$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fa40868f-e37c-303f-ab7a-ce63a9fbb9f0.roa File: fa40868f-e37c-303f-ab7a-ce63a9fbb9f0.roa (raw, json) Hash identifier: 7ibyiREAID59GMUMLCqzE+rMfhuwCOcG8i+ylmCmNo4= Subject key identifier: 81:DF:2E:00:59:44:AC:7B:DF:E2:A1:D3:F9:E4:F4:6F:08:23:CE:F8 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B89FADF80E0D991C66CB1C700 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fa40868f-e37c-303f-ab7a-ce63a9fbb9f0.roa Signing time: Thu 16 Oct 2025 08:38:55 +0000 ROA not before: Thu 16 Oct 2025 08:38:55 +0000 ROA not after: Wed 14 Jan 2026 09:38:55 +0000 asID: 19527 IP address blocks: 2600:1902:a0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:89:fa:df:80:e0:d9:91:c6:6c:b1:c7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 16 08:38:55 2025 GMT Not After : Jan 14 09:38:55 2026 GMT Subject: CN=a0794583-36a0-4b29-8f4a-d1a19402dfc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:01:1d:f2:48:17:94:01:2c:ea:ae:f0:bd:fe: 52:bf:58:97:f9:6d:07:4c:9c:47:67:4b:cc:41:2a: 99:4c:aa:17:35:52:4e:e0:e0:55:41:36:e1:b4:57: f3:50:dd:e6:23:76:3a:67:1b:76:49:42:9b:4f:33: ef:13:41:f0:cc:05:82:d3:99:96:da:c6:ab:26:ab: 2c:df:3e:d6:95:b7:0e:36:5a:f2:f3:21:66:32:e1: 81:66:d2:27:23:e3:f9:d1:0d:e9:0c:96:bf:89:6d: be:77:70:ab:a1:d9:80:97:35:b4:b8:34:f4:c2:f5: ac:2b:37:3f:90:23:ab:40:68:0c:5c:5c:4b:dc:b7: 5d:a9:24:20:15:d6:96:94:00:c0:a7:ed:e6:08:a2: ca:92:b8:d2:28:6c:80:22:ac:8a:1c:fa:da:37:95: 96:8f:d9:7c:29:0f:62:cb:12:5e:57:db:d6:37:23: 98:d2:aa:be:b9:53:47:4a:43:a4:30:2a:7d:a6:47: e2:8f:10:8d:65:4b:9b:97:02:73:e0:13:9f:45:4f: 1a:2c:87:62:74:be:5a:45:21:e4:65:9e:7b:a4:0a: e0:0e:26:24:50:1b:c7:a2:ae:d0:03:77:6a:bd:65: af:e9:e2:92:4f:44:e2:be:95:41:c6:a4:ad:59:19: e3:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:DF:2E:00:59:44:AC:7B:DF:E2:A1:D3:F9:E4:F4:6F:08:23:CE:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fa40868f-e37c-303f-ab7a-ce63a9fbb9f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv6: 2600:1902:a0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:74:d2:29:2e:a5:68:74:ba:69:7d:fc:b4:21:6f:44:95:1a: 38:13:34:23:72:25:19:19:1d:fd:9d:b1:11:55:39:01:cc:7e: 35:88:27:aa:58:8d:3a:92:a7:1a:06:8d:cd:e0:c8:c4:48:86: 53:50:11:22:42:67:3e:cb:59:06:71:36:24:03:6d:fd:ae:9d: d6:b5:de:1f:a9:e5:c9:de:5b:57:b7:71:37:4e:a1:5c:85:15: 76:74:b4:16:c7:e7:79:a9:2f:62:f6:7a:e1:41:51:88:2f:91: 1f:5b:4a:58:c9:95:58:fe:38:96:cf:65:6e:92:4b:0b:b7:93: a6:54:63:df:df:ea:73:5e:8f:41:21:9b:56:08:bc:12:c3:d1: 56:4a:88:21:dc:9e:7d:5b:95:81:81:4b:bc:f4:56:c1:31:11: d9:63:13:cc:56:72:29:71:42:e3:10:26:8d:1d:27:c8:06:90: 15:0e:d4:e5:ec:d1:22:50:99:54:81:19:ed:03:19:3a:46:b1: 01:50:db:42:46:22:56:53:26:42:af:21:0f:de:60:ad:eb:c5: a8:1c:97:b2:7e:54:34:64:f2:62:49:84:a7:84:b6:c3:82:f2: 08:c2:64:d8:30:c7:00:a1:37:c3:8a:3f:23:c8:a3:e7:95:31: 30:ae:67:d2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuJ+t+A4NmRxmyxxwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAxNjA4Mzg1NVoXDTI2MDExNDA5Mzg1NVowLzEtMCsGA1UEAxMk YTA3OTQ1ODMtMzZhMC00YjI5LThmNGEtZDFhMTk0MDJkZmMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgEd8kgXlAEs6q7wvf5Sv1iX+W0HTJxHZ0vM QSqZTKoXNVJO4OBVQTbhtFfzUN3mI3Y6Zxt2SUKbTzPvE0HwzAWC05mW2sarJqss 3z7WlbcONlry8yFmMuGBZtInI+P50Q3pDJa/iW2+d3CrodmAlzW0uDT0wvWsKzc/ kCOrQGgMXFxL3LddqSQgFdaWlADAp+3mCKLKkrjSKGyAIqyKHPraN5WWj9l8KQ9i yxJeV9vWNyOY0qq+uVNHSkOkMCp9pkfijxCNZUublwJz4BOfRU8aLIdidL5aRSHk ZZ57pArgDiYkUBvHoq7QA3dqvWWv6eKST0TivpVBxqStWRnj8QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIHfLgBZRKx73+Kh0/nk9G8II874MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZmE0MDg2OGYtZTM3Yy0z MDNmLWFiN2EtY2U2M2E5ZmJiOWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAZAgCg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJN00ikupWh0uml9/LQhb0SVGjgTNCNyJRkZHf2dsRFVOQHMfjWI J6pYjTqSpxoGjc3gyMRIhlNQESJCZz7LWQZxNiQDbf2unda13h+p5cneW1e3cTdO oVyFFXZ0tBbH53mpL2L2euFBUYgvkR9bSljJlVj+OJbPZW6SSwu3k6ZUY9/f6nNe j0Ehm1YIvBLD0VZKiCHcnn1blYGBS7z0VsExEdljE8xWcilxQuMQJo0dJ8gGkBUO 1OXs0SJQmVSBGe0DGTpGsQFQ20JGIlZTJkKvIQ/eYK3rxagcl7J+VDRk8mJJhKeE tsOC8gjCZNgwxwChN8OKPyPIo+eVMTCuZ9I= -----END CERTIFICATE-----Generated at Mon Oct 20 11:13:58 2025 by rpki-client