$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c8bba2a4-1576-37a2-b38b-a97b6f5e1fb4.roa File: c8bba2a4-1576-37a2-b38b-a97b6f5e1fb4.roa (raw, json) Hash identifier: 8D2oonptSteu7tG6ON/8oXM7U1DyiAIwwSvqwcgFY8w= Subject key identifier: 1E:52:C6:F5:E4:18:03:A0:D8:4A:3C:6C:2B:72:72:31:70:71:B2:53 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B89FB1C390F2C9080A00B7360 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c8bba2a4-1576-37a2-b38b-a97b6f5e1fb4.roa Signing time: Thu 16 Oct 2025 08:39:24 +0000 ROA not before: Thu 16 Oct 2025 08:39:24 +0000 ROA not after: Wed 14 Jan 2026 09:39:24 +0000 asID: 15169 IP address blocks: 2600:1902:10::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:89:fb:1c:39:0f:2c:90:80:a0:0b:73:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 16 08:39:24 2025 GMT Not After : Jan 14 09:39:24 2026 GMT Subject: CN=3ef774e0-fa47-4236-9da2-06da87881e82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:a8:a9:5e:8e:66:bb:1b:14:1b:07:9a:3e:58: 54:58:4e:cb:b9:dd:71:0f:f7:b8:bf:48:82:a5:3d: 3a:02:14:ba:b3:78:ab:f3:d2:8b:ce:85:5c:c4:5e: bf:d5:23:8c:0b:0e:ce:dd:aa:9b:63:ef:b3:c8:8b: 2f:4c:d2:d6:29:f0:40:e5:4e:c7:26:0a:b7:f0:72: 34:cf:83:c0:22:d9:e5:13:1a:1f:d0:7f:d6:ca:f2: c5:8a:fb:b2:6e:fd:6c:70:b3:fd:b9:33:d7:18:29: d2:f8:25:77:e7:10:25:1e:20:01:18:37:2d:74:85: f1:3d:89:ca:1a:eb:31:4a:46:71:79:5b:5b:77:0b: d2:34:93:a8:d0:54:d0:cd:f0:15:36:09:29:43:81: 30:d2:49:12:e2:ec:91:a4:7a:79:42:0e:55:99:5a: f0:9d:eb:85:9b:22:c2:ab:5f:aa:49:56:60:2c:c7: f1:77:34:dd:4d:35:98:93:b2:75:c2:4d:c7:9b:2c: 33:b1:24:61:f1:78:76:ce:d2:d8:b6:f6:02:91:de: b7:4d:b1:80:fd:ce:59:15:9b:26:82:1a:77:23:1f: df:a3:5a:44:3e:05:23:81:b6:62:de:eb:77:cf:33: 50:68:0b:16:b2:21:03:52:be:78:49:66:3d:dd:31: 48:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:52:C6:F5:E4:18:03:A0:D8:4A:3C:6C:2B:72:72:31:70:71:B2:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c8bba2a4-1576-37a2-b38b-a97b6f5e1fb4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv6: 2600:1902:10::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:75:65:69:aa:e1:ad:59:a7:bc:8f:9b:71:aa:9e:71:7c:9f: 1e:30:e1:25:bf:e6:91:e2:cc:31:3d:92:aa:4a:b4:b5:27:85: 9c:76:6c:e1:48:95:cc:f3:b3:aa:01:9c:10:34:f1:fe:06:2d: 5b:97:f6:d3:84:65:59:58:e2:40:d0:db:ea:30:ca:ba:7d:fc: 75:91:09:75:ca:59:20:ad:ca:4d:9f:dc:ae:dc:2b:c5:54:7e: 12:d8:a0:a0:52:a6:1f:b3:b7:d4:fc:0e:ff:0c:43:1e:51:49: 0f:d0:8a:87:f1:10:c5:97:aa:b4:c8:58:30:b1:40:be:a3:4d: f2:a6:22:0e:c2:c9:56:02:d5:3f:ff:3b:9f:70:8c:01:81:91: 51:7d:d0:d5:c4:9f:78:16:88:52:87:96:ad:2d:4f:29:52:a8: 8a:62:2e:90:85:57:81:ad:11:3b:07:8a:87:ec:e3:4e:53:bc: 8f:1a:31:0a:75:32:99:b2:b4:cf:8d:ac:0b:72:61:94:ec:01: 7c:f8:00:a1:c1:f3:09:3f:4f:f7:3e:5d:b3:49:a0:93:9a:74: de:d1:a4:26:60:ed:2e:bd:8e:92:4e:66:55:6e:2f:2e:ad:be: a2:57:79:0c:a7:31:95:f8:fa:54:63:66:42:d3:7d:0c:eb:d1: cb:7b:57:41 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuJ+xw5DyyQgKALc2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAxNjA4MzkyNFoXDTI2MDExNDA5MzkyNFowLzEtMCsGA1UEAxMk M2VmNzc0ZTAtZmE0Ny00MjM2LTlkYTItMDZkYTg3ODgxZTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6ipXo5muxsUGweaPlhUWE7Lud1xD/e4v0iC pT06AhS6s3ir89KLzoVcxF6/1SOMCw7O3aqbY++zyIsvTNLWKfBA5U7HJgq38HI0 z4PAItnlExof0H/WyvLFivuybv1scLP9uTPXGCnS+CV35xAlHiABGDctdIXxPYnK GusxSkZxeVtbdwvSNJOo0FTQzfAVNgkpQ4Ew0kkS4uyRpHp5Qg5VmVrwneuFmyLC q1+qSVZgLMfxdzTdTTWYk7J1wk3HmywzsSRh8Xh2ztLYtvYCkd63TbGA/c5ZFZsm ghp3Ix/fo1pEPgUjgbZi3ut3zzNQaAsWsiEDUr54SWY93TFI2QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFB5SxvXkGAOg2Eo8bCtycjFwcbJTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYzhiYmEyYTQtMTU3Ni0z N2EyLWIzOGItYTk3YjZmNWUxZmI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAZAgAQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJd1ZWmq4a1Zp7yPm3GqnnF8nx4w4SW/5pHizDE9kqpKtLUnhZx2 bOFIlczzs6oBnBA08f4GLVuX9tOEZVlY4kDQ2+owyrp9/HWRCXXKWSCtyk2f3K7c K8VUfhLYoKBSph+zt9T8Dv8MQx5RSQ/QiofxEMWXqrTIWDCxQL6jTfKmIg7CyVYC 1T//O59wjAGBkVF90NXEn3gWiFKHlq0tTylSqIpiLpCFV4GtETsHiofs405TvI8a MQp1MpmytM+NrAtyYZTsAXz4AKHB8wk/T/c+XbNJoJOadN7RpCZg7S69jpJOZlVu Ly6tvqJXeQynMZX4+lRjZkLTfQzr0ct7V0E= -----END CERTIFICATE-----Generated at Mon Oct 20 10:00:19 2025 by rpki-client