$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621/8a504d20-acb4-356e-98ad-eecca8e4d734.roa File: 8a504d20-acb4-356e-98ad-eecca8e4d734.roa (raw, json) Hash identifier: 60D0DY9umal8vgSe/6chSitLIm7klCsYeXar6qArG4o= Subject key identifier: DB:7F:A0:D3:A8:AC:C3:9D:F7:0C:0C:04:A0:F8:11:F5:DE:3C:7B:7C Certificate issuer: /CN=917f98c2-cbd2-43de-a8cf-7091ad719621 Certificate serial: 010D0C9F4328584B970D070CFD1A832BF05562C0 Authority key identifier: 5D:92:48:68:AC:B1:85:67:D2:75:86:CA:93:F0:1D:52:F7:6C:FC:EF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621/8a504d20-acb4-356e-98ad-eecca8e4d734.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 0 IP address blocks: 2001:504:a0::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621/917f98c2-cbd2-43de-a8cf-7091ad719621.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621/917f98c2-cbd2-43de-a8cf-7091ad719621.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0d:07:0c:fd:1a:83:2b:f0:55:62:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=917f98c2-cbd2-43de-a8cf-7091ad719621 Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=fc31f219-1509-4535-9523-00a2e0c51c54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e3:af:16:de:ef:8a:f7:ff:4f:59:de:d3:38: 33:4c:17:c9:28:0f:07:ce:99:25:d9:44:ba:f0:b5: 69:d2:7a:ff:72:e8:43:d7:78:c7:58:26:58:42:ab: e0:c3:db:8c:60:70:7b:f6:8c:79:77:9f:64:92:90: 04:0c:8f:4c:4f:d7:43:41:96:20:76:0c:2b:e1:57: 65:15:2e:fa:dc:68:f2:47:da:e5:41:ae:79:c6:da: 88:b5:7a:83:fe:5b:ef:58:b3:d7:96:72:2e:0d:1a: 7d:82:91:ea:76:c1:8d:d4:b0:28:2f:16:dd:4a:c8: 22:f8:57:40:04:bd:94:3e:d8:da:9d:ed:b8:42:0b: bd:44:ba:cc:98:16:f0:92:ea:5a:66:6f:ef:56:dd: 94:51:1d:1c:6c:28:73:15:59:e7:d2:24:15:62:90: ce:9c:c5:6d:07:e9:36:de:de:8d:bd:bc:e5:82:68: 1b:43:3f:e8:cf:84:06:0a:c1:5f:93:3c:12:f1:61: 78:19:21:88:4c:5f:92:77:65:b5:ee:b9:f2:10:90: a0:fa:a3:4e:14:8b:a9:e9:ff:1a:0e:f0:95:8b:fe: f1:19:91:d9:22:64:be:6d:34:2a:0f:29:73:90:48: cc:f3:f5:9a:bb:27:28:2c:f2:46:4b:f6:18:b8:1c: 75:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:7F:A0:D3:A8:AC:C3:9D:F7:0C:0C:04:A0:F8:11:F5:DE:3C:7B:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621/8a504d20-acb4-356e-98ad-eecca8e4d734.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621/917f98c2-cbd2-43de-a8cf-7091ad719621.crl X509v3 Authority Key Identifier: keyid:5D:92:48:68:AC:B1:85:67:D2:75:86:CA:93:F0:1D:52:F7:6C:FC:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621.cer sbgp-ipAddrBlock: critical IPv6: 2001:504:a0::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:3c:d2:da:d5:13:e6:b2:bc:7f:a2:2b:65:f5:81:5b:e6:0d: ec:6e:fa:a0:1f:d3:73:18:81:b9:10:13:74:c9:80:da:54:6c: e3:a4:8a:e7:b7:c4:f7:c0:92:69:cf:ad:57:3a:38:20:3a:93: 33:00:f3:6c:da:e2:ff:ca:85:eb:95:d3:52:05:b4:17:13:bb: 53:2e:dd:78:32:23:89:1a:5b:a9:40:92:19:e3:df:ef:d4:c7: 9b:f6:6a:b6:26:41:55:d5:17:60:24:ab:85:8b:93:b5:b5:7d: e1:8e:6b:17:08:e0:d8:76:20:14:d4:9e:0e:11:06:cd:ae:ec: 71:ee:29:79:98:0d:5a:79:6d:86:17:87:9c:22:55:12:4a:bb: f6:72:45:e4:94:ba:bc:cd:4e:3d:a6:09:e9:8d:a8:18:6c:1f: eb:b0:57:aa:ec:c6:6d:8d:b5:c7:ea:11:de:8c:31:e2:88:fb: 5e:2c:86:ea:7b:23:2c:b9:8e:10:e5:53:70:62:3e:80:14:88: b9:99:22:f2:84:d2:8f:7e:42:61:71:b3:f2:82:c1:13:52:02: a3:37:3a:5a:f5:59:cb:37:04:74:94:20:ba:1e:f3:b2:0f:ff: 03:b7:3b:09:4a:05:b6:9b:91:a7:2e:83:23:b8:65:9a:4d:1c: 3c:3b:0e:f3 -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWEuXDQcM/RqDK/BVYsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE3Zjk4YzItY2JkMi00M2RlLWE4Y2YtNzA5MWFkNzE5 NjIxMB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk ZmMzMWYyMTktMTUwOS00NTM1LTk1MjMtMDBhMmUwYzUxYzU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOOvFt7vivf/T1ne0zgzTBfJKA8Hzpkl2US6 8LVp0nr/cuhD13jHWCZYQqvgw9uMYHB79ox5d59kkpAEDI9MT9dDQZYgdgwr4Vdl FS763GjyR9rlQa55xtqItXqD/lvvWLPXlnIuDRp9gpHqdsGN1LAoLxbdSsgi+FdA BL2UPtjane24Qgu9RLrMmBbwkupaZm/vVt2UUR0cbChzFVnn0iQVYpDOnMVtB+k2 3t6NvbzlgmgbQz/oz4QGCsFfkzwS8WF4GSGITF+Sd2W17rnyEJCg+qNOFIup6f8a DvCVi/7xGZHZImS+bTQqDylzkEjM8/WauycoLPJGS/YYuBx1+QIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFNt/oNOorMOd9wwMBKD4EfXePHt8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MTdm OThjMi1jYmQyLTQzZGUtYThjZi03MDkxYWQ3MTk2MjEvOGE1MDRkMjAtYWNiNC0z NTZlLTk4YWQtZWVjY2E4ZTRkNzM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTE3Zjk4YzItY2JkMi00M2RlLWE4 Y2YtNzA5MWFkNzE5NjIxLzkxN2Y5OGMyLWNiZDItNDNkZS1hOGNmLTcwOTFhZDcx OTYyMS5jcmwwHwYDVR0jBBgwFoAUXZJIaKyxhWfSdYbKk/AdUvds/O8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MTdmOThjMi1jYmQyLTQzZGUtYThjZi03MDkx YWQ3MTk2MjEuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAIAEFBACg AAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEARjzS2tUT5rK8f6IrZfWBW+YN7G76oB/TcxiBuRATdMmA2lRs 46SK57fE98CSac+tVzo4IDqTMwDzbNri/8qF65XTUgW0FxO7Uy7deDIjiRpbqUCS GePf79THm/ZqtiZBVdUXYCSrhYuTtbV94Y5rFwjg2HYgFNSeDhEGza7sce4peZgN WnlthheHnCJVEkq79nJF5JS6vM1OPaYJ6Y2oGGwf67BXquzGbY21x+oR3owx4oj7 XiyG6nsjLLmOEOVTcGI+gBSIuZki8oTSj35CYXGz8oLBE1ICozc6WvVZyzcEdJQg uh7zsg//A7c7CUoFtpuRpy6DI7hlmk0cPDsO8w== -----END CERTIFICATE-----Generated at Wed Nov 5 09:18:31 2025 by rpki-client