$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186/8077d11c-1f26-3f4c-8c7f-0b53d3b799c6.roa File: 8077d11c-1f26-3f4c-8c7f-0b53d3b799c6.roa (raw, json) Hash identifier: JrDSGr5fuxCKSw01TJmEGTzEfDpIUHV5128cngTky0c= Subject key identifier: 65:20:0B:14:92:68:D8:C3:8A:16:AC:BB:CE:8B:58:C2:16:71:B0:71 Certificate issuer: /CN=d4cafeea-cee5-442f-9f6c-530abebc6186 Certificate serial: 010D0C9F4328584BA667A8147D8050AFC48C8F40 Authority key identifier: 59:5F:57:F1:E4:CF:8F:31:36:A2:0B:43:76:7E:4A:AD:D7:8E:89:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186/8077d11c-1f26-3f4c-8c7f-0b53d3b799c6.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 396982 IP address blocks: 2607:c0c0:aaaa::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186/d4cafeea-cee5-442f-9f6c-530abebc6186.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186/d4cafeea-cee5-442f-9f6c-530abebc6186.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:a8:14:7d:80:50:af:c4:8c:8f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4cafeea-cee5-442f-9f6c-530abebc6186 Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=e596c441-4707-4c10-ae34-7eb946625339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1b:e9:db:5f:0c:f1:3b:38:05:53:c9:22:4f: 81:8d:69:36:b8:fb:b6:e2:3c:87:46:7b:96:99:60: c4:69:f9:6d:a8:59:a8:2b:2f:6f:30:24:1a:dd:c5: 0c:31:a5:fa:ab:47:83:98:56:a5:17:8c:d7:05:ab: 3e:31:82:8f:dd:8b:22:e9:96:76:6e:98:e8:3f:8d: 46:1a:6c:b5:f5:d7:dc:21:c2:53:7e:b4:97:6f:e1: 1c:c3:8e:04:ff:d1:39:f1:47:1c:63:39:11:94:92: f3:aa:74:45:40:13:a9:f0:36:ab:6b:7c:37:39:42: b0:7c:80:c9:f8:51:73:7e:25:80:4f:ed:20:3a:e8: a1:4e:25:e8:41:42:1b:84:b1:4b:9d:a3:8d:15:7d: 65:6a:b5:d9:b7:db:af:8e:91:c1:b2:af:d2:35:79: d2:ee:45:ff:84:18:20:a2:07:f1:21:9a:b6:76:d5: e6:e1:92:60:b3:66:bc:ce:b7:ee:85:ee:37:c0:54: 23:b8:07:16:2a:40:0c:88:db:97:95:9e:42:0d:1e: 83:29:63:29:6b:bb:c7:16:0d:e9:ff:09:e3:36:dd: 7e:43:ea:bb:94:4b:85:b0:18:88:f7:b5:3b:c1:24: a6:ff:6e:70:6b:7a:39:ec:b8:9d:8b:12:b4:12:a8: 00:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:20:0B:14:92:68:D8:C3:8A:16:AC:BB:CE:8B:58:C2:16:71:B0:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186/8077d11c-1f26-3f4c-8c7f-0b53d3b799c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186/d4cafeea-cee5-442f-9f6c-530abebc6186.crl X509v3 Authority Key Identifier: keyid:59:5F:57:F1:E4:CF:8F:31:36:A2:0B:43:76:7E:4A:AD:D7:8E:89:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186.cer sbgp-ipAddrBlock: critical IPv6: 2607:c0c0:aaaa::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:e1:b6:19:08:b1:c1:a5:32:7f:c4:b6:72:ca:35:6c:1e:4b: 0a:53:06:67:72:20:1f:f5:6d:7d:c4:1c:97:0d:cc:fa:5d:5a: 59:56:ba:87:04:cf:65:5f:ed:66:0d:80:2c:0b:15:45:e8:6d: 26:b9:70:ff:21:56:94:30:98:f6:d5:fe:ad:8b:64:d5:08:41: 3f:20:bc:67:e7:ad:05:bf:4c:86:51:2a:88:b8:9a:c0:a7:0c: 69:93:7a:dd:15:69:52:66:a6:af:02:ca:6f:4a:4f:47:09:77: f0:f8:7f:c1:3e:67:02:10:24:a5:95:5c:5b:b0:b1:19:78:35: 18:c6:78:24:c8:31:f4:e4:1b:ad:9e:c8:49:a7:94:54:19:53: ae:9d:c5:18:73:01:18:02:18:e6:29:1d:0b:1f:ba:34:9a:c7: ea:68:76:22:a0:9c:e1:1b:bc:af:f8:7c:11:db:85:7a:c6:9d: b1:2f:97:dc:30:83:17:3b:d6:77:53:ab:79:64:17:5d:17:1a: fa:c3:7d:6e:b7:1a:bb:dc:2c:5c:2e:7a:ad:c6:85:75:28:da: fc:2a:06:53:b0:f9:08:a6:f5:97:9f:a9:79:2e:c5:09:1c:f0: 2a:23:55:c7:a7:26:4b:1a:4c:0c:9b:98:94:c4:09:bd:07:c8: 12:ab:75:8d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEumZ6gUfYBQr8SMj0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDRjYWZlZWEtY2VlNS00NDJmLTlmNmMtNTMwYWJlYmM2 MTg2MB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk ZTU5NmM0NDEtNDcwNy00YzEwLWFlMzQtN2ViOTQ2NjI1MzM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBvp218M8Ts4BVPJIk+BjWk2uPu24jyHRnuW mWDEafltqFmoKy9vMCQa3cUMMaX6q0eDmFalF4zXBas+MYKP3Ysi6ZZ2bpjoP41G Gmy19dfcIcJTfrSXb+Ecw44E/9E58UccYzkRlJLzqnRFQBOp8Dara3w3OUKwfIDJ +FFzfiWAT+0gOuihTiXoQUIbhLFLnaONFX1larXZt9uvjpHBsq/SNXnS7kX/hBgg ogfxIZq2dtXm4ZJgs2a8zrfuhe43wFQjuAcWKkAMiNuXlZ5CDR6DKWMpa7vHFg3p /wnjNt1+Q+q7lEuFsBiI97U7wSSm/25wa3o57LidixK0EqgAHwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGUgCxSSaNjDihasu86LWMIWcbBxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kNGNh ZmVlYS1jZWU1LTQ0MmYtOWY2Yy01MzBhYmViYzYxODYvODA3N2QxMWMtMWYyNi0z ZjRjLThjN2YtMGI1M2QzYjc5OWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDRjYWZlZWEtY2VlNS00NDJmLTlm NmMtNTMwYWJlYmM2MTg2L2Q0Y2FmZWVhLWNlZTUtNDQyZi05ZjZjLTUzMGFiZWJj NjE4Ni5jcmwwHwYDVR0jBBgwFoAUWV9X8eTPjzE2ogtDdn5KrdeOieIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kNGNhZmVlYS1jZWU1LTQ0MmYtOWY2Yy01MzBh YmViYzYxODYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfAwKqq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABbhthkIscGlMn/EtnLKNWweSwpTBmdyIB/1bX3EHJcNzPpdWllW uocEz2Vf7WYNgCwLFUXobSa5cP8hVpQwmPbV/q2LZNUIQT8gvGfnrQW/TIZRKoi4 msCnDGmTet0VaVJmpq8Cym9KT0cJd/D4f8E+ZwIQJKWVXFuwsRl4NRjGeCTIMfTk G62eyEmnlFQZU66dxRhzARgCGOYpHQsfujSax+podiKgnOEbvK/4fBHbhXrGnbEv l9wwgxc71ndTq3lkF10XGvrDfW63GrvcLFwueq3GhXUo2vwqBlOw+Qim9ZefqXku xQkc8CojVcenJksaTAybmJTECb0HyBKrdY0= -----END CERTIFICATE-----Generated at Wed Nov 5 17:05:15 2025 by rpki-client