$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/a3b36418-37a2-34a8-b072-a15f8f21810a.roa File: a3b36418-37a2-34a8-b072-a15f8f21810a.roa (raw, json) Hash identifier: x70bE2Df+GEvDqT9uZFEv8AiqZ1lIZNgzeZWZuAfp2I= Subject key identifier: 2C:9B:2A:5B:67:E5:F0:49:8D:BE:54:6A:C6:99:11:C4:84:00:9A:87 Certificate issuer: /CN=eb5e041e-98b3-4dff-827b-03e1387393cf Certificate serial: 010D0C9F4328584BAEC7B7707A0CC1A1E55CC7D0 Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/a3b36418-37a2-34a8-b072-a15f8f21810a.roa Signing time: Wed 29 Oct 2025 13:00:39 +0000 ROA not before: Wed 29 Oct 2025 13:00:39 +0000 ROA not after: Tue 27 Jan 2026 14:00:39 +0000 asID: 12189 IP address blocks: 2607:6000:900::/40 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ae:c7:b7:70:7a:0c:c1:a1:e5:5c:c7:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf Validity Not Before: Oct 29 13:00:39 2025 GMT Not After : Jan 27 14:00:39 2026 GMT Subject: CN=d0a200bd-0047-46e7-8f87-617aab97bbf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:75:5b:b4:e1:01:5a:a1:08:ac:e4:d1:b3:12: 16:f4:9e:cd:51:b9:b2:07:4d:8f:d5:6a:0f:4d:14: 1f:ce:aa:6b:b7:ac:80:56:e7:38:78:a9:8f:b4:cd: 08:a3:6d:12:c1:91:34:87:b0:6a:3a:49:33:95:25: 05:0d:36:8c:fe:6d:8b:b9:a5:2a:7c:4d:a6:ca:4d: a3:26:6d:24:eb:f7:58:f3:5c:5e:18:75:98:62:b1: e4:b7:a4:5a:e5:ba:eb:cc:56:83:ce:fd:8a:a4:fd: 1a:b7:cb:c8:e1:40:58:db:b2:bb:9f:9a:53:c3:f0: d0:72:61:a2:f3:72:c2:18:18:3e:ac:8f:44:45:82: ab:3d:0d:df:48:11:4f:a1:78:56:ad:c5:74:fa:54: 7d:c8:22:0f:25:f0:e8:7b:f5:e0:58:57:b3:7b:29: 42:7a:81:ad:0f:80:ab:7a:2f:42:92:b8:05:7f:a1: 15:99:81:43:6e:37:df:a6:8f:58:ca:28:8e:60:34: 8f:f3:82:93:6d:11:58:15:1a:72:67:a2:f7:53:50: c7:1b:d1:18:64:19:c9:23:9c:2a:4d:c5:dd:0a:e7: ad:f1:a5:ce:10:49:8e:b1:f9:e4:0f:7a:5a:17:67: 58:98:8b:d2:91:ba:76:04:c0:3f:1c:03:84:49:b9: de:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:9B:2A:5B:67:E5:F0:49:8D:BE:54:6A:C6:99:11:C4:84:00:9A:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/a3b36418-37a2-34a8-b072-a15f8f21810a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl X509v3 Authority Key Identifier: keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer sbgp-ipAddrBlock: critical IPv6: 2607:6000:900::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:b3:0b:e1:bb:82:bd:61:44:d0:b1:3c:fc:d9:87:bf:41:46: 61:84:12:8a:c9:0f:00:29:cf:46:90:62:30:5b:2f:a9:90:86: 9f:49:7d:cd:ff:ab:74:c8:8d:0c:10:a9:a9:b6:b8:82:56:07: 0d:ad:ed:d8:5e:6d:89:01:59:97:d3:a8:06:70:10:76:15:71: d5:65:ca:78:7e:8e:ed:70:23:0d:7e:cc:1a:89:89:8c:5d:3b: 1e:77:1b:0b:15:bd:a3:a3:36:41:bc:35:d0:4c:dd:8d:60:91: f2:13:95:fe:a3:73:80:8f:18:62:67:bd:0d:13:5f:fe:c8:94: bc:7d:50:87:75:82:6f:d5:19:a0:0f:b8:3a:94:67:0a:b8:10: fc:91:39:e1:18:ce:97:d0:c9:4a:ae:32:73:ec:d0:03:8b:5e: 6e:c8:ab:6a:16:b1:08:d3:3f:87:e2:d1:ab:7b:df:7c:45:53: cf:56:fa:7e:ce:39:aa:33:ad:11:f8:cc:99:78:c5:ab:32:80: ef:66:d1:73:3a:61:da:ab:87:12:5b:1b:3f:2a:cd:34:e1:cc: a3:d8:c0:18:9b:b9:9e:de:59:04:f8:12:bb:e4:22:0d:44:32: de:65:aa:de:c3:67:2c:27:38:6b:45:72:bf:7b:7e:bb:15:ea: 0b:b5:d1:27 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEuux7dwegzBoeVcx9AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWI1ZTA0MWUtOThiMy00ZGZmLTgyN2ItMDNlMTM4NzM5 M2NmMB4XDTI1MTAyOTEzMDAzOVoXDTI2MDEyNzE0MDAzOVowLzEtMCsGA1UEAxMk ZDBhMjAwYmQtMDA0Ny00NmU3LThmODctNjE3YWFiOTdiYmYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHVbtOEBWqEIrOTRsxIW9J7NUbmyB02P1WoP TRQfzqprt6yAVuc4eKmPtM0Io20SwZE0h7BqOkkzlSUFDTaM/m2LuaUqfE2myk2j Jm0k6/dY81xeGHWYYrHkt6Ra5brrzFaDzv2KpP0at8vI4UBY27K7n5pTw/DQcmGi 83LCGBg+rI9ERYKrPQ3fSBFPoXhWrcV0+lR9yCIPJfDoe/XgWFezeylCeoGtD4Cr ei9CkrgFf6EVmYFDbjffpo9YyiiOYDSP84KTbRFYFRpyZ6L3U1DHG9EYZBnJI5wq TcXdCuet8aXOEEmOsfnkD3paF2dYmIvSkbp2BMA/HAOESbneZQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFCybKltn5fBJjb5UasaZEcSEAJqHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVl MDQxZS05OGIzLTRkZmYtODI3Yi0wM2UxMzg3MzkzY2YvYTNiMzY0MTgtMzdhMi0z NGE4LWIwNzItYTE1ZjhmMjE4MTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZWI1ZTA0MWUtOThiMy00ZGZmLTgy N2ItMDNlMTM4NzM5M2NmL2ViNWUwNDFlLTk4YjMtNGRmZi04MjdiLTAzZTEzODcz OTNjZi5jcmwwHwYDVR0jBBgwFoAU2+LolNpQKt3AF0M2x/1QnHoMEb4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVlMDQxZS05OGIzLTRkZmYtODI3Yi0wM2Ux Mzg3MzkzY2YuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgdgAAkw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAdrML4buCvWFE0LE8/NmHv0FGYYQSiskPACnPRpBiMFsvqZCGn0l9 zf+rdMiNDBCpqba4glYHDa3t2F5tiQFZl9OoBnAQdhVx1WXKeH6O7XAjDX7MGomJ jF07HncbCxW9o6M2Qbw10EzdjWCR8hOV/qNzgI8YYme9DRNf/siUvH1Qh3WCb9UZ oA+4OpRnCrgQ/JE54RjOl9DJSq4yc+zQA4tebsirahaxCNM/h+LRq3vffEVTz1b6 fs45qjOtEfjMmXjFqzKA72bRczph2quHElsbPyrNNOHMo9jAGJu5nt5ZBPgSu+Qi DUQy3mWq3sNnLCc4a0Vyv3t+uxXqC7XRJw== -----END CERTIFICATE-----Generated at Tue Nov 4 19:41:23 2025 by rpki-client