$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/3f57fca9-06dd-3728-9f37-d97b6a30f7ea.roa File: 3f57fca9-06dd-3728-9f37-d97b6a30f7ea.roa (raw, json) Hash identifier: qayjUiAJg/rjl1Ehrn7v3zzwcs2/MzLisLEqYGdJ/Do= Subject key identifier: 71:9E:7E:FA:FD:17:54:7F:CA:62:A5:5B:BC:E8:66:12:98:DF:55:68 Certificate issuer: /CN=eb5e041e-98b3-4dff-827b-03e1387393cf Certificate serial: 010D0C9F4328584BAEC7B2CEEFEE20888A7B3600 Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/3f57fca9-06dd-3728-9f37-d97b6a30f7ea.roa Signing time: Wed 29 Oct 2025 13:00:39 +0000 ROA not before: Wed 29 Oct 2025 13:00:39 +0000 ROA not after: Tue 27 Jan 2026 14:00:39 +0000 asID: 12189 IP address blocks: 2607:6004:100::/40 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ae:c7:b2:ce:ef:ee:20:88:8a:7b:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf Validity Not Before: Oct 29 13:00:39 2025 GMT Not After : Jan 27 14:00:39 2026 GMT Subject: CN=f1e1e7b4-d7ff-454c-8083-4da67b0de161 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:62:e2:55:d1:37:bd:ea:7e:15:de:ae:4d:3c: 3d:24:4c:44:d6:f1:4f:2e:f9:4e:96:2f:28:f4:0c: 4c:1c:5e:3e:91:8d:22:d0:b2:89:a4:0c:77:6f:0a: d2:c2:82:cd:d4:ff:ff:7f:55:de:75:12:e6:ba:1e: 8d:eb:47:2c:66:08:a9:0d:93:ba:2a:3d:fb:ae:25: 7e:38:19:98:65:3e:d3:8a:cd:74:16:5f:6e:f5:1f: b8:f1:87:a7:bc:13:5a:f4:1a:5b:ba:88:4b:fe:62: f2:88:18:29:76:c0:42:cb:b4:d3:fa:50:a3:7a:40: f3:8d:81:ab:b4:4b:c1:9c:d0:c6:cb:2e:f0:ea:40: ac:1b:c4:b8:ed:a3:65:0f:4e:b6:b1:64:64:cb:8e: 57:04:ae:5f:c4:3e:5d:82:08:f6:63:1e:3e:61:ae: f3:f8:8c:88:3e:4b:84:69:c8:26:ca:ab:a7:a7:8a: 2a:90:b3:b7:47:91:5f:ab:a3:ea:ab:f5:f9:40:e4: a1:e4:9d:04:af:ab:34:f5:29:72:f4:b4:e2:5b:17: 0c:83:82:c9:34:b7:b2:03:96:ec:bc:aa:b0:5a:05: 1a:51:00:05:db:c0:2f:10:f4:aa:c7:6c:7a:2f:6b: 1e:47:12:e8:e1:8c:54:c9:a7:bc:26:5c:9a:79:36: 1b:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:9E:7E:FA:FD:17:54:7F:CA:62:A5:5B:BC:E8:66:12:98:DF:55:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/3f57fca9-06dd-3728-9f37-d97b6a30f7ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl X509v3 Authority Key Identifier: keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer sbgp-ipAddrBlock: critical IPv6: 2607:6004:100::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:9f:02:80:99:76:cc:01:97:cc:4e:b8:3c:f6:f4:54:a9:59: 92:68:13:e6:05:d1:cc:dc:e3:7c:2c:90:2c:52:c3:4d:a2:86: 0c:e1:ce:8d:3c:72:a9:db:a6:81:ee:78:ce:f4:5c:3a:91:57: 26:fe:08:8a:65:c3:d1:e7:3c:8b:71:a7:72:b1:7e:66:1b:9c: db:b0:d5:27:5b:8f:65:86:98:05:a8:31:b3:23:a6:60:49:99: f9:08:05:e0:af:e0:86:8a:e7:8c:7d:45:8c:87:2e:f8:7d:2c: e5:e5:22:7f:43:30:db:e5:30:8b:31:6a:29:29:34:f6:5f:7b: 6f:f3:58:93:e4:0a:61:ab:ae:d6:cd:cb:db:ba:0d:ac:e0:a3: 08:db:26:08:e4:56:2b:07:a7:ef:e7:c0:a1:79:3a:90:cb:d9: 07:df:40:8a:07:17:40:65:1d:30:ae:6e:03:92:f3:36:39:bc: 7c:00:d7:9c:8d:d2:66:25:78:5b:49:e0:1f:d0:80:59:26:40: 0f:c7:13:76:a4:86:a5:b2:2e:e4:cf:ee:1a:83:2d:6e:c2:18: ed:bf:22:da:1e:b1:3f:22:b3:eb:de:06:da:f9:c1:91:9a:b3: a0:ec:5d:41:c6:4e:f4:49:a0:b4:72:af:d6:4b:0c:23:c2:70: 06:63:1a:72 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEuux7LO7+4giIp7NgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWI1ZTA0MWUtOThiMy00ZGZmLTgyN2ItMDNlMTM4NzM5 M2NmMB4XDTI1MTAyOTEzMDAzOVoXDTI2MDEyNzE0MDAzOVowLzEtMCsGA1UEAxMk ZjFlMWU3YjQtZDdmZi00NTRjLTgwODMtNGRhNjdiMGRlMTYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmLiVdE3vep+Fd6uTTw9JExE1vFPLvlOli8o 9AxMHF4+kY0i0LKJpAx3bwrSwoLN1P//f1XedRLmuh6N60csZgipDZO6Kj37riV+ OBmYZT7Tis10Fl9u9R+48YenvBNa9BpbuohL/mLyiBgpdsBCy7TT+lCjekDzjYGr tEvBnNDGyy7w6kCsG8S47aNlD062sWRky45XBK5fxD5dggj2Yx4+Ya7z+IyIPkuE acgmyqunp4oqkLO3R5Ffq6Pqq/X5QOSh5J0Er6s09Sly9LTiWxcMg4LJNLeyA5bs vKqwWgUaUQAF28AvEPSqx2x6L2seRxLo4YxUyae8JlyaeTYbzQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFHGefvr9F1R/ymKlW7zoZhKY31VoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVl MDQxZS05OGIzLTRkZmYtODI3Yi0wM2UxMzg3MzkzY2YvM2Y1N2ZjYTktMDZkZC0z NzI4LTlmMzctZDk3YjZhMzBmN2VhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZWI1ZTA0MWUtOThiMy00ZGZmLTgy N2ItMDNlMTM4NzM5M2NmL2ViNWUwNDFlLTk4YjMtNGRmZi04MjdiLTAzZTEzODcz OTNjZi5jcmwwHwYDVR0jBBgwFoAU2+LolNpQKt3AF0M2x/1QnHoMEb4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVlMDQxZS05OGIzLTRkZmYtODI3Yi0wM2Ux Mzg3MzkzY2YuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgdgBAEw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEACZ8CgJl2zAGXzE64PPb0VKlZkmgT5gXRzNzjfCyQLFLDTaKGDOHO jTxyqdumge54zvRcOpFXJv4IimXD0ec8i3GncrF+Zhuc27DVJ1uPZYaYBagxsyOm YEmZ+QgF4K/ghornjH1FjIcu+H0s5eUif0Mw2+UwizFqKSk09l97b/NYk+QKYauu 1s3L27oNrOCjCNsmCORWKwen7+fAoXk6kMvZB99AigcXQGUdMK5uA5LzNjm8fADX nI3SZiV4W0ngH9CAWSZAD8cTdqSGpbIu5M/uGoMtbsIY7b8i2h6xPyKz694G2vnB kZqzoOxdQcZO9EmgtHKv1ksMI8JwBmMacg== -----END CERTIFICATE-----Generated at Tue Nov 4 19:46:48 2025 by rpki-client