$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1fe8849b-66cd-4afe-9b0b-970eafad1175/b997d817-4fa0-3f4d-b90b-0646406d600a.roa File: b997d817-4fa0-3f4d-b90b-0646406d600a.roa (raw, json) Hash identifier: YJjQmJJUyHHz9jzBm0ZjwqjLTIly18qXxqT+EegYa4A= Subject key identifier: DB:F3:CD:6F:CF:CF:37:D0:91:60:55:C2:FE:0C:EA:E2:21:EC:B8:F5 Certificate issuer: /CN=1fe8849b-66cd-4afe-9b0b-970eafad1175 Certificate serial: 010D0C9F4328584B84E780A2B45B70DF98FC5580 Authority key identifier: BE:A8:20:9C:13:5E:FC:F9:EE:69:98:CE:84:4E:B8:E8:DC:83:F4:95 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1fe8849b-66cd-4afe-9b0b-970eafad1175.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1fe8849b-66cd-4afe-9b0b-970eafad1175/b997d817-4fa0-3f4d-b90b-0646406d600a.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 1008 IP address blocks: 2606:e040::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1fe8849b-66cd-4afe-9b0b-970eafad1175/1fe8849b-66cd-4afe-9b0b-970eafad1175.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1fe8849b-66cd-4afe-9b0b-970eafad1175/1fe8849b-66cd-4afe-9b0b-970eafad1175.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1fe8849b-66cd-4afe-9b0b-970eafad1175.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:80:a2:b4:5b:70:df:98:fc:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fe8849b-66cd-4afe-9b0b-970eafad1175 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=3f821f4b-282d-47c1-9877-4c09759ad421 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:5a:49:a2:ac:7c:40:2c:44:26:e8:d0:df:5e: 6f:b5:c6:97:cd:07:32:c1:90:63:e0:9f:9d:e9:7e: 80:6e:84:0f:1b:a6:c5:94:19:a6:38:6c:51:bd:51: 67:a6:bd:72:4f:6f:c8:49:ff:ca:d4:97:ea:88:07: 93:94:92:6f:b8:9c:8b:f0:b1:32:68:b6:82:5a:39: ea:00:82:2d:2a:51:89:a1:3d:a6:7f:16:c2:40:16: 76:16:2e:e2:02:ff:a9:6e:59:29:c9:7d:6c:3a:9d: d3:96:89:7e:cb:f8:5a:d6:bd:f0:da:90:ab:86:9b: c2:28:68:b7:e2:ab:41:d3:10:ca:b0:3b:1e:82:ff: d5:6c:b0:30:0d:49:2e:ee:7d:68:e5:3c:71:71:8c: ed:be:ac:b0:bb:ed:ae:16:63:b4:7c:4b:1e:2c:23: 06:2e:61:54:ac:1a:56:81:f2:a2:fb:e4:cf:76:d3: 6d:0f:f2:1a:85:4e:d8:7d:9e:46:7a:45:93:b3:0a: 8a:db:a8:44:3f:ce:21:d1:12:e7:b3:65:ec:de:9c: 55:e9:1b:96:9b:31:3b:b4:7c:69:dc:9e:07:93:ae: dd:d7:7c:85:15:63:bc:bf:be:b5:0c:b2:04:d5:ec: 1c:20:30:3a:14:6d:4b:45:1f:65:4d:46:60:87:c9: 45:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:F3:CD:6F:CF:CF:37:D0:91:60:55:C2:FE:0C:EA:E2:21:EC:B8:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1fe8849b-66cd-4afe-9b0b-970eafad1175/b997d817-4fa0-3f4d-b90b-0646406d600a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1fe8849b-66cd-4afe-9b0b-970eafad1175/1fe8849b-66cd-4afe-9b0b-970eafad1175.crl X509v3 Authority Key Identifier: keyid:BE:A8:20:9C:13:5E:FC:F9:EE:69:98:CE:84:4E:B8:E8:DC:83:F4:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1fe8849b-66cd-4afe-9b0b-970eafad1175.cer sbgp-ipAddrBlock: critical IPv6: 2606:e040::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cd:0f:3f:fe:5f:57:84:12:49:97:09:de:1a:33:04:42:56:0a: 4d:12:9d:ac:9d:c5:1d:44:8b:4d:32:dd:85:55:4f:08:da:8a: a1:9f:5d:b2:fa:e7:28:84:0a:1e:7b:a2:2f:b6:49:c9:a0:99: ce:74:f4:e0:99:71:96:17:36:8f:e5:33:14:62:19:73:91:e5: 1d:74:7d:e8:1d:af:2d:11:60:1f:60:a3:25:eb:55:8d:fc:c4: cb:37:47:95:25:f1:39:59:a9:8c:c3:da:f2:82:cd:2b:8d:b7: 16:cb:2d:4d:eb:91:81:67:2c:9e:b1:0a:ba:d4:39:d3:00:cb: 2a:d6:4d:52:34:dc:ef:ad:c2:c2:ee:1a:2e:ed:f4:b1:79:5c: dc:8d:5c:3f:b4:61:3c:c3:c7:ee:ae:41:9b:0f:0d:c6:92:be: ff:86:ff:ab:10:15:63:5a:a3:5b:e2:09:d2:36:86:ec:36:af: 54:63:b2:c0:d1:0c:dc:48:9c:01:83:73:3f:87:3b:12:2b:94: 52:1b:c9:ce:a6:23:f1:51:dd:b0:4b:5f:0e:ce:9c:5f:bc:7e: 22:2b:04:7e:74:33:5f:9c:5e:55:11:66:04:67:62:98:51:33: 7c:0b:ee:86:95:a3:1e:57:3c:7d:8d:76:a5:33:6a:f8:71:b0: 03:26:b4:e3 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEuE54CitFtw35j8VYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZlODg0OWItNjZjZC00YWZlLTliMGItOTcwZWFmYWQx MTc1MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk M2Y4MjFmNGItMjgyZC00N2MxLTk4NzctNGMwOTc1OWFkNDIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFpJoqx8QCxEJujQ315vtcaXzQcywZBj4J+d 6X6AboQPG6bFlBmmOGxRvVFnpr1yT2/ISf/K1JfqiAeTlJJvuJyL8LEyaLaCWjnq AIItKlGJoT2mfxbCQBZ2Fi7iAv+pblkpyX1sOp3Tlol+y/ha1r3w2pCrhpvCKGi3 4qtB0xDKsDsegv/VbLAwDUku7n1o5TxxcYztvqywu+2uFmO0fEseLCMGLmFUrBpW gfKi++TPdtNtD/IahU7YfZ5GekWTswqK26hEP84h0RLns2Xs3pxV6RuWmzE7tHxp 3J4Hk67d13yFFWO8v761DLIE1ewcIDA6FG1LRR9lTUZgh8lFZwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNvzzW/PzzfQkWBVwv4M6uIh7Lj1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xZmU4 ODQ5Yi02NmNkLTRhZmUtOWIwYi05NzBlYWZhZDExNzUvYjk5N2Q4MTctNGZhMC0z ZjRkLWI5MGItMDY0NjQwNmQ2MDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWZlODg0OWItNjZjZC00YWZlLTli MGItOTcwZWFmYWQxMTc1LzFmZTg4NDliLTY2Y2QtNGFmZS05YjBiLTk3MGVhZmFk MTE3NS5jcmwwHwYDVR0jBBgwFoAUvqggnBNe/PnuaZjOhE646NyD9JUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xZmU4ODQ5Yi02NmNkLTRhZmUtOWIwYi05NzBl YWZhZDExNzUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgbgQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQDNDz/+X1eEEkmXCd4aMwRCVgpNEp2sncUdRItNMt2FVU8I2oqhn12y +ucohAoee6IvtknJoJnOdPTgmXGWFzaP5TMUYhlzkeUddH3oHa8tEWAfYKMl61WN /MTLN0eVJfE5WamMw9rygs0rjbcWyy1N65GBZyyesQq61DnTAMsq1k1SNNzvrcLC 7hou7fSxeVzcjVw/tGE8w8furkGbDw3Gkr7/hv+rEBVjWqNb4gnSNobsNq9UY7LA 0QzcSJwBg3M/hzsSK5RSG8nOpiPxUd2wS18OzpxfvH4iKwR+dDNfnF5VEWYEZ2KY UTN8C+6GlaMeVzx9jXalM2r4cbADJrTj -----END CERTIFICATE-----Generated at Mon Oct 20 11:04:58 2025 by rpki-client