$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/ceaf5b6c-7659-3afa-b35a-011fd1d7aac0.roa File: ceaf5b6c-7659-3afa-b35a-011fd1d7aac0.roa (raw, json) Hash identifier: kK0TemMvxc3AbPYAJBF3y05kgXjzOWAQeNBDaQRFpck= Subject key identifier: EF:6A:32:C6:C8:71:C0:B8:54:53:2E:A3:D6:71:69:EF:49:34:3E:E5 Certificate issuer: /CN=4d80daa5-79dc-4c2a-8879-248a3f3e339c Certificate serial: 010D0C9F4328584BB2F7D1707EAB09425DD75F00 Authority key identifier: 45:24:B4:3E:8E:13:30:ED:D5:96:0D:39:A0:C5:0D:3D:96:C0:56:FA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/ceaf5b6c-7659-3afa-b35a-011fd1d7aac0.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 14618 IP address blocks: 2607:d540:fc0::/42 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/4d80daa5-79dc-4c2a-8879-248a3f3e339c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/4d80daa5-79dc-4c2a-8879-248a3f3e339c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:d1:70:7e:ab:09:42:5d:d7:5f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d80daa5-79dc-4c2a-8879-248a3f3e339c Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=3e9967d3-7948-444e-afb9-100042f0760f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:d0:78:99:d4:b9:0d:18:70:ff:25:a8:a7:8b: 47:95:da:d8:3d:cf:f4:09:05:a9:12:ea:cc:29:33: bc:22:4d:60:37:e4:41:e8:33:1e:e2:2d:e5:36:3d: be:d0:a9:8c:9e:06:0d:c7:67:fd:5d:85:3d:7c:e5: 9e:ad:5d:9b:b6:71:0b:c6:d3:08:7d:12:db:6a:cc: 28:a3:12:ce:1d:4f:95:dc:84:6c:9b:49:fa:29:91: 0a:7b:46:35:53:07:52:b9:62:e3:37:b2:d5:e3:35: ff:88:42:cd:6e:33:85:d5:3b:8b:85:25:70:32:98: 65:b8:43:90:26:89:19:55:2f:8b:5c:90:bb:ac:2a: 4d:8b:f8:f7:3a:b0:f2:1a:81:77:b5:af:d8:00:fb: 72:c1:79:b0:de:ca:55:81:12:a2:d0:69:1d:37:7a: f3:27:dd:17:9a:29:f8:72:eb:16:bb:94:e5:e3:d3: 5e:47:50:6b:0f:3a:26:f0:7e:d7:c4:88:c4:47:a2: 70:f1:21:24:09:ea:be:77:57:bd:06:72:f0:29:68: ae:bb:13:40:91:e6:bd:b2:e2:08:67:ba:e1:c2:bc: 4a:b3:e5:3a:91:31:1f:48:db:15:66:e9:a3:72:55: 70:9e:9b:2e:92:8c:91:cf:f6:b6:6a:60:69:5b:82: 73:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:6A:32:C6:C8:71:C0:B8:54:53:2E:A3:D6:71:69:EF:49:34:3E:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/ceaf5b6c-7659-3afa-b35a-011fd1d7aac0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/4d80daa5-79dc-4c2a-8879-248a3f3e339c.crl X509v3 Authority Key Identifier: keyid:45:24:B4:3E:8E:13:30:ED:D5:96:0D:39:A0:C5:0D:3D:96:C0:56:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c.cer sbgp-ipAddrBlock: critical IPv6: 2607:d540:fc0::/42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:03:f6:1d:2a:1c:26:e3:6e:49:26:58:d1:6d:58:f1:2f:84: 9d:06:c4:47:15:e2:e7:34:2e:2b:0d:ac:68:14:52:f6:be:11: 73:72:fa:82:33:3b:a0:c1:d3:52:89:d4:1a:0d:64:fa:5a:a1: 93:d7:08:7b:02:3d:ec:8a:9a:e7:76:bc:2d:9c:11:0d:ea:9d: 4c:fd:63:63:28:ef:85:e9:4c:fc:ab:81:35:dc:8c:b9:e3:f5: 09:97:d7:c6:2a:2a:fd:c5:ae:6b:da:74:7d:2a:8d:40:e9:ec: 12:f4:78:e4:0b:10:4b:f8:b8:71:aa:3f:4f:57:9c:c1:79:53: 9b:46:b7:3b:ba:92:68:0b:a0:58:e3:fe:8d:c5:ab:54:f4:70: 38:8a:c6:dc:9f:ab:44:f6:75:db:56:7a:67:70:30:88:40:74: 20:fc:35:da:86:34:9a:75:50:3c:d0:d4:12:50:fa:bf:a9:54: a1:67:69:1b:2f:4c:e4:27:6e:8e:93:35:f7:9a:76:4b:c2:41: 30:ee:fa:90:f5:41:1a:55:f1:5e:40:82:36:d9:9c:d3:10:06: 01:d5:ab:87:52:17:46:10:f8:e6:70:b6:15:fa:f9:84:28:31: 0b:62:6d:02:81:a1:d9:98:94:fd:c9:46:26:16:e8:53:6f:98: 43:73:f5:36 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuy99FwfqsJQl3XXwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGQ4MGRhYTUtNzlkYy00YzJhLTg4NzktMjQ4YTNmM2Uz MzljMB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk M2U5OTY3ZDMtNzk0OC00NDRlLWFmYjktMTAwMDQyZjA3NjBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09B4mdS5DRhw/yWop4tHldrYPc/0CQWpEurM KTO8Ik1gN+RB6DMe4i3lNj2+0KmMngYNx2f9XYU9fOWerV2btnELxtMIfRLbaswo oxLOHU+V3IRsm0n6KZEKe0Y1UwdSuWLjN7LV4zX/iELNbjOF1TuLhSVwMphluEOQ JokZVS+LXJC7rCpNi/j3OrDyGoF3ta/YAPtywXmw3spVgRKi0GkdN3rzJ90Xmin4 cusWu5Tl49NeR1BrDzom8H7XxIjER6Jw8SEkCeq+d1e9BnLwKWiuuxNAkea9suII Z7rhwrxKs+U6kTEfSNsVZumjclVwnpsukoyRz/a2amBpW4JzxwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFO9qMsbIccC4VFMuo9Zxae9JND7lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80ZDgw ZGFhNS03OWRjLTRjMmEtODg3OS0yNDhhM2YzZTMzOWMvY2VhZjViNmMtNzY1OS0z YWZhLWIzNWEtMDExZmQxZDdhYWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNGQ4MGRhYTUtNzlkYy00YzJhLTg4 NzktMjQ4YTNmM2UzMzljLzRkODBkYWE1LTc5ZGMtNGMyYS04ODc5LTI0OGEzZjNl MzM5Yy5jcmwwHwYDVR0jBBgwFoAURSS0Po4TMO3Vlg05oMUNPZbAVvowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80ZDgwZGFhNS03OWRjLTRjMmEtODg3OS0yNDhh M2YzZTMzOWMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGJgfVQA/A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJsD9h0qHCbjbkkmWNFtWPEvhJ0GxEcV4uc0LisNrGgUUva+EXNy +oIzO6DB01KJ1BoNZPpaoZPXCHsCPeyKmud2vC2cEQ3qnUz9Y2Mo74XpTPyrgTXc jLnj9QmX18YqKv3FrmvadH0qjUDp7BL0eOQLEEv4uHGqP09XnMF5U5tGtzu6kmgL oFjj/o3Fq1T0cDiKxtyfq0T2ddtWemdwMIhAdCD8NdqGNJp1UDzQ1BJQ+r+pVKFn aRsvTOQnbo6TNfeadkvCQTDu+pD1QRpV8V5AgjbZnNMQBgHVq4dSF0YQ+OZwthX6 +YQoMQtibQKBodmYlP3JRiYW6FNvmENz9TY= -----END CERTIFICATE-----Generated at Wed Nov 5 16:08:48 2025 by rpki-client