$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/c80c7f22-b3ab-3548-9021-2361b69e3035.roa File: c80c7f22-b3ab-3548-9021-2361b69e3035.roa (raw, json) Hash identifier: gEXYFPkRO5y1f/ykgEas49i5FN+20SxcXMoi2eCel+M= Subject key identifier: 79:DB:CB:7F:5B:67:DC:7F:7B:B5:9E:CF:11:2A:D9:CA:BE:E0:4A:D2 Certificate issuer: /CN=86b35f71-51ac-43ff-b604-cba3552c4c8c Certificate serial: 010D0C9F4328584BB5C255490EDD91F3BA132480 Authority key identifier: 64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/c80c7f22-b3ab-3548-9021-2361b69e3035.roa Signing time: Sat 01 Nov 2025 01:00:30 +0000 ROA not before: Sat 01 Nov 2025 01:00:30 +0000 ROA not after: Fri 30 Jan 2026 02:00:30 +0000 asID: 264409 IP address blocks: 2604:b480:12::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b5:c2:55:49:0e:dd:91:f3:ba:13:24:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86b35f71-51ac-43ff-b604-cba3552c4c8c Validity Not Before: Nov 1 01:00:30 2025 GMT Not After : Jan 30 02:00:30 2026 GMT Subject: CN=c222d162-02d1-44ff-beb4-99e4d51081cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:19:3d:47:75:4b:33:99:01:0b:4a:8a:0d:5d: 7b:95:31:30:b6:d1:ce:52:62:8e:69:6b:dc:bc:9d: b7:1e:6e:21:3b:a3:fa:f1:dc:57:30:c9:c0:04:08: 67:11:12:a0:76:06:41:b4:48:d0:66:91:d3:62:c8: e7:ba:b3:d1:85:a8:39:1a:e8:f2:c9:bf:8c:29:91: 72:68:d0:15:d5:69:cf:a6:cc:c8:83:3c:72:0c:cc: 9f:85:63:aa:3c:91:29:ad:ec:ce:c1:45:55:1f:91: 2a:99:fa:a8:89:8c:86:85:b3:1b:74:5c:1e:74:94: 9a:b3:57:61:81:ff:68:29:0f:a1:80:0a:a6:97:8c: 23:03:41:e8:a4:7c:46:a5:ae:b2:9e:37:98:cb:22: 4f:10:3c:52:43:d6:35:f4:1f:7c:28:85:05:ac:ef: eb:65:f4:46:18:f6:b4:98:0b:57:13:fd:0c:17:98: 67:3c:a4:bb:5e:29:4d:44:2f:6f:ae:5f:55:30:78: 62:43:71:e6:43:8a:32:fa:00:bb:de:26:8f:55:cf: 6e:ee:9a:6b:53:77:df:2c:bf:7b:bf:a6:f7:9a:b1: e7:4a:e6:1a:12:6f:f9:ee:d4:f9:30:4e:d1:43:2d: 33:ff:2e:cd:73:29:12:4c:6d:2c:83:7a:80:e2:b1: 0b:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:DB:CB:7F:5B:67:DC:7F:7B:B5:9E:CF:11:2A:D9:CA:BE:E0:4A:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/c80c7f22-b3ab-3548-9021-2361b69e3035.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl X509v3 Authority Key Identifier: keyid:64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer sbgp-ipAddrBlock: critical IPv6: 2604:b480:12::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:02:2f:bb:94:a9:96:a9:74:33:d8:22:b0:b0:aa:5f:79:0a: da:d8:1f:2c:a1:d9:49:89:47:62:ca:a2:c1:fe:e0:97:c2:77: 38:91:f1:0d:b6:16:c4:da:ab:f6:6a:da:e0:75:c6:3c:3d:35: 62:73:7c:88:84:a9:ff:00:a5:5b:46:74:d0:49:27:59:3b:79: 3f:d5:14:a0:53:ee:27:bf:02:e0:26:6f:d9:fb:fc:c2:8d:bf: e8:b5:2a:36:5c:f8:0e:e7:2a:1b:aa:19:6f:a8:47:11:bf:ab: c2:b6:b7:85:d0:11:a2:57:db:17:8a:49:f4:e9:e3:12:93:d8: 8b:38:55:65:f3:0e:87:2a:a4:99:f2:10:dc:c7:ae:2a:9e:c1: ea:97:c6:6a:98:ed:76:8f:03:3d:ea:fe:b5:0f:20:81:55:eb: 21:f5:d8:27:3e:b7:37:f3:1b:87:3e:7f:5f:92:5c:ff:60:8b: 04:0f:b3:d8:8c:22:a7:f4:d1:21:75:c2:eb:4a:f4:8c:1a:2f: f0:36:c3:21:0d:75:93:1e:ae:97:16:e7:84:77:8d:17:a2:4d: 0f:aa:4d:f6:2a:f5:c9:15:6b:1a:f2:10:41:61:0a:ac:0d:f3: f7:27:d6:42:08:28:72:f9:16:30:24:2c:cc:0e:40:8e:c9:84: 64:f4:27:59 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEu1wlVJDt2R87oTJIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZiMzVmNzEtNTFhYy00M2ZmLWI2MDQtY2JhMzU1MmM0 YzhjMB4XDTI1MTEwMTAxMDAzMFoXDTI2MDEzMDAyMDAzMFowLzEtMCsGA1UEAxMk YzIyMmQxNjItMDJkMS00NGZmLWJlYjQtOTllNGQ1MTA4MWNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxk9R3VLM5kBC0qKDV17lTEwttHOUmKOaWvc vJ23Hm4hO6P68dxXMMnABAhnERKgdgZBtEjQZpHTYsjnurPRhag5Gujyyb+MKZFy aNAV1WnPpszIgzxyDMyfhWOqPJEprezOwUVVH5EqmfqoiYyGhbMbdFwedJSas1dh gf9oKQ+hgAqml4wjA0HopHxGpa6ynjeYyyJPEDxSQ9Y19B98KIUFrO/rZfRGGPa0 mAtXE/0MF5hnPKS7XilNRC9vrl9VMHhiQ3HmQ4oy+gC73iaPVc9u7pprU3ffLL97 v6b3mrHnSuYaEm/57tT5ME7RQy0z/y7NcykSTG0sg3qA4rELIQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHnby39bZ9x/e7WezxEq2cq+4ErSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84NmIz NWY3MS01MWFjLTQzZmYtYjYwNC1jYmEzNTUyYzRjOGMvYzgwYzdmMjItYjNhYi0z NTQ4LTkwMjEtMjM2MWI2OWUzMDM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODZiMzVmNzEtNTFhYy00M2ZmLWI2 MDQtY2JhMzU1MmM0YzhjLzg2YjM1ZjcxLTUxYWMtNDNmZi1iNjA0LWNiYTM1NTJj NGM4Yy5jcmwwHwYDVR0jBBgwFoAUZJw9/tPfPWtnvG286QW8wGzmHNcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84NmIzNWY3MS01MWFjLTQzZmYtYjYwNC1jYmEz NTUyYzRjOGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgS0gAAS MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALgCL7uUqZapdDPYIrCwql95CtrYHyyh2UmJR2LKosH+4JfCdziR 8Q22FsTaq/Zq2uB1xjw9NWJzfIiEqf8ApVtGdNBJJ1k7eT/VFKBT7ie/AuAmb9n7 /MKNv+i1KjZc+A7nKhuqGW+oRxG/q8K2t4XQEaJX2xeKSfTp4xKT2Is4VWXzDocq pJnyENzHriqeweqXxmqY7XaPAz3q/rUPIIFV6yH12Cc+tzfzG4c+f1+SXP9giwQP s9iMIqf00SF1wutK9IwaL/A2wyENdZMerpcW54R3jReiTQ+qTfYq9ckVaxryEEFh CqwN8/cn1kIIKHL5FjAkLMwOQI7JhGT0J1k= -----END CERTIFICATE-----Generated at Sat Nov 1 03:44:45 2025 by rpki-client