$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/3d17c561-ea87-3032-81af-6559c2402369.roa File: 3d17c561-ea87-3032-81af-6559c2402369.roa (raw, json) Hash identifier: mqJMASo8sahljr36sqH++f/mp+uGvqqb/sNt39TFGoo= Subject key identifier: 91:AF:F7:E7:54:6C:6C:AF:28:D9:D6:60:55:85:55:28:3D:D3:E6:7C Certificate issuer: /CN=eb5e041e-98b3-4dff-827b-03e1387393cf Certificate serial: 010D0C9F4328584BB2F7A73FAA5C15179A8C8200 Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/3d17c561-ea87-3032-81af-6559c2402369.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 20454 IP address blocks: 2607:6002:171::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:a7:3f:aa:5c:15:17:9a:8c:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=1b82c712-867d-4cf6-bd82-2243fefdf8b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:16:fa:c3:d8:79:56:c9:fd:b4:7c:46:96:2b: 96:01:91:46:a5:f1:75:f7:bb:e0:b6:eb:15:c7:28: f4:8c:c0:dc:13:b0:39:f7:97:b2:64:4a:10:ab:93: b9:ef:98:73:00:f1:95:79:60:04:e4:87:8d:4e:9b: 16:41:2e:d7:af:86:0a:6e:46:bf:41:d2:bd:ca:68: 48:b5:f2:0f:26:66:96:c6:ae:3f:74:67:5c:53:81: e6:cb:c4:83:2b:2e:01:24:7d:ac:f2:4c:cd:85:27: 4c:fd:fb:57:ab:e9:b0:8d:00:2b:64:49:a2:b4:de: b2:91:8f:60:7a:8f:49:46:e6:74:5a:95:a5:c1:12: 13:1f:86:8e:cd:25:42:37:aa:12:91:10:75:4e:f2: 21:59:32:58:e6:da:a1:c5:0f:f1:69:b6:c6:1e:a7: 46:07:af:91:ae:fc:ab:82:e6:ed:97:5a:6f:88:24: fe:24:f6:3b:8b:a9:5e:29:c9:53:76:ed:86:c6:95: 01:91:94:bb:ee:b4:ae:46:5a:13:a5:88:4c:c4:f5: 84:ed:5f:bd:72:b2:37:d0:88:d2:52:4d:1d:86:91: 37:82:4f:de:77:d8:44:16:69:a6:f2:12:42:35:01: 57:b6:19:93:78:a1:30:bd:fe:9a:52:77:2d:e9:bb: bc:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:AF:F7:E7:54:6C:6C:AF:28:D9:D6:60:55:85:55:28:3D:D3:E6:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/3d17c561-ea87-3032-81af-6559c2402369.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl X509v3 Authority Key Identifier: keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer sbgp-ipAddrBlock: critical IPv6: 2607:6002:171::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:17:2a:4d:02:7d:ff:9e:77:b6:10:f4:eb:1c:9c:d4:03:3c: c9:51:3a:3f:c4:6e:65:89:d9:2f:a2:e4:b3:69:b6:79:cc:66: 0d:3a:00:5f:81:c6:e2:95:10:96:96:cb:e2:ba:4c:1b:1d:f5: db:f5:81:69:cb:43:6b:56:41:29:90:c9:58:f0:34:c5:63:17: 94:0d:ad:2d:d1:81:34:6a:85:32:53:2e:97:92:bc:10:a8:3b: 43:92:9a:f6:6a:52:cd:bb:02:83:f6:60:38:6c:ea:ce:a4:c3: ee:46:89:f0:2c:36:7e:a1:34:d8:69:41:f6:a3:d3:e9:1f:bc: c4:78:07:08:08:40:df:27:af:74:97:ec:92:00:a4:f0:7b:3a: e5:89:6f:dd:f5:45:5d:61:09:14:90:7f:32:7e:8b:16:12:67: 7c:7a:03:32:d0:7f:06:80:d7:c8:a3:e8:46:4a:99:ff:70:30: 54:7a:c0:cf:ef:2b:eb:fd:f2:bc:00:cb:f4:f8:cd:07:16:37: bc:05:80:85:5a:10:7b:80:3e:04:64:14:41:1c:4f:8d:b4:e3: 3a:df:d0:45:0c:7c:8f:15:77:dd:91:29:72:0e:c7:a9:4f:cc: 10:8d:43:61:ef:a1:b7:3d:15:aa:a2:8c:72:cc:a9:5e:a0:df: 91:9e:d3:9a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuy96c/qlwVF5qMggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWI1ZTA0MWUtOThiMy00ZGZmLTgyN2ItMDNlMTM4NzM5 M2NmMB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk MWI4MmM3MTItODY3ZC00Y2Y2LWJkODItMjI0M2ZlZmRmOGIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRb6w9h5Vsn9tHxGliuWAZFGpfF197vgtusV xyj0jMDcE7A595eyZEoQq5O575hzAPGVeWAE5IeNTpsWQS7Xr4YKbka/QdK9ymhI tfIPJmaWxq4/dGdcU4Hmy8SDKy4BJH2s8kzNhSdM/ftXq+mwjQArZEmitN6ykY9g eo9JRuZ0WpWlwRITH4aOzSVCN6oSkRB1TvIhWTJY5tqhxQ/xabbGHqdGB6+Rrvyr gubtl1pviCT+JPY7i6leKclTdu2GxpUBkZS77rSuRloTpYhMxPWE7V+9crI30IjS Uk0dhpE3gk/ed9hEFmmm8hJCNQFXthmTeKEwvf6aUnct6bu8bQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJGv9+dUbGyvKNnWYFWFVSg90+Z8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVl MDQxZS05OGIzLTRkZmYtODI3Yi0wM2UxMzg3MzkzY2YvM2QxN2M1NjEtZWE4Ny0z MDMyLTgxYWYtNjU1OWMyNDAyMzY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZWI1ZTA0MWUtOThiMy00ZGZmLTgy N2ItMDNlMTM4NzM5M2NmL2ViNWUwNDFlLTk4YjMtNGRmZi04MjdiLTAzZTEzODcz OTNjZi5jcmwwHwYDVR0jBBgwFoAU2+LolNpQKt3AF0M2x/1QnHoMEb4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVlMDQxZS05OGIzLTRkZmYtODI3Yi0wM2Ux Mzg3MzkzY2YuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgdgAgFx MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG8XKk0Cff+ed7YQ9OscnNQDPMlROj/EbmWJ2S+i5LNptnnMZg06 AF+BxuKVEJaWy+K6TBsd9dv1gWnLQ2tWQSmQyVjwNMVjF5QNrS3RgTRqhTJTLpeS vBCoO0OSmvZqUs27AoP2YDhs6s6kw+5GifAsNn6hNNhpQfaj0+kfvMR4BwgIQN8n r3SX7JIApPB7OuWJb931RV1hCRSQfzJ+ixYSZ3x6AzLQfwaA18ij6EZKmf9wMFR6 wM/vK+v98rwAy/T4zQcWN7wFgIVaEHuAPgRkFEEcT4204zrf0EUMfI8Vd92RKXIO x6lPzBCNQ2Hvobc9FaqijHLMqV6g35Ge05o= -----END CERTIFICATE-----Generated at Tue Nov 4 19:43:45 2025 by rpki-client