$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/cac652c0-f97c-3a05-8b92-830135242f0a.roa File: cac652c0-f97c-3a05-8b92-830135242f0a.roa (raw, json) Hash identifier: dCsfIzKigYjwMgWgbjI9algGvwlaJqUdT1APmdKCRww= Subject key identifier: 5A:5F:B8:A2:76:6E:FC:9C:26:66:0F:8D:90:F0:61:88:86:0F:D2:C1 Certificate issuer: /CN=4eab7524-ab79-46c8-aea6-96b100eb245d Certificate serial: 010D0C9F4328584B5B0729FBC0F1A15CCD27B600 Authority key identifier: 02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/cac652c0-f97c-3a05-8b92-830135242f0a.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 400097 IP address blocks: 2606:3d40:5d05::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:29:fb:c0:f1:a1:5c:cd:27:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4eab7524-ab79-46c8-aea6-96b100eb245d Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=0dd43468-f52d-4665-863c-8699a1e7ceeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:7f:de:b7:b1:53:90:0e:51:79:1d:17:eb:ad: 64:78:77:cf:51:17:f0:ee:23:cd:62:ab:bc:2a:c1: cf:5d:3e:5c:81:ca:c9:c5:b1:62:3e:67:3d:89:b1: 08:cf:ef:6e:f7:3d:2f:d1:5e:99:6f:59:45:7c:d5: 5c:5a:9e:79:1f:46:bc:33:c1:3f:50:2b:b7:76:b0: 03:1f:1b:92:19:ee:7e:91:a7:b8:c8:d9:49:35:e3: ec:6c:03:eb:5a:6d:7c:b8:73:44:b4:3c:1f:05:7d: ae:f4:69:30:69:bb:60:21:97:2a:e5:8f:59:d8:b4: 43:c3:7c:0a:36:a9:a3:61:06:87:9a:dc:2a:fb:a9: b9:73:a3:eb:08:d9:d8:af:00:a6:d6:57:22:7e:4c: 1e:ab:eb:8c:84:63:41:ac:46:35:f9:6b:ee:97:4d: a5:03:7c:96:d8:9c:14:a9:fd:6e:dd:86:7d:b0:35: 85:9f:90:e4:79:dc:39:ca:bd:a4:b3:47:af:1b:da: 91:8d:48:20:b1:6b:35:51:ce:38:0f:91:68:31:6d: 63:c1:ae:88:ac:93:fb:79:8c:ca:da:08:fc:e4:b0: 17:be:bf:52:8b:43:64:34:26:83:25:42:9c:bf:06: d6:04:a9:2f:2b:ac:0f:fe:09:8b:74:9f:29:3f:87: 18:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:5F:B8:A2:76:6E:FC:9C:26:66:0F:8D:90:F0:61:88:86:0F:D2:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/cac652c0-f97c-3a05-8b92-830135242f0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl X509v3 Authority Key Identifier: keyid:02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer sbgp-ipAddrBlock: critical IPv6: 2606:3d40:5d05::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:d9:02:f1:28:43:84:aa:05:2b:a0:a6:1c:38:99:4f:f1:1e: 58:71:ef:ca:05:66:bb:46:b4:4d:d1:12:3c:8f:69:78:e8:24: e4:65:2c:64:9b:ab:4a:07:7b:f4:64:4e:f0:c1:20:5e:46:a0: 1c:9c:f2:d9:c1:d8:a7:47:15:85:5c:77:f6:cf:49:c8:10:60: 68:de:cf:22:86:ed:a7:f1:6f:66:2b:20:47:f1:3d:43:da:db: 64:3c:86:08:5f:ee:8b:84:77:15:65:90:82:d5:78:f1:a8:b1: d0:62:d5:11:2b:73:cf:82:c5:1b:74:1d:f6:cf:1e:fc:59:b4: 30:b4:c1:bd:c9:6e:32:17:93:ac:89:09:29:d1:cc:50:f2:3c: 46:85:7b:52:42:f5:ef:5d:f1:bb:1e:39:f1:85:8d:e5:d8:8d: 36:be:fc:8e:b1:a7:d0:14:dd:5e:a3:40:1c:66:86:c0:cc:80: 7b:e1:bc:10:8b:14:a9:9e:bf:80:d2:2e:8d:ad:f2:93:33:46: e4:28:40:90:fa:1d:0f:9b:1d:29:85:c0:51:c9:3b:4a:a2:4c: c8:a5:7d:bb:93:dc:e1:e8:1f:0a:fb:da:38:52:5c:10:ed:9d: 09:c0:b8:a1:5a:8a:67:3b:0e:76:55:da:d2:0a:97:d9:16:74: d8:5e:92:e4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtbByn7wPGhXM0ntgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGVhYjc1MjQtYWI3OS00NmM4LWFlYTYtOTZiMTAwZWIy NDVkMB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk MGRkNDM0NjgtZjUyZC00NjY1LTg2M2MtODY5OWExZTdjZWViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0n/et7FTkA5ReR0X661keHfPURfw7iPNYqu8 KsHPXT5cgcrJxbFiPmc9ibEIz+9u9z0v0V6Zb1lFfNVcWp55H0a8M8E/UCu3drAD HxuSGe5+kae4yNlJNePsbAPrWm18uHNEtDwfBX2u9GkwabtgIZcq5Y9Z2LRDw3wK NqmjYQaHmtwq+6m5c6PrCNnYrwCm1lcifkweq+uMhGNBrEY1+Wvul02lA3yW2JwU qf1u3YZ9sDWFn5Dkedw5yr2ks0evG9qRjUggsWs1Uc44D5FoMW1jwa6IrJP7eYzK 2gj85LAXvr9Si0NkNCaDJUKcvwbWBKkvK6wP/gmLdJ8pP4cYzwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFpfuKJ2bvycJmYPjZDwYYiGD9LBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80ZWFi NzUyNC1hYjc5LTQ2YzgtYWVhNi05NmIxMDBlYjI0NWQvY2FjNjUyYzAtZjk3Yy0z YTA1LThiOTItODMwMTM1MjQyZjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGVhYjc1MjQtYWI3OS00NmM4LWFl YTYtOTZiMTAwZWIyNDVkLzRlYWI3NTI0LWFiNzktNDZjOC1hZWE2LTk2YjEwMGVi MjQ1ZC5jcmwwHwYDVR0jBBgwFoAUAvAXN7tccDjst6Tnox+wrSnQ6+YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80ZWFiNzUyNC1hYjc5LTQ2YzgtYWVhNi05NmIx MDBlYjI0NWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgY9QF0F MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACvZAvEoQ4SqBSugphw4mU/xHlhx78oFZrtGtE3REjyPaXjoJORl LGSbq0oHe/RkTvDBIF5GoByc8tnB2KdHFYVcd/bPScgQYGjezyKG7afxb2YrIEfx PUPa22Q8hghf7ouEdxVlkILVePGosdBi1RErc8+CxRt0HfbPHvxZtDC0wb3JbjIX k6yJCSnRzFDyPEaFe1JC9e9d8bseOfGFjeXYjTa+/I6xp9AU3V6jQBxmhsDMgHvh vBCLFKmev4DSLo2t8pMzRuQoQJD6HQ+bHSmFwFHJO0qiTMilfbuT3OHoHwr72jhS XBDtnQnAuKFaimc7DnZV2tIKl9kWdNhekuQ= -----END CERTIFICATE-----Generated at Thu Nov 6 00:27:25 2025 by rpki-client