$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/a6046402-6cd1-38ca-8857-62866dfdfdc3.roa File: a6046402-6cd1-38ca-8857-62866dfdfdc3.roa (raw, json) Hash identifier: JT5gQNfmOeQW9BozYKpdO93WcNZfxuk30sWYyTaxdAc= Subject key identifier: 69:5E:3E:DF:B5:EC:C9:68:AB:CC:AA:38:51:5E:5B:6F:BE:81:25:53 Certificate issuer: /CN=dafe2535-2dc5-4d47-b03e-d44eea26032f Certificate serial: 010D0C9F4328584BA9326A54C9AEA168B689DF80 Authority key identifier: 37:CB:75:8C:3B:39:D9:B9:FA:2F:B5:1C:EF:99:10:67:97:B9:EB:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/a6046402-6cd1-38ca-8857-62866dfdfdc3.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 3257 IP address blocks: 63.246.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/dafe2535-2dc5-4d47-b03e-d44eea26032f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/dafe2535-2dc5-4d47-b03e-d44eea26032f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:6a:54:c9:ae:a1:68:b6:89:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dafe2535-2dc5-4d47-b03e-d44eea26032f Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=5aff9aba-1754-4105-880a-69435fa7c306 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:67:a8:47:6f:1e:28:fe:49:7d:34:52:2d:d6: 3c:b0:73:91:78:b0:a8:0a:07:6f:e6:d8:0d:08:a8: 69:82:cd:3b:c4:80:b0:49:a9:33:98:cc:4e:81:0b: b3:dd:86:0c:4a:17:6b:11:f4:fc:6b:37:46:d4:47: 03:90:b0:ea:bb:55:a3:d7:d0:4d:46:d7:ac:1e:9b: 1c:e1:c2:4c:5c:35:e2:18:df:6d:df:c0:65:cb:d2: 1e:df:84:cb:e1:d9:c8:fd:e4:43:ea:f3:3c:e1:1d: 07:d9:0b:a9:1d:92:4a:75:1b:80:8d:1f:cf:ae:7e: 81:83:41:fb:63:92:b3:3c:7a:19:a8:b4:e9:59:be: 96:66:86:7e:10:fa:00:5a:f7:36:a5:84:28:7b:b4: c8:9b:5e:e2:e7:32:75:64:ff:92:d4:21:31:9e:72: 82:09:fb:3b:6a:a7:5b:09:e9:d3:03:ab:7b:a5:1b: 33:fc:33:d5:c1:5a:0e:77:52:1c:48:c9:ed:7f:d0: 95:df:ef:b1:1c:51:02:38:0e:27:ab:02:8e:cf:cd: 37:74:b6:3c:ad:f2:ab:96:7d:fc:00:cf:87:75:28: e2:8a:85:a0:f7:0c:de:e2:4c:49:73:e6:64:9e:ad: 8e:2a:67:02:d8:f8:fd:76:31:cd:e8:26:bd:24:ef: 23:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:5E:3E:DF:B5:EC:C9:68:AB:CC:AA:38:51:5E:5B:6F:BE:81:25:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/a6046402-6cd1-38ca-8857-62866dfdfdc3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/dafe2535-2dc5-4d47-b03e-d44eea26032f.crl X509v3 Authority Key Identifier: keyid:37:CB:75:8C:3B:39:D9:B9:FA:2F:B5:1C:EF:99:10:67:97:B9:EB:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f.cer sbgp-ipAddrBlock: critical IPv4: 63.246.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:45:61:87:29:4e:7e:9d:39:d4:43:36:22:29:a2:57:1a:19: bf:b8:23:75:e9:0c:cd:f5:cd:a4:ec:43:86:30:5c:fb:e9:6c: 34:68:59:c2:8b:97:42:91:88:4d:5c:9a:ce:3d:78:d9:65:c3: 73:8c:54:c6:aa:27:87:0d:34:8c:6c:79:88:72:d5:f3:80:ef: b1:11:4b:06:88:48:64:d7:c9:fa:d7:06:f2:ad:fa:79:de:c7: e1:e4:61:71:f1:c3:4c:15:9c:28:43:4d:8a:8d:17:d9:b9:b4: 6d:b1:c0:3b:18:03:33:d0:e5:91:b0:37:59:b3:e6:c1:0a:60: fb:da:88:40:2c:cb:bf:06:c6:46:77:5f:f0:c9:13:08:af:93: c4:3e:29:2b:26:8c:09:9c:f7:d1:86:ef:63:fa:76:1b:ee:ce: a5:99:e4:b8:f7:4d:1f:6c:ac:9c:de:00:1e:ef:63:a2:20:7d: ce:d3:ce:fe:7a:f6:7e:c4:33:d8:ed:46:b2:c8:3d:5a:4e:a8: 48:6f:a8:04:ef:43:e2:65:4c:c0:c4:86:99:fb:9a:94:69:29: 3e:02:2b:c8:03:78:d1:1d:a7:84:25:74:60:cd:cd:21:b7:53: 20:d5:99:cb:8d:51:5a:b1:f5:c4:d9:e1:a3:b5:cf:00:ad:79: c6:dd:46:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMmpUya6haLaJ34AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFmZTI1MzUtMmRjNS00ZDQ3LWIwM2UtZDQ0ZWVhMjYw MzJmMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk NWFmZjlhYmEtMTc1NC00MTA1LTg4MGEtNjk0MzVmYTdjMzA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGeoR28eKP5JfTRSLdY8sHOReLCoCgdv5tgN CKhpgs07xICwSakzmMxOgQuz3YYMShdrEfT8azdG1EcDkLDqu1Wj19BNRtesHpsc 4cJMXDXiGN9t38Bly9Ie34TL4dnI/eRD6vM84R0H2QupHZJKdRuAjR/Prn6Bg0H7 Y5KzPHoZqLTpWb6WZoZ+EPoAWvc2pYQoe7TIm17i5zJ1ZP+S1CExnnKCCfs7aqdb CenTA6t7pRsz/DPVwVoOd1IcSMntf9CV3++xHFECOA4nqwKOz803dLY8rfKrln38 AM+HdSjiioWg9wze4kxJc+Zknq2OKmcC2Pj9djHN6Ca9JO8j/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGlePt+17Mloq8yqOFFeW2++gSVTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kYWZl MjUzNS0yZGM1LTRkNDctYjAzZS1kNDRlZWEyNjAzMmYvYTYwNDY0MDItNmNkMS0z OGNhLTg4NTctNjI4NjZkZmRmZGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGFmZTI1MzUtMmRjNS00ZDQ3LWIw M2UtZDQ0ZWVhMjYwMzJmL2RhZmUyNTM1LTJkYzUtNGQ0Ny1iMDNlLWQ0NGVlYTI2 MDMyZi5jcmwwHwYDVR0jBBgwFoAUN8t1jDs52bn6L7Uc75kQZ5e56xAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kYWZlMjUzNS0yZGM1LTRkNDctYjAzZS1kNDRl ZWEyNjAzMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEP/YwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD5FYYcpTn6dOdRDNiIpolcaGb+4I3XpDM31zaTsQ4YwXPvpbDRoWcKL l0KRiE1cms49eNllw3OMVMaqJ4cNNIxseYhy1fOA77ERSwaISGTXyfrXBvKt+nne x+HkYXHxw0wVnChDTYqNF9m5tG2xwDsYAzPQ5ZGwN1mz5sEKYPvaiEAsy78GxkZ3 X/DJEwivk8Q+KSsmjAmc99GG72P6dhvuzqWZ5Lj3TR9srJzeAB7vY6Igfc7Tzv56 9n7EM9jtRrLIPVpOqEhvqATvQ+JlTMDEhpn7mpRpKT4CK8gDeNEdp4QldGDNzSG3 UyDVmcuNUVqx9cTZ4aO1zwCtecbdRjk= -----END CERTIFICATE-----Generated at Wed Nov 5 10:06:29 2025 by rpki-client