$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f48dd473-786d-324d-9c4c-b8969d5b5634.roa File: f48dd473-786d-324d-9c4c-b8969d5b5634.roa (raw, json) Hash identifier: +DQt2n/DH70sz96FSSvxQWyJQdIYpcx2p245ULL+a60= Subject key identifier: 4C:F8:AD:06:4C:6E:69:C8:2C:55:86:E2:A8:B5:A4:4D:C9:16:B2:23 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B64CE32770AA3B6A70B90A480 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f48dd473-786d-324d-9c4c-b8969d5b5634.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 36040 IP address blocks: 2600:1900:8010:1000::/52 maxlen: 52 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:32:77:0a:a3:b6:a7:0b:90:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=8a09fce9-a2e2-4320-a34a-b7ac81b3ddc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:df:97:d5:e5:b5:d1:5d:0e:d0:a2:0b:3e:c0: e5:ae:2f:27:d5:54:ef:a9:89:88:af:ed:80:9e:71: 70:9c:3d:75:38:3b:1b:f1:2b:9f:b8:1a:a4:35:73: 73:96:9c:f7:51:1a:78:ac:5d:c2:d8:b9:bf:1f:1d: 86:e0:05:f4:02:cd:f0:52:3e:3f:a4:26:f3:84:c7: 47:b7:05:57:8b:45:f5:47:d6:ea:c4:06:91:9b:38: ed:e4:e2:fe:28:01:ba:e5:82:dc:56:07:18:b0:82: 84:5c:be:47:cd:13:e0:ee:b2:07:51:9c:89:4b:61: b0:c9:82:96:1c:11:33:05:75:87:bd:b1:90:34:f4: db:0c:0c:9c:af:d2:f9:dc:b4:3b:ea:9f:d0:fe:49: a0:8f:89:47:14:37:29:3c:63:c0:99:9f:25:93:b4: 0e:b8:78:96:93:a3:22:a3:f7:f0:bb:d4:fe:83:d8: 3a:66:65:a6:7a:62:16:70:5d:7c:c5:99:73:44:f6: 8a:fb:2c:28:eb:31:23:14:96:b0:24:ff:21:25:a4: e8:86:8f:b6:fe:e1:53:df:33:c7:b5:cb:3a:89:a4: 01:8d:cd:9d:17:99:a5:59:52:1a:15:ae:49:57:a9: 02:16:e3:6d:ba:58:6b:ff:ac:d8:4f:d4:75:dd:a7: fe:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:F8:AD:06:4C:6E:69:C8:2C:55:86:E2:A8:B5:A4:4D:C9:16:B2:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f48dd473-786d-324d-9c4c-b8969d5b5634.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv6: 2600:1900:8010:1000::/52 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:2e:f5:7a:6a:f3:37:95:72:56:01:a7:09:61:74:2f:eb:9e: d2:89:e1:ca:c3:a0:91:e5:66:49:53:d7:4a:52:1e:c9:2c:e5: 40:bd:24:51:77:89:0b:ed:25:e3:7a:34:b2:8b:82:62:1b:7e: d1:90:de:70:58:7b:d2:f7:b5:36:95:4f:84:85:57:d9:41:d1: d1:40:8f:ce:77:53:39:f5:9f:30:0f:79:2e:27:a8:09:61:be: b7:5e:61:c0:9f:6e:77:6c:a9:c1:a4:19:16:f7:1d:e6:58:b5: 53:cb:fd:fc:ed:73:52:9a:17:f8:08:d0:ba:f8:41:bf:6f:4b: 36:ef:39:52:a7:0d:a5:e2:1e:5b:73:04:22:37:1a:e8:c8:db: 8b:dd:3c:7a:62:af:d4:09:ee:63:e2:a3:78:9d:5b:95:e0:b8: 94:4c:88:72:1f:47:9a:9e:b6:4a:da:d5:db:17:18:7b:6d:03: e8:71:f3:54:a0:0d:10:37:7d:b5:6c:83:37:9a:cd:95:f9:e8: ef:92:ab:65:50:9f:e0:01:7d:c6:f1:9b:af:bb:c6:d4:af:94: 71:79:87:66:e9:eb:b8:f4:13:0e:5f:42:ed:66:f5:fe:5e:c0: 1f:38:bb:b1:52:0e:cf:1f:0c:77:dd:bd:6d:43:64:12:cf:e0: c0:b3:50:0b -----BEGIN CERTIFICATE----- MIIGRzCCBS+gAwIBAgIUAQ0Mn0MoWEtkzjJ3CqO2pwuQpIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk OGEwOWZjZTktYTJlMi00MzIwLWEzNGEtYjdhYzgxYjNkZGMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqN+X1eW10V0O0KILPsDlri8n1VTvqYmIr+2A nnFwnD11ODsb8SufuBqkNXNzlpz3URp4rF3C2Lm/Hx2G4AX0As3wUj4/pCbzhMdH twVXi0X1R9bqxAaRmzjt5OL+KAG65YLcVgcYsIKEXL5HzRPg7rIHUZyJS2GwyYKW HBEzBXWHvbGQNPTbDAycr9L53LQ76p/Q/kmgj4lHFDcpPGPAmZ8lk7QOuHiWk6Mi o/fwu9T+g9g6ZmWmemIWcF18xZlzRPaK+ywo6zEjFJawJP8hJaToho+2/uFT3zPH tcs6iaQBjc2dF5mlWVIaFa5JV6kCFuNtulhr/6zYT9R13af+PwIDAQABo4IDWTCC A1UwHQYDVR0OBBYEFEz4rQZMbmnILFWG4qi1pE3JFrIjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZjQ4ZGQ0NzMtNzg2ZC0z MjRkLTljNGMtYjg5NjlkNWI1NjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMCMGCCsGAQUFBwEHAQH/BBQwEjAQBAIAAjAKAwgEJgAZAIAQ EDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3 DQEBCwUAA4IBAQCALvV6avM3lXJWAacJYXQv657SieHKw6CR5WZJU9dKUh7JLOVA vSRRd4kL7SXjejSyi4JiG37RkN5wWHvS97U2lU+EhVfZQdHRQI/Od1M59Z8wD3ku J6gJYb63XmHAn253bKnBpBkW9x3mWLVTy/387XNSmhf4CNC6+EG/b0s27zlSpw2l 4h5bcwQiNxroyNuL3Tx6Yq/UCe5j4qN4nVuV4LiUTIhyH0eanrZK2tXbFxh7bQPo cfNUoA0QN321bIM3ms2V+ejvkqtlUJ/gAX3G8Zuvu8bUr5RxeYdm6eu49BMOX0Lt ZvX+XsAfOLuxUg7PHwx33b1tQ2QSz+DAs1AL -----END CERTIFICATE-----Generated at Mon Oct 20 10:38:59 2025 by rpki-client