3:95: a5:ed:59:e2:25:04:1c:cb:77:82:28:2a:66:9b:f2: e9:d0:af:aa:27:c1:02:40:77:01:7b:fe:fb:7a:87: 0b:56:a5:ed:f9:db:e1:5a:98:9d:9a:b4:fd:1f:92: 91:76:a8:62:3d:0c:1f:ad:b5:e7:c7:36:d1:93:39: ca:08:51:a0:f4:7d:38:dc:83:ce:1d:0c:a9:3f:b3: 35:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:54:5F:2C:1C:0D:12:6D:0A:A0:8C:6C:98:92:F5:92:FD:E9:F0:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f973a111-025c-3b67-af4a-66b87c67efe1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv6: 2606:54c1:2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:d4:38:a4:52:f9:6d:11:03:7a:a3:2c:51:28:ec:f7:2b:3a: f7:cf:2e:58:20:ec:33:2a:e1:2f:5e:ae:16:cb:c9:ff:b5:8c: 1e:b3:2b:1e:7b:7d:86:00:33:8e:26:98:5d:b3:c1:2c:49:77: 28:d3:ed:65:41:7c:36:9e:65:ae:ef:33:2b:e1:83:d5:e8:34: d7:b5:f4:c5:14:a1:b3:7f:23:48:66:cc:e1:a3:a9:01:88:c0: 6c:4b:0b:20:e3:41:05:9b:c7:44:43:29:bc:ca:5d:7a:0f:ae: 2b:ee:54:bc:22:0d:54:38:06:cd:50:18:66:1d:1a:ff:b6:47: 6a:4e:f1:34:45:2c:aa:5c:1e:af:a9:59:61:a6:aa:7f:02:94: 9b:e0:4f:3d:89:99:15:0a:be:d5:f4:a3:ea:e2:11:69:f2:40: 0e:b8:15:f5:83:a5:40:be:34:8d:b2:36:f5:6a:01:1e:2b:51: d5:9b:1e:84:ba:7e:57:96:58:67:1d:5b:09:8b:18:7a:53:0e: f6:56:c3:31:52:13:59:ad:3d:a2:c4:13:92:b1:68:69:1e:b3: ce:4f:af:ff:96:b5:2f:46:27:19:f1:ff:f3:6e:e3:f4:20:8c: 3e:d9:1d:57:22:ce:9f:51:94:0f:c9:20:58:ea:97:a2:57:38: 07:ac:13:69 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEu+QFshKV9/jzY9TgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk OTNhYzQwYjktMDIwNS00ZmY4LWE2YTktZTNkMzljN2IzNTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysKc0TrWUSerqN64KMZXRBNKLhBCZdYXHgef LqJFUEquuCn85jGhmPNjVrnRgKHUOxiLiGCclszizAQTcXq+M0IS+uxfpTni55D5 4FTCcMSwIU8uGa0pSoZpTQ2ZtWXmJmEOmu72LD9HP7VFAOA2Un2JFkO34NBiSGsr bT3EuDq+QfCMA2l95XV2CMQdqvSvULD4rIf2DhstLkW2hOwxDSG0lj653MGEYCeq 7RTCDvqTo5Wl7VniJQQcy3eCKCpmm/Lp0K+qJ8ECQHcBe/77eocLVqXt+dvhWpid mrT9H5KRdqhiPQwfrbXnxzbRkznKCFGg9H043IPOHQypP7M1LwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKlUXywcDRJtCqCMbJiS9ZL96fC8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZjk3M2ExMTEtMDI1Yy0z YjY3LWFmNGEtNjZiODdjNjdlZmUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZUwQAC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACbUOKRS+W0RA3qjLFEo7PcrOvfPLlgg7DMq4S9erhbLyf+1jB6z Kx57fYYAM44mmF2zwSxJdyjT7WVBfDaeZa7vMyvhg9XoNNe19MUUobN/I0hmzOGj qQGIwGxLCyDjQQWbx0RDKbzKXXoPrivuVLwiDVQ4Bs1QGGYdGv+2R2pO8TRFLKpc Hq+pWWGmqn8ClJvgTz2JmRUKvtX0o+riEWnyQA64FfWDpUC+NI2yNvVqAR4rUdWb HoS6fleWWGcdWwmLGHpTDvZWwzFSE1mtPaLEE5KxaGkes85Pr/+WtS9GJxnx//Nu 4/QgjD7ZHVcizp9RlA/JIFjql6JXOAesE2k= -----END CERTIFICATE-----Generated at Wed Nov 5 11:52:30 2025 by rpki-client