$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/2d1cb9ba-986b-337c-a27a-9e706d8757d1.roa File: 2d1cb9ba-986b-337c-a27a-9e706d8757d1.roa (raw, json) Hash identifier: VpIJGdyto+WrBBIAqzxE35VpnADUEXS+NNTDzLC0I4I= Subject key identifier: F4:41:18:91:34:F8:8B:4F:59:F3:51:39:EF:34:F7:08:F4:4A:4F:E8 Certificate issuer: /CN=eb5e041e-98b3-4dff-827b-03e1387393cf Certificate serial: 010D0C9F4328584BB2F7A7566CC66DB3DEFC43C0 Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/2d1cb9ba-986b-337c-a27a-9e706d8757d1.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 19437 IP address blocks: 2607:6002:300::/40 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:a7:56:6c:c6:6d:b3:de:fc:43:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=6fc3cf10-013e-4d93-9c84-b9e432b9f0c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:0e:16:2e:1d:37:e4:29:77:f3:70:1f:34:63: 13:05:d7:89:76:4b:3d:05:f1:e3:33:45:ea:ca:fe: 8b:a2:28:2b:3a:e8:99:5d:5f:3e:19:7e:44:cb:5f: 19:7c:f0:8d:57:43:6f:b0:de:05:ea:c2:42:2c:77: 6e:71:05:4d:dc:71:c9:07:86:c5:d1:de:87:05:54: 10:4f:c3:f6:51:b0:13:0d:e2:b8:10:c4:19:e7:0e: 1c:92:f6:8d:1c:13:2d:50:d4:27:00:52:63:6b:2c: fb:99:fe:74:40:ab:d8:8d:43:d2:43:8a:24:54:22: a3:b0:96:95:cf:f3:a8:3c:46:16:38:d0:7e:2a:27: ce:9d:1e:a8:4c:9e:06:08:fa:8e:c0:c2:05:50:3c: c8:ca:f1:9e:f7:d5:a9:14:11:7d:da:88:a4:77:76: c8:f9:6d:fc:e5:fb:8f:01:95:7f:10:20:5f:2b:b6: 59:70:e7:90:93:d1:8e:65:c9:ae:77:f5:c2:0d:6c: 72:78:53:94:5f:f0:fc:3a:86:24:ad:28:80:0e:5c: c6:bd:e4:67:c2:6f:ac:d7:f0:33:ba:a7:f1:8a:9b: 1f:77:b4:37:53:f9:dd:9c:80:e3:75:83:80:f2:b2: 08:bc:be:74:70:04:51:09:69:ca:31:4c:95:53:4f: 4c:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:41:18:91:34:F8:8B:4F:59:F3:51:39:EF:34:F7:08:F4:4A:4F:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/2d1cb9ba-986b-337c-a27a-9e706d8757d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl X509v3 Authority Key Identifier: keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer sbgp-ipAddrBlock: critical IPv6: 2607:6002:300::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:1e:d2:9b:a2:4a:73:71:af:60:ac:c7:d6:38:1b:46:99:ff: 74:42:d6:a2:ad:3a:bc:8a:f6:06:8f:e2:74:ef:5f:05:48:e9: bb:0e:a8:ef:7d:ce:25:25:74:83:d0:88:3c:c4:da:fd:b5:9b: 4d:ba:04:4a:bf:ab:71:75:cc:2c:3b:57:87:3c:74:c8:34:70: cc:42:04:5c:3a:9e:d4:4c:4c:92:70:90:67:91:1a:53:56:83: 4b:c7:ff:b9:00:56:e3:62:73:29:97:15:60:8b:56:23:df:6f: 34:5c:be:38:01:c2:6b:0d:0d:83:77:e6:b8:80:e5:d5:87:82: 07:26:f4:d8:02:b0:a4:e9:7a:37:20:3d:52:4f:0c:3f:b9:a5: 25:62:ff:f8:ac:27:7b:04:06:b5:09:41:93:7b:e1:0e:34:f5: ce:0c:38:34:7c:e7:dd:60:a3:9a:98:49:29:f1:d5:15:0a:c6: 4e:39:01:fb:75:8f:5a:1d:35:4d:a3:76:e5:38:fd:6b:40:fc: bc:5d:fb:99:67:03:95:6b:32:81:ac:b9:7f:20:98:8f:ee:e0: 14:32:85:81:59:e5:2a:d7:55:4d:a2:39:76:ac:e9:be:d1:f3: 59:07:a0:97:44:31:d7:76:b8:f3:4a:1c:b6:e1:9f:03:51:38: e0:e9:c6:92 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEuy96dWbMZts978Q8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWI1ZTA0MWUtOThiMy00ZGZmLTgyN2ItMDNlMTM4NzM5 M2NmMB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk NmZjM2NmMTAtMDEzZS00ZDkzLTljODQtYjllNDMyYjlmMGMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqA4WLh035Cl383AfNGMTBdeJdks9BfHjM0Xq yv6LoigrOuiZXV8+GX5Ey18ZfPCNV0NvsN4F6sJCLHducQVN3HHJB4bF0d6HBVQQ T8P2UbATDeK4EMQZ5w4ckvaNHBMtUNQnAFJjayz7mf50QKvYjUPSQ4okVCKjsJaV z/OoPEYWONB+KifOnR6oTJ4GCPqOwMIFUDzIyvGe99WpFBF92oikd3bI+W385fuP AZV/ECBfK7ZZcOeQk9GOZcmud/XCDWxyeFOUX/D8OoYkrSiADlzGveRnwm+s1/Az uqfxipsfd7Q3U/ndnIDjdYOA8rIIvL50cARRCWnKMUyVU09MiwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFPRBGJE0+ItPWfNROe809wj0Sk/oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVl MDQxZS05OGIzLTRkZmYtODI3Yi0wM2UxMzg3MzkzY2YvMmQxY2I5YmEtOTg2Yi0z MzdjLWEyN2EtOWU3MDZkODc1N2QxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZWI1ZTA0MWUtOThiMy00ZGZmLTgy N2ItMDNlMTM4NzM5M2NmL2ViNWUwNDFlLTk4YjMtNGRmZi04MjdiLTAzZTEzODcz OTNjZi5jcmwwHwYDVR0jBBgwFoAU2+LolNpQKt3AF0M2x/1QnHoMEb4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVlMDQxZS05OGIzLTRkZmYtODI3Yi0wM2Ux Mzg3MzkzY2YuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgdgAgMw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEANh7Sm6JKc3GvYKzH1jgbRpn/dELWoq06vIr2Bo/idO9fBUjpuw6o 733OJSV0g9CIPMTa/bWbTboESr+rcXXMLDtXhzx0yDRwzEIEXDqe1ExMknCQZ5Ea U1aDS8f/uQBW42JzKZcVYItWI99vNFy+OAHCaw0Ng3fmuIDl1YeCByb02AKwpOl6 NyA9Uk8MP7mlJWL/+KwnewQGtQlBk3vhDjT1zgw4NHzn3WCjmphJKfHVFQrGTjkB +3WPWh01TaN25Tj9a0D8vF37mWcDlWsygay5fyCYj+7gFDKFgVnlKtdVTaI5dqzp vtHzWQegl0Qx13a480octuGfA1E44OnGkg== -----END CERTIFICATE-----Generated at Tue Nov 4 19:46:54 2025 by rpki-client