$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186/4acb54f0-442a-3620-b23f-cd1fd9630d0e.roa File: 4acb54f0-442a-3620-b23f-cd1fd9630d0e.roa (raw, json) Hash identifier: 56KQV9CT+Om7716YvNYbzC22YlKK5Hy0z4vmdvttZo0= Subject key identifier: 6F:4B:99:60:BD:D2:76:6F:CF:10:24:52:34:81:AA:84:E8:F4:1F:80 Certificate issuer: /CN=d4cafeea-cee5-442f-9f6c-530abebc6186 Certificate serial: 010D0C9F4328584BA667AF1BB33EE978D7DEADD0 Authority key identifier: 59:5F:57:F1:E4:CF:8F:31:36:A2:0B:43:76:7E:4A:AD:D7:8E:89:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186/4acb54f0-442a-3620-b23f-cd1fd9630d0e.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 396328 IP address blocks: 2607:c0c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186/d4cafeea-cee5-442f-9f6c-530abebc6186.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186/d4cafeea-cee5-442f-9f6c-530abebc6186.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:af:1b:b3:3e:e9:78:d7:de:ad:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4cafeea-cee5-442f-9f6c-530abebc6186 Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=61f8028a-2e73-4089-823f-d20ef7651e71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:fe:76:b3:6f:4a:7b:7e:79:db:75:28:ac:72: 27:51:e8:21:8a:40:41:2e:e5:d7:4e:4d:5d:df:cb: 39:cd:02:90:91:db:fc:e4:b8:e7:91:f0:58:a7:12: 5d:f1:20:8b:9f:c9:e3:af:14:d7:d2:c3:4c:4d:51: 8e:71:2a:11:60:5e:3f:9b:14:e5:bc:9b:7c:d0:72: b2:09:5f:23:39:3d:0a:9a:ad:14:8e:0f:5a:90:61: ad:26:f4:76:de:f1:f2:20:21:c2:b9:87:a0:3c:bd: 95:ef:81:e1:8d:2a:a3:0a:22:b9:83:d4:f7:d5:b1: b9:2f:9f:02:53:2e:4a:5e:69:99:95:e7:49:3a:66: 48:3a:f3:9c:d1:7e:91:a3:49:92:e7:86:5d:7c:3d: f4:84:6b:2b:ed:2b:82:b8:4e:7e:cc:8a:04:3c:3b: 5f:72:fa:59:39:22:b3:b5:98:06:c7:69:04:9f:b2: c3:60:b5:f7:ac:0a:78:8d:c8:ae:16:ed:85:01:46: 7f:f9:5c:74:c3:65:a1:60:3b:47:ea:92:49:b8:3e: 97:c8:bf:fe:cd:3e:5b:00:84:d4:64:3e:42:24:f5: 39:12:62:17:c4:31:6a:82:a8:3f:9a:4e:40:cd:65: 00:2f:91:a4:1b:27:aa:fa:f0:a5:14:7a:5b:5c:e3: 71:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:4B:99:60:BD:D2:76:6F:CF:10:24:52:34:81:AA:84:E8:F4:1F:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186/4acb54f0-442a-3620-b23f-cd1fd9630d0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186/d4cafeea-cee5-442f-9f6c-530abebc6186.crl X509v3 Authority Key Identifier: keyid:59:5F:57:F1:E4:CF:8F:31:36:A2:0B:43:76:7E:4A:AD:D7:8E:89:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186.cer sbgp-ipAddrBlock: critical IPv6: 2607:c0c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:6b:75:c4:19:16:45:83:9d:03:62:b9:43:31:bb:69:06:ad: 13:0c:34:17:1c:2e:01:4d:7a:1e:cf:a6:06:2e:2a:2b:b1:ae: cb:16:3c:f7:2e:8f:86:a8:23:c7:6a:41:26:7b:8e:0c:21:5f: e5:aa:62:69:2b:66:0c:4b:f1:4d:d1:50:b5:11:a4:61:8a:d9: 83:6f:68:20:2e:f9:2c:ed:0f:df:e2:4b:d9:22:fc:25:6a:8e: 15:49:40:08:d9:c7:60:48:21:a8:a1:1d:23:7b:bf:9d:0e:28: 26:c9:89:8c:4c:ae:4a:8e:dc:97:cf:cf:d5:a5:41:f4:4e:7d: 07:01:e3:04:a1:68:54:cf:d1:38:76:08:25:b7:f4:5b:47:0a: 30:d4:48:96:27:a9:d3:6d:ea:0b:c9:e4:04:9d:ae:29:7a:ea: f8:c6:21:1d:b8:d1:d0:a5:57:45:55:f5:9e:74:cb:55:3a:96: ad:cd:43:0e:a2:1d:63:b7:8a:b3:a2:31:61:eb:c5:e6:31:79: e8:dd:ed:53:b5:46:22:07:c3:2e:49:9f:bc:fd:b4:05:8c:83: 2d:a9:ca:30:62:90:75:a8:44:0d:4b:c0:02:15:45:62:7e:ca: 3f:1a:2e:83:e2:f4:f1:ca:cb:72:75:30:29:2f:96:3a:bc:ce: 57:c2:3d:d3 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEumZ68bsz7peNferdAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDRjYWZlZWEtY2VlNS00NDJmLTlmNmMtNTMwYWJlYmM2 MTg2MB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk NjFmODAyOGEtMmU3My00MDg5LTgyM2YtZDIwZWY3NjUxZTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/52s29Ke35523UorHInUeghikBBLuXXTk1d 38s5zQKQkdv85LjnkfBYpxJd8SCLn8njrxTX0sNMTVGOcSoRYF4/mxTlvJt80HKy CV8jOT0Kmq0Ujg9akGGtJvR23vHyICHCuYegPL2V74HhjSqjCiK5g9T31bG5L58C Uy5KXmmZledJOmZIOvOc0X6Ro0mS54ZdfD30hGsr7SuCuE5+zIoEPDtfcvpZOSKz tZgGx2kEn7LDYLX3rAp4jciuFu2FAUZ/+Vx0w2WhYDtH6pJJuD6XyL/+zT5bAITU ZD5CJPU5EmIXxDFqgqg/mk5AzWUAL5GkGyeq+vClFHpbXONx1QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFG9LmWC90nZvzxAkUjSBqoTo9B+AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kNGNh ZmVlYS1jZWU1LTQ0MmYtOWY2Yy01MzBhYmViYzYxODYvNGFjYjU0ZjAtNDQyYS0z NjIwLWIyM2YtY2QxZmQ5NjMwZDBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDRjYWZlZWEtY2VlNS00NDJmLTlm NmMtNTMwYWJlYmM2MTg2L2Q0Y2FmZWVhLWNlZTUtNDQyZi05ZjZjLTUzMGFiZWJj NjE4Ni5jcmwwHwYDVR0jBBgwFoAUWV9X8eTPjzE2ogtDdn5KrdeOieIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kNGNhZmVlYS1jZWU1LTQ0MmYtOWY2Yy01MzBh YmViYzYxODYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgfAwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAFa3XEGRZFg50DYrlDMbtpBq0TDDQXHC4BTXoez6YGLiorsa7LFjz3 Lo+GqCPHakEme44MIV/lqmJpK2YMS/FN0VC1EaRhitmDb2ggLvks7Q/f4kvZIvwl ao4VSUAI2cdgSCGooR0je7+dDigmyYmMTK5KjtyXz8/VpUH0Tn0HAeMEoWhUz9E4 dgglt/RbRwow1EiWJ6nTbeoLyeQEna4peur4xiEduNHQpVdFVfWedMtVOpatzUMO oh1jt4qzojFh68XmMXno3e1TtUYiB8MuSZ+8/bQFjIMtqcowYpB1qEQNS8ACFUVi fso/Gi6D4vTxystydTApL5Y6vM5Xwj3T -----END CERTIFICATE-----Generated at Wed Nov 5 17:05:35 2025 by rpki-client