$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/424f26c4-887b-3d46-80f1-25fad32f836b.roa File: 424f26c4-887b-3d46-80f1-25fad32f836b.roa (raw, json) Hash identifier: H8cSIG0owJo220YnoN+9lduyMLkFSneQspSD/FMOw3w= Subject key identifier: 1F:A7:4C:57:AF:66:D3:8E:CE:C9:B4:8B:D9:70:37:76:27:16:30:1A Certificate issuer: /CN=0aa7836e-22e9-444b-9d13-5d11358bd6ab Certificate serial: 010D0C9F4328584B970CF050781A5444EB484C40 Authority key identifier: AA:57:C4:29:E5:6A:1D:D4:AF:56:9E:A4:6D:45:98:0D:26:7D:E9:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/424f26c4-887b-3d46-80f1-25fad32f836b.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 397181 IP address blocks: 2604:c840::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/0aa7836e-22e9-444b-9d13-5d11358bd6ab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/0aa7836e-22e9-444b-9d13-5d11358bd6ab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:f0:50:78:1a:54:44:eb:48:4c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0aa7836e-22e9-444b-9d13-5d11358bd6ab Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=822e81b3-4b38-439c-b2e6-b96a7e33b44a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:e5:55:e3:10:2d:05:01:53:1f:d5:4b:56:77: 40:60:0e:5f:7d:bc:d3:e4:95:fe:bf:80:97:23:6d: 82:9b:cd:86:a9:2d:a3:74:7e:cf:44:7a:6a:49:94: de:7a:9a:4f:7c:98:75:c3:7c:7e:e5:53:55:15:24: ad:83:d7:e3:42:46:7f:f5:44:89:f1:09:b8:8e:82: dc:e3:b9:8d:3f:88:e0:55:b1:76:2a:68:1d:ac:48: 26:c1:81:e2:d9:e6:fa:93:98:1a:be:c5:e2:7e:83: 43:43:bf:f4:88:10:32:72:00:d5:24:55:dc:51:b9: 1e:c7:c8:bc:29:47:37:54:d1:2c:a0:04:ac:7f:da: 80:d2:9b:07:c7:2a:f0:a2:8f:cb:0d:2d:3a:9c:98: 3d:71:6d:61:fd:6a:06:66:2b:bf:21:eb:d8:c2:5a: ab:b3:a8:64:7c:db:9a:35:28:91:03:80:b4:39:45: 72:5c:5f:88:7e:59:c7:9b:24:30:93:58:87:22:34: 72:32:ef:5f:72:37:a2:fe:08:f2:86:7d:31:a5:c5: 43:14:16:0c:25:94:e4:19:b3:d6:aa:3a:b0:17:73: e1:f5:16:29:ed:ac:9b:e1:d8:3d:fd:44:64:dd:a4: 79:8e:40:db:64:b4:2d:08:af:28:76:04:13:a1:fd: 2c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:A7:4C:57:AF:66:D3:8E:CE:C9:B4:8B:D9:70:37:76:27:16:30:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/424f26c4-887b-3d46-80f1-25fad32f836b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/0aa7836e-22e9-444b-9d13-5d11358bd6ab.crl X509v3 Authority Key Identifier: keyid:AA:57:C4:29:E5:6A:1D:D4:AF:56:9E:A4:6D:45:98:0D:26:7D:E9:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab.cer sbgp-ipAddrBlock: critical IPv6: 2604:c840::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:ce:70:6d:a8:71:ca:ee:d7:61:cd:c7:b3:19:24:94:57:03: 71:75:64:54:42:3c:18:dd:c1:1c:9b:3b:f3:33:da:5f:89:b6: 23:99:da:fd:c0:be:a2:81:9a:68:00:e5:60:db:02:06:dc:8a: 65:f1:0b:a7:c7:a9:c4:79:f1:73:4d:61:d0:17:4c:d7:4b:9e: 9d:4e:61:68:9e:1a:3c:30:0a:3e:0a:f2:a9:8b:ae:8e:23:b2: 06:dc:f4:ee:83:04:e1:84:72:aa:ac:40:73:5a:36:47:5e:03: a6:3e:f5:06:00:72:6b:14:3b:30:c0:5a:ee:e2:01:8b:59:07: 17:ac:ed:b8:d4:b4:35:7c:ba:51:cf:8a:65:69:82:c2:9a:3b: 5d:e3:c2:66:74:3c:d0:5a:8a:ce:67:64:fc:af:95:9d:24:de: a5:48:9a:2e:99:1c:ec:a1:84:f6:a7:86:7c:6c:6e:2f:bf:bc: 44:f8:e7:a2:12:66:30:05:12:11:34:4d:d3:e1:07:67:a6:da: bc:39:b6:3f:6b:19:f8:34:0f:51:a3:61:ff:49:fa:0e:b6:8e: 1b:ad:53:df:5e:99:c4:ee:8b:62:b4:d1:38:36:cb:87:25:e1: 56:48:bd:44:fa:21:3c:98:e4:78:bf:83:c4:c1:14:f1:a5:b7: a4:86:63:91 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEuXDPBQeBpUROtITEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFhNzgzNmUtMjJlOS00NDRiLTlkMTMtNWQxMTM1OGJk NmFiMB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk ODIyZTgxYjMtNGIzOC00MzljLWIyZTYtYjk2YTdlMzNiNDRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuVV4xAtBQFTH9VLVndAYA5ffbzT5JX+v4CX I22Cm82GqS2jdH7PRHpqSZTeeppPfJh1w3x+5VNVFSStg9fjQkZ/9USJ8Qm4joLc 47mNP4jgVbF2KmgdrEgmwYHi2eb6k5gavsXifoNDQ7/0iBAycgDVJFXcUbkex8i8 KUc3VNEsoASsf9qA0psHxyrwoo/LDS06nJg9cW1h/WoGZiu/IevYwlqrs6hkfNua NSiRA4C0OUVyXF+IflnHmyQwk1iHIjRyMu9fcjei/gjyhn0xpcVDFBYMJZTkGbPW qjqwF3Ph9RYp7ayb4dg9/URk3aR5jkDbZLQtCK8odgQTof0sbQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFB+nTFevZtOOzsm0i9lwN3YnFjAaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8wYWE3 ODM2ZS0yMmU5LTQ0NGItOWQxMy01ZDExMzU4YmQ2YWIvNDI0ZjI2YzQtODg3Yi0z ZDQ2LTgwZjEtMjVmYWQzMmY4MzZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMGFhNzgzNmUtMjJlOS00NDRiLTlk MTMtNWQxMTM1OGJkNmFiLzBhYTc4MzZlLTIyZTktNDQ0Yi05ZDEzLTVkMTEzNThi ZDZhYi5jcmwwHwYDVR0jBBgwFoAUqlfEKeVqHdSvVp6kbUWYDSZ96RcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8wYWE3ODM2ZS0yMmU5LTQ0NGItOWQxMy01ZDEx MzU4YmQ2YWIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgTIQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBBznBtqHHK7tdhzcezGSSUVwNxdWRUQjwY3cEcmzvzM9pfibYjmdr9 wL6igZpoAOVg2wIG3Ipl8Qunx6nEefFzTWHQF0zXS56dTmFonho8MAo+CvKpi66O I7IG3PTugwThhHKqrEBzWjZHXgOmPvUGAHJrFDswwFru4gGLWQcXrO241LQ1fLpR z4plaYLCmjtd48JmdDzQWorOZ2T8r5WdJN6lSJoumRzsoYT2p4Z8bG4vv7xE+Oei EmYwBRIRNE3T4Qdnptq8ObY/axn4NA9Ro2H/SfoOto4brVPfXpnE7otitNE4NsuH JeFWSL1E+iE8mOR4v4PEwRTxpbekhmOR -----END CERTIFICATE-----Generated at Wed Nov 5 09:09:43 2025 by rpki-client