$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/aa5035f3-2d21-3574-8fa3-8e9a3973e326.roa File: aa5035f3-2d21-3574-8fa3-8e9a3973e326.roa (raw, json) Hash identifier: lKifdXj5nZfi34hgwvej14qWo7w+782Knn2HEaJheJ0= Subject key identifier: E8:BD:82:D0:14:49:FF:BE:41:F7:1D:22:03:B0:2C:64:65:04:F6:86 Certificate issuer: /CN=eb5e041e-98b3-4dff-827b-03e1387393cf Certificate serial: 010D0C9F4328584BB2F7A72B0EFC283C838AFB80 Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/aa5035f3-2d21-3574-8fa3-8e9a3973e326.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 0 IP address blocks: 2607:6000::/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:a7:2b:0e:fc:28:3c:83:8a:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=3ee1dc2e-40a0-4ed3-8810-09f1ac169355 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:8f:16:f4:fd:82:9d:41:03:e6:28:bc:55:1b: 96:60:47:ac:11:25:64:12:06:e0:1e:dd:d1:28:93: 04:a4:a1:00:fb:0c:10:9b:dd:79:4c:2d:b5:51:7b: 63:44:0b:63:98:7d:69:56:92:44:23:83:eb:60:16: 44:67:e5:04:de:2c:e2:61:7a:d6:6d:7c:89:c3:08: a0:55:8d:bc:8d:14:a6:46:0e:25:f3:c6:0e:24:45: 8a:75:f8:e0:a0:ab:cf:db:3f:bc:f9:f7:fc:33:4b: 78:0e:f3:cd:1a:8f:f0:22:59:3b:b3:f1:d6:2d:1d: bf:07:b3:6b:3a:e7:e1:64:a8:e4:36:04:58:44:28: 66:db:e1:8f:5d:78:c4:1f:e2:ab:87:b3:66:d7:d2: dc:d5:b3:87:81:14:f2:cb:79:4d:9e:fa:cb:f7:59: 35:c9:6f:35:dc:dc:8c:4a:77:d6:99:ad:b0:38:32: 7b:df:fd:a0:16:2b:ce:59:bc:d0:b2:16:4f:00:13: 97:a0:31:c0:d1:a6:04:d6:1e:78:27:6e:fe:86:02: 32:75:f8:3c:5b:92:71:9b:13:98:0a:bb:a0:a9:9a: 70:23:18:74:05:f3:b7:76:9f:84:48:db:53:30:db: 31:76:0e:6f:6d:de:f6:34:e8:34:b4:a8:4c:8a:44: 83:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:BD:82:D0:14:49:FF:BE:41:F7:1D:22:03:B0:2C:64:65:04:F6:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/aa5035f3-2d21-3574-8fa3-8e9a3973e326.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl X509v3 Authority Key Identifier: keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer sbgp-ipAddrBlock: critical IPv6: 2607:6000::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:a3:c1:d4:5b:61:1b:4a:9a:62:57:8c:08:e3:dd:89:6b:6b: 03:cd:db:25:87:e1:ad:21:19:cf:b2:d2:55:44:fc:f9:b4:85: 3b:23:9a:11:13:63:d6:7c:6b:26:7a:ce:21:f1:51:8e:cf:28: b2:06:da:38:6f:c3:d1:25:f9:6a:07:ea:4e:01:b2:3f:34:fc: 6f:cd:a9:61:13:ce:68:85:18:50:1d:25:cd:2e:8d:2a:55:70: f0:79:a7:be:ae:cd:31:50:6a:36:c6:8a:75:1d:1f:a9:25:b5: 0e:0a:e5:47:4d:f5:2b:4c:8f:d3:7e:9e:01:36:39:ea:89:67: a1:ca:2a:b2:64:8f:86:bf:ac:1c:34:0d:50:b6:cd:e3:37:8b: fd:ec:80:a1:e1:f4:a7:fa:05:f3:9c:8c:db:2b:3d:85:1b:74: 93:51:32:16:ba:7b:92:82:28:fd:45:4d:7d:0e:4c:50:5f:46: db:e7:7e:de:2e:41:66:9d:89:4c:b8:18:00:e1:18:74:c8:0d: bf:38:71:48:3f:f9:55:47:32:c4:3f:f8:76:02:fc:61:7b:75: 1d:07:7b:92:e2:63:95:eb:34:8a:79:5a:7a:6d:e0:70:47:00: cf:66:b4:01:ae:3f:8f:59:a3:9c:2e:0d:31:e3:ef:a1:66:fc: 2c:06:e8:ce -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEuy96crDvwoPIOK+4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWI1ZTA0MWUtOThiMy00ZGZmLTgyN2ItMDNlMTM4NzM5 M2NmMB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk M2VlMWRjMmUtNDBhMC00ZWQzLTg4MTAtMDlmMWFjMTY5MzU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvo8W9P2CnUED5ii8VRuWYEesESVkEgbgHt3R KJMEpKEA+wwQm915TC21UXtjRAtjmH1pVpJEI4PrYBZEZ+UE3iziYXrWbXyJwwig VY28jRSmRg4l88YOJEWKdfjgoKvP2z+8+ff8M0t4DvPNGo/wIlk7s/HWLR2/B7Nr OufhZKjkNgRYRChm2+GPXXjEH+Krh7Nm19Lc1bOHgRTyy3lNnvrL91k1yW813NyM SnfWma2wODJ73/2gFivOWbzQshZPABOXoDHA0aYE1h54J27+hgIydfg8W5JxmxOY CrugqZpwIxh0BfO3dp+ESNtTMNsxdg5vbd72NOg0tKhMikSDDwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOi9gtAUSf++QfcdIgOwLGRlBPaGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVl MDQxZS05OGIzLTRkZmYtODI3Yi0wM2UxMzg3MzkzY2YvYWE1MDM1ZjMtMmQyMS0z NTc0LThmYTMtOGU5YTM5NzNlMzI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZWI1ZTA0MWUtOThiMy00ZGZmLTgy N2ItMDNlMTM4NzM5M2NmL2ViNWUwNDFlLTk4YjMtNGRmZi04MjdiLTAzZTEzODcz OTNjZi5jcmwwHwYDVR0jBBgwFoAU2+LolNpQKt3AF0M2x/1QnHoMEb4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVlMDQxZS05OGIzLTRkZmYtODI3Yi0wM2Ux Mzg3MzkzY2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgdgADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBVo8HUW2EbSppiV4wI492Ja2sDzdslh+GtIRnPstJVRPz5tIU7I5oR E2PWfGsmes4h8VGOzyiyBto4b8PRJflqB+pOAbI/NPxvzalhE85ohRhQHSXNLo0q VXDweae+rs0xUGo2xop1HR+pJbUOCuVHTfUrTI/Tfp4BNjnqiWehyiqyZI+Gv6wc NA1Qts3jN4v97ICh4fSn+gXznIzbKz2FG3STUTIWunuSgij9RU19DkxQX0bb537e LkFmnYlMuBgA4Rh0yA2/OHFIP/lVRzLEP/h2Avxhe3UdB3uS4mOV6zSKeVp6beBw RwDPZrQBrj+PWaOcLg0x4++hZvwsBujO -----END CERTIFICATE-----Generated at Tue Nov 4 19:41:16 2025 by rpki-client