$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/6be1c68c-61a5-3e1f-abb6-aa9f6434f054.roa File: 6be1c68c-61a5-3e1f-abb6-aa9f6434f054.roa (raw, json) Hash identifier: VD+0iEwvG2mNbtn6jonULxa8j6123y5Cu++a988xE3s= Subject key identifier: E6:CA:40:C6:B2:86:07:57:DE:05:7B:8D:F5:72:9B:47:01:E4:3D:1A Certificate issuer: /CN=a6f26d75-0d3a-4bef-8d6a-36d16664307e Certificate serial: 010D0C9F4328584B9B3CE7F19A3B9E8AB4CB6FE0 Authority key identifier: 95:63:35:33:47:05:5D:59:71:3A:DA:67:E9:EB:BB:5A:F5:DC:7D:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/6be1c68c-61a5-3e1f-abb6-aa9f6434f054.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 29 IP address blocks: 192.31.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/a6f26d75-0d3a-4bef-8d6a-36d16664307e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/a6f26d75-0d3a-4bef-8d6a-36d16664307e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3c:e7:f1:9a:3b:9e:8a:b4:cb:6f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6f26d75-0d3a-4bef-8d6a-36d16664307e Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=baf44b48-d766-4782-8998-20c785e80cb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:da:74:37:ea:86:03:19:30:09:c4:f8:f8:9e: 46:4d:93:1d:8c:22:2a:b6:cf:70:64:20:c2:65:49: 77:a2:f7:fa:a8:02:e0:f2:5b:5d:1c:a9:a9:0f:e0: 57:92:69:7c:f9:a0:02:48:14:d5:09:10:66:97:b0: 84:39:db:66:88:11:d1:e8:29:95:3b:7f:2e:9f:11: 65:77:4d:5f:f6:a8:00:fd:b6:2a:13:17:a4:56:5d: 59:0d:d5:3b:67:b8:a2:15:23:7d:95:9a:20:fb:bb: 3d:3f:b5:eb:3d:fd:f7:9c:29:5b:a1:fa:83:60:20: 07:a2:2a:76:8e:b5:77:32:a8:e0:d5:35:fb:28:c8: 50:07:6a:af:92:ff:a3:1b:02:d3:53:c2:ca:09:f9: f9:23:4a:c5:10:19:e4:e3:fa:47:ac:69:aa:67:26: 60:f9:7b:7e:3c:d0:58:45:41:67:19:f3:47:a3:5a: ff:cc:a1:af:39:b6:25:5d:2a:ec:3b:45:8f:78:09: 18:26:4e:f2:c9:8c:49:98:c4:56:a4:2b:8b:6a:2a: 53:aa:e3:92:14:64:82:ba:ed:54:f6:07:6b:c2:72: 90:68:a8:b1:8a:df:db:6d:03:fd:09:93:39:17:b2: 8b:a9:a2:1e:66:22:11:56:a2:f4:02:cf:04:b6:2b: d8:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:CA:40:C6:B2:86:07:57:DE:05:7B:8D:F5:72:9B:47:01:E4:3D:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/6be1c68c-61a5-3e1f-abb6-aa9f6434f054.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/a6f26d75-0d3a-4bef-8d6a-36d16664307e.crl X509v3 Authority Key Identifier: keyid:95:63:35:33:47:05:5D:59:71:3A:DA:67:E9:EB:BB:5A:F5:DC:7D:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e.cer sbgp-ipAddrBlock: critical IPv4: 192.31.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:8f:22:e8:06:94:2e:fe:aa:3f:96:47:16:6e:ca:ab:5f:4e: e6:77:a4:ba:ba:32:e7:06:18:0e:f6:23:12:03:c6:b0:da:78: ae:10:28:0b:c1:bf:44:4e:99:11:b4:ed:4e:67:61:34:ae:4d: 93:2d:2c:a1:20:df:15:e6:b0:7b:d3:cf:29:06:59:3e:d7:6e: d2:fd:9e:18:70:cb:e7:c8:54:27:97:bb:15:0d:1b:78:8d:0e: 2e:38:28:d3:e5:b3:3c:63:d2:33:51:9a:5e:bd:05:f5:21:96: eb:e3:e7:d0:bb:db:5b:41:21:b5:0c:41:cd:83:17:2f:3f:34: 72:a0:1a:52:85:26:9c:10:c5:33:fc:d3:3a:6d:33:36:d2:33: f9:9f:fa:c2:de:e0:9a:c6:00:d3:94:ce:10:14:57:76:93:c5: f3:cd:86:34:c2:7f:bf:eb:81:6a:2b:20:07:4d:a6:66:2f:c7: 7f:44:15:23:0c:7f:85:73:06:47:57:78:43:2d:fe:9f:4c:36: f6:ef:09:89:83:6c:2a:c1:74:dc:a0:59:77:fe:60:44:45:27: 17:e2:69:b1:c9:bc:8d:8d:68:39:57:5d:c3:5f:54:42:88:d2: 9e:b3:68:b2:e0:7f:92:87:8d:74:24:54:4a:a4:0f:46:a1:74: e6:3e:71:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPOfxmjueirTLb+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTZmMjZkNzUtMGQzYS00YmVmLThkNmEtMzZkMTY2NjQz MDdlMB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk YmFmNDRiNDgtZDc2Ni00NzgyLTg5OTgtMjBjNzg1ZTgwY2I4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdp0N+qGAxkwCcT4+J5GTZMdjCIqts9wZCDC ZUl3ovf6qALg8ltdHKmpD+BXkml8+aACSBTVCRBml7CEOdtmiBHR6CmVO38unxFl d01f9qgA/bYqExekVl1ZDdU7Z7iiFSN9lZog+7s9P7XrPf33nClbofqDYCAHoip2 jrV3Mqjg1TX7KMhQB2qvkv+jGwLTU8LKCfn5I0rFEBnk4/pHrGmqZyZg+Xt+PNBY RUFnGfNHo1r/zKGvObYlXSrsO0WPeAkYJk7yyYxJmMRWpCuLaipTquOSFGSCuu1U 9gdrwnKQaKixit/bbQP9CZM5F7KLqaIeZiIRVqL0As8EtivYLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFObKQMayhgdX3gV7jfVym0cB5D0aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hNmYy NmQ3NS0wZDNhLTRiZWYtOGQ2YS0zNmQxNjY2NDMwN2UvNmJlMWM2OGMtNjFhNS0z ZTFmLWFiYjYtYWE5ZjY0MzRmMDU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTZmMjZkNzUtMGQzYS00YmVmLThk NmEtMzZkMTY2NjQzMDdlL2E2ZjI2ZDc1LTBkM2EtNGJlZi04ZDZhLTM2ZDE2NjY0 MzA3ZS5jcmwwHwYDVR0jBBgwFoAUlWM1M0cFXVlxOtpn6eu7WvXcfSswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hNmYyNmQ3NS0wZDNhLTRiZWYtOGQ2YS0zNmQx NjY2NDMwN2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwB8CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC+PIugGlC7+qj+WRxZuyqtfTuZ3pLq6MucGGA72IxIDxrDaeK4QKAvB v0ROmRG07U5nYTSuTZMtLKEg3xXmsHvTzykGWT7XbtL9nhhwy+fIVCeXuxUNG3iN Di44KNPlszxj0jNRml69BfUhluvj59C721tBIbUMQc2DFy8/NHKgGlKFJpwQxTP8 0zptMzbSM/mf+sLe4JrGANOUzhAUV3aTxfPNhjTCf7/rgWorIAdNpmYvx39EFSMM f4VzBkdXeEMt/p9MNvbvCYmDbCrBdNygWXf+YERFJxfiabHJvI2NaDlXXcNfVEKI 0p6zaLLgf5KHjXQkVEqkD0ahdOY+ccY= -----END CERTIFICATE-----Generated at Wed Nov 5 02:54:48 2025 by rpki-client