$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/a3f11860-68fa-3387-b9fd-715d801b2410.roa File: a3f11860-68fa-3387-b9fd-715d801b2410.roa (raw, json) Hash identifier: ey86EqSqBISyfJLtjvi78l4bC7DzIyLcbnO3k0TjeFM= Subject key identifier: FF:50:C3:79:B6:C6:6F:75:69:63:F1:5B:17:97:C3:ED:C9:27:CB:86 Certificate issuer: /CN=8eda9035-7c9b-45a0-b98b-a45be535f082 Certificate serial: 010D0C9F4328584BA93255DB2FDFC005F0FBE600 Authority key identifier: 64:FD:D2:B4:D5:A9:0A:A0:F5:66:68:E4:2B:96:51:54:E7:7A:66:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/a3f11860-68fa-3387-b9fd-715d801b2410.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 399728 IP address blocks: 2620:98:e004::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:55:db:2f:df:c0:05:f0:fb:e6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8eda9035-7c9b-45a0-b98b-a45be535f082 Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=3fe6ef5f-7649-43e6-8e68-d283c48348b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1b:01:f3:f3:ab:98:14:fc:30:cf:98:56:0b: 26:b9:b9:7e:5a:df:05:f8:0d:1b:06:ff:02:36:fb: 9e:21:29:e6:40:3a:55:6a:ee:71:70:ac:78:ff:49: 40:da:d5:79:45:25:5f:14:57:56:81:f5:84:8f:bb: e6:ca:78:b4:74:77:bb:8a:56:66:fa:ac:78:a4:a2: 4b:33:60:8d:ab:fd:27:f7:ed:e2:23:77:dc:7e:ec: 2b:25:72:62:78:9e:78:f5:47:99:b0:98:a5:82:c0: de:fc:b6:5a:a3:f1:d8:3e:53:20:5f:c0:57:f8:6b: e2:40:1b:05:e8:55:e7:16:e6:38:ed:11:8a:db:ed: 3f:7d:48:39:28:a8:bc:5e:9e:40:5f:7c:3a:b4:87: eb:71:31:bb:d8:94:f4:87:a7:27:63:81:31:70:4d: 68:fb:d8:3a:da:d3:88:2c:a1:77:02:4b:01:01:ab: fe:f4:ff:0b:0d:8d:30:19:66:cc:1a:0e:5d:0f:cc: 66:50:e6:1a:cb:b6:e1:59:d6:78:28:f1:a4:5e:e7: ff:1f:a7:31:23:97:b4:68:09:9a:13:fa:9a:6b:92: ba:36:72:eb:b2:7f:79:9e:a2:a9:5c:28:f7:cf:16: 03:15:c3:51:25:ba:32:46:b9:8c:3b:be:16:8b:1c: 95:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:50:C3:79:B6:C6:6F:75:69:63:F1:5B:17:97:C3:ED:C9:27:CB:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/a3f11860-68fa-3387-b9fd-715d801b2410.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.crl X509v3 Authority Key Identifier: keyid:64:FD:D2:B4:D5:A9:0A:A0:F5:66:68:E4:2B:96:51:54:E7:7A:66:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer sbgp-ipAddrBlock: critical IPv6: 2620:98:e004::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:2f:45:3a:4b:38:a8:3b:21:84:9d:5d:f0:47:04:e4:ba:54: 0c:b6:2c:bc:a5:5d:89:52:90:14:70:14:99:59:ee:5a:af:dd: d7:a9:e1:a5:94:cf:62:02:44:33:b0:d6:e5:ed:a3:1d:e3:95: 81:51:3c:de:ed:13:7e:f1:be:57:10:65:e1:0d:86:99:23:ac: 0e:a0:7f:92:9d:a1:06:46:93:d1:da:ee:1d:b0:95:a5:2c:ae: ec:77:ca:52:b6:43:ed:be:e7:b6:b6:46:74:e2:1f:4e:8a:c3: 74:9d:d3:92:c0:2c:ca:e8:02:15:e0:5f:11:40:92:28:7b:5f: ff:67:b0:a3:28:4a:8a:4d:7f:af:aa:08:45:93:e7:f0:c2:7b: 34:f7:71:e2:70:d7:b3:aa:95:08:35:1f:64:fd:9c:8a:49:f3: ad:f9:b7:4e:53:c5:9b:99:79:ad:18:f1:8c:76:d6:74:de:32: 39:30:57:c9:21:f5:49:a7:0c:7a:92:0b:1b:3f:17:47:34:c8: 2a:dd:33:e5:e8:cb:0c:f6:f7:8e:64:93:2d:2e:c1:58:fe:2e: 61:35:6e:13:a0:8b:5d:3a:f2:ff:6a:c9:76:97:b9:ac:d6:76: 13:37:43:c3:36:7c:fb:26:30:f4:1a:33:4c:e1:af:79:3d:fe: 63:fa:ac:51 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEupMlXbL9/ABfD75gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGVkYTkwMzUtN2M5Yi00NWEwLWI5OGItYTQ1YmU1MzVm MDgyMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk M2ZlNmVmNWYtNzY0OS00M2U2LThlNjgtZDI4M2M0ODM0OGIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBsB8/OrmBT8MM+YVgsmubl+Wt8F+A0bBv8C NvueISnmQDpVau5xcKx4/0lA2tV5RSVfFFdWgfWEj7vmyni0dHe7ilZm+qx4pKJL M2CNq/0n9+3iI3fcfuwrJXJieJ549UeZsJilgsDe/LZao/HYPlMgX8BX+GviQBsF 6FXnFuY47RGK2+0/fUg5KKi8Xp5AX3w6tIfrcTG72JT0h6cnY4ExcE1o+9g62tOI LKF3AksBAav+9P8LDY0wGWbMGg5dD8xmUOYay7bhWdZ4KPGkXuf/H6cxI5e0aAma E/qaa5K6NnLrsn95nqKpXCj3zxYDFcNRJboyRrmMO74WixyVAwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFP9Qw3m2xm91aWPxWxeXw+3JJ8uGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZWRh OTAzNS03YzliLTQ1YTAtYjk4Yi1hNDViZTUzNWYwODIvYTNmMTE4NjAtNjhmYS0z Mzg3LWI5ZmQtNzE1ZDgwMWIyNDEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGVkYTkwMzUtN2M5Yi00NWEwLWI5 OGItYTQ1YmU1MzVmMDgyLzhlZGE5MDM1LTdjOWItNDVhMC1iOThiLWE0NWJlNTM1 ZjA4Mi5jcmwwHwYDVR0jBBgwFoAUZP3StNWpCqD1ZmjkK5ZRVOd6ZnMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZWRhOTAzNS03YzliLTQ1YTAtYjk4Yi1hNDVi ZTUzNWYwODIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAmOAE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGIvRTpLOKg7IYSdXfBHBOS6VAy2LLylXYlSkBRwFJlZ7lqv3dep 4aWUz2ICRDOw1uXtox3jlYFRPN7tE37xvlcQZeENhpkjrA6gf5KdoQZGk9Ha7h2w laUsrux3ylK2Q+2+57a2RnTiH06Kw3Sd05LALMroAhXgXxFAkih7X/9nsKMoSopN f6+qCEWT5/DCezT3ceJw17OqlQg1H2T9nIpJ8635t05TxZuZea0Y8Yx21nTeMjkw V8kh9UmnDHqSCxs/F0c0yCrdM+Xoywz2945kky0uwVj+LmE1bhOgi1068v9qyXaX uazWdhM3Q8M2fPsmMPQaM0zhr3k9/mP6rFE= -----END CERTIFICATE-----Generated at Wed Nov 5 10:06:37 2025 by rpki-client