$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/804f7d79-cec1-35c6-ba48-3c573653913b.roa File: 804f7d79-cec1-35c6-ba48-3c573653913b.roa (raw, json) Hash identifier: x9sRFX+Macwjq9OwYCkf897ZlDP+wOaQGcN4PQuqx0A= Subject key identifier: 62:F3:59:98:A4:C1:06:86:B3:65:C5:70:0A:FF:07:B7:CA:36:D2:C1 Certificate issuer: /CN=4eab7524-ab79-46c8-aea6-96b100eb245d Certificate serial: 010D0C9F4328584B990D82F613A732BBE24D6240 Authority key identifier: 02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/804f7d79-cec1-35c6-ba48-3c573653913b.roa Signing time: Tue 21 Oct 2025 18:13:36 +0000 ROA not before: Tue 21 Oct 2025 18:13:36 +0000 ROA not after: Mon 19 Jan 2026 19:13:36 +0000 asID: 400097 IP address blocks: 2606:3d40:3705::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:0d:82:f6:13:a7:32:bb:e2:4d:62:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4eab7524-ab79-46c8-aea6-96b100eb245d Validity Not Before: Oct 21 18:13:36 2025 GMT Not After : Jan 19 19:13:36 2026 GMT Subject: CN=8d58bc87-e8d7-4309-b047-2bd2200843eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:5b:1d:23:f7:7e:5e:43:22:36:a1:f5:b7:06: 06:9f:a0:80:f7:58:a2:bb:e5:2b:a5:13:10:5b:e0: bd:d0:25:d0:5d:5e:59:d1:6d:16:b3:79:0e:c9:18: 33:b1:4a:0d:01:86:37:9e:5e:d8:e8:35:45:79:97: ec:f6:d1:6a:b0:a8:35:88:d6:2b:57:41:68:da:64: cf:9f:7b:af:34:7f:ee:fd:50:99:46:b3:16:ae:fa: 36:26:c5:9e:ae:1d:c8:6e:09:81:89:07:1b:15:36: da:4e:b3:50:f1:c8:d0:e7:cd:4a:c7:ad:3e:2d:d8: f8:ef:8b:f1:f5:f4:60:b9:9c:ae:b0:20:1c:5d:74: 45:29:00:24:4f:a5:59:0c:58:f9:c5:e0:01:06:65: aa:36:e6:b4:c6:fb:e5:20:28:8e:3e:a3:c1:90:04: dc:43:84:31:6f:2b:c1:3e:b7:4f:a2:8f:11:e3:41: 60:7b:cf:c4:3a:e7:52:58:f4:de:c9:c5:2c:ca:c5: e7:3c:6d:81:5f:7c:c0:f4:25:9d:d6:ce:e4:9a:98: 40:16:ba:5c:44:2b:93:87:eb:63:b9:ae:62:22:04: ab:e6:f1:de:42:7f:53:17:ac:cb:07:15:71:40:89: 47:6c:47:8c:74:82:3d:ab:16:e0:9b:71:77:c9:87: 65:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:F3:59:98:A4:C1:06:86:B3:65:C5:70:0A:FF:07:B7:CA:36:D2:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/804f7d79-cec1-35c6-ba48-3c573653913b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl X509v3 Authority Key Identifier: keyid:02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer sbgp-ipAddrBlock: critical IPv6: 2606:3d40:3705::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:6c:4d:f1:d1:64:7e:02:64:0c:6d:b4:d9:ef:5c:07:32:2e: 10:2b:56:56:4b:cb:67:ed:4d:b6:7f:28:35:fb:92:9d:04:ab: a1:2e:12:ea:78:d6:b4:94:50:ed:e3:ae:bc:46:e1:62:2c:76: 95:bb:48:72:99:22:f6:34:27:3c:5c:3b:8c:0f:56:eb:76:ea: 27:32:48:de:92:cf:90:1c:69:a9:71:bc:da:4b:f0:e1:cc:99: 81:f4:1c:d1:88:f7:83:a1:77:24:88:7a:5e:7a:0f:66:1f:aa: 68:e4:92:a4:57:18:58:87:d1:ad:0a:69:f8:75:fe:c7:05:a7: 3f:d5:f3:fd:f6:e5:fb:10:3a:ac:1c:3f:dd:88:64:93:e6:0f: cc:ae:a5:dd:5d:75:b8:cb:ef:4c:1c:d1:e5:a6:80:f8:75:aa: e3:37:95:7d:54:59:2e:50:14:8a:79:d3:ef:4a:64:30:5e:46: 6b:3c:ab:e8:75:12:51:8a:68:54:f7:8f:01:9f:83:a7:f1:cd: 14:65:94:47:01:48:2a:d8:e7:19:8a:4d:87:19:9a:0b:1c:ce: 01:9f:e5:3f:1f:69:1d:d7:6a:8c:51:c8:9d:21:ee:64:7b:da: dd:fc:0b:cc:73:12:9b:a4:33:22:c5:c7:cc:16:a6:9f:45:bc: b7:e4:f9:a9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZDYL2E6cyu+JNYkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGVhYjc1MjQtYWI3OS00NmM4LWFlYTYtOTZiMTAwZWIy NDVkMB4XDTI1MTAyMTE4MTMzNloXDTI2MDExOTE5MTMzNlowLzEtMCsGA1UEAxMk OGQ1OGJjODctZThkNy00MzA5LWIwNDctMmJkMjIwMDg0M2ViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVsdI/d+XkMiNqH1twYGn6CA91iiu+UrpRMQ W+C90CXQXV5Z0W0Ws3kOyRgzsUoNAYY3nl7Y6DVFeZfs9tFqsKg1iNYrV0Fo2mTP n3uvNH/u/VCZRrMWrvo2JsWerh3IbgmBiQcbFTbaTrNQ8cjQ581Kx60+Ldj474vx 9fRguZyusCAcXXRFKQAkT6VZDFj5xeABBmWqNua0xvvlICiOPqPBkATcQ4QxbyvB PrdPoo8R40Fge8/EOudSWPTeycUsysXnPG2BX3zA9CWd1s7kmphAFrpcRCuTh+tj ua5iIgSr5vHeQn9TF6zLBxVxQIlHbEeMdII9qxbgm3F3yYdl2wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGLzWZikwQaGs2XFcAr/B7fKNtLBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80ZWFi NzUyNC1hYjc5LTQ2YzgtYWVhNi05NmIxMDBlYjI0NWQvODA0ZjdkNzktY2VjMS0z NWM2LWJhNDgtM2M1NzM2NTM5MTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGVhYjc1MjQtYWI3OS00NmM4LWFl YTYtOTZiMTAwZWIyNDVkLzRlYWI3NTI0LWFiNzktNDZjOC1hZWE2LTk2YjEwMGVi MjQ1ZC5jcmwwHwYDVR0jBBgwFoAUAvAXN7tccDjst6Tnox+wrSnQ6+YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80ZWFiNzUyNC1hYjc5LTQ2YzgtYWVhNi05NmIx MDBlYjI0NWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgY9QDcF MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKZsTfHRZH4CZAxttNnvXAcyLhArVlZLy2ftTbZ/KDX7kp0Eq6Eu Eup41rSUUO3jrrxG4WIsdpW7SHKZIvY0JzxcO4wPVut26icySN6Sz5AcaalxvNpL 8OHMmYH0HNGI94OhdySIel56D2YfqmjkkqRXGFiH0a0Kafh1/scFpz/V8/325fsQ OqwcP92IZJPmD8yupd1ddbjL70wc0eWmgPh1quM3lX1UWS5QFIp50+9KZDBeRms8 q+h1ElGKaFT3jwGfg6fxzRRllEcBSCrY5xmKTYcZmgsczgGf5T8faR3XaoxRyJ0h 7mR72t38C8xzEpukMyLFx8wWpp9FvLfk+ak= -----END CERTIFICATE-----Generated at Wed Nov 5 21:04:11 2025 by rpki-client