$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/331beef2-1596-4a21-8613-1e84adac3bfc/8a3d4aac-7add-344d-a542-a96f905f7cdc.roa File: 8a3d4aac-7add-344d-a542-a96f905f7cdc.roa (raw, json) Hash identifier: cDgbUXMmR/Xpb42vJ1j5Y8h0eC03vBYgduQT895fKt0= Subject key identifier: 34:7B:80:A6:CF:23:0C:5C:B6:7C:AA:94:26:69:F2:FA:81:40:14:93 Certificate issuer: /CN=331beef2-1596-4a21-8613-1e84adac3bfc Certificate serial: 010D0C9F4328584B9442294000F0850C1F19FEC0 Authority key identifier: 3B:E4:68:FF:DA:73:F9:C2:E4:D5:7B:A3:9B:D2:15:B6:13:68:91:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/331beef2-1596-4a21-8613-1e84adac3bfc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/331beef2-1596-4a21-8613-1e84adac3bfc/8a3d4aac-7add-344d-a542-a96f905f7cdc.roa Signing time: Mon 20 Oct 2025 01:00:31 +0000 ROA not before: Mon 20 Oct 2025 01:00:31 +0000 ROA not after: Sun 18 Jan 2026 02:00:31 +0000 asID: 3359 IP address blocks: 2620:101:c000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/331beef2-1596-4a21-8613-1e84adac3bfc/331beef2-1596-4a21-8613-1e84adac3bfc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/331beef2-1596-4a21-8613-1e84adac3bfc/331beef2-1596-4a21-8613-1e84adac3bfc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/331beef2-1596-4a21-8613-1e84adac3bfc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:94:42:29:40:00:f0:85:0c:1f:19:fe:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=331beef2-1596-4a21-8613-1e84adac3bfc Validity Not Before: Oct 20 01:00:31 2025 GMT Not After : Jan 18 02:00:31 2026 GMT Subject: CN=af4aa1ac-84b5-4fb2-af1e-70875929cf2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:2b:97:ce:ce:cf:99:bb:60:36:65:7b:0d:92: 15:71:da:1f:84:78:fb:42:15:8e:6e:1e:61:d6:fb: fe:64:04:11:40:c1:ab:42:71:14:f7:c5:3c:1e:7d: 39:40:15:70:29:42:70:4f:60:1f:8e:3b:a6:d1:b4: 3a:60:f1:9b:82:0c:fd:a9:dd:e8:82:d5:7a:b7:5d: 8a:fc:79:84:dd:1d:ab:da:a9:86:9e:e1:dc:af:db: de:27:11:bb:23:c3:fb:76:86:61:00:83:2d:71:a7: a7:15:a5:8c:55:12:17:9f:94:fc:6e:23:06:e8:5d: 39:e5:b2:1e:93:ac:6c:0e:5d:31:21:f4:e0:95:ee: 67:2d:3f:23:9a:7a:82:7e:8f:7b:f6:f9:eb:f9:fe: 7c:09:3b:1f:a3:36:95:82:d8:d6:b4:13:16:49:03: dd:da:00:a1:f0:2b:95:22:ea:38:c9:28:09:87:8e: 82:49:9d:22:5c:3d:cc:9e:ec:0e:87:6d:cf:1f:33: 64:94:c9:2e:da:c9:36:12:7c:6a:67:20:97:7a:4d: fa:4f:fb:47:9a:34:65:87:7c:c7:62:74:f8:97:5b: 5b:97:28:aa:ab:01:13:e2:53:ac:01:d5:dc:7c:c7: aa:99:e3:1b:05:a3:08:10:b6:91:c9:8c:34:8a:87: 22:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:7B:80:A6:CF:23:0C:5C:B6:7C:AA:94:26:69:F2:FA:81:40:14:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/331beef2-1596-4a21-8613-1e84adac3bfc/8a3d4aac-7add-344d-a542-a96f905f7cdc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/331beef2-1596-4a21-8613-1e84adac3bfc/331beef2-1596-4a21-8613-1e84adac3bfc.crl X509v3 Authority Key Identifier: keyid:3B:E4:68:FF:DA:73:F9:C2:E4:D5:7B:A3:9B:D2:15:B6:13:68:91:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/331beef2-1596-4a21-8613-1e84adac3bfc.cer sbgp-ipAddrBlock: critical IPv6: 2620:101:c000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:05:2f:56:15:8a:2b:34:02:86:6e:fb:1a:ca:3f:0a:2f:b7: e4:53:d9:f5:e8:4b:0f:b6:64:2e:19:86:3c:39:c1:ae:5d:23: 55:55:d4:71:5a:63:cd:a0:b3:bc:21:5c:9e:6d:ab:9f:61:c3: dc:b5:33:60:20:99:bb:a5:3c:81:2c:68:3d:80:0a:e0:5b:d5: e2:04:1c:3c:f8:f1:1d:4f:e0:2a:d2:14:6d:46:08:d4:b4:4a: d6:21:37:91:f7:ce:08:56:e7:c1:28:53:ec:cb:f6:3a:fc:fc: f1:0b:2f:c3:cf:1f:e9:4c:15:9d:49:de:b2:25:6f:1d:f5:c3: 70:2d:e6:d9:56:f3:2d:25:08:52:c4:57:82:73:b9:bf:fa:71: 97:48:75:ed:c5:6f:ff:4b:c0:66:6e:22:17:40:50:84:3c:b9: 0e:ce:bd:8d:0a:0d:c6:f0:5a:ec:39:6f:25:e7:21:d3:29:65: a8:10:5f:49:8d:08:57:00:a3:17:ef:7c:32:0a:24:d4:f8:26: 6e:bb:8c:68:b5:57:b2:71:ee:8e:8d:e9:e3:82:08:d8:54:4f: fe:ea:74:0d:73:1c:0f:6d:a8:cb:9e:4d:4a:4d:55:77:00:86: 87:39:60:4a:f0:e3:21:63:1e:2b:ee:a6:66:03:87:f2:a6:76: 29:df:31:de -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEuUQilAAPCFDB8Z/sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzMxYmVlZjItMTU5Ni00YTIxLTg2MTMtMWU4NGFkYWMz YmZjMB4XDTI1MTAyMDAxMDAzMVoXDTI2MDExODAyMDAzMVowLzEtMCsGA1UEAxMk YWY0YWExYWMtODRiNS00ZmIyLWFmMWUtNzA4NzU5MjljZjJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryuXzs7PmbtgNmV7DZIVcdofhHj7QhWObh5h 1vv+ZAQRQMGrQnEU98U8Hn05QBVwKUJwT2Afjjum0bQ6YPGbggz9qd3ogtV6t12K /HmE3R2r2qmGnuHcr9veJxG7I8P7doZhAIMtcaenFaWMVRIXn5T8biMG6F055bIe k6xsDl0xIfTgle5nLT8jmnqCfo979vnr+f58CTsfozaVgtjWtBMWSQPd2gCh8CuV Iuo4ySgJh46CSZ0iXD3MnuwOh23PHzNklMku2sk2EnxqZyCXek36T/tHmjRlh3zH YnT4l1tblyiqqwET4lOsAdXcfMeqmeMbBaMIELaRyYw0iociswIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFDR7gKbPIwxctnyqlCZp8vqBQBSTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zMzFi ZWVmMi0xNTk2LTRhMjEtODYxMy0xZTg0YWRhYzNiZmMvOGEzZDRhYWMtN2FkZC0z NDRkLWE1NDItYTk2ZjkwNWY3Y2RjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMzMxYmVlZjItMTU5Ni00YTIxLTg2 MTMtMWU4NGFkYWMzYmZjLzMzMWJlZWYyLTE1OTYtNGEyMS04NjEzLTFlODRhZGFj M2JmYy5jcmwwHwYDVR0jBBgwFoAUO+Ro/9pz+cLk1Xujm9IVthNokZkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zMzFiZWVmMi0xNTk2LTRhMjEtODYxMy0xZTg0 YWRhYzNiZmMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJiABAcAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAfAUvVhWKKzQChm77Gso/Ci+35FPZ9ehLD7ZkLhmGPDnBrl0jVVXU cVpjzaCzvCFcnm2rn2HD3LUzYCCZu6U8gSxoPYAK4FvV4gQcPPjxHU/gKtIUbUYI 1LRK1iE3kffOCFbnwShT7Mv2Ovz88Qsvw88f6UwVnUnesiVvHfXDcC3m2VbzLSUI UsRXgnO5v/pxl0h17cVv/0vAZm4iF0BQhDy5Ds69jQoNxvBa7DlvJech0yllqBBf SY0IVwCjF+98Mgok1PgmbruMaLVXsnHujo3p44II2FRP/up0DXMcD22oy55NSk1V dwCGhzlgSvDjIWMeK+6mZgOH8qZ2Kd8x3g== -----END CERTIFICATE-----Generated at Mon Oct 20 15:24:49 2025 by rpki-client