$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b16dab15-57d6-416c-8c05-543d7b01e03d/2716648f-7661-3f70-b742-5119c61157cf.roa File: 2716648f-7661-3f70-b742-5119c61157cf.roa (raw, json) Hash identifier: 5RdmCDf/NpMS7yOZqEvzMyTKc9ZUNqb/jfogHgwuEk4= Subject key identifier: B4:28:CB:A5:17:4A:91:46:C5:C8:01:A4:59:3A:B5:7F:A7:4C:2E:3E Certificate issuer: /CN=b16dab15-57d6-416c-8c05-543d7b01e03d Certificate serial: 010D0C9F4328584B987243A6F92EC15F8F8D0DC0 Authority key identifier: 45:BD:2F:AF:92:E7:90:5D:60:6C:16:B8:F8:28:40:72:C9:43:78:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b16dab15-57d6-416c-8c05-543d7b01e03d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b16dab15-57d6-416c-8c05-543d7b01e03d/2716648f-7661-3f70-b742-5119c61157cf.roa Signing time: Tue 21 Oct 2025 13:00:39 +0000 ROA not before: Tue 21 Oct 2025 13:00:39 +0000 ROA not after: Mon 19 Jan 2026 14:00:39 +0000 asID: 53835 IP address blocks: 2607:ca40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b16dab15-57d6-416c-8c05-543d7b01e03d/b16dab15-57d6-416c-8c05-543d7b01e03d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b16dab15-57d6-416c-8c05-543d7b01e03d/b16dab15-57d6-416c-8c05-543d7b01e03d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b16dab15-57d6-416c-8c05-543d7b01e03d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:72:43:a6:f9:2e:c1:5f:8f:8d:0d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b16dab15-57d6-416c-8c05-543d7b01e03d Validity Not Before: Oct 21 13:00:39 2025 GMT Not After : Jan 19 14:00:39 2026 GMT Subject: CN=8aaac1fb-cdc5-46e7-a49d-73cb4ed898bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d1:f2:20:c9:74:c4:41:20:38:f6:a5:ce:93: 99:54:53:a5:8e:4a:1d:c3:53:1d:9a:f4:9f:ce:e6: d3:8c:bb:93:0a:48:0f:92:f3:f7:d1:29:91:83:00: 99:88:03:82:6e:8c:d1:e0:33:ac:d6:90:de:db:d6: 4f:16:21:1c:8d:33:4c:43:15:5b:a1:4e:f3:a9:05: 1d:31:92:56:45:bf:4f:43:68:e0:02:8e:4f:52:84: 67:d8:97:7a:1e:7b:07:8d:8d:25:57:a3:4f:07:03: 1b:2e:58:7b:8a:6e:92:3e:8f:22:0c:df:a4:fe:1d: bd:b8:cd:87:21:a4:e2:a3:2b:51:f9:fc:0f:0b:18: 8e:68:ea:23:2a:6f:90:54:f7:7c:cc:1f:fc:a9:70: 94:32:a0:e2:a7:3b:64:b2:00:c3:85:dd:c1:07:7a: 0b:ac:27:7a:69:74:dd:99:ef:ca:a3:42:f1:73:da: 0f:4c:c1:58:5d:3e:0e:e9:76:65:e9:f4:de:cd:b5: 69:db:66:c7:10:08:39:b4:86:a4:b4:e0:e5:3c:32: 49:e1:57:c9:b9:ec:87:5a:15:29:cc:18:52:dc:e8: ed:af:b2:9b:d4:5a:e6:3b:88:e3:2e:b1:40:73:d2: f3:6c:e3:e7:15:f2:08:4e:c4:9e:e9:0b:38:54:07: 25:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:28:CB:A5:17:4A:91:46:C5:C8:01:A4:59:3A:B5:7F:A7:4C:2E:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b16dab15-57d6-416c-8c05-543d7b01e03d/2716648f-7661-3f70-b742-5119c61157cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b16dab15-57d6-416c-8c05-543d7b01e03d/b16dab15-57d6-416c-8c05-543d7b01e03d.crl X509v3 Authority Key Identifier: keyid:45:BD:2F:AF:92:E7:90:5D:60:6C:16:B8:F8:28:40:72:C9:43:78:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b16dab15-57d6-416c-8c05-543d7b01e03d.cer sbgp-ipAddrBlock: critical IPv6: 2607:ca40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:c2:9f:9f:a0:ac:a9:c9:68:8d:88:7d:d2:ac:be:a4:d2:7c: ef:c9:ee:d9:f5:fc:95:bb:bb:8f:33:ff:d5:29:0a:46:88:0c: 75:e0:de:8a:7d:c9:10:72:c7:61:19:e3:67:61:97:1d:e2:8a: ad:12:ab:44:9d:73:c6:a2:ff:72:33:c2:75:e3:88:b4:d1:24: 38:2c:03:57:47:e0:db:bb:56:a2:81:57:05:8f:91:93:45:9d: a7:6b:34:10:1b:53:05:29:97:20:fa:75:1c:04:8c:a0:b4:88: 45:94:7d:c5:7c:d7:f1:0f:2d:ac:72:c7:13:53:83:9e:77:c6: 1b:b5:c5:3f:79:82:a4:10:5d:5f:2c:67:21:3f:31:98:59:7b: e8:c6:28:7d:7f:26:51:f5:68:13:3d:ea:17:ea:cb:78:5c:20: 71:60:0e:81:eb:f5:2d:43:90:bf:63:f2:44:59:f1:d5:4a:fd: 57:ee:b4:de:e4:3c:99:05:49:0a:55:f1:44:2c:76:96:03:0d: f9:31:62:c5:16:2c:54:75:92:b3:7e:da:47:e1:b9:dd:77:e2: b0:1d:6e:5d:e4:13:69:ad:be:88:81:01:d3:84:df:6e:f6:12: 68:69:3b:1c:7f:23:0c:42:d2:c9:a7:86:18:2a:b4:58:5e:f7: 88:fd:aa:a5 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEuYckOm+S7BX4+NDcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjE2ZGFiMTUtNTdkNi00MTZjLThjMDUtNTQzZDdiMDFl MDNkMB4XDTI1MTAyMTEzMDAzOVoXDTI2MDExOTE0MDAzOVowLzEtMCsGA1UEAxMk OGFhYWMxZmItY2RjNS00NmU3LWE0OWQtNzNjYjRlZDg5OGJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNHyIMl0xEEgOPalzpOZVFOljkodw1MdmvSf zubTjLuTCkgPkvP30SmRgwCZiAOCbozR4DOs1pDe29ZPFiEcjTNMQxVboU7zqQUd MZJWRb9PQ2jgAo5PUoRn2Jd6HnsHjY0lV6NPBwMbLlh7im6SPo8iDN+k/h29uM2H IaTioytR+fwPCxiOaOojKm+QVPd8zB/8qXCUMqDipztksgDDhd3BB3oLrCd6aXTd me/Ko0Lxc9oPTMFYXT4O6XZl6fTezbVp22bHEAg5tIaktODlPDJJ4VfJueyHWhUp zBhS3Ojtr7Kb1FrmO4jjLrFAc9LzbOPnFfIITsSe6Qs4VAclKwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLQoy6UXSpFGxcgBpFk6tX+nTC4+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iMTZk YWIxNS01N2Q2LTQxNmMtOGMwNS01NDNkN2IwMWUwM2QvMjcxNjY0OGYtNzY2MS0z ZjcwLWI3NDItNTExOWM2MTE1N2NmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYjE2ZGFiMTUtNTdkNi00MTZjLThj MDUtNTQzZDdiMDFlMDNkL2IxNmRhYjE1LTU3ZDYtNDE2Yy04YzA1LTU0M2Q3YjAx ZTAzZC5jcmwwHwYDVR0jBBgwFoAURb0vr5LnkF1gbBa4+ChAcslDeBAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iMTZkYWIxNS01N2Q2LTQxNmMtOGMwNS01NDNk N2IwMWUwM2QuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgfKQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAhwp+foKypyWiNiH3SrL6k0nzvye7Z9fyVu7uPM//VKQpGiAx14N6K fckQcsdhGeNnYZcd4oqtEqtEnXPGov9yM8J144i00SQ4LANXR+Dbu1aigVcFj5GT RZ2nazQQG1MFKZcg+nUcBIygtIhFlH3FfNfxDy2scscTU4Oed8YbtcU/eYKkEF1f LGchPzGYWXvoxih9fyZR9WgTPeoX6st4XCBxYA6B6/UtQ5C/Y/JEWfHVSv1X7rTe 5DyZBUkKVfFELHaWAw35MWLFFixUdZKzftpH4bndd+KwHW5d5BNprb6IgQHThN9u 9hJoaTscfyMMQtLJp4YYKrRYXveI/aql -----END CERTIFICATE-----Generated at Wed Nov 5 02:45:11 2025 by rpki-client