$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/58e07563-c033-4e44-b58b-ee57eafd8f85/5bf9da42-fe79-3455-8869-3015b3ade0a5.roa File: 5bf9da42-fe79-3455-8869-3015b3ade0a5.roa (raw, json) Hash identifier: cdzKldz0OfM4CRlZwSRS75Qw+dLhPFR8+mb/aZKbzJM= Subject key identifier: B3:E5:82:57:DC:C1:13:43:10:78:2F:90:7F:36:17:50:0E:56:87:A2 Certificate issuer: /CN=58e07563-c033-4e44-b58b-ee57eafd8f85 Certificate serial: 010D0C9F4328584BBFA5A310FAFAE0F311EA7500 Authority key identifier: 46:A3:BD:93:78:F2:9A:FF:35:29:C2:DE:8D:53:FE:0C:63:61:3F:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/58e07563-c033-4e44-b58b-ee57eafd8f85.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/58e07563-c033-4e44-b58b-ee57eafd8f85/5bf9da42-fe79-3455-8869-3015b3ade0a5.roa Signing time: Tue 04 Nov 2025 14:00:39 +0000 ROA not before: Tue 04 Nov 2025 14:00:39 +0000 ROA not after: Mon 02 Feb 2026 14:00:39 +0000 asID: 399060 IP address blocks: 2606:440::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/58e07563-c033-4e44-b58b-ee57eafd8f85/58e07563-c033-4e44-b58b-ee57eafd8f85.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/58e07563-c033-4e44-b58b-ee57eafd8f85/58e07563-c033-4e44-b58b-ee57eafd8f85.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/58e07563-c033-4e44-b58b-ee57eafd8f85.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:a3:10:fa:fa:e0:f3:11:ea:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58e07563-c033-4e44-b58b-ee57eafd8f85 Validity Not Before: Nov 4 14:00:39 2025 GMT Not After : Feb 2 14:00:39 2026 GMT Subject: CN=a6992f36-5cbf-4ac9-854e-a1331e084dec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3f:2e:96:6e:3b:28:e3:ea:46:96:ea:bb:de: 79:07:82:ca:30:f6:20:1f:16:29:08:91:a2:41:85: 27:4d:fc:12:61:1f:0c:c2:88:af:01:e0:7c:cb:c6: 9a:de:9d:92:8d:8e:89:c8:3c:e3:03:08:0f:09:45: 06:c0:bc:dc:bf:26:db:69:e7:fc:29:33:b0:02:06: 0f:bc:de:06:0d:62:63:77:46:47:f7:67:1c:3f:23: 9c:12:4b:9f:7d:34:77:5b:8e:3a:8c:0c:48:24:b0: 6f:7c:25:ae:6d:21:4d:5f:75:bf:b1:98:4d:0e:8c: 2f:8c:62:00:6c:74:c7:e0:9c:a4:d4:d6:b4:e0:17: 4c:65:96:1b:71:9f:a6:ea:cf:1c:b6:8a:ab:ee:b6: ce:e7:46:2f:7f:60:82:51:65:64:81:47:62:a9:5c: 48:93:8a:0a:45:b8:87:98:e2:fa:64:b9:7c:82:f9: 9d:64:a0:2b:e7:be:5b:25:2d:be:89:b7:3d:8f:e9: da:ca:5d:43:9a:ef:78:19:31:b8:c1:b2:4d:d2:49: 5d:22:0e:05:bb:e1:44:41:d7:46:7e:8f:a2:3e:d1: 4f:0c:ae:82:cc:20:4a:b1:0b:17:30:b1:1d:eb:eb: 5a:93:67:ae:94:45:d0:72:73:3b:18:f6:14:5f:c3: df:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:E5:82:57:DC:C1:13:43:10:78:2F:90:7F:36:17:50:0E:56:87:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/58e07563-c033-4e44-b58b-ee57eafd8f85/5bf9da42-fe79-3455-8869-3015b3ade0a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/58e07563-c033-4e44-b58b-ee57eafd8f85/58e07563-c033-4e44-b58b-ee57eafd8f85.crl X509v3 Authority Key Identifier: keyid:46:A3:BD:93:78:F2:9A:FF:35:29:C2:DE:8D:53:FE:0C:63:61:3F:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/58e07563-c033-4e44-b58b-ee57eafd8f85.cer sbgp-ipAddrBlock: critical IPv6: 2606:440::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:b3:6d:af:97:68:20:1d:d4:77:91:ec:bc:48:48:5f:d5:2c: 61:64:f4:df:62:13:07:95:22:8b:24:0d:2f:b7:b8:07:1f:aa: 9a:bf:c1:89:9a:83:c0:38:6d:e2:1b:9b:da:21:cb:fb:46:a0: f3:b4:e4:79:ef:ec:a8:16:33:42:2a:74:b9:39:3a:33:ce:dc: d3:dd:03:b2:2e:36:2a:26:5e:f2:77:7c:21:5e:79:7b:11:da: 4b:3a:7c:2c:60:3a:5f:d3:fb:10:58:dd:23:0c:62:f7:55:9e: a3:b6:94:8b:05:20:a2:1c:b3:03:5d:28:8c:31:e6:69:76:52: ab:ff:10:36:31:89:81:83:4e:9b:fc:6e:ff:8a:6c:93:36:ab: ba:44:69:e6:f1:23:01:75:52:2e:1e:fa:b9:45:bd:7f:cc:d6: de:40:3d:f5:29:c5:e3:b4:0a:04:ce:b4:55:79:81:c1:47:9a: a0:48:54:c6:b2:ef:9e:a0:94:ba:6e:37:3c:5a:f0:d6:35:54: d5:be:02:78:71:a1:f2:98:de:7b:9b:e1:a7:52:47:63:8f:c5: a2:66:54:9b:ac:f6:ca:1d:95:7e:3f:a0:fa:4e:40:7a:d3:f2: ce:4c:92:e3:d2:5a:6e:0f:fe:78:2d:04:57:bc:42:53:a6:4f: 52:93:ef:a2 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEu/paMQ+vrg8xHqdQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNThlMDc1NjMtYzAzMy00ZTQ0LWI1OGItZWU1N2VhZmQ4 Zjg1MB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk YTY5OTJmMzYtNWNiZi00YWM5LTg1NGUtYTEzMzFlMDg0ZGVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsT8ulm47KOPqRpbqu955B4LKMPYgHxYpCJGi QYUnTfwSYR8MwoivAeB8y8aa3p2SjY6JyDzjAwgPCUUGwLzcvybbaef8KTOwAgYP vN4GDWJjd0ZH92ccPyOcEkuffTR3W446jAxIJLBvfCWubSFNX3W/sZhNDowvjGIA bHTH4Jyk1Na04BdMZZYbcZ+m6s8ctoqr7rbO50Yvf2CCUWVkgUdiqVxIk4oKRbiH mOL6ZLl8gvmdZKAr575bJS2+ibc9j+nayl1Dmu94GTG4wbJN0kldIg4Fu+FEQddG fo+iPtFPDK6CzCBKsQsXMLEd6+tak2eulEXQcnM7GPYUX8PftwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLPlglfcwRNDEHgvkH82F1AOVoeiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81OGUw NzU2My1jMDMzLTRlNDQtYjU4Yi1lZTU3ZWFmZDhmODUvNWJmOWRhNDItZmU3OS0z NDU1LTg4NjktMzAxNWIzYWRlMGE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNThlMDc1NjMtYzAzMy00ZTQ0LWI1 OGItZWU1N2VhZmQ4Zjg1LzU4ZTA3NTYzLWMwMzMtNGU0NC1iNThiLWVlNTdlYWZk OGY4NS5jcmwwHwYDVR0jBBgwFoAURqO9k3jymv81KcLejVP+DGNhP+kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81OGUwNzU2My1jMDMzLTRlNDQtYjU4Yi1lZTU3 ZWFmZDhmODUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgYEQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAhs22vl2ggHdR3key8SEhf1SxhZPTfYhMHlSKLJA0vt7gHH6qav8GJ moPAOG3iG5vaIcv7RqDztOR57+yoFjNCKnS5OTozztzT3QOyLjYqJl7yd3whXnl7 EdpLOnwsYDpf0/sQWN0jDGL3VZ6jtpSLBSCiHLMDXSiMMeZpdlKr/xA2MYmBg06b /G7/imyTNqu6RGnm8SMBdVIuHvq5Rb1/zNbeQD31KcXjtAoEzrRVeYHBR5qgSFTG su+eoJS6bjc8WvDWNVTVvgJ4caHymN57m+GnUkdjj8WiZlSbrPbKHZV+P6D6TkB6 0/LOTJLj0lpuD/54LQRXvEJTpk9Sk++i -----END CERTIFICATE-----Generated at Thu Nov 6 09:38:47 2025 by rpki-client