$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/3298ccb7-3e7b-34a9-9598-33fdbbcd656e.roa File: 3298ccb7-3e7b-34a9-9598-33fdbbcd656e.roa (raw, json) Hash identifier: Ixi951yWQh8dc4ApR8z4YFImCaTvKp1HIqq3nQFWjow= Subject key identifier: B6:20:84:72:3C:17:D9:4C:49:FE:60:CB:A4:C9:D1:49:44:46:C2:77 Certificate issuer: /CN=802313e6-56bf-4fd8-ae0d-c9e057d3b398 Certificate serial: 010D0C9F4328584BB2F7AD52F00DBB1575F4C2C0 Authority key identifier: E8:DC:7C:C9:B6:EA:DB:6E:E0:AC:F7:EA:AC:D0:87:66:EA:D5:BB:68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/3298ccb7-3e7b-34a9-9598-33fdbbcd656e.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 0 IP address blocks: 2607:fe80::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:ad:52:f0:0d:bb:15:75:f4:c2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=802313e6-56bf-4fd8-ae0d-c9e057d3b398 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=2511feef-bbdd-4572-b592-2b1d844ddb63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:b4:7c:f3:ea:9c:f2:ca:d9:47:0e:3f:d8:a6: 3d:19:53:6e:0e:16:af:23:04:cd:f9:85:2b:c8:de: 9c:93:20:76:e9:9a:97:eb:ed:4f:bb:71:54:d2:e1: 3c:ac:6b:40:30:02:01:54:3b:37:58:34:9f:42:cd: 72:ca:06:57:33:f2:f5:06:4f:da:05:0d:8d:1e:29: 5d:81:a3:de:70:c4:0a:b2:ee:a3:0c:c7:50:1f:32: 54:c3:69:52:9e:4e:ad:2c:4f:f8:4a:f0:12:0b:5b: 89:00:ef:96:02:1b:f6:ae:9b:8b:92:26:18:36:cb: 57:e2:49:da:c8:64:20:71:9a:54:66:41:00:02:58: 7b:ec:52:f3:84:36:65:ad:c5:92:97:5a:72:20:61: e9:d7:7d:a2:10:90:47:7a:70:30:6b:e2:0b:59:5f: 59:48:ea:38:b7:5b:f1:64:27:9a:59:4f:62:a0:52: c2:8a:ed:70:59:e4:43:fc:04:8a:9c:37:00:d5:c9: 24:80:3a:cd:a1:d7:73:9b:59:c9:1a:9a:1e:a4:4c: bf:d9:2b:0c:5f:f3:47:5f:4f:1b:b1:24:bf:a6:bf: 6d:e4:e9:d5:9e:2d:6a:5f:d0:e3:8c:ad:5f:38:c7: 5e:06:da:29:4b:3c:d7:9f:1c:57:38:d4:74:b3:e1: d8:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:20:84:72:3C:17:D9:4C:49:FE:60:CB:A4:C9:D1:49:44:46:C2:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/3298ccb7-3e7b-34a9-9598-33fdbbcd656e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.crl X509v3 Authority Key Identifier: keyid:E8:DC:7C:C9:B6:EA:DB:6E:E0:AC:F7:EA:AC:D0:87:66:EA:D5:BB:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer sbgp-ipAddrBlock: critical IPv6: 2607:fe80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:f8:86:17:a5:d0:00:70:b8:66:3a:4d:eb:97:2d:36:39:35: 3e:5a:77:b0:3d:98:d3:52:a1:e2:c0:13:df:48:38:1e:66:1e: 79:7d:ea:18:75:20:bc:92:4f:e7:5d:a5:09:a2:00:7f:64:37: 68:ab:b9:65:98:1c:c3:84:3b:2e:3d:e0:ea:8d:ef:80:57:69: 29:0a:70:e6:96:aa:e3:f1:71:13:26:f8:c4:74:2b:22:d7:2f: 2d:54:24:35:98:7e:b4:e5:97:1a:26:e4:2b:12:c8:85:6f:b4: d1:8b:de:71:67:25:e9:a4:17:1b:31:8f:77:0b:29:9c:e6:f0: 1f:df:84:86:39:5a:1c:9d:79:c9:8e:bb:01:3a:0a:77:c2:c8: fc:46:6a:d8:e9:20:16:6c:8c:d8:a9:0f:e2:6a:30:b9:39:10: 0f:60:66:5e:23:06:c9:50:55:57:bd:6f:17:97:13:43:2d:03: e4:cd:1b:68:fc:82:15:65:d9:10:cc:80:07:96:29:20:9f:e9: 97:4c:5b:f1:0d:14:06:29:3b:24:4f:fd:cd:ae:bc:c5:2b:04: c2:3e:e1:63:77:6e:f4:05:45:22:f8:03:77:59:0a:8a:c7:d3: dd:1c:63:2a:f8:44:51:4d:22:6d:69:22:1e:95:a0:ab:f2:9a: 5d:43:39:e0 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEuy961S8A27FXX0wsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODAyMzEzZTYtNTZiZi00ZmQ4LWFlMGQtYzllMDU3ZDNi Mzk4MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk MjUxMWZlZWYtYmJkZC00NTcyLWI1OTItMmIxZDg0NGRkYjYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbR88+qc8srZRw4/2KY9GVNuDhavIwTN+YUr yN6ckyB26ZqX6+1Pu3FU0uE8rGtAMAIBVDs3WDSfQs1yygZXM/L1Bk/aBQ2NHild gaPecMQKsu6jDMdQHzJUw2lSnk6tLE/4SvASC1uJAO+WAhv2rpuLkiYYNstX4kna yGQgcZpUZkEAAlh77FLzhDZlrcWSl1pyIGHp132iEJBHenAwa+ILWV9ZSOo4t1vx ZCeaWU9ioFLCiu1wWeRD/ASKnDcA1ckkgDrNoddzm1nJGpoepEy/2SsMX/NHX08b sSS/pr9t5OnVni1qX9DjjK1fOMdeBtopSzzXnxxXONR0s+HYtwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLYghHI8F9lMSf5gy6TJ0UlERsJ3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84MDIz MTNlNi01NmJmLTRmZDgtYWUwZC1jOWUwNTdkM2IzOTgvMzI5OGNjYjctM2U3Yi0z NGE5LTk1OTgtMzNmZGJiY2Q2NTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODAyMzEzZTYtNTZiZi00ZmQ4LWFl MGQtYzllMDU3ZDNiMzk4LzgwMjMxM2U2LTU2YmYtNGZkOC1hZTBkLWM5ZTA1N2Qz YjM5OC5jcmwwHwYDVR0jBBgwFoAU6Nx8ybbq227grPfqrNCHZurVu2gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84MDIzMTNlNi01NmJmLTRmZDgtYWUwZC1jOWUw NTdkM2IzOTguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf+gDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCZ+IYXpdAAcLhmOk3rly02OTU+WnewPZjTUqHiwBPfSDgeZh55feoY dSC8kk/nXaUJogB/ZDdoq7llmBzDhDsuPeDqje+AV2kpCnDmlqrj8XETJvjEdCsi 1y8tVCQ1mH605ZcaJuQrEsiFb7TRi95xZyXppBcbMY93Cymc5vAf34SGOVocnXnJ jrsBOgp3wsj8RmrY6SAWbIzYqQ/iajC5ORAPYGZeIwbJUFVXvW8XlxNDLQPkzRto /IIVZdkQzIAHlikgn+mXTFvxDRQGKTskT/3NrrzFKwTCPuFjd270BUUi+AN3WQqK x9PdHGMq+ERRTSJtaSIelaCr8ppdQzng -----END CERTIFICATE-----Generated at Tue Nov 4 21:04:41 2025 by rpki-client