$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853/698433db-e2ac-3ad0-8d1a-70743069e6d5.roa File: 698433db-e2ac-3ad0-8d1a-70743069e6d5.roa (raw, json) Hash identifier: YhMlw+2R+NSIJiGT+rOSrDHEgBsZP3SYMMecxnQ6kDQ= Subject key identifier: E8:7B:9D:BC:7A:A5:E5:CB:BE:70:96:7C:43:51:D6:0B:F0:8E:C7:36 Certificate issuer: /CN=5bac54b9-66dc-4956-863d-1804cfb9e853 Certificate serial: 010D0C9F4328584B99D7A79E1431D4D2C11CAB40 Authority key identifier: 7F:4A:9A:A7:40:62:CD:6D:BF:70:19:16:CE:FD:9B:2A:27:E6:2E:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853/698433db-e2ac-3ad0-8d1a-70743069e6d5.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 399077 IP address blocks: 2606:4dc0:2200::/40 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853/5bac54b9-66dc-4956-863d-1804cfb9e853.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853/5bac54b9-66dc-4956-863d-1804cfb9e853.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:a7:9e:14:31:d4:d2:c1:1c:ab:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5bac54b9-66dc-4956-863d-1804cfb9e853 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=15078f2a-252b-42d3-8c23-2d21a8b2695d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:0c:d6:7d:ff:07:90:01:20:ba:47:2f:aa:09: af:f6:47:db:ed:83:4e:2d:2c:ee:7d:52:23:2b:54: 1f:57:7d:9f:29:66:5c:15:4b:a5:40:dd:1c:5f:02: b4:0b:07:41:5d:b1:65:55:b2:93:2b:2e:09:1f:1a: 10:76:7e:f8:14:de:f3:86:38:6a:04:de:37:d6:56: 09:4f:80:d1:4d:fc:f1:1d:2c:3d:66:b9:e1:45:18: 48:6d:13:86:f9:c7:b0:43:10:9d:45:11:ca:1e:21: 32:58:1c:8a:5e:f2:c3:25:85:75:15:4d:63:76:ee: 4f:d7:c3:fb:3a:af:1c:f9:d5:3e:a7:5d:1c:11:43: b8:35:10:b4:00:ed:c7:b6:43:bf:28:f5:b8:e6:ab: b3:e2:49:e2:e9:61:df:52:58:4d:0a:09:99:82:1d: dd:c9:42:ae:f9:75:8c:65:48:c1:e4:e6:cd:8a:9b: 81:ea:1a:a4:0e:f1:47:a7:85:95:ce:0a:bd:25:7b: c7:22:c0:0f:0e:93:79:f3:63:0a:d1:80:53:56:71: d4:db:43:87:07:27:11:58:f2:08:c6:67:cc:c5:7a: 2a:f2:aa:28:39:c1:bb:c0:7b:62:08:49:12:ee:c8: 1b:56:2e:6c:aa:64:85:3b:b8:fb:aa:cf:a1:c0:bd: 8d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:7B:9D:BC:7A:A5:E5:CB:BE:70:96:7C:43:51:D6:0B:F0:8E:C7:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853/698433db-e2ac-3ad0-8d1a-70743069e6d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853/5bac54b9-66dc-4956-863d-1804cfb9e853.crl X509v3 Authority Key Identifier: keyid:7F:4A:9A:A7:40:62:CD:6D:BF:70:19:16:CE:FD:9B:2A:27:E6:2E:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853.cer sbgp-ipAddrBlock: critical IPv6: 2606:4dc0:2200::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:12:54:d9:7e:81:41:8f:64:d9:eb:bb:32:fa:08:00:89:65: 9f:21:a3:8b:79:d3:03:65:38:df:77:f8:57:3e:ed:47:4b:ba: 4a:16:6b:04:c9:bd:05:45:a4:cc:fe:35:d1:15:22:c3:e0:22: f5:7c:92:d4:9c:56:3a:03:b6:e9:78:23:0e:ad:c7:51:de:ea: cc:bd:7b:91:30:4f:a8:df:55:42:c9:ab:49:ef:b0:e8:eb:b0: 8b:13:68:c6:08:4f:a9:94:25:5e:9a:1f:5c:be:14:9e:0d:87: 03:90:ba:ab:65:57:91:ab:5e:57:12:55:1d:67:60:fe:c6:c6: 73:ae:0d:7d:29:c9:bf:39:fc:1d:b0:bb:a5:a0:d2:f1:6f:5f: f2:2f:df:b1:b9:5d:f5:a9:d1:f2:ee:b2:9b:27:a4:60:aa:ff: 9f:e2:d9:65:d9:3c:3c:ce:53:43:58:05:d9:1d:0b:69:3d:9c: 7e:0f:19:2a:ab:f7:f0:ff:b2:b4:da:e2:69:0c:77:5a:b6:4d: 58:51:7c:81:f3:ce:0e:29:94:91:31:11:40:11:e5:f5:14:22: 99:ea:22:7b:4d:33:06:20:cc:32:45:0c:6f:7c:0f:e7:54:9a: a3:99:ac:36:06:de:ae:e6:d8:90:30:cd:ad:05:16:42:36:00: 74:17:38:5c -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEuZ16eeFDHU0sEcq0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWJhYzU0YjktNjZkYy00OTU2LTg2M2QtMTgwNGNmYjll ODUzMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk MTUwNzhmMmEtMjUyYi00MmQzLThjMjMtMmQyMWE4YjI2OTVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiAzWff8HkAEgukcvqgmv9kfb7YNOLSzufVIj K1QfV32fKWZcFUulQN0cXwK0CwdBXbFlVbKTKy4JHxoQdn74FN7zhjhqBN431lYJ T4DRTfzxHSw9ZrnhRRhIbROG+cewQxCdRRHKHiEyWByKXvLDJYV1FU1jdu5P18P7 Oq8c+dU+p10cEUO4NRC0AO3HtkO/KPW45quz4kni6WHfUlhNCgmZgh3dyUKu+XWM ZUjB5ObNipuB6hqkDvFHp4WVzgq9JXvHIsAPDpN582MK0YBTVnHU20OHBycRWPII xmfMxXoq8qooOcG7wHtiCEkS7sgbVi5sqmSFO7j7qs+hwL2NHwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFOh7nbx6peXLvnCWfENR1gvwjsc2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81YmFj NTRiOS02NmRjLTQ5NTYtODYzZC0xODA0Y2ZiOWU4NTMvNjk4NDMzZGItZTJhYy0z YWQwLThkMWEtNzA3NDMwNjllNmQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNWJhYzU0YjktNjZkYy00OTU2LTg2 M2QtMTgwNGNmYjllODUzLzViYWM1NGI5LTY2ZGMtNDk1Ni04NjNkLTE4MDRjZmI5 ZTg1My5jcmwwHwYDVR0jBBgwFoAUf0qap0BizW2/cBkWzv2bKifmLp4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC81YmFjNTRiOS02NmRjLTQ5NTYtODYzZC0xODA0 Y2ZiOWU4NTMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgZNwCIw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAvRJU2X6BQY9k2eu7MvoIAIllnyGji3nTA2U433f4Vz7tR0u6ShZr BMm9BUWkzP410RUiw+Ai9XyS1JxWOgO26XgjDq3HUd7qzL17kTBPqN9VQsmrSe+w 6OuwixNoxghPqZQlXpofXL4Ung2HA5C6q2VXkateVxJVHWdg/sbGc64NfSnJvzn8 HbC7paDS8W9f8i/fsbld9anR8u6ymyekYKr/n+LZZdk8PM5TQ1gF2R0LaT2cfg8Z Kqv38P+ytNriaQx3WrZNWFF8gfPODimUkTERQBHl9RQimeoie00zBiDMMkUMb3wP 51Sao5msNgberubYkDDNrQUWQjYAdBc4XA== -----END CERTIFICATE-----Generated at Tue Nov 4 21:42:57 2025 by rpki-client