$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/342be0e4-6b26-3229-8808-286812c3a7c1.roa File: 342be0e4-6b26-3229-8808-286812c3a7c1.roa (raw, json) Hash identifier: EFE1n4YDmU+0/aoZC43SH/HNPLqv/8YqLE0qsHPv4u4= Subject key identifier: 58:B2:88:F2:7C:41:82:06:8B:67:B8:C7:5A:3C:8A:4B:21:E6:81:64 Certificate issuer: /CN=b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1 Certificate serial: 010D0C9F4328584B6BC75B22BF63470C24676AC0 Authority key identifier: DD:F6:09:95:17:8B:B7:4A:6E:9C:AA:DF:B0:69:85:38:26:70:0B:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/342be0e4-6b26-3229-8808-286812c3a7c1.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 398203 IP address blocks: 2605:8cc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:5b:22:bf:63:47:0c:24:67:6a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=de50c6de-2f99-4f6f-8a9d-c8d75e42f7d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:53:99:57:b8:07:26:d8:9d:c9:9e:97:08:9d: 60:f3:9c:b7:16:fd:c9:16:d8:86:b2:a8:f6:38:58: 0f:9e:a8:8c:29:84:19:7f:a9:ce:24:4a:d7:51:a0: 8b:ca:11:a9:ce:b4:ac:87:b4:1b:93:8f:c3:c9:10: 23:1b:eb:ee:bd:3c:1e:c6:22:63:f0:70:bb:27:8a: 84:ee:b2:14:b9:56:f4:b1:35:34:00:3e:f9:60:d9: 76:f8:a4:6d:9f:ba:3a:1f:3e:ba:45:70:0e:0e:ee: 2e:22:f4:2c:1f:24:1a:d5:f6:e2:37:c7:07:ff:a0: b8:90:66:37:ff:7b:63:1a:88:8d:e3:47:ee:23:ec: 2b:d2:57:f4:39:53:80:60:25:f8:e2:00:c0:3f:f6: f5:9e:0e:14:ab:8f:ba:4d:97:21:6e:5f:5e:d8:c0: af:93:0e:2c:e6:95:75:e9:21:3a:b8:db:da:67:e2: 11:85:59:d0:1a:4d:9a:aa:67:10:54:69:cc:2b:c9: ce:b8:96:22:50:c7:59:7e:fd:69:a4:63:78:fc:a1: da:22:72:49:98:46:cc:02:67:f0:40:4c:b3:91:e4: bd:4e:07:37:38:ac:64:82:db:96:74:bd:16:df:dd: 92:2e:d0:d1:0e:e7:c3:b3:df:c8:c6:2e:b7:22:4d: 3c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:B2:88:F2:7C:41:82:06:8B:67:B8:C7:5A:3C:8A:4B:21:E6:81:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/342be0e4-6b26-3229-8808-286812c3a7c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.crl X509v3 Authority Key Identifier: keyid:DD:F6:09:95:17:8B:B7:4A:6E:9C:AA:DF:B0:69:85:38:26:70:0B:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.cer sbgp-ipAddrBlock: critical IPv6: 2605:8cc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:31:f1:4a:c9:a1:62:57:b4:60:15:1c:a1:76:a9:de:72:34: 69:7f:ea:06:0b:ca:a3:c6:d3:9e:df:33:51:ba:01:16:ae:dc: b3:63:d7:e7:41:bb:56:69:2d:2f:76:65:44:bb:35:80:8b:49: 23:da:e8:d2:d5:27:f6:5c:46:df:6d:7a:30:f1:2d:00:f1:9f: 76:e0:9f:20:38:66:da:ee:10:d3:0b:94:4d:d8:71:22:49:f4: 7f:46:67:1b:60:4d:bc:d7:7d:60:2b:59:52:ed:82:6b:15:0d: a6:a5:8f:10:26:f1:f2:3f:80:cd:bd:32:6e:5d:f2:d6:66:57: 14:21:d1:63:a4:9d:6d:db:7b:65:aa:87:3a:fa:90:bc:e0:3a: 06:79:cc:6a:76:87:45:21:4f:c6:91:ba:92:f8:88:79:11:a7: 33:4f:ca:21:08:86:5c:49:0f:4d:fc:4f:ce:85:f1:2e:ff:bb: 68:bb:32:6a:05:ea:d1:bd:19:98:fb:bb:9b:1b:f4:65:a2:ed: 26:8a:e9:35:d2:43:43:2d:22:72:42:a6:b7:e5:0f:fc:17:25: 19:49:bf:11:2e:d4:96:93:0f:f0:d8:f9:3b:98:fe:79:12:fd: de:2a:0b:01:2d:cd:2d:35:d6:66:e6:0c:35:38:4e:a1:f6:3f: ed:7d:c5:c7 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtrx1siv2NHDCRnasAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg2YTRlYzMtYTNiNS00ZDcyLWJlZTItZjU4YzNjZGUw MWExMB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk ZGU1MGM2ZGUtMmY5OS00ZjZmLThhOWQtYzhkNzVlNDJmN2QyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1OZV7gHJtidyZ6XCJ1g85y3Fv3JFtiGsqj2 OFgPnqiMKYQZf6nOJErXUaCLyhGpzrSsh7Qbk4/DyRAjG+vuvTwexiJj8HC7J4qE 7rIUuVb0sTU0AD75YNl2+KRtn7o6Hz66RXAODu4uIvQsHyQa1fbiN8cH/6C4kGY3 /3tjGoiN40fuI+wr0lf0OVOAYCX44gDAP/b1ng4Uq4+6TZchbl9e2MCvkw4s5pV1 6SE6uNvaZ+IRhVnQGk2aqmcQVGnMK8nOuJYiUMdZfv1ppGN4/KHaInJJmEbMAmfw QEyzkeS9Tgc3OKxkgtuWdL0W392SLtDRDufDs9/Ixi63Ik08pwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFiyiPJ8QYIGi2e4x1o8iksh5oFkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iODZh NGVjMy1hM2I1LTRkNzItYmVlMi1mNThjM2NkZTAxYTEvMzQyYmUwZTQtNmIyNi0z MjI5LTg4MDgtMjg2ODEyYzNhN2MxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjg2YTRlYzMtYTNiNS00ZDcyLWJl ZTItZjU4YzNjZGUwMWExL2I4NmE0ZWMzLWEzYjUtNGQ3Mi1iZWUyLWY1OGMzY2Rl MDFhMS5jcmwwHwYDVR0jBBgwFoAU3fYJlReLt0punKrfsGmFOCZwCxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iODZhNGVjMy1hM2I1LTRkNzItYmVlMi1mNThj M2NkZTAxYTEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgWMwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB8MfFKyaFiV7RgFRyhdqnecjRpf+oGC8qjxtOe3zNRugEWrtyzY9fn QbtWaS0vdmVEuzWAi0kj2ujS1Sf2XEbfbXow8S0A8Z924J8gOGba7hDTC5RN2HEi SfR/RmcbYE28131gK1lS7YJrFQ2mpY8QJvHyP4DNvTJuXfLWZlcUIdFjpJ1t23tl qoc6+pC84DoGecxqdodFIU/GkbqS+Ih5EaczT8ohCIZcSQ9N/E/OhfEu/7touzJq BerRvRmY+7ubG/Rlou0miuk10kNDLSJyQqa35Q/8FyUZSb8RLtSWkw/w2Pk7mP55 Ev3eKgsBLc0tNdZm5gw1OE6h9j/tfcXH -----END CERTIFICATE-----Generated at Wed Nov 5 21:31:11 2025 by rpki-client