$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/dfe95880-e08c-3c88-ba0f-676ebf56bd93.roa File: dfe95880-e08c-3c88-ba0f-676ebf56bd93.roa (raw, json) Hash identifier: 7xw5BhU1nfD6c8gQC8HZ79UBeOCVJ9cTRI8LTDS4PBE= Subject key identifier: 27:B6:86:51:1A:F7:90:F5:05:4C:BE:EB:D4:55:3E:D5:8F:4E:22:83 Certificate issuer: /CN=8322c61d-99cf-48fc-b867-b2c2cce4d324 Certificate serial: 010D0C9F4328584BB45D306D17C33DF1CD72DD60 Authority key identifier: 23:EC:CD:25:07:2E:B6:D8:45:A9:F0:04:86:BA:91:6D:90:8F:B8:FA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/dfe95880-e08c-3c88-ba0f-676ebf56bd93.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 8075 IP address blocks: 2606:e540:c01::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/8322c61d-99cf-48fc-b867-b2c2cce4d324.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/8322c61d-99cf-48fc-b867-b2c2cce4d324.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:30:6d:17:c3:3d:f1:cd:72:dd:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8322c61d-99cf-48fc-b867-b2c2cce4d324 Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=bc896787-4493-4dcd-a969-98f5da19f96f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:af:cf:8e:16:9b:13:8f:85:2e:d0:cd:47:cc: 92:9f:3a:f1:1e:46:fd:37:8a:bb:a8:97:73:cf:43: dc:5e:f6:a3:52:bb:c9:d8:a1:f8:b3:50:d3:ee:04: ba:48:c2:d6:af:96:54:5f:f8:b8:3e:12:4e:74:72: 0d:5c:a2:95:fe:1c:be:4f:67:96:a2:e8:29:59:32: 28:cf:a1:50:df:fb:44:73:72:b3:bf:fb:85:f4:29: e7:c3:b4:7b:3e:0c:81:72:a8:1d:d0:84:06:a2:f6: 47:58:24:61:d8:85:8b:5c:48:7b:83:f6:e5:45:fa: ed:c8:c7:11:22:5a:a7:09:42:93:13:0d:67:ee:09: c4:06:ba:e1:65:34:3c:0c:0f:1c:3d:f4:24:03:03: 9c:ca:f0:6a:5b:4a:b7:eb:f1:7a:4b:81:ce:59:d5: 1b:da:f1:35:e9:43:75:b6:8a:58:61:e8:b5:bb:af: bb:21:13:9a:f2:ff:ef:f8:00:9f:53:08:36:c3:24: 31:4b:17:86:cf:9f:42:83:bc:c5:d1:06:8d:fc:f1: 4f:61:89:cd:d5:12:11:c3:95:ea:b2:53:d7:60:2d: 07:c3:f4:d7:0b:12:11:39:94:9f:1b:ec:86:d3:7a: f0:16:9e:b5:43:e1:1f:cc:f5:4f:00:c4:15:a8:86: be:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:B6:86:51:1A:F7:90:F5:05:4C:BE:EB:D4:55:3E:D5:8F:4E:22:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/dfe95880-e08c-3c88-ba0f-676ebf56bd93.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/8322c61d-99cf-48fc-b867-b2c2cce4d324.crl X509v3 Authority Key Identifier: keyid:23:EC:CD:25:07:2E:B6:D8:45:A9:F0:04:86:BA:91:6D:90:8F:B8:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324.cer sbgp-ipAddrBlock: critical IPv6: 2606:e540:c01::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:24:c5:4d:8a:01:d1:23:e3:d9:5c:24:78:44:f7:12:7a:65: d0:bd:df:51:62:9a:30:2d:d0:70:75:a0:8f:02:f6:8c:36:4d: 5e:19:f2:d4:25:dc:42:cb:3d:55:41:eb:8f:4f:fb:6d:63:50: 24:9d:04:b5:c8:c4:44:a8:f9:9f:fa:aa:d7:a5:1f:46:26:7f: 6f:35:3b:ff:c9:34:a5:2f:49:39:d7:16:a3:7a:04:52:d3:83: 11:67:b9:4d:6f:8a:7c:4b:a5:69:f2:4a:35:f4:55:fb:1e:d4: fa:75:78:a0:a1:e4:c8:7e:12:bb:40:e9:a4:5e:28:7f:3f:b8: 90:21:a1:54:60:5e:04:09:f3:de:cd:60:dc:bb:79:fb:f5:cc: 63:5e:90:f6:ec:b3:d8:72:1b:16:93:b9:b7:56:e4:b9:f8:a6: 1e:4c:30:c0:13:76:61:4e:6b:d2:0f:d0:3c:73:72:82:09:f6: 44:f9:72:1c:68:32:6b:4d:d6:c0:71:3b:a9:31:76:25:9c:28: 77:bc:df:41:fb:22:f7:50:94:3f:69:f4:7f:03:ef:a2:db:1d: 34:96:d3:cb:1e:ac:57:66:81:cd:fb:78:28:ef:20:35:3e:f6: f8:f6:18:27:82:e5:3e:de:23:59:93:a9:5a:d7:22:09:22:42: 9d:2b:b0:3f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEu0XTBtF8M98c1y3WAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMyMmM2MWQtOTljZi00OGZjLWI4NjctYjJjMmNjZTRk MzI0MB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk YmM4OTY3ODctNDQ5My00ZGNkLWE5NjktOThmNWRhMTlmOTZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAna/PjhabE4+FLtDNR8ySnzrxHkb9N4q7qJdz z0PcXvajUrvJ2KH4s1DT7gS6SMLWr5ZUX/i4PhJOdHINXKKV/hy+T2eWougpWTIo z6FQ3/tEc3Kzv/uF9Cnnw7R7PgyBcqgd0IQGovZHWCRh2IWLXEh7g/blRfrtyMcR IlqnCUKTEw1n7gnEBrrhZTQ8DA8cPfQkAwOcyvBqW0q36/F6S4HOWdUb2vE16UN1 topYYei1u6+7IROa8v/v+ACfUwg2wyQxSxeGz59Cg7zF0QaN/PFPYYnN1RIRw5Xq slPXYC0Hw/TXCxIROZSfG+yG03rwFp61Q+EfzPVPAMQVqIa+QwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCe2hlEa95D1BUy+69RVPtWPTiKDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MzIy YzYxZC05OWNmLTQ4ZmMtYjg2Ny1iMmMyY2NlNGQzMjQvZGZlOTU4ODAtZTA4Yy0z Yzg4LWJhMGYtNjc2ZWJmNTZiZDkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODMyMmM2MWQtOTljZi00OGZjLWI4 NjctYjJjMmNjZTRkMzI0LzgzMjJjNjFkLTk5Y2YtNDhmYy1iODY3LWIyYzJjY2U0 ZDMyNC5jcmwwHwYDVR0jBBgwFoAUI+zNJQcutthFqfAEhrqRbZCPuPowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MzIyYzYxZC05OWNmLTQ4ZmMtYjg2Ny1iMmMy Y2NlNGQzMjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgblQAwB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFwkxU2KAdEj49lcJHhE9xJ6ZdC931FimjAt0HB1oI8C9ow2TV4Z 8tQl3ELLPVVB649P+21jUCSdBLXIxESo+Z/6qtelH0Ymf281O//JNKUvSTnXFqN6 BFLTgxFnuU1vinxLpWnySjX0Vfse1Pp1eKCh5Mh+ErtA6aReKH8/uJAhoVRgXgQJ 897NYNy7efv1zGNekPbss9hyGxaTubdW5Ln4ph5MMMATdmFOa9IP0DxzcoIJ9kT5 chxoMmtN1sBxO6kxdiWcKHe830H7IvdQlD9p9H8D76LbHTSW08serFdmgc37eCjv IDU+9vj2GCeC5T7eI1mTqVrXIgkiQp0rsD8= -----END CERTIFICATE-----Generated at Wed Nov 5 03:49:40 2025 by rpki-client