$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8def8532-8491-4ca2-9370-4768f22df42b/14225c85-02d7-3302-b9fc-e26bf7888e33.roa File: 14225c85-02d7-3302-b9fc-e26bf7888e33.roa (raw, json) Hash identifier: 1bbAI74QWbnxtS5ZgicAsxLYUJMBE0xzUGqPG5Bn1ko= Subject key identifier: 48:A8:79:4D:B1:8D:A8:FF:4D:EC:8B:CE:A0:64:F9:DB:9B:82:77:19 Certificate issuer: /CN=8def8532-8491-4ca2-9370-4768f22df42b Certificate serial: 010D0C9F4328584B6631FC4BFF096EF8B0B5A300 Authority key identifier: 78:AE:6F:4B:09:4D:2A:C5:DF:95:5A:AA:A4:C0:3A:D7:8A:31:83:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8def8532-8491-4ca2-9370-4768f22df42b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8def8532-8491-4ca2-9370-4768f22df42b/14225c85-02d7-3302-b9fc-e26bf7888e33.roa Signing time: Fri 03 Oct 2025 13:00:40 +0000 ROA not before: Fri 03 Oct 2025 13:00:40 +0000 ROA not after: Thu 01 Jan 2026 14:00:40 +0000 asID: 36305 IP address blocks: 2604:e20::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8def8532-8491-4ca2-9370-4768f22df42b/8def8532-8491-4ca2-9370-4768f22df42b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8def8532-8491-4ca2-9370-4768f22df42b/8def8532-8491-4ca2-9370-4768f22df42b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8def8532-8491-4ca2-9370-4768f22df42b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:66:31:fc:4b:ff:09:6e:f8:b0:b5:a3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8def8532-8491-4ca2-9370-4768f22df42b Validity Not Before: Oct 3 13:00:40 2025 GMT Not After : Jan 1 14:00:40 2026 GMT Subject: CN=f2e2e4f0-30a9-44d9-b114-c3f8581e2cae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:d6:e0:c6:52:75:78:65:64:5a:e9:9a:67:02: dd:fa:7a:6d:5b:e8:58:f0:06:21:43:50:9f:5b:85: a0:ef:70:f5:fd:98:94:78:9f:60:cb:84:1f:e3:4f: 7a:79:44:55:0a:a9:19:6d:4e:39:f4:86:3a:fa:63: d8:69:2d:6c:c2:45:15:bf:08:05:6d:9c:6a:a5:2c: 0f:92:fe:28:0e:ea:c6:3f:ec:bf:96:3f:46:e1:d4: 1d:92:f5:6e:b0:38:27:88:b7:fc:0f:e2:11:94:7c: f9:20:e3:e2:d8:a6:df:08:30:d9:10:16:6b:5d:21: fa:56:9a:6f:bf:9c:11:08:03:16:73:6e:10:b1:d2: 7d:34:9e:f8:f4:d8:53:ad:2b:ea:21:7e:a3:14:48: 58:9a:9f:23:29:e6:e8:b9:9f:15:8f:c5:6e:88:3c: 86:f9:c2:60:39:8b:84:ba:49:9c:6f:36:be:b8:47: 05:3a:18:05:f4:61:02:2b:4d:0e:25:8f:59:e8:91: 13:0b:8b:d7:69:49:b9:b1:23:f4:87:79:76:b3:cb: 3a:da:85:a7:cc:9f:f4:07:d6:b4:cf:13:c7:17:ef: aa:fc:f1:45:f0:ba:6c:5d:f9:0b:22:6a:2b:14:02: 3f:e7:17:00:f8:36:fd:39:97:b0:3c:48:ff:97:13: 74:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:A8:79:4D:B1:8D:A8:FF:4D:EC:8B:CE:A0:64:F9:DB:9B:82:77:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8def8532-8491-4ca2-9370-4768f22df42b/14225c85-02d7-3302-b9fc-e26bf7888e33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8def8532-8491-4ca2-9370-4768f22df42b/8def8532-8491-4ca2-9370-4768f22df42b.crl X509v3 Authority Key Identifier: keyid:78:AE:6F:4B:09:4D:2A:C5:DF:95:5A:AA:A4:C0:3A:D7:8A:31:83:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8def8532-8491-4ca2-9370-4768f22df42b.cer sbgp-ipAddrBlock: critical IPv6: 2604:e20::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:6c:d3:ef:0f:e8:34:a0:43:85:34:9d:42:3c:28:5a:a9:d6: 08:ee:52:d0:f1:74:0e:06:3b:e5:35:58:a6:31:3e:5c:04:71: 55:01:9f:f6:33:0b:66:17:3f:81:79:4e:a5:eb:4a:59:f3:b4: c8:97:d5:8a:1f:d6:59:fd:b4:75:33:26:42:0b:f0:e8:e9:ce: 6d:24:d8:05:d6:b9:58:df:5d:42:21:37:60:0e:eb:22:ea:0e: 9f:33:0a:7a:1d:b5:cf:6a:c4:72:82:91:02:3e:ff:3e:6a:31: 11:fb:8f:05:64:74:e8:27:42:16:c3:bc:26:c4:88:1a:e5:36: a0:5a:96:46:0b:49:01:39:9f:f5:77:aa:48:6f:7b:4d:a9:bc: 18:39:aa:97:f4:c7:1c:ea:0f:3b:6a:2a:bb:88:c1:61:21:d7: 4c:68:79:98:48:ff:7b:bd:2e:da:ee:bf:66:de:8e:1a:74:aa: 96:af:df:ba:1f:0e:24:a0:bb:d7:96:47:3c:9a:ba:55:4b:85: e1:ff:6e:fa:7d:ed:5e:ba:a2:e7:05:ee:aa:af:f9:e5:77:6d: 01:7d:90:10:e5:b0:b2:a3:99:06:cd:6b:57:a6:88:5d:18:f4: 2d:9c:42:13:c1:1c:48:63:54:d8:7d:40:cf:1a:43:a1:ad:26: b7:ff:ff:f5 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtmMfxL/wlu+LC1owAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGRlZjg1MzItODQ5MS00Y2EyLTkzNzAtNDc2OGYyMmRm NDJiMB4XDTI1MTAwMzEzMDA0MFoXDTI2MDEwMTE0MDA0MFowLzEtMCsGA1UEAxMk ZjJlMmU0ZjAtMzBhOS00NGQ5LWIxMTQtYzNmODU4MWUyY2FlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNbgxlJ1eGVkWumaZwLd+nptW+hY8AYhQ1Cf W4Wg73D1/ZiUeJ9gy4Qf4096eURVCqkZbU459IY6+mPYaS1swkUVvwgFbZxqpSwP kv4oDurGP+y/lj9G4dQdkvVusDgniLf8D+IRlHz5IOPi2KbfCDDZEBZrXSH6Vppv v5wRCAMWc24QsdJ9NJ749NhTrSvqIX6jFEhYmp8jKebouZ8Vj8VuiDyG+cJgOYuE ukmcbza+uEcFOhgF9GECK00OJY9Z6JETC4vXaUm5sSP0h3l2s8s62oWnzJ/0B9a0 zxPHF++q/PFF8LpsXfkLImorFAI/5xcA+Db9OZewPEj/lxN0KwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEioeU2xjaj/TeyLzqBk+dubgncZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84ZGVm ODUzMi04NDkxLTRjYTItOTM3MC00NzY4ZjIyZGY0MmIvMTQyMjVjODUtMDJkNy0z MzAyLWI5ZmMtZTI2YmY3ODg4ZTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGRlZjg1MzItODQ5MS00Y2EyLTkz NzAtNDc2OGYyMmRmNDJiLzhkZWY4NTMyLTg0OTEtNGNhMi05MzcwLTQ3NjhmMjJk ZjQyYi5jcmwwHwYDVR0jBBgwFoAUeK5vSwlNKsXflVqqpMA614oxgw4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84ZGVmODUzMi04NDkxLTRjYTItOTM3MC00NzY4 ZjIyZGY0MmIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQOIDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBmbNPvD+g0oEOFNJ1CPChaqdYI7lLQ8XQOBjvlNVimMT5cBHFVAZ/2 MwtmFz+BeU6l60pZ87TIl9WKH9ZZ/bR1MyZCC/Do6c5tJNgF1rlY311CITdgDusi 6g6fMwp6HbXPasRygpECPv8+ajER+48FZHToJ0IWw7wmxIga5TagWpZGC0kBOZ/1 d6pIb3tNqbwYOaqX9Mcc6g87aiq7iMFhIddMaHmYSP97vS7a7r9m3o4adKqWr9+6 Hw4koLvXlkc8mrpVS4Xh/276fe1euqLnBe6qr/nld20BfZAQ5bCyo5kGzWtXpohd GPQtnEITwRxIY1TYfUDPGkOhrSa3///1 -----END CERTIFICATE-----Generated at Thu Oct 9 01:23:05 2025 by rpki-client