$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/2dcc3161-69c7-38a5-82ef-b7752c6e7c20.roa File: 2dcc3161-69c7-38a5-82ef-b7752c6e7c20.roa (raw, json) Hash identifier: tlWitkGv18S9eXTlgwnXdz51riss9l3ip2E5hnNgv6U= Subject key identifier: 4B:C6:C5:CE:0A:67:19:00:0F:3D:F3:65:E8:D2:20:EB:82:04:E0:EA Certificate issuer: /CN=bebad29c-c2e4-447d-a29e-20f329219ea9 Certificate serial: 010D0C9F4328584B9E07AF9D20D340BB9210C640 Authority key identifier: 07:3C:51:6D:EA:85:18:32:66:CA:85:68:84:47:38:0F:36:B9:52:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/2dcc3161-69c7-38a5-82ef-b7752c6e7c20.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 14618 IP address blocks: 2620:113:1001::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:af:9d:20:d3:40:bb:92:10:c6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bebad29c-c2e4-447d-a29e-20f329219ea9 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=ccd4246b-48f6-4ad6-bf6b-0318a815cc11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:57:f4:ae:1f:5d:cf:48:1e:d9:09:54:1d:32: b4:87:6f:3f:2b:07:2d:27:8f:c9:8c:55:e0:65:dd: c7:b1:2c:45:f6:6e:cc:14:62:e1:d0:52:c9:1d:54: aa:69:59:83:8f:d9:2f:d2:0a:23:47:00:36:f5:2a: 24:1d:5d:c0:bb:e5:cd:77:21:13:fa:ed:ad:03:ea: e7:a8:48:0d:e7:34:09:26:bc:96:35:83:40:25:47: 88:18:21:e5:9f:8e:67:76:16:06:4f:9d:02:39:e1: d6:a5:e0:50:2e:fb:28:31:03:db:35:9c:0d:b4:40: 0d:84:b5:81:a6:0b:5a:00:00:69:4b:36:4d:81:33: 43:1c:37:4e:bd:20:8d:33:7d:38:ee:5a:fc:f2:92: 76:d2:a3:c8:84:86:9c:be:46:aa:64:44:dd:5c:58: 85:23:a0:49:3e:ec:16:2a:6b:13:0d:93:16:e0:fb: d8:ee:0f:96:71:27:2b:c5:c4:97:d4:47:76:eb:3c: a9:d7:9a:7b:21:62:0b:f5:61:a0:4c:ca:44:c8:2b: 6a:cf:fa:56:cb:55:0d:32:ec:a0:ba:d0:6e:15:5b: ef:91:69:b0:cf:5d:4d:8d:ca:6c:e7:ff:e9:c0:0c: e0:28:2d:55:fc:a7:3b:86:f3:67:26:f3:28:22:81: 7c:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:C6:C5:CE:0A:67:19:00:0F:3D:F3:65:E8:D2:20:EB:82:04:E0:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/2dcc3161-69c7-38a5-82ef-b7752c6e7c20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.crl X509v3 Authority Key Identifier: keyid:07:3C:51:6D:EA:85:18:32:66:CA:85:68:84:47:38:0F:36:B9:52:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer sbgp-ipAddrBlock: critical IPv6: 2620:113:1001::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:2f:48:39:c5:17:df:af:03:4d:b7:0e:39:82:a6:ef:94:47: 64:28:96:5b:11:22:5a:68:b8:c9:90:6e:be:14:a3:e1:d2:ed: a7:b2:e2:4d:bc:f0:fa:e1:fa:a9:82:d5:92:d4:d2:3a:9e:e4: 4f:94:5c:e9:75:f7:8f:59:ac:56:3b:85:a8:07:5e:f1:e4:b7: a1:48:b1:42:57:74:01:0a:23:dd:17:af:00:31:cb:07:ed:7d: fc:b9:88:ba:b8:fe:ed:02:4b:92:41:62:c4:18:66:6f:39:36: dc:c0:50:93:4c:45:4f:6d:b1:72:61:a5:3e:9f:77:23:3f:58: d7:d7:41:27:9b:ff:16:6e:ca:8c:ee:af:06:c0:2d:ba:74:6c: d6:e1:bd:bc:73:38:ce:82:cd:a1:26:f2:01:16:51:b7:54:e0: 12:e4:18:b1:d0:7c:6c:36:8f:67:f9:10:98:b9:94:09:9a:46: 06:08:33:27:77:85:25:ce:1b:8a:f9:bd:c5:f8:e0:7b:02:81: 78:98:5f:49:36:40:89:d8:1e:a6:1c:6b:26:0b:5c:69:7f:11: e3:a8:b4:77:9d:b6:57:26:55:96:96:25:e0:d8:cc:dd:5a:ba: ae:28:1a:ab:f6:f3:3f:f1:6f:24:42:6e:c2:e2:39:c5:45:7d: e5:62:cf:d9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEueB6+dINNAu5IQxkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmViYWQyOWMtYzJlNC00NDdkLWEyOWUtMjBmMzI5MjE5 ZWE5MB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk Y2NkNDI0NmItNDhmNi00YWQ2LWJmNmItMDMxOGE4MTVjYzExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFf0rh9dz0ge2QlUHTK0h28/KwctJ4/JjFXg Zd3HsSxF9m7MFGLh0FLJHVSqaVmDj9kv0gojRwA29SokHV3Au+XNdyET+u2tA+rn qEgN5zQJJryWNYNAJUeIGCHln45ndhYGT50COeHWpeBQLvsoMQPbNZwNtEANhLWB pgtaAABpSzZNgTNDHDdOvSCNM3047lr88pJ20qPIhIacvkaqZETdXFiFI6BJPuwW KmsTDZMW4PvY7g+WcScrxcSX1Ed26zyp15p7IWIL9WGgTMpEyCtqz/pWy1UNMuyg utBuFVvvkWmwz11Njcps5//pwAzgKC1V/Kc7hvNnJvMoIoF8wwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEvGxc4KZxkADz3zZejSIOuCBODqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iZWJh ZDI5Yy1jMmU0LTQ0N2QtYTI5ZS0yMGYzMjkyMTllYTkvMmRjYzMxNjEtNjljNy0z OGE1LTgyZWYtYjc3NTJjNmU3YzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYmViYWQyOWMtYzJlNC00NDdkLWEy OWUtMjBmMzI5MjE5ZWE5L2JlYmFkMjljLWMyZTQtNDQ3ZC1hMjllLTIwZjMyOTIx OWVhOS5jcmwwHwYDVR0jBBgwFoAUBzxRbeqFGDJmyoVohEc4Dza5UhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9iZWJhZDI5Yy1jMmU0LTQ0N2QtYTI5ZS0yMGYz MjkyMTllYTkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABExAB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACkvSDnFF9+vA023DjmCpu+UR2QollsRIlpouMmQbr4Uo+HS7aey 4k288Prh+qmC1ZLU0jqe5E+UXOl1949ZrFY7hagHXvHkt6FIsUJXdAEKI90XrwAx ywftffy5iLq4/u0CS5JBYsQYZm85NtzAUJNMRU9tsXJhpT6fdyM/WNfXQSeb/xZu yozurwbALbp0bNbhvbxzOM6CzaEm8gEWUbdU4BLkGLHQfGw2j2f5EJi5lAmaRgYI Myd3hSXOG4r5vcX44HsCgXiYX0k2QInYHqYcayYLXGl/EeOotHedtlcmVZaWJeDY zN1auq4oGqv28z/xbyRCbsLiOcVFfeViz9k= -----END CERTIFICATE-----Generated at Wed Nov 5 07:43:14 2025 by rpki-client