$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/87d1a106-970e-3eed-bf3c-392f8519f936.roa File: 87d1a106-970e-3eed-bf3c-392f8519f936.roa (raw, json) Hash identifier: arlWy7drW7mG2hYIjzFjKig3GOuGF2yZ661Fk5JB4ao= Subject key identifier: 80:11:5D:FA:F3:1A:21:94:8B:68:7B:85:D4:E4:73:FD:E8:0B:FD:4C Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B9EECCABA93212950AF3908C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/87d1a106-970e-3eed-bf3c-392f8519f936.roa Signing time: Thu 23 Oct 2025 20:42:32 +0000 ROA not before: Thu 23 Oct 2025 20:42:32 +0000 ROA not after: Wed 21 Jan 2026 21:42:32 +0000 asID: 396982 IP address blocks: 2600:1902::/31 maxlen: 31 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:ec:ca:ba:93:21:29:50:af:39:08:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 23 20:42:32 2025 GMT Not After : Jan 21 21:42:32 2026 GMT Subject: CN=06d5bece-daf8-4cbc-8e49-f4fa3fae33d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:7d:ab:b4:84:e0:f2:e2:a7:9e:35:08:e3:4b: 83:89:35:28:ed:7e:52:96:49:1d:dd:04:99:7c:e5: f3:52:b0:fc:df:3a:c8:79:d3:fa:d3:0f:64:ef:d4: c1:5f:26:e2:fc:67:a2:c6:f8:c5:3a:2d:92:64:f9: 73:ae:cd:4b:e7:45:29:09:93:7c:2b:a9:fe:56:21: 31:19:d4:ae:7f:2a:06:00:dd:df:f0:64:18:d3:59: 80:51:30:66:a3:37:3f:9d:a0:61:f5:6e:f0:c2:3a: 96:d2:72:d9:f5:cb:cf:21:24:b3:ec:83:8a:20:93: d4:d9:34:a4:ad:b0:47:11:25:1e:60:d0:e9:8e:77: 44:ae:cb:28:19:65:5b:b5:0c:ca:11:7c:07:0e:44: 1a:34:c8:d1:b1:16:b4:d4:19:83:99:d4:57:c3:fd: 24:61:c6:76:b4:17:10:b2:78:15:7d:6a:1d:9a:18: 38:df:21:88:74:53:9a:76:98:4b:88:fc:4d:32:80: e2:01:27:4b:68:b4:79:e0:a6:c1:f8:f1:0b:45:43: a3:79:8a:84:8e:1b:6b:5b:b1:52:a6:5b:ea:76:f9: 47:32:f4:d2:e1:4e:02:8e:1b:08:97:97:c8:00:25: dd:39:fd:a5:18:03:ed:fc:c1:d6:5b:2f:46:e8:57: 74:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:11:5D:FA:F3:1A:21:94:8B:68:7B:85:D4:E4:73:FD:E8:0B:FD:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/87d1a106-970e-3eed-bf3c-392f8519f936.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv6: 2600:1902::/31 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:ba:e1:e3:81:18:0a:80:4f:82:cd:56:3a:f8:81:53:e5:b7: 21:d2:e9:94:e0:8a:fa:c3:6b:6c:a9:ea:81:bc:22:77:c6:cc: 70:22:4a:c0:e8:e5:cc:33:71:49:12:fe:1a:08:c4:6c:bb:bb: 99:80:1f:6d:e9:62:d1:ee:13:23:9c:39:86:77:c5:06:83:a6: 1b:23:06:45:76:9a:c3:83:ec:0f:ce:3c:ad:2f:31:81:4e:7d: da:ed:86:d1:83:65:b1:4f:45:2b:ce:01:07:09:66:4b:15:88: bc:fb:11:57:5d:fc:04:28:6b:e2:ed:a9:61:66:53:3e:44:27: 90:7b:76:0f:67:15:70:8d:eb:9a:83:f8:33:1a:48:7d:b2:f7: 18:53:b0:89:66:1b:c7:cd:eb:47:a3:73:60:a4:ba:33:12:9e: 27:d2:45:6a:e7:a0:a8:41:3c:77:c5:27:ed:a3:5a:24:0a:80: fa:ad:75:82:6d:21:5b:23:bb:da:19:67:d3:95:f3:1e:ee:e7: 12:38:9e:4e:29:b7:14:3c:ed:3b:1c:30:d9:50:79:30:18:4e: c3:67:21:01:f0:04:4d:bf:2f:6f:86:12:6e:e4:96:86:d6:bc: da:96:d3:ee:97:4f:b5:a7:e7:9e:08:c9:08:64:1e:4e:f4:88: a6:9b:41:39 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEue7Mq6kyEpUK85CMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAyMzIwNDIzMloXDTI2MDEyMTIxNDIzMlowLzEtMCsGA1UEAxMk MDZkNWJlY2UtZGFmOC00Y2JjLThlNDktZjRmYTNmYWUzM2QxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmH2rtITg8uKnnjUI40uDiTUo7X5Slkkd3QSZ fOXzUrD83zrIedP60w9k79TBXybi/GeixvjFOi2SZPlzrs1L50UpCZN8K6n+ViEx GdSufyoGAN3f8GQY01mAUTBmozc/naBh9W7wwjqW0nLZ9cvPISSz7IOKIJPU2TSk rbBHESUeYNDpjndErssoGWVbtQzKEXwHDkQaNMjRsRa01BmDmdRXw/0kYcZ2tBcQ sngVfWodmhg43yGIdFOadphLiPxNMoDiASdLaLR54KbB+PELRUOjeYqEjhtrW7FS plvqdvlHMvTS4U4CjhsIl5fIACXdOf2lGAPt/MHWWy9G6Fd0EQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIARXfrzGiGUi2h7hdTkc/3oC/1MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvODdkMWExMDYtOTcwZS0z ZWVkLWJmM2MtMzkyZjg1MTlmOTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUBJgAZAjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCjuuHjgRgKgE+CzVY6+IFT5bch0umU4Ir6w2tsqeqBvCJ3xsxwIkrA 6OXMM3FJEv4aCMRsu7uZgB9t6WLR7hMjnDmGd8UGg6YbIwZFdprDg+wPzjytLzGB Tn3a7YbRg2WxT0UrzgEHCWZLFYi8+xFXXfwEKGvi7alhZlM+RCeQe3YPZxVwjeua g/gzGkh9svcYU7CJZhvHzetHo3NgpLozEp4n0kVq56CoQTx3xSfto1okCoD6rXWC bSFbI7vaGWfTlfMe7ucSOJ5OKbcUPO07HDDZUHkwGE7DZyEB8ARNvy9vhhJu5JaG 1rzaltPul0+1p+eeCMkIZB5O9Iimm0E5 -----END CERTIFICATE-----Generated at Mon Nov 3 21:51:03 2025 by rpki-client