$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bbbd80d0-24fb-3387-87e8-454f2ec84bdf.roa File: bbbd80d0-24fb-3387-87e8-454f2ec84bdf.roa (raw, json) Hash identifier: zqTT1DVXPNTI355CREpI3FmSF0IkUO1MZf+Q11ohf0w= Subject key identifier: AA:F6:24:55:59:96:08:2B:52:1E:52:02:4A:8E:52:C4:21:43:9B:53 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B89FBF2A382B5C6BF30CAC180 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bbbd80d0-24fb-3387-87e8-454f2ec84bdf.roa Signing time: Thu 16 Oct 2025 08:41:05 +0000 ROA not before: Thu 16 Oct 2025 08:41:05 +0000 ROA not after: Wed 14 Jan 2026 09:41:05 +0000 asID: 19527 IP address blocks: 2600:1902:170::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:89:fb:f2:a3:82:b5:c6:bf:30:ca:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 16 08:41:05 2025 GMT Not After : Jan 14 09:41:05 2026 GMT Subject: CN=af44d0dc-b7dc-4990-bf93-75ea1496e932 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:8a:9a:b3:83:c0:15:ab:ac:7d:81:24:d1:62: 96:0a:38:9e:df:76:45:ba:be:41:0e:bb:68:e2:c5: 6b:94:58:97:05:20:d7:c6:cc:ae:74:34:43:11:42: 2d:a2:51:88:92:cd:32:ce:6c:17:4f:e9:b9:40:d9: 92:4c:28:c1:7e:cb:3a:69:59:87:a3:6e:5d:56:f8: d5:fe:12:61:f3:78:06:18:64:4a:50:21:54:71:56: 0c:7c:5d:6b:c2:a2:3c:4b:20:8d:62:b3:f2:ef:8c: e8:84:0a:fd:1f:ee:1e:49:bf:2f:8d:3b:1b:ba:25: a2:9a:24:9c:7a:f8:f0:e4:b1:37:63:28:27:68:4d: 81:41:82:82:ca:65:4d:a3:a8:c7:9a:73:3c:8f:00: c4:c2:c5:7e:c3:dd:a6:e6:66:b4:87:f0:1d:76:61: 1c:00:85:d1:a2:54:b5:07:22:4f:82:ad:3e:6f:20: 0d:94:9c:17:e6:46:43:ca:cc:68:c1:53:b7:b3:0a: bd:61:41:7b:58:7e:0d:54:3b:21:27:7a:d3:ec:2b: bb:60:d6:dc:33:d7:16:ae:09:d9:f4:1d:ce:dc:53: 33:dc:e1:b7:77:89:cf:c1:3f:2d:b4:c3:e8:55:49: 5f:37:c7:2e:ee:f9:98:13:de:25:02:c4:43:d4:f4: 5a:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:F6:24:55:59:96:08:2B:52:1E:52:02:4A:8E:52:C4:21:43:9B:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bbbd80d0-24fb-3387-87e8-454f2ec84bdf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv6: 2600:1902:170::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:06:21:e7:46:1c:d9:6c:01:58:8e:da:21:f4:99:ca:71:82: c1:83:13:b2:35:b3:31:ac:2b:a3:10:76:dc:5b:29:c2:b0:10: cb:20:3f:72:26:22:fa:c7:92:2d:ef:0d:d6:0d:8a:15:b3:5b: 2a:f1:cf:9d:4f:81:b6:c9:0b:f8:72:64:71:b5:81:b4:d3:ea: 74:ef:1f:f0:ba:2f:52:3e:dc:4f:d1:d5:78:26:27:fb:42:9d: 28:2e:85:8c:37:c9:ed:e3:a6:c4:13:07:16:6d:c9:fb:d4:7c: 32:7e:ea:80:f4:01:d8:d6:53:3f:da:57:c1:58:11:6a:ed:58: 88:64:99:2f:3b:ec:ac:13:31:c7:01:92:9c:a8:00:22:aa:7e: 79:21:19:c2:9d:25:3c:ed:ca:11:b7:5b:d0:fe:6e:20:e2:00: 77:4f:db:04:4b:37:32:7e:67:41:98:a0:26:15:9c:48:00:1d: c7:37:bf:b4:3b:cd:72:87:51:f2:ce:0a:0c:8a:fe:f0:36:62: 8a:f2:b7:db:2a:fc:7c:73:1b:8a:f9:26:2d:6c:cd:32:22:6a: 55:18:73:ea:94:2e:92:c4:6a:0b:fe:d9:34:54:b1:60:c2:1a: de:60:e7:d2:bc:5b:34:e5:4a:cf:db:f9:d0:9f:49:25:af:a0: 0f:91:be:c1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuJ+/KjgrXGvzDKwYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAxNjA4NDEwNVoXDTI2MDExNDA5NDEwNVowLzEtMCsGA1UEAxMk YWY0NGQwZGMtYjdkYy00OTkwLWJmOTMtNzVlYTE0OTZlOTMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYqas4PAFausfYEk0WKWCjie33ZFur5BDrto 4sVrlFiXBSDXxsyudDRDEUItolGIks0yzmwXT+m5QNmSTCjBfss6aVmHo25dVvjV /hJh83gGGGRKUCFUcVYMfF1rwqI8SyCNYrPy74zohAr9H+4eSb8vjTsbuiWimiSc evjw5LE3YygnaE2BQYKCymVNo6jHmnM8jwDEwsV+w92m5ma0h/AddmEcAIXRolS1 ByJPgq0+byANlJwX5kZDysxowVO3swq9YUF7WH4NVDshJ3rT7Cu7YNbcM9cWrgnZ 9B3O3FMz3OG3d4nPwT8ttMPoVUlfN8cu7vmYE94lAsRD1PRamQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKr2JFVZlggrUh5SAkqOUsQhQ5tTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmJiZDgwZDAtMjRmYi0z Mzg3LTg3ZTgtNDU0ZjJlYzg0YmRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAZAgFw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGMGIedGHNlsAViO2iH0mcpxgsGDE7I1szGsK6MQdtxbKcKwEMsg P3ImIvrHki3vDdYNihWzWyrxz51PgbbJC/hyZHG1gbTT6nTvH/C6L1I+3E/R1Xgm J/tCnSguhYw3ye3jpsQTBxZtyfvUfDJ+6oD0AdjWUz/aV8FYEWrtWIhkmS877KwT MccBkpyoACKqfnkhGcKdJTztyhG3W9D+biDiAHdP2wRLNzJ+Z0GYoCYVnEgAHcc3 v7Q7zXKHUfLOCgyK/vA2Yoryt9sq/HxzG4r5Ji1szTIialUYc+qULpLEagv+2TRU sWDCGt5g59K8WzTlSs/b+dCfSSWvoA+RvsE= -----END CERTIFICATE-----Generated at Wed Oct 22 21:18:48 2025 by rpki-client