$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8eefcb71-042e-3011-9c4c-a4c1dae3119d.roa File: 8eefcb71-042e-3011-9c4c-a4c1dae3119d.roa (raw, json) Hash identifier: T8GmcmXS9iB6+ttGF0E66VqA+pN0J4Rt7ceFn0Em65k= Subject key identifier: F7:3A:13:59:8B:6F:5F:13:93:70:8E:32:C8:C2:95:AF:27:DF:31:A5 Certificate issuer: /CN=8a8a1a2d-c949-4896-93b9-71f917048e79 Certificate serial: 010D0C9F4328584BB88D14C101DC6C9AB8013000 Authority key identifier: CA:65:E2:79:44:A5:9C:CA:6F:1B:C6:65:BC:37:0B:8D:6F:B8:CF:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8eefcb71-042e-3011-9c4c-a4c1dae3119d.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 399804 IP address blocks: 2606:65c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8a8a1a2d-c949-4896-93b9-71f917048e79.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8a8a1a2d-c949-4896-93b9-71f917048e79.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:14:c1:01:dc:6c:9a:b8:01:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a8a1a2d-c949-4896-93b9-71f917048e79 Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=15b32399-805f-41d8-b337-7ebd8988bc72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:66:64:57:fe:cd:b3:aa:96:32:d5:5d:21:b8: 6f:c1:81:3f:d1:2a:d0:4c:0a:61:8c:a3:05:9a:9b: d2:4f:37:0f:5e:71:e3:92:3a:62:0c:cd:36:f1:ac: 63:e3:9b:ed:ec:6d:78:f6:d5:28:53:05:ec:d0:d9: 13:d9:3f:73:b1:b4:a9:73:b8:a9:77:5f:e7:fa:13: d7:b1:97:93:16:f9:f6:cb:fc:45:44:d9:d3:a1:4f: 20:00:ec:cc:5b:9d:eb:ec:30:66:20:31:ae:f1:3a: a3:0b:11:d9:a2:7c:28:64:39:3f:95:3a:41:12:73: 34:c5:31:2f:30:11:2d:bb:1c:d7:1a:f7:cc:34:23: 54:67:06:ff:0d:94:6b:5d:3c:34:9d:7b:5b:d7:0d: d8:ed:f5:19:34:fd:ac:c3:e6:73:a7:66:05:87:ec: aa:7d:12:86:4b:9f:67:7a:bd:76:48:ee:15:26:a0: 5d:60:14:39:e1:f3:6b:11:2b:58:03:83:f3:90:29: 37:8f:63:99:0b:eb:e5:10:a6:7a:b2:fd:7c:ae:d7: 0f:d6:77:df:e0:1e:8c:36:46:8c:99:b8:f9:ae:a2: 99:97:68:7d:d5:a6:8a:a9:b7:82:b3:a4:e5:a6:8c: 94:20:48:cc:ca:8f:8b:49:2d:da:c7:61:71:9b:2f: 48:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:3A:13:59:8B:6F:5F:13:93:70:8E:32:C8:C2:95:AF:27:DF:31:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8eefcb71-042e-3011-9c4c-a4c1dae3119d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8a8a1a2d-c949-4896-93b9-71f917048e79.crl X509v3 Authority Key Identifier: keyid:CA:65:E2:79:44:A5:9C:CA:6F:1B:C6:65:BC:37:0B:8D:6F:B8:CF:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79.cer sbgp-ipAddrBlock: critical IPv6: 2606:65c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:93:db:a2:27:8f:af:9a:f3:f5:a4:06:34:a9:cb:7f:00:00: 99:45:b4:10:8d:28:a4:d9:fa:c7:90:fa:a4:1e:34:12:90:90: c4:94:f8:55:1a:25:7d:1c:a8:60:62:cd:62:76:b4:47:97:26: dc:87:b1:d6:29:14:81:1f:8c:51:9b:66:74:ea:07:22:b0:fd: 2f:f9:3e:b4:d5:e5:04:88:4e:ce:79:b3:32:76:e8:fa:f2:96: b0:61:58:c0:12:c1:4f:17:19:8c:17:f0:7e:16:2f:45:d5:91: 9e:f6:f2:fd:53:27:40:53:55:fe:0b:3c:f7:83:3c:44:19:d5: 97:bf:74:9d:b7:f9:a3:44:0d:c0:1c:70:9d:92:3a:c0:5e:41: 70:fe:f7:f1:39:e9:8b:ed:f7:c8:26:a2:fb:a2:87:3f:5e:c5: ed:fd:a6:4f:f8:80:97:a4:23:73:bb:02:9e:62:41:60:e0:63: 2d:7b:46:43:a3:b2:2d:55:c3:70:ec:87:97:86:5f:08:d1:1c: d2:70:b5:fe:8e:14:ea:2f:a3:52:57:a3:42:1d:65:be:ba:12: f6:a4:9f:38:43:d2:8c:68:da:fa:4f:07:c7:3c:70:da:14:7c: 9c:e3:20:61:65:8f:4c:d9:2e:d4:59:fd:96:4a:7b:01:36:e7: 5b:de:08:e3 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEu4jRTBAdxsmrgBMAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE4YTFhMmQtYzk0OS00ODk2LTkzYjktNzFmOTE3MDQ4 ZTc5MB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk MTViMzIzOTktODA1Zi00MWQ4LWIzMzctN2ViZDg5ODhiYzcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumZkV/7Ns6qWMtVdIbhvwYE/0SrQTAphjKMF mpvSTzcPXnHjkjpiDM028axj45vt7G149tUoUwXs0NkT2T9zsbSpc7ipd1/n+hPX sZeTFvn2y/xFRNnToU8gAOzMW53r7DBmIDGu8TqjCxHZonwoZDk/lTpBEnM0xTEv MBEtuxzXGvfMNCNUZwb/DZRrXTw0nXtb1w3Y7fUZNP2sw+Zzp2YFh+yqfRKGS59n er12SO4VJqBdYBQ54fNrEStYA4PzkCk3j2OZC+vlEKZ6sv18rtcP1nff4B6MNkaM mbj5rqKZl2h91aaKqbeCs6TlpoyUIEjMyo+LSS3ax2Fxmy9IRQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPc6E1mLb18Tk3COMsjCla8n3zGlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84YThh MWEyZC1jOTQ5LTQ4OTYtOTNiOS03MWY5MTcwNDhlNzkvOGVlZmNiNzEtMDQyZS0z MDExLTljNGMtYTRjMWRhZTMxMTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGE4YTFhMmQtYzk0OS00ODk2LTkz YjktNzFmOTE3MDQ4ZTc5LzhhOGExYTJkLWM5NDktNDg5Ni05M2I5LTcxZjkxNzA0 OGU3OS5jcmwwHwYDVR0jBBgwFoAUymXieUSlnMpvG8ZlvDcLjW+4z+swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84YThhMWEyZC1jOTQ5LTQ4OTYtOTNiOS03MWY5 MTcwNDhlNzkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgZlwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQC4k9uiJ4+vmvP1pAY0qct/AACZRbQQjSik2frHkPqkHjQSkJDElPhV GiV9HKhgYs1idrRHlybch7HWKRSBH4xRm2Z06gcisP0v+T601eUEiE7OebMyduj6 8pawYVjAEsFPFxmMF/B+Fi9F1ZGe9vL9UydAU1X+Czz3gzxEGdWXv3Sdt/mjRA3A HHCdkjrAXkFw/vfxOemL7ffIJqL7ooc/XsXt/aZP+ICXpCNzuwKeYkFg4GMte0ZD o7ItVcNw7IeXhl8I0RzScLX+jhTqL6NSV6NCHWW+uhL2pJ84Q9KMaNr6TwfHPHDa FHyc4yBhZY9M2S7UWf2WSnsBNudb3gjj -----END CERTIFICATE-----Generated at Wed Nov 5 08:52:39 2025 by rpki-client