$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059/e152d5ef-5abc-3de2-8e1e-e2ec20e821b4.roa File: e152d5ef-5abc-3de2-8e1e-e2ec20e821b4.roa (raw, json) Hash identifier: rOwZPkQvdwYff/3kg+hafdzEviUOauVj8cEAKmOaxZI= Subject key identifier: AF:A1:17:6A:F6:C9:1D:39:9C:04:B0:9A:44:EF:A9:96:85:14:2A:B4 Certificate issuer: /CN=be7a0cf5-d98b-4cd3-adcb-1936d1ae1059 Certificate serial: 010D0C9F4328584BB45D11910D06638A8BF4F620 Authority key identifier: 54:69:11:A8:6B:29:6F:61:FB:5E:DE:24:20:B9:2A:11:E7:6F:7B:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059/e152d5ef-5abc-3de2-8e1e-e2ec20e821b4.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 30165 IP address blocks: 2604:e540::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:11:91:0d:06:63:8a:8b:f4:f6:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be7a0cf5-d98b-4cd3-adcb-1936d1ae1059 Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=6555f08d-eafc-4832-8df9-d6f10981a394 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:91:ef:76:ad:94:d4:36:d3:48:58:5c:a3:ba: 6b:2a:f9:15:03:6c:80:7f:d5:fc:b2:e1:13:7f:5f: fa:10:62:5c:39:07:db:50:8a:09:19:04:7f:00:04: 90:74:eb:d7:5d:4a:ec:32:eb:03:46:b2:3c:f6:c2: 03:04:f6:18:69:15:fa:b3:16:b3:8a:b3:5f:55:96: 90:b2:a8:21:ae:28:1d:73:fc:46:a6:ae:55:4c:32: 05:dd:2a:5d:71:53:92:4c:99:c9:d6:9d:e4:e4:fe: 45:ef:e3:6b:4b:bf:6e:7a:96:b2:3a:c0:2e:40:a3: 85:f6:8d:4f:fa:83:0d:ea:4a:c6:da:a5:1e:39:ba: ed:50:cf:32:74:c3:5f:6f:db:9f:38:1b:80:2b:ab: 56:95:b2:eb:bd:63:a2:26:79:5d:3b:d2:61:cb:f1: 6d:65:2e:1b:bc:40:2a:9a:e1:6d:50:ef:6d:a4:50: 34:ba:de:f9:16:6a:04:d3:bd:9a:b4:0b:50:bf:b7: df:09:26:3e:97:d3:55:cb:fb:11:77:f8:4a:30:c8: 8d:08:3b:a1:42:eb:cb:3a:a1:87:71:5b:50:4e:06: 0b:b6:5b:8f:15:b2:d1:a9:75:e6:3c:83:20:45:91: 02:a3:9b:6b:c8:89:e6:5d:88:03:41:67:5c:cc:39: 66:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:A1:17:6A:F6:C9:1D:39:9C:04:B0:9A:44:EF:A9:96:85:14:2A:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059/e152d5ef-5abc-3de2-8e1e-e2ec20e821b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059.crl X509v3 Authority Key Identifier: keyid:54:69:11:A8:6B:29:6F:61:FB:5E:DE:24:20:B9:2A:11:E7:6F:7B:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059.cer sbgp-ipAddrBlock: critical IPv6: 2604:e540::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:82:ac:d9:14:46:46:aa:ee:53:be:72:82:1f:8b:e3:ec:3d: c1:0a:af:fd:63:30:38:90:a6:39:c5:aa:fb:15:a4:3a:13:ba: 9b:ef:5f:42:33:c2:4b:2c:5e:ff:65:cb:2f:6d:24:a3:7b:8c: e2:46:15:0d:75:5c:d0:2d:36:15:08:cb:e1:f3:ca:8d:3c:6e: c0:90:91:de:07:33:f1:7d:cd:a3:5d:42:18:c2:26:83:cf:b1: 3c:f4:98:51:d7:c7:8c:78:16:2b:98:f4:bb:45:64:cd:ab:5b: 05:6d:2b:c6:6a:78:2f:4b:0e:c1:22:c1:b3:b4:a0:0d:9a:91: 4d:97:43:a9:d0:49:b1:d1:72:53:12:44:3a:60:14:1a:82:6d: f7:29:6f:1d:16:30:4b:70:d8:b7:78:c5:16:d5:0e:e9:88:07: cd:c8:d6:4e:18:10:71:bb:7f:17:e3:f4:5b:fd:84:1a:79:d8: ef:0b:a9:17:4c:1a:18:e3:e9:2c:38:e2:f7:76:39:b3:33:76: 0c:af:a8:1f:c4:da:c9:a4:f3:f4:91:40:62:08:7c:0d:fa:a8: e3:e5:b4:0e:83:09:be:ce:3e:60:42:ba:5e:27:9e:54:ea:d3: fa:4f:cb:ae:82:f7:1c:17:1b:28:40:88:a9:3f:40:6f:1b:89: 67:76:8b:b2 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEu0XRGRDQZjiov09iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmU3YTBjZjUtZDk4Yi00Y2QzLWFkY2ItMTkzNmQxYWUx MDU5MB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk NjU1NWYwOGQtZWFmYy00ODMyLThkZjktZDZmMTA5ODFhMzk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJHvdq2U1DbTSFhco7prKvkVA2yAf9X8suET f1/6EGJcOQfbUIoJGQR/AASQdOvXXUrsMusDRrI89sIDBPYYaRX6sxazirNfVZaQ sqghrigdc/xGpq5VTDIF3SpdcVOSTJnJ1p3k5P5F7+NrS79uepayOsAuQKOF9o1P +oMN6krG2qUeObrtUM8ydMNfb9ufOBuAK6tWlbLrvWOiJnldO9Jhy/FtZS4bvEAq muFtUO9tpFA0ut75FmoE072atAtQv7ffCSY+l9NVy/sRd/hKMMiNCDuhQuvLOqGH cVtQTgYLtluPFbLRqXXmPIMgRZECo5tryInmXYgDQWdczDlmtQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFK+hF2r2yR05nASwmkTvqZaFFCq0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iZTdh MGNmNS1kOThiLTRjZDMtYWRjYi0xOTM2ZDFhZTEwNTkvZTE1MmQ1ZWYtNWFiYy0z ZGUyLThlMWUtZTJlYzIwZTgyMWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmU3YTBjZjUtZDk4Yi00Y2QzLWFk Y2ItMTkzNmQxYWUxMDU5L2JlN2EwY2Y1LWQ5OGItNGNkMy1hZGNiLTE5MzZkMWFl MTA1OS5jcmwwHwYDVR0jBBgwFoAUVGkRqGspb2H7Xt4kILkqEedve0IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iZTdhMGNmNS1kOThiLTRjZDMtYWRjYi0xOTM2 ZDFhZTEwNTkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgTlQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCEgqzZFEZGqu5TvnKCH4vj7D3BCq/9YzA4kKY5xar7FaQ6E7qb719C M8JLLF7/ZcsvbSSje4ziRhUNdVzQLTYVCMvh88qNPG7AkJHeBzPxfc2jXUIYwiaD z7E89JhR18eMeBYrmPS7RWTNq1sFbSvGangvSw7BIsGztKANmpFNl0Op0Emx0XJT EkQ6YBQagm33KW8dFjBLcNi3eMUW1Q7piAfNyNZOGBBxu38X4/Rb/YQaedjvC6kX TBoY4+ksOOL3djmzM3YMr6gfxNrJpPP0kUBiCHwN+qjj5bQOgwm+zj5gQrpeJ55U 6tP6T8uugvccFxsoQIipP0BvG4lndouy -----END CERTIFICATE-----Generated at Wed Nov 5 09:10:12 2025 by rpki-client