$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/094a52c0-3cf2-3dc5-9242-e0e5db445d48.roa File: 094a52c0-3cf2-3dc5-9242-e0e5db445d48.roa (raw, json) Hash identifier: Zoy01COnlt4t/dk7CCDqiTe1EaZfPdo6udEFhcU7mK4= Subject key identifier: 13:E0:DC:16:2A:A1:8D:C0:E8:3A:2D:68:54:16:7A:97:A7:06:0F:22 Certificate issuer: /CN=dc8dacf3-283f-4888-8217-ee30c6e58c44 Certificate serial: 010D0C9F4328584BA0D23FF640F9C8F8620778C0 Authority key identifier: BC:78:88:8A:0C:C4:26:DC:74:DC:53:A1:5F:F0:3B:F8:4A:D7:51:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/094a52c0-3cf2-3dc5-9242-e0e5db445d48.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 14434 IP address blocks: 2607:8580::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/dc8dacf3-283f-4888-8217-ee30c6e58c44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/dc8dacf3-283f-4888-8217-ee30c6e58c44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:3f:f6:40:f9:c8:f8:62:07:78:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc8dacf3-283f-4888-8217-ee30c6e58c44 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=0d956f8f-bee4-4dcb-a4cb-846407eba998 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:37:9b:40:37:14:62:ec:6d:d3:67:93:f8:61: b2:0d:4a:f8:c6:59:0c:ac:1c:ab:1a:70:ee:aa:ae: 89:c2:45:ee:7f:64:2e:de:a6:d8:29:8e:0e:d7:83: 54:9a:58:b1:b3:15:62:d4:ca:d7:19:52:79:a6:52: 61:01:98:28:6b:b5:03:51:d7:54:18:7d:0a:09:df: 2c:67:c5:61:cf:ea:db:38:42:60:d1:7f:ca:9a:e7: da:ca:90:f9:61:25:2c:05:0e:93:5e:31:39:cc:83: f9:7d:c4:8d:96:9c:e5:3e:7f:8b:79:26:c1:39:6a: e3:b0:98:49:27:a3:c6:c0:a1:a7:5c:fe:62:9e:49: ae:94:eb:d5:1f:33:e5:3f:4d:ca:4f:77:0e:51:7b: 8f:54:31:76:75:31:63:f1:9b:12:2f:15:d0:e8:d6: 6d:84:54:2b:1f:03:53:6c:3c:a3:ef:dd:52:50:0d: f4:9c:25:4f:c3:54:7f:96:f7:17:37:22:c0:22:0e: 43:ce:a5:55:79:da:37:8e:03:4b:d5:28:0b:16:58: 7c:ce:89:4e:b2:41:e1:5a:31:15:1d:c2:cb:50:bc: 8c:54:68:8f:89:27:60:cf:06:38:90:bd:90:ff:6f: 17:65:01:4d:47:9d:47:80:b2:1c:6c:a1:c8:ba:0f: b6:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:E0:DC:16:2A:A1:8D:C0:E8:3A:2D:68:54:16:7A:97:A7:06:0F:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/094a52c0-3cf2-3dc5-9242-e0e5db445d48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/dc8dacf3-283f-4888-8217-ee30c6e58c44.crl X509v3 Authority Key Identifier: keyid:BC:78:88:8A:0C:C4:26:DC:74:DC:53:A1:5F:F0:3B:F8:4A:D7:51:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44.cer sbgp-ipAddrBlock: critical IPv6: 2607:8580::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:86:61:4c:3a:c1:79:38:d2:f3:4c:de:03:8b:32:48:23:cd: ee:7d:1d:2e:87:b6:63:c7:c5:e5:ca:83:67:95:f0:27:5c:06: cd:63:42:fd:d4:98:8b:c9:2b:4e:36:53:db:ed:fb:cf:17:b7: 64:8d:0c:28:29:ed:c1:9a:b1:ea:65:c6:34:b7:e7:36:e8:86: ba:26:ab:c3:b1:67:4b:bc:fc:b8:a7:94:47:53:1d:f3:19:db: 09:96:4c:15:fc:04:32:59:cd:27:0f:af:4c:a7:1a:bd:fe:be: 07:48:27:17:25:95:cd:e7:e1:0f:33:98:33:e9:4d:71:b4:65: 92:fa:9d:35:55:ea:0c:22:29:aa:c6:23:65:00:d6:b6:4a:8d: f2:ac:fd:c4:0b:e6:a6:ce:04:36:58:86:74:ea:f5:f5:0a:c0: 71:50:81:5d:18:f9:92:89:f7:01:a0:f8:82:18:7a:84:b4:4e: 70:00:82:f8:08:f4:f5:68:28:70:be:8a:79:dc:4a:b2:44:bb: 81:84:e5:42:cb:14:cd:66:c9:d7:97:f2:65:4e:f1:e7:d9:45: 1d:dd:b8:34:b1:6e:7a:ea:45:e9:70:b9:09:2b:c9:0e:3b:93: 68:28:8f:d1:f1:98:4d:71:71:4f:a2:25:d5:3d:6d:f4:66:c1: 0f:6f:82:1e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEug0j/2QPnI+GIHeMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM4ZGFjZjMtMjgzZi00ODg4LTgyMTctZWUzMGM2ZTU4 YzQ0MB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk MGQ5NTZmOGYtYmVlNC00ZGNiLWE0Y2ItODQ2NDA3ZWJhOTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijebQDcUYuxt02eT+GGyDUr4xlkMrByrGnDu qq6JwkXuf2Qu3qbYKY4O14NUmlixsxVi1MrXGVJ5plJhAZgoa7UDUddUGH0KCd8s Z8Vhz+rbOEJg0X/KmufaypD5YSUsBQ6TXjE5zIP5fcSNlpzlPn+LeSbBOWrjsJhJ J6PGwKGnXP5inkmulOvVHzPlP03KT3cOUXuPVDF2dTFj8ZsSLxXQ6NZthFQrHwNT bDyj791SUA30nCVPw1R/lvcXNyLAIg5DzqVVedo3jgNL1SgLFlh8zolOskHhWjEV HcLLULyMVGiPiSdgzwY4kL2Q/28XZQFNR51HgLIcbKHIug+2bwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBPg3BYqoY3A6DotaFQWepenBg8iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kYzhk YWNmMy0yODNmLTQ4ODgtODIxNy1lZTMwYzZlNThjNDQvMDk0YTUyYzAtM2NmMi0z ZGM1LTkyNDItZTBlNWRiNDQ1ZDQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGM4ZGFjZjMtMjgzZi00ODg4LTgy MTctZWUzMGM2ZTU4YzQ0L2RjOGRhY2YzLTI4M2YtNDg4OC04MjE3LWVlMzBjNmU1 OGM0NC5jcmwwHwYDVR0jBBgwFoAUvHiIigzEJtx03FOhX/A7+ErXURMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kYzhkYWNmMy0yODNmLTQ4ODgtODIxNy1lZTMw YzZlNThjNDQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgeFgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAkhmFMOsF5ONLzTN4DizJII83ufR0uh7Zjx8XlyoNnlfAnXAbNY0L9 1JiLyStONlPb7fvPF7dkjQwoKe3BmrHqZcY0t+c26Ia6JqvDsWdLvPy4p5RHUx3z GdsJlkwV/AQyWc0nD69Mpxq9/r4HSCcXJZXN5+EPM5gz6U1xtGWS+p01VeoMIimq xiNlANa2So3yrP3EC+amzgQ2WIZ06vX1CsBxUIFdGPmSifcBoPiCGHqEtE5wAIL4 CPT1aChwvop53EqyRLuBhOVCyxTNZsnXl/JlTvHn2UUd3bg0sW566kXpcLkJK8kO O5NoKI/R8ZhNcXFPoiXVPW30ZsEPb4Ie -----END CERTIFICATE-----Generated at Wed Nov 5 13:49:07 2025 by rpki-client