$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/a1ecaeba-9580-3dcc-9e2d-1b3f93f9548b.roa File: a1ecaeba-9580-3dcc-9e2d-1b3f93f9548b.roa (raw, json) Hash identifier: OKwO3r66KmJTlMQPRUEu4wbjvhAL6I0RTU4Qg0eh5r8= Subject key identifier: 7D:6F:34:B2:F5:A0:E0:66:73:0C:06:20:92:20:A0:4E:41:2D:73:6D Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584BBFA5ACC8B1C4EAB9C0288280 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/a1ecaeba-9580-3dcc-9e2d-1b3f93f9548b.roa Signing time: Tue 04 Nov 2025 14:00:39 +0000 ROA not before: Tue 04 Nov 2025 14:00:39 +0000 ROA not after: Mon 02 Feb 2026 14:00:39 +0000 asID: 16839 IP address blocks: 2606:3600:3000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:ac:c8:b1:c4:ea:b9:c0:28:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Nov 4 14:00:39 2025 GMT Not After : Feb 2 14:00:39 2026 GMT Subject: CN=314f24e7-ddec-44fe-a881-e9a8f2d8f68f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:60:11:3b:86:28:50:64:70:ce:36:fa:33:51: 33:b9:d2:46:8c:f9:dd:33:4c:86:e3:f3:e8:bc:68: e7:c8:0a:8c:f2:2e:3c:55:75:1c:e9:94:d3:24:7a: cf:04:cf:32:f7:da:b7:74:b8:5b:47:1d:8a:f5:a2: 71:07:1d:48:f7:ea:36:9e:59:cd:a6:05:37:fd:c1: cb:2c:3d:ff:64:4e:fd:ca:f9:b6:1b:d5:15:28:00: 97:05:9a:db:48:d9:2f:e1:9a:0b:a4:67:56:7b:eb: f3:99:14:b3:85:aa:a2:ea:cd:e5:18:8b:ad:44:17: 0d:b7:37:57:36:cc:83:9c:4e:32:e3:e1:07:77:b8: 10:af:c7:98:16:45:e5:e9:59:87:ee:e4:39:1c:5b: 5a:45:05:09:09:97:3e:16:b9:ff:d6:a8:c2:c6:ba: 67:a3:87:b0:b3:19:27:78:82:82:a3:3a:61:ea:41: 14:96:a4:40:01:21:68:9f:0a:68:95:58:02:c9:e9: c2:b2:81:c0:b2:61:3e:0b:a8:0b:27:d2:f8:82:4e: ac:d0:76:43:bb:08:9d:51:c9:b5:4c:e7:aa:a5:35: cb:85:67:4e:b4:00:29:2c:b8:df:ee:2f:c8:76:22: 92:5f:8a:21:90:96:2c:de:4a:45:d8:cb:f5:2c:c5: a8:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:6F:34:B2:F5:A0:E0:66:73:0C:06:20:92:20:A0:4E:41:2D:73:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/a1ecaeba-9580-3dcc-9e2d-1b3f93f9548b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv6: 2606:3600:3000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:d8:8d:ce:5e:c1:76:df:b3:0a:42:0f:15:2e:37:a7:b2:df: 51:0a:87:e0:1a:fe:40:39:ca:94:79:a9:e4:90:12:3b:c6:27: bb:b4:9a:d7:19:c4:59:70:ee:07:93:f6:b8:f2:c3:d8:08:86: 68:2b:68:3a:85:10:bc:a2:13:c4:00:ea:67:4f:63:58:2a:93: 44:f8:81:59:92:8d:17:f7:98:70:8c:23:e2:f1:3c:21:33:f1: ad:1c:91:19:f7:d4:77:ed:5b:fb:81:f0:ac:7f:5e:11:87:46: 7a:05:9b:46:cb:3e:57:e5:c8:0e:04:88:13:aa:30:6a:54:b6: c2:1e:9b:dd:1c:01:1e:f0:34:b4:d8:e6:27:83:59:af:71:67: 3a:21:a0:16:c1:29:45:ac:eb:9a:ea:5c:8e:c2:e0:af:20:0d: 3c:0b:d8:42:28:27:17:00:e6:6f:b9:18:cd:dd:1d:7a:04:f4: 82:29:1f:9c:7b:6e:87:97:d6:07:6e:ee:f7:cc:bd:86:0a:89: 37:be:eb:79:15:6d:dd:95:ae:34:14:f1:f1:43:f7:11:c8:52: f0:28:72:d2:f3:55:00:0b:4e:18:4f:8d:c2:af:65:55:ae:bb: 53:12:f4:e6:8b:71:42:74:3e:a3:3d:fe:2b:5e:ea:c2:15:53: ac:19:88:53 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEu/pazIscTqucAogoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk MzE0ZjI0ZTctZGRlYy00NGZlLWE4ODEtZTlhOGYyZDhmNjhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGARO4YoUGRwzjb6M1EzudJGjPndM0yG4/Po vGjnyAqM8i48VXUc6ZTTJHrPBM8y99q3dLhbRx2K9aJxBx1I9+o2nlnNpgU3/cHL LD3/ZE79yvm2G9UVKACXBZrbSNkv4ZoLpGdWe+vzmRSzhaqi6s3lGIutRBcNtzdX NsyDnE4y4+EHd7gQr8eYFkXl6VmH7uQ5HFtaRQUJCZc+Frn/1qjCxrpno4ewsxkn eIKCozph6kEUlqRAASFonwpolVgCyenCsoHAsmE+C6gLJ9L4gk6s0HZDuwidUcm1 TOeqpTXLhWdOtAApLLjf7i/IdiKSX4ohkJYs3kpF2Mv1LMWouwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFH1vNLL1oOBmcwwGIJIgoE5BLXNtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvYTFlY2FlYmEtOTU4MC0z ZGNjLTllMmQtMWIzZjkzZjk1NDhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgY2ADAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAFtiNzl7Bdt+zCkIPFS43p7LfUQqH4Br+QDnKlHmp5JASO8Ynu7Sa 1xnEWXDuB5P2uPLD2AiGaCtoOoUQvKITxADqZ09jWCqTRPiBWZKNF/eYcIwj4vE8 ITPxrRyRGffUd+1b+4HwrH9eEYdGegWbRss+V+XIDgSIE6owalS2wh6b3RwBHvA0 tNjmJ4NZr3FnOiGgFsEpRazrmupcjsLgryANPAvYQignFwDmb7kYzd0degT0gikf nHtuh5fWB27u98y9hgqJN77reRVt3ZWuNBTx8UP3EchS8Chy0vNVAAtOGE+Nwq9l Va67UxL05otxQnQ+oz3+K17qwhVTrBmIUw== -----END CERTIFICATE-----Generated at Wed Nov 5 10:35:36 2025 by rpki-client