$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/5be2e925-6eeb-349e-ad3e-ab3178d20506.roa File: 5be2e925-6eeb-349e-ad3e-ab3178d20506.roa (raw, json) Hash identifier: lxDMzX1tmV1mPOuQpDG+JlzPPfzxoxaj4eIky69hRZU= Subject key identifier: 8C:99:35:1D:D9:4F:1D:20:0B:2C:A0:8A:08:9C:AA:23:E5:7F:49:B1 Certificate issuer: /CN=208edf3a-73a5-4614-9c76-5702d5c88977 Certificate serial: 010D0C9F4328584B41E70BF22012FA8606F0BB00 Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/5be2e925-6eeb-349e-ad3e-ab3178d20506.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 398549 IP address blocks: 2605:dd40:8333::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:0b:f2:20:12:fa:86:06:f0:bb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=fba130e5-0706-4db3-b8b5-2e9a264b1b2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ea:6a:80:bc:4d:32:f6:87:f0:0e:e9:be:a4: 89:d5:0a:50:3d:87:9a:a9:47:26:93:29:e1:44:e4: cf:22:7e:b8:22:84:d4:51:06:08:c8:88:ba:87:31: e6:1d:ab:80:05:7f:10:56:c7:38:56:6b:0b:a9:0d: 74:c1:9b:d9:e7:e8:e3:ec:7e:52:3b:f6:f5:3e:b2: c9:7d:93:e1:b7:51:a8:df:35:42:de:31:c8:a8:e4: 3f:b1:7c:7a:5e:8a:c4:05:9b:21:1e:65:62:35:a4: 99:f0:82:40:45:39:01:04:93:99:40:71:ca:38:9b: e5:f3:f1:c0:43:e4:e6:35:20:18:29:70:8c:e1:fe: 87:9a:d6:ec:9e:03:2a:e7:10:64:0a:a5:51:4b:60: 42:28:1c:f5:3e:38:7b:ad:84:d1:a2:d2:de:4b:48: f3:82:af:2e:49:c9:63:76:45:ab:66:1c:da:a0:46: 15:e6:bf:1d:a7:20:5b:2d:2f:30:0a:bc:a6:42:94: ef:4d:ef:a8:a8:26:5d:7a:39:f6:07:c8:b0:8c:6f: 2e:12:b2:fc:a8:72:bb:34:9e:f9:1d:5c:17:77:bf: 80:6a:0e:e5:f5:e6:64:aa:12:d1:30:20:d3:e1:12: c9:23:a8:16:69:07:d3:58:84:29:d3:a6:48:76:b6: d2:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:99:35:1D:D9:4F:1D:20:0B:2C:A0:8A:08:9C:AA:23:E5:7F:49:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/5be2e925-6eeb-349e-ad3e-ab3178d20506.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl X509v3 Authority Key Identifier: keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer sbgp-ipAddrBlock: critical IPv6: 2605:dd40:8333::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:78:0e:7c:69:36:43:2b:79:e1:b0:19:0d:a4:73:cd:2b:8b: 70:15:a7:60:fc:e8:36:56:57:a0:3d:6f:34:91:f6:4e:21:0a: ac:c6:83:45:29:18:e7:36:56:c5:0e:57:41:4d:3e:d1:fd:97: 38:63:14:13:50:a3:95:12:a9:5a:c5:e7:21:87:4d:d6:75:08: 84:41:41:4f:14:8a:21:1e:be:c9:d9:26:f8:31:f3:5e:42:44: e7:6f:07:6b:ec:d5:82:89:b2:a6:c4:bc:b9:a6:b3:20:a0:3f: e5:73:8d:0f:6d:de:77:61:63:89:5e:02:b7:61:07:b4:c8:0f: 5a:43:d5:29:43:5f:d2:f1:3e:0f:71:9b:f1:10:7a:36:a4:e9: 3c:ba:c5:8c:84:4e:5f:d8:9f:63:80:12:b3:eb:3e:10:9f:5d: ad:e0:88:7e:91:4e:18:c4:be:36:36:83:a6:1c:19:a9:ad:5c: f1:7e:60:f0:f6:19:21:76:63:df:06:39:97:c4:68:10:fb:2d: 48:29:b2:42:46:b9:a0:85:29:d2:1a:f0:5f:9f:56:b7:e5:16: 95:71:0b:af:64:7b:ca:2f:dd:50:e4:a1:bf:b2:21:b5:08:52: 8c:f1:86:36:43:93:38:72:28:bf:50:49:6c:97:c1:c0:a6:fe: 46:d9:0e:a5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtB5wvyIBL6hgbwuwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjA4ZWRmM2EtNzNhNS00NjE0LTljNzYtNTcwMmQ1Yzg4 OTc3MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk ZmJhMTMwZTUtMDcwNi00ZGIzLWI4YjUtMmU5YTI2NGIxYjJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlupqgLxNMvaH8A7pvqSJ1QpQPYeaqUcmkynh ROTPIn64IoTUUQYIyIi6hzHmHauABX8QVsc4VmsLqQ10wZvZ5+jj7H5SO/b1PrLJ fZPht1Go3zVC3jHIqOQ/sXx6XorEBZshHmViNaSZ8IJARTkBBJOZQHHKOJvl8/HA Q+TmNSAYKXCM4f6HmtbsngMq5xBkCqVRS2BCKBz1Pjh7rYTRotLeS0jzgq8uSclj dkWrZhzaoEYV5r8dpyBbLS8wCrymQpTvTe+oqCZdejn2B8iwjG8uErL8qHK7NJ75 HVwXd7+Aag7l9eZkqhLRMCDT4RLJI6gWaQfTWIQp06ZIdrbSuQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIyZNR3ZTx0gCyygigicqiPlf0mxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yMDhl ZGYzYS03M2E1LTQ2MTQtOWM3Ni01NzAyZDVjODg5NzcvNWJlMmU5MjUtNmVlYi0z NDllLWFkM2UtYWIzMTc4ZDIwNTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjA4ZWRmM2EtNzNhNS00NjE0LTlj NzYtNTcwMmQ1Yzg4OTc3LzIwOGVkZjNhLTczYTUtNDYxNC05Yzc2LTU3MDJkNWM4 ODk3Ny5jcmwwHwYDVR0jBBgwFoAUjiG5m/w/KlKClNSwhb33vM87VUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yMDhlZGYzYS03M2E1LTQ2MTQtOWM3Ni01NzAy ZDVjODg5NzcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgXdQIMz MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFl4DnxpNkMreeGwGQ2kc80ri3AVp2D86DZWV6A9bzSR9k4hCqzG g0UpGOc2VsUOV0FNPtH9lzhjFBNQo5USqVrF5yGHTdZ1CIRBQU8UiiEevsnZJvgx 815CROdvB2vs1YKJsqbEvLmmsyCgP+VzjQ9t3ndhY4leArdhB7TID1pD1SlDX9Lx Pg9xm/EQejak6Ty6xYyETl/Yn2OAErPrPhCfXa3giH6RThjEvjY2g6YcGamtXPF+ YPD2GSF2Y98GOZfEaBD7LUgpskJGuaCFKdIa8F+fVrflFpVxC69ke8ov3VDkob+y IbUIUozxhjZDkzhyKL9QSWyXwcCm/kbZDqU= -----END CERTIFICATE-----Generated at Mon Oct 20 08:00:20 2025 by rpki-client