$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/afac2040-708d-3723-a444-3b0663b57f5b.roa File: afac2040-708d-3723-a444-3b0663b57f5b.roa (raw, json) Hash identifier: wL+sfux/8gKf5/RgpppOtmHGB0qRJTZ0rLAN4XcRDQQ= Subject key identifier: E6:81:44:5B:90:A7:69:CE:5E:F8:8F:99:47:63:20:2C:6B:29:13:BB Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B89FBF4D7D4542FBD004E22E0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/afac2040-708d-3723-a444-3b0663b57f5b.roa Signing time: Thu 16 Oct 2025 08:41:06 +0000 ROA not before: Thu 16 Oct 2025 08:41:06 +0000 ROA not after: Wed 14 Jan 2026 09:41:06 +0000 asID: 15169 IP address blocks: 2600:1902:140::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:89:fb:f4:d7:d4:54:2f:bd:00:4e:22:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 16 08:41:06 2025 GMT Not After : Jan 14 09:41:06 2026 GMT Subject: CN=687e8631-7aa6-4eec-b8ef-78c35003535e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e8:a8:73:66:e1:bf:3c:8a:bb:27:58:27:fd: af:a2:43:69:6e:8e:7a:2b:b7:9a:64:fe:de:f2:1c: c7:b5:b4:3a:19:54:57:d2:ff:8f:b1:dd:0c:f6:4e: 12:74:46:a7:5e:cf:fd:79:5c:68:d1:21:29:af:fc: 92:cb:56:bb:42:59:a8:03:a6:57:89:4d:a2:2b:b2: 2a:6e:2d:a1:55:88:15:17:54:c7:71:07:8f:4e:e5: 40:b0:b5:b0:0b:e8:a0:81:cf:41:98:e6:89:1e:69: 7d:2a:59:22:5d:8a:3b:d0:73:d3:3b:8c:ca:c8:40: 47:d0:aa:f0:04:b8:5c:90:a6:34:52:fe:59:69:ca: 4c:0b:55:b7:15:52:2d:7d:93:ac:8c:8e:21:85:14: 62:b0:9d:8d:14:af:f7:d8:10:e1:04:ac:dd:9b:ba: bc:5f:22:e2:1c:57:03:28:22:eb:b7:1c:e1:9d:21: b3:f3:c4:f9:11:5a:0a:0a:33:46:19:99:ba:0e:2f: 34:bf:e4:dd:f8:b8:34:dd:48:e2:06:72:1e:93:b5: ce:62:4a:c9:a0:3d:45:1c:94:cb:d0:31:41:85:dd: 1b:ef:a4:cd:16:f4:f4:05:7a:bf:a1:21:29:28:c8: 5b:00:31:4b:ad:36:27:0c:b9:2d:61:ec:dd:e0:e5: 24:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:81:44:5B:90:A7:69:CE:5E:F8:8F:99:47:63:20:2C:6B:29:13:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/afac2040-708d-3723-a444-3b0663b57f5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv6: 2600:1902:140::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:f1:59:4a:41:91:9f:d7:71:5f:90:6c:93:ea:c0:ba:ae:2e: 4f:f9:4e:66:b5:a7:80:e0:a2:2c:02:6c:bc:ae:a2:6d:7e:1d: 4a:3d:fb:45:45:4b:67:d1:99:e7:8d:45:14:30:f9:b4:bd:88: 14:2d:af:65:ee:3c:04:33:5c:2c:96:e7:d4:f6:c6:a2:bf:1b: d3:6f:25:e8:54:e6:68:a0:62:d0:78:40:b0:2d:05:c3:34:28: af:79:da:b0:a8:5a:37:cc:61:fc:99:c5:9f:54:fb:c9:bb:ef: f1:f9:27:57:4d:6f:b3:91:e1:f8:45:b5:fd:8b:b0:97:d8:0d: 68:f1:bf:22:b5:2b:1b:b0:81:21:e2:b7:50:7e:73:a6:fc:4d: d4:e0:65:af:55:0b:fd:c0:f9:bf:a2:2d:04:ba:50:88:aa:ba: 3d:f5:ba:cb:a6:e4:15:b0:35:83:b1:ca:c1:8d:bc:56:0b:38: 04:64:3c:19:f8:af:82:7c:cd:b9:e4:22:d6:67:2f:35:30:39: 4d:cf:14:de:44:37:8e:ff:63:54:87:62:e3:13:4c:74:55:bd: 30:56:91:b6:87:42:cf:61:ae:80:55:96:06:ac:cf:75:d9:aa: cb:10:b9:38:be:b8:67:40:00:6e:bb:92:8c:64:e0:e1:6d:96: 4d:cf:35:02 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuJ+/TX1FQvvQBOIuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAxNjA4NDEwNloXDTI2MDExNDA5NDEwNlowLzEtMCsGA1UEAxMk Njg3ZTg2MzEtN2FhNi00ZWVjLWI4ZWYtNzhjMzUwMDM1MzVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouioc2bhvzyKuydYJ/2vokNpbo56K7eaZP7e 8hzHtbQ6GVRX0v+Psd0M9k4SdEanXs/9eVxo0SEpr/ySy1a7QlmoA6ZXiU2iK7Iq bi2hVYgVF1THcQePTuVAsLWwC+iggc9BmOaJHml9KlkiXYo70HPTO4zKyEBH0Krw BLhckKY0Uv5ZacpMC1W3FVItfZOsjI4hhRRisJ2NFK/32BDhBKzdm7q8XyLiHFcD KCLrtxzhnSGz88T5EVoKCjNGGZm6Di80v+Td+Lg03UjiBnIek7XOYkrJoD1FHJTL 0DFBhd0b76TNFvT0BXq/oSEpKMhbADFLrTYnDLktYezd4OUkRQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOaBRFuQp2nOXviPmUdjICxrKRO7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYWZhYzIwNDAtNzA4ZC0z NzIzLWE0NDQtM2IwNjYzYjU3ZjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAZAgFA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHjxWUpBkZ/XcV+QbJPqwLquLk/5Tma1p4DgoiwCbLyuom1+HUo9 +0VFS2fRmeeNRRQw+bS9iBQtr2XuPAQzXCyW59T2xqK/G9NvJehU5migYtB4QLAt BcM0KK952rCoWjfMYfyZxZ9U+8m77/H5J1dNb7OR4fhFtf2LsJfYDWjxvyK1Kxuw gSHit1B+c6b8TdTgZa9VC/3A+b+iLQS6UIiquj31usum5BWwNYOxysGNvFYLOARk PBn4r4J8zbnkItZnLzUwOU3PFN5EN47/Y1SHYuMTTHRVvTBWkbaHQs9hroBVlgas z3XZqssQuTi+uGdAAG67koxk4OFtlk3PNQI= -----END CERTIFICATE-----Generated at Mon Oct 20 02:05:56 2025 by rpki-client