$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/3bdf900d-17b8-3fef-a0bf-1ee4e3c07a4c.roa File: 3bdf900d-17b8-3fef-a0bf-1ee4e3c07a4c.roa (raw, json) Hash identifier: Z4jlgRlvrCwh0RUkG77xMCTqZLrbpO2nElw83muiZik= Subject key identifier: 8A:D7:38:8A:B0:85:98:4A:05:78:3B:AE:2D:1E:CA:89:06:D8:22:8C Certificate issuer: /CN=8ce84fb2-c539-46e7-8212-12b9730afeba Certificate serial: 010D0C9F4328584BA23787932CD0561EBA0B0D80 Authority key identifier: D3:8A:39:65:E1:53:C3:03:64:C1:56:0F:C9:45:83:B6:FA:B1:38:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/3bdf900d-17b8-3fef-a0bf-1ee4e3c07a4c.roa Signing time: Sat 25 Oct 2025 01:00:31 +0000 ROA not before: Sat 25 Oct 2025 01:00:31 +0000 ROA not after: Fri 23 Jan 2026 02:00:31 +0000 asID: 5650 IP address blocks: 2606:8940::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/8ce84fb2-c539-46e7-8212-12b9730afeba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/8ce84fb2-c539-46e7-8212-12b9730afeba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a2:37:87:93:2c:d0:56:1e:ba:0b:0d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ce84fb2-c539-46e7-8212-12b9730afeba Validity Not Before: Oct 25 01:00:31 2025 GMT Not After : Jan 23 02:00:31 2026 GMT Subject: CN=11e95018-a0ca-4566-971f-a76ee3436f4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:db:73:1f:90:88:27:63:8e:6d:00:19:3d:9f: af:bb:c5:59:63:d1:f3:18:8b:74:21:b8:9c:90:47: 7b:11:3b:0c:ba:1c:b2:31:00:3a:72:b7:b5:06:24: 0a:5e:2b:5c:12:b6:37:01:6d:ff:21:bd:2b:bf:ed: 66:7c:51:39:3e:31:43:55:c3:76:c4:fd:80:6e:90: de:0b:67:93:61:2d:24:99:65:fd:58:8c:f1:9a:29: 30:54:02:2e:ec:32:09:09:14:1a:55:5f:5c:dd:d2: f0:b8:92:ed:12:e7:19:a8:c3:4f:cc:42:b6:ca:5e: 12:73:2f:d2:0a:60:f1:a3:00:18:3a:67:be:37:55: 28:f9:05:1b:56:0c:ad:3c:9d:e0:cb:1e:85:81:52: 53:ce:50:b0:93:15:7c:bc:df:80:09:44:6d:5a:b5: 7f:05:a6:d9:ee:ba:35:d5:eb:67:f7:00:8a:93:04: ea:c9:cf:f1:43:86:05:d2:2e:a1:b9:d9:19:49:9d: da:6d:23:c9:8f:1a:c5:92:f5:3b:97:48:cd:a2:9d: cc:df:85:c2:36:9a:0a:60:5f:ba:eb:17:5f:e9:83: 50:7d:bf:3a:cb:3f:a0:0c:3c:a1:31:9a:66:d6:fc: 97:5f:39:d3:2a:74:c8:c1:91:89:fa:17:e7:50:36: a4:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:D7:38:8A:B0:85:98:4A:05:78:3B:AE:2D:1E:CA:89:06:D8:22:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/3bdf900d-17b8-3fef-a0bf-1ee4e3c07a4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/8ce84fb2-c539-46e7-8212-12b9730afeba.crl X509v3 Authority Key Identifier: keyid:D3:8A:39:65:E1:53:C3:03:64:C1:56:0F:C9:45:83:B6:FA:B1:38:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba.cer sbgp-ipAddrBlock: critical IPv6: 2606:8940::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:b7:ae:ab:ab:eb:6b:be:3f:fd:49:b1:67:16:8e:c5:2d:fc: ef:31:f5:82:51:ee:84:7e:56:08:fd:2e:ec:f5:33:0d:23:65: 3a:0b:6f:eb:c6:4f:5a:50:14:0a:0c:a4:77:58:bd:0d:b7:19: d6:92:df:01:d5:b6:f2:29:90:fc:7d:40:05:74:e0:62:0c:08: 91:92:ce:e9:1b:af:22:2f:08:d7:89:5d:ff:b6:19:95:5f:01: 5b:1d:fe:c4:c4:93:dd:80:19:55:04:26:42:19:4b:2d:d4:10: 48:a7:e5:fa:79:2a:a2:67:e3:de:89:43:e9:91:98:f6:e6:b8: bc:58:eb:54:c6:7f:ea:5d:71:91:be:12:cf:a3:59:bd:dc:25: 0d:7f:51:7c:70:bd:23:fb:d3:4e:cf:06:f1:d0:22:bd:de:39: 76:27:c3:f7:47:fd:30:ca:5b:4e:e5:da:4b:64:89:a2:61:83: ca:f2:76:5a:dd:9b:99:b3:41:77:62:15:37:bd:c3:3f:50:d0: 8b:32:34:a0:06:0f:2a:7f:4e:1f:8e:7c:06:41:45:3d:d2:9b: 6d:0c:f5:14:1d:2c:92:cb:17:8e:3b:30:9b:64:c7:77:af:92: 23:1f:35:11:95:d7:d9:39:d8:37:62:28:7e:21:ae:9d:2c:b6: e2:38:78:aa -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEuiN4eTLNBWHroLDYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGNlODRmYjItYzUzOS00NmU3LTgyMTItMTJiOTczMGFm ZWJhMB4XDTI1MTAyNTAxMDAzMVoXDTI2MDEyMzAyMDAzMVowLzEtMCsGA1UEAxMk MTFlOTUwMTgtYTBjYS00NTY2LTk3MWYtYTc2ZWUzNDM2ZjRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdtzH5CIJ2OObQAZPZ+vu8VZY9HzGIt0Ibic kEd7ETsMuhyyMQA6cre1BiQKXitcErY3AW3/Ib0rv+1mfFE5PjFDVcN2xP2AbpDe C2eTYS0kmWX9WIzxmikwVAIu7DIJCRQaVV9c3dLwuJLtEucZqMNPzEK2yl4Scy/S CmDxowAYOme+N1Uo+QUbVgytPJ3gyx6FgVJTzlCwkxV8vN+ACURtWrV/BabZ7ro1 1etn9wCKkwTqyc/xQ4YF0i6hudkZSZ3abSPJjxrFkvU7l0jNop3M34XCNpoKYF+6 6xdf6YNQfb86yz+gDDyhMZpm1vyXXznTKnTIwZGJ+hfnUDakiQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIrXOIqwhZhKBXg7ri0eyokG2CKMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84Y2U4 NGZiMi1jNTM5LTQ2ZTctODIxMi0xMmI5NzMwYWZlYmEvM2JkZjkwMGQtMTdiOC0z ZmVmLWEwYmYtMWVlNGUzYzA3YTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOGNlODRmYjItYzUzOS00NmU3LTgy MTItMTJiOTczMGFmZWJhLzhjZTg0ZmIyLWM1MzktNDZlNy04MjEyLTEyYjk3MzBh ZmViYS5jcmwwHwYDVR0jBBgwFoAU04o5ZeFTwwNkwVYPyUWDtvqxONswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84Y2U4NGZiMi1jNTM5LTQ2ZTctODIxMi0xMmI5 NzMwYWZlYmEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgaJQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBJt66rq+trvj/9SbFnFo7FLfzvMfWCUe6EflYI/S7s9TMNI2U6C2/r xk9aUBQKDKR3WL0NtxnWkt8B1bbyKZD8fUAFdOBiDAiRks7pG68iLwjXiV3/thmV XwFbHf7ExJPdgBlVBCZCGUst1BBIp+X6eSqiZ+PeiUPpkZj25ri8WOtUxn/qXXGR vhLPo1m93CUNf1F8cL0j+9NOzwbx0CK93jl2J8P3R/0wyltO5dpLZImiYYPK8nZa 3ZuZs0F3YhU3vcM/UNCLMjSgBg8qf04fjnwGQUU90pttDPUUHSySyxeOOzCbZMd3 r5IjHzURldfZOdg3Yih+Ia6dLLbiOHiq -----END CERTIFICATE-----Generated at Sun Nov 2 22:53:46 2025 by rpki-client