$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/3ef9fe67-4bcb-37e3-a4db-7e8ef9fea8fe.roa File: 3ef9fe67-4bcb-37e3-a4db-7e8ef9fea8fe.roa (raw, json) Hash identifier: LccjMSJzyvqc/xDKp53iYXJOVLa6cSAzjnytX4Y6JT4= Subject key identifier: 12:F0:C0:74:FF:95:DA:9E:F0:C0:91:F8:E0:A9:37:36:50:17:29:75 Certificate issuer: /CN=ebd609f9-488f-4ccb-b562-f82edd8191dd Certificate serial: 010D0C9F4328584B8EACD13000E10AD048E41700 Authority key identifier: FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/3ef9fe67-4bcb-37e3-a4db-7e8ef9fea8fe.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 395326 IP address blocks: 2001:4830:2446::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:d1:30:00:e1:0a:d0:48:e4:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebd609f9-488f-4ccb-b562-f82edd8191dd Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=588bded5-0375-44b4-8421-5c59f756a448 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:21:1f:57:7f:44:6c:fc:70:75:ba:06:b9:de: 07:64:f3:8f:11:07:3a:5b:05:38:8b:c1:7d:25:54: d4:04:0d:bb:c3:e1:72:c7:36:0b:02:74:f8:5f:1b: af:21:ca:28:0d:53:77:b2:1c:11:83:a8:a9:85:cf: 0b:ee:f2:e9:1c:5f:c2:d0:82:1f:96:14:1d:38:90: f4:6d:49:97:c1:34:fc:6b:94:ef:8b:c0:9e:47:38: 44:3c:e6:79:53:6c:c5:ca:dc:80:e9:cc:bf:e7:d7: 43:68:5b:fb:3b:7d:0d:cc:09:c7:a2:62:82:d5:01: 90:86:8a:3e:71:05:63:b0:49:3e:68:e5:49:09:1d: 3e:7c:ee:3d:5b:6e:22:a6:e0:b9:07:40:8b:ba:ad: d3:d6:8d:bb:13:ea:a4:7a:09:a6:9f:c7:62:21:6f: 45:97:b9:93:67:73:d9:e0:8b:73:d4:48:33:19:ba: ff:28:e4:5c:ba:fd:a8:28:f0:5d:f1:b4:76:43:55: 1e:a6:6e:98:8b:79:b8:87:16:41:01:58:d8:13:43: 2f:ff:88:e3:d0:d4:4c:9c:59:03:24:03:a2:db:b0: 26:20:c8:21:f0:6e:64:a3:39:ed:00:c6:9a:1e:e6: 74:cb:7b:12:05:40:cf:15:9d:db:04:b5:91:25:90: 09:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:F0:C0:74:FF:95:DA:9E:F0:C0:91:F8:E0:A9:37:36:50:17:29:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/3ef9fe67-4bcb-37e3-a4db-7e8ef9fea8fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl X509v3 Authority Key Identifier: keyid:FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer sbgp-ipAddrBlock: critical IPv6: 2001:4830:2446::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:78:fb:bd:70:01:1a:67:15:5a:89:43:fa:38:07:e5:67:c7: 6b:fd:1f:da:d2:44:3f:8a:2c:70:5d:d7:35:88:c7:44:96:f5: 85:0e:4e:d2:e3:1f:2a:dc:a4:5e:cc:04:26:50:21:89:f2:b4: e0:7b:8e:c6:23:56:41:51:0b:52:f6:c0:99:63:d6:cb:a7:14: 47:11:ec:9b:ad:ae:18:d3:a7:cc:dd:3d:39:b5:1d:3b:3c:dd: 27:27:35:11:2f:63:97:01:ed:8d:a5:27:b3:9b:05:1e:86:d6: 29:e9:bf:29:84:99:ff:c0:0b:26:ed:2c:9f:56:b4:8a:ef:3d: e4:21:71:3b:e1:6a:ff:1f:c6:65:3e:19:99:8c:9a:b2:7c:10: 82:47:45:8e:e6:d1:82:97:23:9f:7d:10:67:9c:9c:42:7e:1f: 4a:d0:7c:b8:8e:11:eb:ee:18:cf:15:72:3b:2a:67:1e:c4:0e: 94:a2:71:51:52:25:58:75:db:c1:00:e0:72:c9:fb:aa:25:6f: 45:7d:ac:e0:f6:6e:9e:67:39:4b:7f:7c:9c:fb:c0:91:49:3d: 20:8d:66:a6:e8:f9:af:33:23:2a:69:2a:0b:69:cc:09:af:41: 82:9e:b4:fa:a5:d1:83:64:06:ef:29:55:bd:37:66:e8:c5:e0: 8e:b9:eb:f4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuOrNEwAOEK0EjkFwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWJkNjA5ZjktNDg4Zi00Y2NiLWI1NjItZjgyZWRkODE5 MWRkMB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk NTg4YmRlZDUtMDM3NS00NGI0LTg0MjEtNWM1OWY3NTZhNDQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyEfV39EbPxwdboGud4HZPOPEQc6WwU4i8F9 JVTUBA27w+FyxzYLAnT4XxuvIcooDVN3shwRg6iphc8L7vLpHF/C0IIflhQdOJD0 bUmXwTT8a5Tvi8CeRzhEPOZ5U2zFytyA6cy/59dDaFv7O30NzAnHomKC1QGQhoo+ cQVjsEk+aOVJCR0+fO49W24ipuC5B0CLuq3T1o27E+qkegmmn8diIW9Fl7mTZ3PZ 4Itz1EgzGbr/KORcuv2oKPBd8bR2Q1Uepm6Yi3m4hxZBAVjYE0Mv/4jj0NRMnFkD JAOi27AmIMgh8G5kozntAMaaHuZ0y3sSBUDPFZ3bBLWRJZAJTQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBLwwHT/ldqe8MCR+OCpNzZQFyl1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lYmQ2 MDlmOS00ODhmLTRjY2ItYjU2Mi1mODJlZGQ4MTkxZGQvM2VmOWZlNjctNGJjYi0z N2UzLWE0ZGItN2U4ZWY5ZmVhOGZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZWJkNjA5ZjktNDg4Zi00Y2NiLWI1 NjItZjgyZWRkODE5MWRkL2ViZDYwOWY5LTQ4OGYtNGNjYi1iNTYyLWY4MmVkZDgx OTFkZC5jcmwwHwYDVR0jBBgwFoAU/wob5oxF01YqMPBDjcIXckTApZQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lYmQ2MDlmOS00ODhmLTRjY2ItYjU2Mi1mODJl ZGQ4MTkxZGQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIMCRG MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJF4+71wARpnFVqJQ/o4B+Vnx2v9H9rSRD+KLHBd1zWIx0SW9YUO TtLjHyrcpF7MBCZQIYnytOB7jsYjVkFRC1L2wJlj1sunFEcR7JutrhjTp8zdPTm1 HTs83ScnNREvY5cB7Y2lJ7ObBR6G1inpvymEmf/ACybtLJ9WtIrvPeQhcTvhav8f xmU+GZmMmrJ8EIJHRY7m0YKXI599EGecnEJ+H0rQfLiOEevuGM8VcjsqZx7EDpSi cVFSJVh128EA4HLJ+6olb0V9rOD2bp5nOUt/fJz7wJFJPSCNZqbo+a8zIyppKgtp zAmvQYKetPql0YNkBu8pVb03ZujF4I656/Q= -----END CERTIFICATE-----Generated at Wed Nov 5 04:51:39 2025 by rpki-client