$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/418526d5-2aa2-4d2f-8cb1-5c417728a97d/740a0817-3d71-360d-aa31-2c01a2137f14.roa File: 740a0817-3d71-360d-aa31-2c01a2137f14.roa (raw, json) Hash identifier: 135m5NclOmn9qZsqr1qd5H+tU0CNJfdahJCPjSUJL58= Subject key identifier: CD:84:63:AD:39:19:E4:2B:6E:00:4A:C9:75:12:9F:9C:70:02:A9:1F Certificate issuer: /CN=418526d5-2aa2-4d2f-8cb1-5c417728a97d Certificate serial: 010D0C9F4328584BB88D2C48447499C6B3440AE0 Authority key identifier: 8A:23:7F:AE:7E:77:C0:02:5D:F9:30:F1:FC:46:FC:5E:1E:84:09:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/418526d5-2aa2-4d2f-8cb1-5c417728a97d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/418526d5-2aa2-4d2f-8cb1-5c417728a97d/740a0817-3d71-360d-aa31-2c01a2137f14.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 16509 IP address blocks: 2607:aa40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/418526d5-2aa2-4d2f-8cb1-5c417728a97d/418526d5-2aa2-4d2f-8cb1-5c417728a97d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/418526d5-2aa2-4d2f-8cb1-5c417728a97d/418526d5-2aa2-4d2f-8cb1-5c417728a97d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/418526d5-2aa2-4d2f-8cb1-5c417728a97d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:2c:48:44:74:99:c6:b3:44:0a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=418526d5-2aa2-4d2f-8cb1-5c417728a97d Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=1ab9f257-ea73-4f92-8cce-a3e46a0469b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:3a:be:02:f7:29:12:a7:5a:7d:b8:b2:2d:cf: f4:48:33:e9:15:fb:66:71:3a:e1:dc:df:1b:26:b7: 66:b2:0b:e6:e6:f4:3e:d3:67:02:dc:c0:fa:bd:ce: d3:ca:93:ab:ae:a6:7d:e0:76:03:67:ed:02:bc:6e: 33:0b:53:00:83:1e:3f:79:86:59:ce:b3:15:c5:b0: 2f:91:50:49:a8:6a:76:38:c6:8c:f4:57:9b:10:c3: 7b:bf:38:74:c6:52:77:b5:1b:86:e6:5e:72:fc:8a: d0:2e:e3:57:ee:71:d1:c9:21:1d:43:a3:f8:eb:b4: d9:1e:32:41:25:6f:64:7f:e9:02:33:bf:31:8f:f3: 85:68:d3:e7:d4:4d:31:1b:eb:89:67:d5:a3:a6:f3: 66:59:d7:b7:88:d9:37:8d:fd:32:92:df:04:ba:7b: 66:ba:fd:d1:4c:ed:81:15:f2:08:5b:fc:a0:61:1e: bf:67:1c:55:71:12:79:69:22:03:83:36:a8:f5:a6: 86:8f:2e:33:ae:68:18:f0:66:84:ab:b5:c6:79:57: 10:96:04:fb:cd:8f:df:89:ab:c8:d6:18:c9:dc:76: a2:95:05:05:46:af:36:16:80:5d:11:2a:96:26:df: 3e:d5:35:66:d3:dd:cf:b7:48:37:f6:ba:86:81:c5: 91:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:84:63:AD:39:19:E4:2B:6E:00:4A:C9:75:12:9F:9C:70:02:A9:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/418526d5-2aa2-4d2f-8cb1-5c417728a97d/740a0817-3d71-360d-aa31-2c01a2137f14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/418526d5-2aa2-4d2f-8cb1-5c417728a97d/418526d5-2aa2-4d2f-8cb1-5c417728a97d.crl X509v3 Authority Key Identifier: keyid:8A:23:7F:AE:7E:77:C0:02:5D:F9:30:F1:FC:46:FC:5E:1E:84:09:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/418526d5-2aa2-4d2f-8cb1-5c417728a97d.cer sbgp-ipAddrBlock: critical IPv6: 2607:aa40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:e6:07:dc:cf:40:75:16:76:fc:6f:ef:9c:77:d1:e4:bc:b9: 1b:ec:63:e1:39:b2:74:4b:db:27:b7:08:c5:31:e4:e4:3a:d8: 42:bc:4c:5f:c3:b1:8a:e2:cd:b4:77:1d:98:3e:61:11:ee:57: 33:14:8f:55:5f:28:e8:93:0d:3e:68:26:55:db:4d:82:e1:cb: 19:e2:6d:f8:7f:6c:4c:cf:2e:66:d1:26:e7:bf:02:47:ef:c5: e8:e0:42:16:c6:57:22:91:cf:46:1c:0b:ff:07:36:03:25:40: aa:1b:eb:ad:b0:06:09:15:dd:de:d7:cb:4a:b0:15:83:49:cc: 3b:51:ba:94:57:51:b7:b0:21:b7:76:76:7a:41:3e:79:5e:67: 07:9d:85:b9:8d:6f:f1:ac:6e:56:c4:d1:ef:3c:61:a7:87:83: 95:6a:68:ad:4a:0e:53:27:98:d0:4d:07:35:e0:62:7d:f3:6c: 5d:c3:86:10:75:51:08:fc:da:21:1a:24:46:d5:3e:26:33:ad: b1:83:b5:5d:7a:1d:70:b4:48:2e:d5:06:b0:50:ba:39:dd:83: 5b:cd:4c:e0:38:50:29:0f:87:24:45:51:4d:c9:35:81:f1:50: fa:1a:6a:3f:00:d1:2d:7a:0e:9f:f4:b5:39:05:2c:da:53:e3: f4:1c:25:e6 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEu4jSxIRHSZxrNECuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDE4NTI2ZDUtMmFhMi00ZDJmLThjYjEtNWM0MTc3Mjhh OTdkMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk MWFiOWYyNTctZWE3My00ZjkyLThjY2UtYTNlNDZhMDQ2OWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzq+AvcpEqdafbiyLc/0SDPpFftmcTrh3N8b Jrdmsgvm5vQ+02cC3MD6vc7TypOrrqZ94HYDZ+0CvG4zC1MAgx4/eYZZzrMVxbAv kVBJqGp2OMaM9FebEMN7vzh0xlJ3tRuG5l5y/IrQLuNX7nHRySEdQ6P467TZHjJB JW9kf+kCM78xj/OFaNPn1E0xG+uJZ9WjpvNmWde3iNk3jf0ykt8Euntmuv3RTO2B FfIIW/ygYR6/ZxxVcRJ5aSIDgzao9aaGjy4zrmgY8GaEq7XGeVcQlgT7zY/fiavI 1hjJ3HailQUFRq82FoBdESqWJt8+1TVm093Pt0g39rqGgcWR4QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFM2EY605GeQrbgBKyXUSn5xwAqkfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80MTg1 MjZkNS0yYWEyLTRkMmYtOGNiMS01YzQxNzcyOGE5N2QvNzQwYTA4MTctM2Q3MS0z NjBkLWFhMzEtMmMwMWEyMTM3ZjE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNDE4NTI2ZDUtMmFhMi00ZDJmLThj YjEtNWM0MTc3MjhhOTdkLzQxODUyNmQ1LTJhYTItNGQyZi04Y2IxLTVjNDE3NzI4 YTk3ZC5jcmwwHwYDVR0jBBgwFoAUiiN/rn53wAJd+TDx/Eb8Xh6ECRIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80MTg1MjZkNS0yYWEyLTRkMmYtOGNiMS01YzQx NzcyOGE5N2QuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgeqQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAf5gfcz0B1Fnb8b++cd9HkvLkb7GPhObJ0S9sntwjFMeTkOthCvExf w7GK4s20dx2YPmER7lczFI9VXyjokw0+aCZV202C4csZ4m34f2xMzy5m0SbnvwJH 78Xo4EIWxlcikc9GHAv/BzYDJUCqG+utsAYJFd3e18tKsBWDScw7UbqUV1G3sCG3 dnZ6QT55XmcHnYW5jW/xrG5WxNHvPGGnh4OVamitSg5TJ5jQTQc14GJ982xdw4YQ dVEI/NohGiRG1T4mM62xg7Vdeh1wtEgu1QawULo53YNbzUzgOFApD4ckRVFNyTWB 8VD6Gmo/ANEteg6f9LU5BSzaU+P0HCXm -----END CERTIFICATE-----Generated at Wed Nov 5 06:55:07 2025 by rpki-client