$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2a225908-0718-3d8f-a90a-11a4b96d2b6e.roa File: 2a225908-0718-3d8f-a90a-11a4b96d2b6e.roa (raw, json) Hash identifier: /TmbXWbkTXZPzve02HZoVtPGAvYCImjGj/8kg4qKWZE= Subject key identifier: DD:8F:4D:7B:93:CE:F4:24:42:42:78:30:B9:70:51:75:12:7C:B3:1D Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B89FA2415A46E3EC5AA393EA0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2a225908-0718-3d8f-a90a-11a4b96d2b6e.roa Signing time: Thu 16 Oct 2025 08:37:27 +0000 ROA not before: Thu 16 Oct 2025 08:37:27 +0000 ROA not after: Wed 14 Jan 2026 09:37:27 +0000 asID: 15169 IP address blocks: 2600:1902:1f0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:89:fa:24:15:a4:6e:3e:c5:aa:39:3e:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 16 08:37:27 2025 GMT Not After : Jan 14 09:37:27 2026 GMT Subject: CN=2941a71f-105d-490c-8e28-66903c261053 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c7:81:42:bd:63:ff:78:6a:b4:29:5f:ec:30: 9d:88:ee:cc:15:5d:27:3a:31:44:3c:ce:a9:77:37: 13:0c:76:58:2c:61:40:6b:15:98:4b:00:a1:14:2b: c6:11:2c:15:1e:4b:19:a1:63:4b:f1:5d:35:27:08: 5e:1a:52:e9:cb:8a:11:48:ef:2a:ed:75:df:77:b5: b6:48:d8:ad:f8:b5:a7:cf:83:e9:75:0b:b6:17:f0: 1c:26:56:37:b0:38:71:08:9f:39:b6:e6:6e:0e:59: 7f:9f:96:48:34:71:6c:f8:08:90:ba:b6:c8:68:ae: 18:3a:c4:7c:c9:8e:15:b4:4f:35:c2:f6:b9:bf:18: c6:7c:83:02:c3:fc:8e:2d:34:b8:07:7e:21:02:52: 98:98:c5:0d:f4:54:bf:8f:a1:53:e9:8f:b3:ac:40: 43:1a:1b:52:e7:e6:a9:6b:eb:6b:8f:c2:29:5d:24: 7e:4b:7c:b7:04:a8:86:10:17:a3:25:8e:5c:c8:df: 44:2c:f7:ce:5b:23:fe:63:65:b2:5b:89:8a:38:81: 71:21:23:bc:e4:28:88:30:7a:ac:00:94:54:63:5c: fb:d1:d1:27:75:15:2d:f9:e8:74:be:12:db:d9:09: 1e:d2:e1:dd:9b:7f:ca:d5:d1:6d:ab:ed:8f:2f:82: b3:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:8F:4D:7B:93:CE:F4:24:42:42:78:30:B9:70:51:75:12:7C:B3:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2a225908-0718-3d8f-a90a-11a4b96d2b6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv6: 2600:1902:1f0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:c4:53:07:e6:e6:d5:3e:5f:5b:ea:9d:96:34:b4:b1:e2:4c: cb:d4:b4:5b:e2:0b:33:f4:4d:19:d1:e3:db:11:37:92:26:5a: 64:72:09:fc:ce:11:fe:1f:e5:da:a7:43:72:5f:8a:83:2a:96: 26:16:d9:98:23:e1:2d:fa:98:2a:ea:86:5e:79:31:56:65:9b: 4e:63:78:6a:6d:75:ba:9b:77:96:96:ff:0a:ad:9d:02:61:0f: 81:08:e0:9a:76:23:04:89:f5:87:e7:a2:95:08:60:59:d5:0d: 18:76:56:6b:0e:40:74:44:40:3c:9f:5e:7d:9e:90:61:ed:e7: 25:70:b9:83:4a:75:0b:74:42:c4:93:d1:7c:fb:d8:14:66:0b: e5:4c:e8:ba:70:fd:fd:43:fb:35:f6:62:28:10:50:2f:11:93: fa:f0:89:92:ee:30:1a:cd:b6:95:ec:23:7b:c3:3f:f1:82:68: c9:0c:81:9c:03:e0:f5:93:ed:c0:33:51:b0:31:31:78:e1:0a: 24:e1:7d:cd:99:e3:7f:f8:23:1d:f2:89:99:44:59:d1:fb:5f: 5f:4e:0d:3a:f9:dd:50:66:74:35:f9:14:ba:73:b6:3f:44:ce: ca:4d:f6:da:76:28:48:a5:d6:0c:cd:66:90:bc:71:e7:75:fc: 18:46:16:4e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuJ+iQVpG4+xao5PqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAxNjA4MzcyN1oXDTI2MDExNDA5MzcyN1owLzEtMCsGA1UEAxMk Mjk0MWE3MWYtMTA1ZC00OTBjLThlMjgtNjY5MDNjMjYxMDUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsceBQr1j/3hqtClf7DCdiO7MFV0nOjFEPM6p dzcTDHZYLGFAaxWYSwChFCvGESwVHksZoWNL8V01JwheGlLpy4oRSO8q7XXfd7W2 SNit+LWnz4PpdQu2F/AcJlY3sDhxCJ85tuZuDll/n5ZINHFs+AiQurbIaK4YOsR8 yY4VtE81wva5vxjGfIMCw/yOLTS4B34hAlKYmMUN9FS/j6FT6Y+zrEBDGhtS5+ap a+trj8IpXSR+S3y3BKiGEBejJY5cyN9ELPfOWyP+Y2WyW4mKOIFxISO85CiIMHqs AJRUY1z70dEndRUt+eh0vhLb2Qke0uHdm3/K1dFtq+2PL4KzkQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFN2PTXuTzvQkQkJ4MLlwUXUSfLMdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMmEyMjU5MDgtMDcxOC0z ZDhmLWE5MGEtMTFhNGI5NmQyYjZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAZAgHw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJrEUwfm5tU+X1vqnZY0tLHiTMvUtFviCzP0TRnR49sRN5ImWmRy CfzOEf4f5dqnQ3JfioMqliYW2Zgj4S36mCrqhl55MVZlm05jeGptdbqbd5aW/wqt nQJhD4EI4Jp2IwSJ9YfnopUIYFnVDRh2VmsOQHREQDyfXn2ekGHt5yVwuYNKdQt0 QsST0Xz72BRmC+VM6Lpw/f1D+zX2YigQUC8Rk/rwiZLuMBrNtpXsI3vDP/GCaMkM gZwD4PWT7cAzUbAxMXjhCiThfc2Z43/4Ix3yiZlEWdH7X19ODTr53VBmdDX5FLpz tj9EzspN9tp2KEil1gzNZpC8ced1/BhGFk4= -----END CERTIFICATE-----Generated at Mon Oct 20 14:52:04 2025 by rpki-client