$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/55a8c67a-9a40-32a0-9f9f-93479d330f3b.roa File: 55a8c67a-9a40-32a0-9f9f-93479d330f3b.roa (raw, json) Hash identifier: rIIUhDkTxjqgS39zwUr9UJ2GmjEx7XfC9ow/CB8aD90= Subject key identifier: 43:66:EE:38:8C:E1:42:10:24:64:2D:9C:38:51:12:68:4A:77:88:EB Certificate issuer: /CN=4eab7524-ab79-46c8-aea6-96b100eb245d Certificate serial: 010D0C9F4328584B3986FEC9E2770C66A21BCD60 Authority key identifier: 02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/55a8c67a-9a40-32a0-9f9f-93479d330f3b.roa Signing time: Wed 17 Sep 2025 13:00:41 +0000 ROA not before: Wed 17 Sep 2025 13:00:41 +0000 ROA not after: Tue 16 Dec 2025 14:00:41 +0000 asID: 400097 IP address blocks: 2606:3d40:8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:39:86:fe:c9:e2:77:0c:66:a2:1b:cd:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4eab7524-ab79-46c8-aea6-96b100eb245d Validity Not Before: Sep 17 13:00:41 2025 GMT Not After : Dec 16 14:00:41 2025 GMT Subject: CN=2df16ca8-f114-4c1a-8d45-0eac4b2a0a5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:0e:96:2a:36:32:3c:ff:58:5e:ea:f1:29:fb: 26:5b:1a:2a:a1:2d:33:8f:60:cb:26:fd:0c:cb:29: 4f:97:7c:aa:ec:15:5f:86:6b:19:9e:6e:73:9b:e9: cc:9c:3c:bc:9c:9b:c8:c6:d4:c1:c1:10:ce:cb:fd: 58:5b:7e:3d:5b:b7:5a:a1:4b:f0:17:31:21:3e:4a: 35:0f:86:80:88:f8:87:aa:cf:e3:bc:c9:43:80:07: d7:31:e6:57:ef:c8:99:30:8e:53:40:10:80:d6:18: 18:a5:bd:b1:cd:5f:e9:b9:28:6a:c8:84:3e:12:4b: 20:fc:bd:e5:41:c2:d7:7c:7d:78:0f:33:86:02:9a: f1:71:1c:c8:05:1e:6f:56:b8:ab:24:6f:99:db:56: 4b:0c:80:ff:f2:40:76:6c:2d:a3:0a:a3:cd:cc:a4: 74:d8:68:3d:28:31:d4:0a:2f:21:ea:ee:9e:8b:cc: 3a:ca:0e:bc:21:92:84:f3:d0:92:4d:91:f2:4f:e6: 61:62:d6:90:0e:76:17:fb:94:af:73:22:2b:b7:3d: 73:e6:52:90:46:d0:0d:48:a2:4b:ef:60:4e:64:71: 71:df:20:3d:ee:32:10:c3:e9:dc:9e:da:ef:11:66: 7c:72:86:d3:5b:10:37:00:20:80:3e:7c:9d:46:49: 3f:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:66:EE:38:8C:E1:42:10:24:64:2D:9C:38:51:12:68:4A:77:88:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/55a8c67a-9a40-32a0-9f9f-93479d330f3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl X509v3 Authority Key Identifier: keyid:02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer sbgp-ipAddrBlock: critical IPv6: 2606:3d40:8::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:d6:fa:fe:48:f7:f1:cf:f6:79:ce:9b:ae:da:84:21:c9:a3: 2a:8e:77:04:2e:49:f7:f5:8c:6a:7a:d9:60:de:c2:e9:d3:8e: 27:20:0f:9b:91:15:01:a4:f4:39:81:39:f1:6c:bd:f2:87:29: ec:ab:7e:f0:03:b5:e7:e4:05:b7:e9:6b:d8:d3:91:d2:c0:c8: 58:f2:1d:ea:bb:6d:5e:fa:b4:14:39:87:e0:ad:81:2c:14:d5: ac:c0:ff:20:d5:d4:ea:60:57:28:a2:9d:c7:22:51:ee:29:78: b6:14:87:10:af:bb:9b:b5:82:0b:53:12:a3:41:e0:9b:16:40: 54:b0:c9:0a:0f:31:b0:9b:4f:dd:58:80:c5:2b:c6:81:56:2a: 6e:14:ce:f9:80:5e:7a:ad:0c:c0:d7:34:c3:79:cc:9a:5e:68: 6b:da:95:c7:0e:4a:bc:ce:72:6b:4c:03:4e:24:6a:1a:30:08: 48:8f:06:d9:57:db:57:e1:0a:9a:33:7a:7e:c2:51:4f:4d:a1: a7:e9:ed:1e:ce:94:2d:f1:e5:67:0f:db:91:f5:ee:31:fd:b2: 3d:24:08:56:1c:62:57:4c:51:ab:c1:e3:cd:ea:9a:64:e0:29: e3:cd:70:2e:6a:d0:d9:97:58:56:e9:cd:26:39:49:a9:c7:a0: bc:f2:39:e9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs5hv7J4ncMZqIbzWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGVhYjc1MjQtYWI3OS00NmM4LWFlYTYtOTZiMTAwZWIy NDVkMB4XDTI1MDkxNzEzMDA0MVoXDTI1MTIxNjE0MDA0MVowLzEtMCsGA1UEAxMk MmRmMTZjYTgtZjExNC00YzFhLThkNDUtMGVhYzRiMmEwYTVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhg6WKjYyPP9YXurxKfsmWxoqoS0zj2DLJv0M yylPl3yq7BVfhmsZnm5zm+nMnDy8nJvIxtTBwRDOy/1YW349W7daoUvwFzEhPko1 D4aAiPiHqs/jvMlDgAfXMeZX78iZMI5TQBCA1hgYpb2xzV/puShqyIQ+Eksg/L3l QcLXfH14DzOGAprxcRzIBR5vVrirJG+Z21ZLDID/8kB2bC2jCqPNzKR02Gg9KDHU Ci8h6u6ei8w6yg68IZKE89CSTZHyT+ZhYtaQDnYX+5SvcyIrtz1z5lKQRtANSKJL 72BOZHFx3yA97jIQw+ncntrvEWZ8cobTWxA3ACCAPnydRkk/HQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFENm7jiM4UIQJGQtnDhREmhKd4jrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80ZWFi NzUyNC1hYjc5LTQ2YzgtYWVhNi05NmIxMDBlYjI0NWQvNTVhOGM2N2EtOWE0MC0z MmEwLTlmOWYtOTM0NzlkMzMwZjNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGVhYjc1MjQtYWI3OS00NmM4LWFl YTYtOTZiMTAwZWIyNDVkLzRlYWI3NTI0LWFiNzktNDZjOC1hZWE2LTk2YjEwMGVi MjQ1ZC5jcmwwHwYDVR0jBBgwFoAUAvAXN7tccDjst6Tnox+wrSnQ6+YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80ZWFiNzUyNC1hYjc5LTQ2YzgtYWVhNi05NmIx MDBlYjI0NWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgY9QAAI MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALLW+v5I9/HP9nnOm67ahCHJoyqOdwQuSff1jGp62WDewunTjicg D5uRFQGk9DmBOfFsvfKHKeyrfvADtefkBbfpa9jTkdLAyFjyHeq7bV76tBQ5h+Ct gSwU1azA/yDV1OpgVyiincciUe4peLYUhxCvu5u1ggtTEqNB4JsWQFSwyQoPMbCb T91YgMUrxoFWKm4UzvmAXnqtDMDXNMN5zJpeaGvalccOSrzOcmtMA04kahowCEiP BtlX21fhCpozen7CUU9Noafp7R7OlC3x5WcP25H17jH9sj0kCFYcYldMUavB483q mmTgKePNcC5q0NmXWFbpzSY5SanHoLzyOek= -----END CERTIFICATE-----Generated at Wed Nov 5 20:00:18 2025 by rpki-client