$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/dd3a8e26-dc67-3512-aeb7-02c76611567c.roa File: dd3a8e26-dc67-3512-aeb7-02c76611567c.roa (raw, json) Hash identifier: TrgjSIWXJmkZMF/B9ixOhCrcFX/XVaSch/bt/RzgBH4= Subject key identifier: 2B:09:C6:86:0F:CA:33:B1:77:FB:6C:90:97:11:A8:B2:D2:1E:49:A0 Certificate issuer: /CN=3d291b6a-1b30-4fc0-b1dd-582ab98347d6 Certificate serial: 010D0C9F4328584B7A0C5DEA95B4182247F5CE00 Authority key identifier: BC:F7:6D:C8:7E:F4:7A:0B:B2:C7:B8:46:A4:17:5E:45:ED:F8:72:11 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/dd3a8e26-dc67-3512-aeb7-02c76611567c.roa Signing time: Fri 10 Oct 2025 15:41:14 +0000 ROA not before: Fri 10 Oct 2025 15:41:14 +0000 ROA not after: Thu 08 Jan 2026 16:41:14 +0000 asID: 13371 IP address blocks: 2600:2704:100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7a:0c:5d:ea:95:b4:18:22:47:f5:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d291b6a-1b30-4fc0-b1dd-582ab98347d6 Validity Not Before: Oct 10 15:41:14 2025 GMT Not After : Jan 8 16:41:14 2026 GMT Subject: CN=e64498fa-522d-4934-a2f6-3e77ff9190ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:1f:1e:f2:bf:a9:f3:a1:3d:88:cf:39:2c:70: 24:f1:84:7e:03:8f:df:71:d0:50:1d:b1:b1:b2:f9: 0b:dd:d1:f6:3d:64:3a:3c:cc:c9:68:1f:54:1a:95: 7c:b9:3d:6a:c7:22:e9:b6:ce:3d:60:8a:ef:8d:2c: b0:69:2b:8b:ba:ee:74:e2:65:ca:4f:96:08:0f:17: 63:95:e9:8f:51:f9:9f:ab:70:95:c8:08:9a:90:08: 9f:4d:cc:82:38:55:fc:27:74:ba:00:09:fa:81:ec: a9:ab:b1:f9:46:a8:d5:f0:a2:80:8b:4f:ed:44:7a: 67:15:fd:a6:ac:70:1a:b1:c5:9c:16:90:2a:d9:e5: 55:98:6f:12:39:bb:32:3c:4f:6a:66:18:0e:81:12: f3:fb:f5:8b:88:3b:bd:7d:03:d0:5b:2f:5d:c7:a1: e4:f8:ab:48:ce:08:83:aa:cb:22:1b:a0:93:40:4a: 1d:8a:cb:40:61:04:1e:30:c6:6b:41:2f:fd:4d:88: 1e:0b:ff:af:e8:c0:ff:7d:4f:10:2d:c5:e0:2d:cf: e0:9c:7c:cf:33:5a:4f:71:a7:91:c5:e8:ea:66:b0: bc:6f:ad:fe:28:75:9a:85:96:6d:bc:d5:7f:3e:39: 43:54:d2:cd:2f:4d:c3:25:2c:a0:ff:c8:6f:8b:1c: fb:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:09:C6:86:0F:CA:33:B1:77:FB:6C:90:97:11:A8:B2:D2:1E:49:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/dd3a8e26-dc67-3512-aeb7-02c76611567c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.crl X509v3 Authority Key Identifier: keyid:BC:F7:6D:C8:7E:F4:7A:0B:B2:C7:B8:46:A4:17:5E:45:ED:F8:72:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.cer sbgp-ipAddrBlock: critical IPv6: 2600:2704:100::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:a6:c8:bb:5d:cc:98:95:2d:4e:42:17:30:2c:e5:9d:7b:fc: e1:f5:0c:fe:f7:dc:30:90:72:68:86:6a:6f:a3:2a:94:33:fc: 4f:13:f3:05:2f:59:3f:0c:86:01:99:55:75:d1:af:46:c8:52: 45:b0:cf:2d:93:e7:3d:75:e0:99:4c:0a:a0:33:5c:cd:65:67: b5:ec:5f:46:ed:aa:c2:43:64:0d:5d:cd:7d:26:99:e0:db:a5: f7:21:17:1f:92:2c:af:33:6e:80:f0:70:6f:03:3c:29:08:b4: 32:e2:54:29:f4:e4:ad:a8:c6:06:9e:db:a0:e4:78:0e:52:ca: be:b1:70:c1:10:42:c2:b7:95:a5:d7:96:3f:77:2b:bb:6a:8e: ae:ac:ce:1a:68:60:58:de:43:11:6f:c6:39:36:a3:d2:a9:92: af:f1:84:19:ef:57:02:f0:10:67:f0:da:ca:ef:8e:2d:7b:1f: 37:32:9f:b9:e8:8f:b7:b4:6d:7c:f4:a9:1e:ca:37:4e:2c:4e: 5a:af:c8:50:f4:df:17:6e:b1:86:77:a8:5a:1b:a3:b3:e6:43: a6:6c:51:f9:39:67:6c:98:0a:27:b5:60:38:b8:ac:37:1c:47: 14:17:ad:cd:f8:0e:b5:fb:ce:4f:af:4b:4f:05:ed:05:1f:6c: 82:89:94:46 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt6DF3qlbQYIkf1zgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2QyOTFiNmEtMWIzMC00ZmMwLWIxZGQtNTgyYWI5ODM0 N2Q2MB4XDTI1MTAxMDE1NDExNFoXDTI2MDEwODE2NDExNFowLzEtMCsGA1UEAxMk ZTY0NDk4ZmEtNTIyZC00OTM0LWEyZjYtM2U3N2ZmOTE5MGFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlx8e8r+p86E9iM85LHAk8YR+A4/fcdBQHbGx svkL3dH2PWQ6PMzJaB9UGpV8uT1qxyLpts49YIrvjSywaSuLuu504mXKT5YIDxdj lemPUfmfq3CVyAiakAifTcyCOFX8J3S6AAn6geypq7H5RqjV8KKAi0/tRHpnFf2m rHAascWcFpAq2eVVmG8SObsyPE9qZhgOgRLz+/WLiDu9fQPQWy9dx6Hk+KtIzgiD qssiG6CTQEodistAYQQeMMZrQS/9TYgeC/+v6MD/fU8QLcXgLc/gnHzPM1pPcaeR xejqZrC8b63+KHWahZZtvNV/PjlDVNLNL03DJSyg/8hvixz7swIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCsJxoYPyjOxd/tskJcRqLLSHkmgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zZDI5 MWI2YS0xYjMwLTRmYzAtYjFkZC01ODJhYjk4MzQ3ZDYvZGQzYThlMjYtZGM2Ny0z NTEyLWFlYjctMDJjNzY2MTE1NjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvM2QyOTFiNmEtMWIzMC00ZmMwLWIx ZGQtNTgyYWI5ODM0N2Q2LzNkMjkxYjZhLTFiMzAtNGZjMC1iMWRkLTU4MmFiOTgz NDdkNi5jcmwwHwYDVR0jBBgwFoAUvPdtyH70eguyx7hGpBdeRe34chEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zZDI5MWI2YS0xYjMwLTRmYzAtYjFkZC01ODJh Yjk4MzQ3ZDYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAnBAEA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIamyLtdzJiVLU5CFzAs5Z17/OH1DP733DCQcmiGam+jKpQz/E8T 8wUvWT8MhgGZVXXRr0bIUkWwzy2T5z114JlMCqAzXM1lZ7XsX0btqsJDZA1dzX0m meDbpfchFx+SLK8zboDwcG8DPCkItDLiVCn05K2oxgae26DkeA5Syr6xcMEQQsK3 laXXlj93K7tqjq6szhpoYFjeQxFvxjk2o9Kpkq/xhBnvVwLwEGfw2srvji17Hzcy n7noj7e0bXz0qR7KN04sTlqvyFD03xdusYZ3qFobo7PmQ6ZsUfk5Z2yYCie1YDi4 rDccRxQXrc34DrX7zk+vS08F7QUfbIKJlEY= -----END CERTIFICATE-----Generated at Mon Oct 20 23:38:21 2025 by rpki-client