$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f/0a8bf32e-5cd1-3122-963a-91125458622e.roa File: 0a8bf32e-5cd1-3122-963a-91125458622e.roa (raw, json) Hash identifier: M/ecmiMwx+ajKnK6inZeoIuLUHO1rbdEeYBR9bXTtHY= Subject key identifier: BF:93:3D:3F:DD:A0:D6:7D:80:D2:D1:4D:20:BC:8B:5F:C4:5B:5A:A8 Certificate issuer: /CN=3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f Certificate serial: 010D0C9F4328584BB88D22E6CE2B86635131EA00 Authority key identifier: 44:D8:08:BE:65:B2:3D:54:D0:2C:EA:50:56:50:09:BB:D8:D5:7D:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f/0a8bf32e-5cd1-3122-963a-91125458622e.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 394086 IP address blocks: 2607:d640::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:22:e6:ce:2b:86:63:51:31:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=065cc21e-1250-4fd6-b606-d31c3c87cd10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:1c:59:00:91:16:16:38:af:12:9c:fe:ac:7b: 85:56:f0:9c:8b:a6:eb:c9:87:eb:49:5c:9e:ba:ab: 6a:07:72:af:68:d7:82:99:81:a9:b9:b3:f7:4c:c7: 8c:df:b9:5f:34:09:ba:cf:2d:f2:58:43:ef:26:47: cd:0e:19:d4:e8:7d:f5:d5:ef:0c:88:88:ae:92:f1: 70:7c:21:50:ea:df:3c:dc:f0:2f:24:b3:b5:08:41: ae:02:8a:72:e4:d7:21:17:f9:15:bd:c6:24:aa:bb: 8f:9c:ac:7e:54:76:66:9a:e8:5f:62:fc:ac:66:d9: 45:83:0f:d4:25:d2:c1:77:9a:03:21:c6:41:24:70: 92:80:05:10:8c:35:d0:97:c1:5b:95:f4:e2:31:19: ee:38:c7:90:b1:92:45:b7:18:dc:32:d4:dc:a3:21: 72:3c:3f:db:80:29:66:07:56:71:eb:fe:ed:47:02: 26:6c:c9:1c:7c:15:cb:81:53:41:c5:50:64:2b:d7: 8f:ed:42:f5:ec:db:e0:bb:51:76:ec:6f:67:5b:91: a9:5e:60:30:86:71:4b:41:6a:d8:a8:03:a0:88:4a: 4e:2a:92:ad:7d:28:fb:72:ec:9b:77:18:e9:e7:9d: ab:18:8e:0c:ea:36:d6:03:2b:ce:79:d2:2f:16:04: b0:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:93:3D:3F:DD:A0:D6:7D:80:D2:D1:4D:20:BC:8B:5F:C4:5B:5A:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f/0a8bf32e-5cd1-3122-963a-91125458622e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f.crl X509v3 Authority Key Identifier: keyid:44:D8:08:BE:65:B2:3D:54:D0:2C:EA:50:56:50:09:BB:D8:D5:7D:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f.cer sbgp-ipAddrBlock: critical IPv6: 2607:d640::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:d4:74:66:84:84:79:dc:c3:04:2d:b0:7e:d9:da:8b:cd:ca: cd:29:96:e0:d5:78:18:5b:5e:94:60:58:71:d8:a2:ed:42:7e: a6:f1:6e:4a:b9:d5:bb:60:fb:00:e8:22:3e:dd:d9:ec:35:5b: 7e:11:87:2c:06:47:5f:fd:b0:e0:3c:51:74:77:b7:9f:32:b4: 84:d1:f2:1b:1d:d3:f1:46:62:09:c6:ce:38:4f:2c:a0:ef:d6: 82:10:68:c2:17:34:42:26:b6:30:52:f8:04:88:7d:c6:35:19: 9f:df:2e:4f:78:6c:3c:73:fe:67:62:eb:cc:8b:fc:98:5f:8a: 1d:1e:4a:70:70:27:87:4d:64:56:79:ce:a3:e8:1e:7e:be:1a: ce:1d:e8:9d:5a:2f:ae:6b:e2:16:cb:1b:3d:cb:06:01:1b:15: 6c:7d:40:e1:1c:18:8b:5f:6e:ec:ce:0e:f4:74:e2:3d:9c:23: 8e:3c:4d:b6:e1:69:c6:70:ca:0c:0c:52:b8:40:b2:2c:5b:36: 5b:ac:5d:1b:10:8f:c0:73:3e:b5:d7:60:9e:49:d3:ff:c1:c0: 9b:18:89:2f:18:00:f8:49:a1:78:16:8d:c4:f3:6b:a8:2c:21: a0:5d:7f:10:2c:f7:f1:62:6b:6b:02:fa:6a:7e:4a:9d:c2:f9: 8e:b9:84:15 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEu4jSLmziuGY1Ex6gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2RjNjZjNWUtMjNhYi00NGNkLTg3OGEtNGU3NmNiMGQ3 YjRmMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk MDY1Y2MyMWUtMTI1MC00ZmQ2LWI2MDYtZDMxYzNjODdjZDEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBxZAJEWFjivEpz+rHuFVvCci6bryYfrSVye uqtqB3KvaNeCmYGpubP3TMeM37lfNAm6zy3yWEPvJkfNDhnU6H311e8MiIiukvFw fCFQ6t883PAvJLO1CEGuAopy5NchF/kVvcYkqruPnKx+VHZmmuhfYvysZtlFgw/U JdLBd5oDIcZBJHCSgAUQjDXQl8FblfTiMRnuOMeQsZJFtxjcMtTcoyFyPD/bgClm B1Zx6/7tRwImbMkcfBXLgVNBxVBkK9eP7UL17Nvgu1F27G9nW5GpXmAwhnFLQWrY qAOgiEpOKpKtfSj7cuybdxjp552rGI4M6jbWAyvOedIvFgSw1wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFL+TPT/doNZ9gNLRTSC8i1/EW1qoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zZGM2 NmM1ZS0yM2FiLTQ0Y2QtODc4YS00ZTc2Y2IwZDdiNGYvMGE4YmYzMmUtNWNkMS0z MTIyLTk2M2EtOTExMjU0NTg2MjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvM2RjNjZjNWUtMjNhYi00NGNkLTg3 OGEtNGU3NmNiMGQ3YjRmLzNkYzY2YzVlLTIzYWItNDRjZC04NzhhLTRlNzZjYjBk N2I0Zi5jcmwwHwYDVR0jBBgwFoAURNgIvmWyPVTQLOpQVlAJu9jVfWEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zZGM2NmM1ZS0yM2FiLTQ0Y2QtODc4YS00ZTc2 Y2IwZDdiNGYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgfWQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAk1HRmhIR53MMELbB+2dqLzcrNKZbg1XgYW16UYFhx2KLtQn6m8W5K udW7YPsA6CI+3dnsNVt+EYcsBkdf/bDgPFF0d7efMrSE0fIbHdPxRmIJxs44Tyyg 79aCEGjCFzRCJrYwUvgEiH3GNRmf3y5PeGw8c/5nYuvMi/yYX4odHkpwcCeHTWRW ec6j6B5+vhrOHeidWi+ua+IWyxs9ywYBGxVsfUDhHBiLX27szg70dOI9nCOOPE22 4WnGcMoMDFK4QLIsWzZbrF0bEI/Acz6112CeSdP/wcCbGIkvGAD4SaF4Fo3E82uo LCGgXX8QLPfxYmtrAvpqfkqdwvmOuYQV -----END CERTIFICATE-----Generated at Wed Nov 5 11:10:50 2025 by rpki-client