$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/4ddee37c-6a1c-3187-ac12-5a3b453129cd.roa File: 4ddee37c-6a1c-3187-ac12-5a3b453129cd.roa (raw, json) Hash identifier: I85+ux2NoQgV8US1sWhxD94u5hSHCsTcifOcT2bhmzw= Subject key identifier: 6C:9C:F9:ED:E2:D9:77:CF:9C:34:3C:D2:12:EE:88:9D:DA:40:2F:E6 Certificate issuer: /CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf Certificate serial: 010D0C9F4328584BB02CFF61FCE5F8F75976F300 Authority key identifier: DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/4ddee37c-6a1c-3187-ac12-5a3b453129cd.roa Signing time: Thu 30 Oct 2025 01:00:30 +0000 ROA not before: Thu 30 Oct 2025 01:00:30 +0000 ROA not after: Wed 28 Jan 2026 02:00:30 +0000 asID: 271 IP address blocks: 2607:f8f0:e00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b0:2c:ff:61:fc:e5:f8:f7:59:76:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf Validity Not Before: Oct 30 01:00:30 2025 GMT Not After : Jan 28 02:00:30 2026 GMT Subject: CN=895c781a-6882-4058-bc85-ee7347dccdbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c1:cc:77:1a:ac:26:d0:bf:c4:27:88:92:e3: 1a:69:9c:a1:01:b8:0c:2c:27:85:cb:39:82:16:f7: a5:db:6d:1c:74:87:69:ed:af:73:1f:c0:26:be:ff: e0:94:0f:8e:18:18:ad:92:96:a5:14:9c:e4:ae:0d: 4d:96:8b:01:f0:8f:08:0c:3e:57:ca:18:45:15:1c: 91:33:99:65:a4:66:d2:31:cd:21:fe:f9:fc:74:0f: e6:ce:66:30:07:e3:b9:30:7d:d6:90:54:e7:aa:56: 13:84:ff:f6:5b:5a:21:31:3a:80:58:06:1a:61:96: c9:32:cb:65:5b:ca:de:4f:21:45:0b:48:44:70:ea: d7:d6:0a:a6:aa:54:31:ef:0c:e4:05:a9:e0:21:1c: ba:7a:70:db:cb:2c:ca:4c:53:fb:29:1a:62:83:4e: c5:46:6e:cf:4a:b2:5d:2a:1a:eb:8a:97:78:d1:5e: 90:db:b7:90:9f:02:73:67:9b:ca:35:19:cc:1f:6f: d6:6b:71:42:2f:3e:79:d3:ff:24:32:8c:67:02:7e: c2:99:9e:6f:4b:48:fb:cf:9e:f3:cd:de:0d:b5:4c: 10:ce:0b:26:d6:b2:c8:65:39:ce:e0:98:29:79:30: 9f:3a:a1:15:5d:d7:b1:27:46:dc:a2:4f:ac:f3:2a: 19:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:9C:F9:ED:E2:D9:77:CF:9C:34:3C:D2:12:EE:88:9D:DA:40:2F:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/4ddee37c-6a1c-3187-ac12-5a3b453129cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl X509v3 Authority Key Identifier: keyid:DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer sbgp-ipAddrBlock: critical IPv6: 2607:f8f0:e00::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:f4:9b:99:07:b9:ea:10:cc:f3:1f:2b:d2:f8:d9:bf:f5:cd: cb:12:d6:8a:63:78:61:aa:77:05:df:8a:06:e9:76:32:b2:32: 38:da:58:78:d0:3d:0c:22:4f:5b:60:fb:5b:7d:99:98:36:aa: e5:7c:f7:05:7a:29:8c:35:f0:a2:56:bc:09:00:eb:4e:2d:a1: de:9c:ca:f1:6a:99:34:35:bb:8c:1e:5b:7c:f0:0e:30:9b:ed: 80:fc:25:ea:3b:15:80:b9:38:bf:34:8e:19:f7:a4:4a:dc:fc: 33:e1:f7:7b:b6:70:ee:d5:a7:8f:71:64:72:4e:b8:74:c2:93: db:39:26:e8:7b:28:f5:91:ec:e8:e8:a8:7c:29:eb:db:25:69: af:44:85:73:3e:58:92:fc:d8:e1:59:e8:db:62:2f:ea:bb:a5: 5b:f1:6f:9d:e9:84:2a:b0:60:0b:01:70:0e:dc:df:96:49:0c: 32:b3:7f:61:86:98:e9:01:a6:0b:39:9d:96:70:59:47:3f:af: 46:28:ea:e8:c6:53:a3:c9:a8:32:dc:68:70:3c:fe:42:31:5e: aa:68:4c:81:f8:74:ce:33:98:6c:17:ef:4b:b4:41:48:00:2f: 39:da:26:b5:01:14:79:70:ed:6b:d1:2a:bb:ef:54:32:7c:c7: 47:2d:f8:bf -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuwLP9h/OX491l28wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTZhYjUwMWItNmM2OS00NmE0LWI5MjQtYTA5YjY4Y2Ux OGNmMB4XDTI1MTAzMDAxMDAzMFoXDTI2MDEyODAyMDAzMFowLzEtMCsGA1UEAxMk ODk1Yzc4MWEtNjg4Mi00MDU4LWJjODUtZWU3MzQ3ZGNjZGJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMHMdxqsJtC/xCeIkuMaaZyhAbgMLCeFyzmC Fvel220cdIdp7a9zH8Amvv/glA+OGBitkpalFJzkrg1NlosB8I8IDD5XyhhFFRyR M5llpGbSMc0h/vn8dA/mzmYwB+O5MH3WkFTnqlYThP/2W1ohMTqAWAYaYZbJMstl W8reTyFFC0hEcOrX1gqmqlQx7wzkBangIRy6enDbyyzKTFP7KRpig07FRm7PSrJd Khrripd40V6Q27eQnwJzZ5vKNRnMH2/Wa3FCLz550/8kMoxnAn7CmZ5vS0j7z57z zd4NtUwQzgsm1rLIZTnO4JgpeTCfOqEVXdexJ0bcok+s8yoZ/QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGyc+e3i2XfPnDQ80hLuiJ3aQC/mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNmFi NTAxYi02YzY5LTQ2YTQtYjkyNC1hMDliNjhjZTE4Y2YvNGRkZWUzN2MtNmExYy0z MTg3LWFjMTItNWEzYjQ1MzEyOWNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTZhYjUwMWItNmM2OS00NmE0LWI5 MjQtYTA5YjY4Y2UxOGNmL2U2YWI1MDFiLTZjNjktNDZhNC1iOTI0LWEwOWI2OGNl MThjZi5jcmwwHwYDVR0jBBgwFoAU3NJzqCd+YUhl0UFSipG2IBCnAF4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNmFiNTAxYi02YzY5LTQ2YTQtYjkyNC1hMDli NjhjZTE4Y2YuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf48A4A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFj0m5kHueoQzPMfK9L42b/1zcsS1opjeGGqdwXfigbpdjKyMjja WHjQPQwiT1tg+1t9mZg2quV89wV6KYw18KJWvAkA604tod6cyvFqmTQ1u4weW3zw DjCb7YD8Jeo7FYC5OL80jhn3pErc/DPh93u2cO7Vp49xZHJOuHTCk9s5Juh7KPWR 7OjoqHwp69slaa9EhXM+WJL82OFZ6NtiL+q7pVvxb53phCqwYAsBcA7c35ZJDDKz f2GGmOkBpgs5nZZwWUc/r0Yo6ujGU6PJqDLcaHA8/kIxXqpoTIH4dM4zmGwX70u0 QUgALznaJrUBFHlw7WvRKrvvVDJ8x0ct+L8= -----END CERTIFICATE-----Generated at Wed Nov 5 01:18:31 2025 by rpki-client