$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a8e74b12-a35c-3b9b-95cd-83f5fb4427c0.roa File: a8e74b12-a35c-3b9b-95cd-83f5fb4427c0.roa (raw, json) Hash identifier: b2M7FRucO85b8ti87oCpJJBQZ91/Fjmd5NsWV5qlZRI= Subject key identifier: FF:18:32:81:97:29:F3:ED:35:FB:D0:63:B7:B1:75:D7:05:55:BE:F6 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B89FBF6E03F47A8DC5FC8C280 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a8e74b12-a35c-3b9b-95cd-83f5fb4427c0.roa Signing time: Thu 16 Oct 2025 08:41:07 +0000 ROA not before: Thu 16 Oct 2025 08:41:07 +0000 ROA not after: Wed 14 Jan 2026 09:41:07 +0000 asID: 19527 IP address blocks: 2600:1902:b0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:89:fb:f6:e0:3f:47:a8:dc:5f:c8:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 16 08:41:07 2025 GMT Not After : Jan 14 09:41:07 2026 GMT Subject: CN=a120faf5-87fd-4491-93d6-3fa334e093e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:0d:a9:27:35:0c:de:a0:3e:ea:16:68:5b:d5: f2:fc:9e:51:d0:f0:f1:9b:ae:0a:77:9c:9f:06:6a: d7:9c:de:f4:da:95:93:cb:a3:af:c1:2c:d6:16:07: cd:87:a0:07:13:0f:9d:0c:85:4c:f7:f6:1c:82:df: 6d:3c:8e:5b:23:54:db:e7:27:4b:c8:ac:19:58:0c: f5:9f:0d:44:23:ea:e7:0a:e8:47:41:5e:10:13:ab: 86:e9:5e:b6:52:18:4d:8d:a5:95:e5:94:d8:93:0a: e2:af:56:e7:8d:30:fe:31:49:03:aa:ce:02:7f:fa: 5f:c8:15:ee:7b:14:93:3b:e9:25:12:1c:88:8f:70: d7:e6:24:3d:51:02:a9:5d:21:bb:bb:f9:90:bc:46: f3:ed:30:f6:5f:b8:b1:71:68:e4:77:1d:34:d6:b2: bb:a1:36:2b:ed:f4:28:96:82:7f:d0:c5:90:8d:c1: b7:83:d1:14:e7:97:c9:a6:27:cc:5d:68:db:e6:44: 7a:fb:b6:70:85:ce:d7:41:55:3c:d3:ec:06:b6:ac: 0b:ea:09:3e:9b:b2:0d:ac:2b:60:79:ea:f8:e0:3d: ae:54:48:27:64:65:ba:94:62:e6:2f:af:dc:a9:07: 65:ca:c2:22:57:0d:da:71:e2:04:97:26:c3:3e:7f: 46:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:18:32:81:97:29:F3:ED:35:FB:D0:63:B7:B1:75:D7:05:55:BE:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a8e74b12-a35c-3b9b-95cd-83f5fb4427c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv6: 2600:1902:b0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:78:08:61:06:f8:06:c7:7f:4e:b6:62:a0:42:17:7d:43:0c: c5:a6:28:ce:8f:33:8c:f4:a8:f9:60:95:a7:69:76:45:cb:92: f8:96:f5:f0:0d:1e:25:c1:78:fe:fa:c1:f0:20:48:8d:a2:86: d7:27:7b:94:4c:ef:7c:ec:a2:58:64:56:df:27:30:f2:1b:b2: 14:84:55:7b:ea:21:e7:6d:5e:d0:fc:ab:f7:b1:bf:89:5b:84: 0e:db:9f:71:18:50:a6:e2:6b:c7:b8:61:3e:7b:07:da:3f:4c: 30:7b:60:41:60:5b:04:a5:77:12:c0:79:5f:2d:76:ba:f7:8c: 4a:f8:35:47:af:1d:4a:eb:dd:ed:3a:f9:7e:c9:6e:90:72:9e: 1d:6d:62:72:20:6a:1c:04:35:23:aa:3d:16:61:c8:70:da:45: c2:21:66:8f:55:a9:fa:e7:8f:89:ce:3b:5a:49:38:2d:31:39: e2:0c:44:42:ea:8a:8d:8e:50:10:a2:43:28:35:f4:af:01:7e: 6f:81:65:72:c8:1e:fd:86:0d:16:c5:06:c2:40:f8:13:9a:49: af:8e:c0:7a:12:1b:8b:9a:20:4e:45:72:36:1b:71:9d:15:01: b8:1a:90:f9:a6:86:65:d8:13:70:7d:07:94:90:f2:cb:b7:bc: 6f:e3:b1:04 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuJ+/bgP0eo3F/IwoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAxNjA4NDEwN1oXDTI2MDExNDA5NDEwN1owLzEtMCsGA1UEAxMk YTEyMGZhZjUtODdmZC00NDkxLTkzZDYtM2ZhMzM0ZTA5M2UyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQ2pJzUM3qA+6hZoW9Xy/J5R0PDxm64Kd5yf BmrXnN702pWTy6OvwSzWFgfNh6AHEw+dDIVM9/Ycgt9tPI5bI1Tb5ydLyKwZWAz1 nw1EI+rnCuhHQV4QE6uG6V62UhhNjaWV5ZTYkwrir1bnjTD+MUkDqs4Cf/pfyBXu exSTO+klEhyIj3DX5iQ9UQKpXSG7u/mQvEbz7TD2X7ixcWjkdx001rK7oTYr7fQo loJ/0MWQjcG3g9EU55fJpifMXWjb5kR6+7Zwhc7XQVU80+wGtqwL6gk+m7INrCtg eer44D2uVEgnZGW6lGLmL6/cqQdlysIiVw3aceIElybDPn9GpwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFP8YMoGXKfPtNfvQY7exddcFVb72MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYThlNzRiMTItYTM1Yy0z YjliLTk1Y2QtODNmNWZiNDQyN2MwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAZAgCw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAJ4CGEG+AbHf062YqBCF31DDMWmKM6PM4z0qPlgladpdkXLkviW 9fANHiXBeP76wfAgSI2ihtcne5RM73zsolhkVt8nMPIbshSEVXvqIedtXtD8q/ex v4lbhA7bn3EYUKbia8e4YT57B9o/TDB7YEFgWwSldxLAeV8tdrr3jEr4NUevHUrr 3e06+X7JbpBynh1tYnIgahwENSOqPRZhyHDaRcIhZo9Vqfrnj4nOO1pJOC0xOeIM RELqio2OUBCiQyg19K8Bfm+BZXLIHv2GDRbFBsJA+BOaSa+OwHoSG4uaIE5FcjYb cZ0VAbgakPmmhmXYE3B9B5SQ8su3vG/jsQQ= -----END CERTIFICATE-----Generated at Mon Oct 20 06:08:01 2025 by rpki-client