$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/599764ea-8465-3cb8-a72c-3673eca82611.roa File: 599764ea-8465-3cb8-a72c-3673eca82611.roa (raw, json) Hash identifier: QyoAf3ejIcDHKHbS3iTrixKNHvIhIOLDdJnOCNL/oK4= Subject key identifier: 53:59:43:B3:05:70:49:77:A6:60:37:C6:1D:2D:53:A7:49:76:2D:9D Certificate issuer: /CN=ebd609f9-488f-4ccb-b562-f82edd8191dd Certificate serial: 010D0C9F4328584BABFCFEA16FE371B7B0AFD5C0 Authority key identifier: FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/599764ea-8465-3cb8-a72c-3673eca82611.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 22147 IP address blocks: 2001:4830:c600::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fc:fe:a1:6f:e3:71:b7:b0:af:d5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebd609f9-488f-4ccb-b562-f82edd8191dd Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=77173653-3390-4e0e-a528-87216177e058 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:98:ab:60:64:6a:51:cb:4a:12:e8:ff:d3:ee: e5:ba:ab:f8:7a:8a:12:e6:9e:22:66:ef:fe:1c:69: aa:4a:66:c6:6a:fb:cd:fc:72:a8:ac:88:5b:0d:d8: 1b:d5:d7:17:b2:33:b4:99:6c:cb:07:b7:64:01:42: 1c:ee:a8:cd:12:dd:e4:94:63:68:bf:76:11:68:d0: ba:52:1d:76:58:05:ed:c0:0f:81:ce:33:c2:c3:1d: 63:84:bd:3f:3f:e4:2e:a6:76:a5:ce:5b:dd:e5:23: 62:d1:60:7f:d1:01:d6:93:fb:fb:4c:07:5a:76:fc: 65:3e:46:73:dd:bf:50:f2:0c:9e:d8:67:1a:52:bc: 70:61:7b:d3:b2:51:88:22:d5:fa:24:fc:60:96:2a: d2:a6:61:ce:43:14:fa:da:fd:63:05:d5:42:3c:32: fc:92:29:cf:5c:97:94:db:4e:c1:04:cd:00:a9:d4: e4:8d:f3:94:f2:97:2a:ce:8c:58:e9:27:1d:7a:86: bd:f5:3a:e3:fc:1c:b4:f5:17:19:f4:03:ca:c5:ca: a4:82:c9:81:8b:24:9b:83:af:41:27:73:c1:b0:0c: 06:14:96:7e:ba:d0:c3:04:ed:e8:69:a7:a3:97:20: de:12:16:28:35:7d:74:6e:7b:3a:6a:19:76:f7:2f: da:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:59:43:B3:05:70:49:77:A6:60:37:C6:1D:2D:53:A7:49:76:2D:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/599764ea-8465-3cb8-a72c-3673eca82611.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl X509v3 Authority Key Identifier: keyid:FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer sbgp-ipAddrBlock: critical IPv6: 2001:4830:c600::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:8c:85:88:a7:0f:9e:69:54:1a:e0:ec:df:29:76:62:3e:8a: c9:21:64:8d:85:c2:53:d2:4a:6b:71:45:83:ee:c3:9f:e7:d8: b5:90:23:11:a0:59:61:f4:26:47:88:bd:3e:59:99:d3:5c:71: 0c:90:90:98:cc:de:11:03:20:56:07:f4:06:32:99:31:36:e0: 90:35:d2:1e:f7:77:fe:82:0e:1f:cd:58:11:fb:36:eb:e5:07: 89:c9:eb:1e:01:66:df:57:83:e6:d9:cc:e2:ad:d3:2a:05:77: 85:45:50:9a:ff:19:d1:40:32:0c:60:9d:3f:eb:d7:0a:f1:51: 43:69:ea:a7:00:bf:4d:df:60:7b:23:99:8d:6e:bf:3a:ce:de: 69:a0:50:6c:cd:89:e7:23:05:4d:d9:74:f6:43:0e:41:a4:0c: b5:0f:af:48:eb:94:fa:0b:1c:0e:1a:19:bc:f8:8a:0a:76:39: 64:76:9b:88:41:c9:2f:4f:fe:1d:cb:53:7a:98:43:d6:86:f9: 61:7c:68:d0:09:51:90:77:8f:6e:3b:fb:4b:1f:83:f4:b3:a6: 3f:1b:0d:7b:88:70:13:01:e4:1a:c0:dd:b5:53:84:f6:39:ed: 9f:7f:79:2f:93:a9:ab:57:22:fd:33:54:c0:b9:50:f4:2f:46: e1:78:18:63 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEur/P6hb+Nxt7Cv1cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWJkNjA5ZjktNDg4Zi00Y2NiLWI1NjItZjgyZWRkODE5 MWRkMB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk NzcxNzM2NTMtMzM5MC00ZTBlLWE1MjgtODcyMTYxNzdlMDU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAipirYGRqUctKEuj/0+7luqv4eooS5p4iZu/+ HGmqSmbGavvN/HKorIhbDdgb1dcXsjO0mWzLB7dkAUIc7qjNEt3klGNov3YRaNC6 Uh12WAXtwA+BzjPCwx1jhL0/P+Qupnalzlvd5SNi0WB/0QHWk/v7TAdadvxlPkZz 3b9Q8gye2GcaUrxwYXvTslGIItX6JPxglirSpmHOQxT62v1jBdVCPDL8kinPXJeU 207BBM0AqdTkjfOU8pcqzoxY6Scdeoa99Trj/By09RcZ9APKxcqkgsmBiySbg69B J3PBsAwGFJZ+utDDBO3oaaejlyDeEhYoNX10bns6ahl29y/amwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFNZQ7MFcEl3pmA3xh0tU6dJdi2dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lYmQ2 MDlmOS00ODhmLTRjY2ItYjU2Mi1mODJlZGQ4MTkxZGQvNTk5NzY0ZWEtODQ2NS0z Y2I4LWE3MmMtMzY3M2VjYTgyNjExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZWJkNjA5ZjktNDg4Zi00Y2NiLWI1 NjItZjgyZWRkODE5MWRkL2ViZDYwOWY5LTQ4OGYtNGNjYi1iNTYyLWY4MmVkZDgx OTFkZC5jcmwwHwYDVR0jBBgwFoAU/wob5oxF01YqMPBDjcIXckTApZQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lYmQ2MDlmOS00ODhmLTRjY2ItYjU2Mi1mODJl ZGQ4MTkxZGQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIMMYA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJiMhYinD55pVBrg7N8pdmI+iskhZI2FwlPSSmtxRYPuw5/n2LWQ IxGgWWH0JkeIvT5ZmdNccQyQkJjM3hEDIFYH9AYymTE24JA10h73d/6CDh/NWBH7 NuvlB4nJ6x4BZt9Xg+bZzOKt0yoFd4VFUJr/GdFAMgxgnT/r1wrxUUNp6qcAv03f YHsjmY1uvzrO3mmgUGzNiecjBU3ZdPZDDkGkDLUPr0jrlPoLHA4aGbz4igp2OWR2 m4hByS9P/h3LU3qYQ9aG+WF8aNAJUZB3j247+0sfg/Szpj8bDXuIcBMB5BrA3bVT hPY57Z9/eS+TqatXIv0zVMC5UPQvRuF4GGM= -----END CERTIFICATE-----Generated at Wed Nov 5 09:13:17 2025 by rpki-client