$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/40bb1b4d-5dfa-347c-9634-126e31726d54.roa File: 40bb1b4d-5dfa-347c-9634-126e31726d54.roa (raw, json) Hash identifier: kBSxAiwuiYx0zJZ+yWlElP/6lOYTSoqBO5ZXl4B5fr4= Subject key identifier: C4:01:75:00:8B:0C:BA:00:E1:F5:9A:45:DE:9A:B4:BB:AF:9E:1D:B2 Certificate issuer: /CN=239e2a72-9347-4316-9be7-20bdf6512711 Certificate serial: 010D0C9F4328584BA39D395E15BDCFE58A2D8D80 Authority key identifier: C7:00:5A:76:42:60:11:9F:ED:7A:6F:7F:67:94:62:64:EC:2D:6B:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/40bb1b4d-5dfa-347c-9634-126e31726d54.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 64236 IP address blocks: 2604:1740::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/239e2a72-9347-4316-9be7-20bdf6512711.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/239e2a72-9347-4316-9be7-20bdf6512711.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:39:5e:15:bd:cf:e5:8a:2d:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=239e2a72-9347-4316-9be7-20bdf6512711 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=4dcb58e6-01ee-44e1-98c9-e4d98ef295c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:48:37:53:c9:32:80:21:d5:16:2e:49:7b:30: c4:f1:b0:c3:d7:9f:d6:fc:1d:d2:b2:d0:4b:5f:c4: 94:b6:6d:f1:6e:72:61:03:dc:d4:17:f1:c8:c7:58: 0c:dc:71:4c:1a:20:f8:82:21:cc:0d:0c:32:c8:2d: d2:2c:9e:35:6b:6a:d7:1b:a6:9e:cf:ae:15:4f:a4: a2:e4:ee:d3:b9:72:8a:33:de:9a:42:4d:fb:68:1a: 3d:5b:85:93:9e:23:99:a8:c2:cb:40:c7:4c:71:91: 80:fd:12:11:d8:07:b2:67:44:6f:b4:ea:80:b1:85: 11:13:7f:48:43:5f:57:00:56:1b:24:d2:5b:be:50: 7c:36:f6:25:e1:4c:5d:52:52:1c:f5:be:66:c2:c6: 09:ef:86:2c:02:33:54:02:9d:78:e8:e7:7a:2d:f2: 6b:b6:9f:a5:00:53:8b:82:9a:79:6b:67:b9:25:6d: 0d:37:2b:50:ad:7d:0d:e4:69:83:6b:d9:64:d4:ce: f8:09:16:38:4d:5d:93:c4:29:02:27:26:6d:e3:3d: f7:cc:60:5c:de:4c:c1:67:44:b6:67:4c:54:11:30: e3:3a:ab:05:f1:3b:37:fd:7f:d1:3a:33:d7:58:ea: 05:d4:53:ff:23:4d:9f:c8:65:a3:ba:20:c4:66:e7: cd:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:01:75:00:8B:0C:BA:00:E1:F5:9A:45:DE:9A:B4:BB:AF:9E:1D:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/40bb1b4d-5dfa-347c-9634-126e31726d54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/239e2a72-9347-4316-9be7-20bdf6512711.crl X509v3 Authority Key Identifier: keyid:C7:00:5A:76:42:60:11:9F:ED:7A:6F:7F:67:94:62:64:EC:2D:6B:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711.cer sbgp-ipAddrBlock: critical IPv6: 2604:1740::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:3f:72:81:11:8d:af:23:fa:76:ea:a9:b0:6a:53:88:7c:00: d2:0f:5b:ca:21:d1:8e:17:06:01:ac:73:8c:58:b0:a4:fa:9c: e2:08:09:5c:84:2e:ba:c8:b8:fb:e2:8a:5f:f6:3c:f9:69:df: 17:2d:7e:b7:d2:35:df:de:bb:84:6d:cb:15:31:97:42:4d:12: 21:4f:7c:93:40:d1:98:a5:71:6e:47:ab:1e:20:11:25:23:a1: 82:1d:58:40:47:72:19:d5:7c:cb:ff:a8:5e:c4:72:29:90:dd: c4:bb:6c:7c:89:71:55:d3:02:08:6b:7f:75:e5:16:39:f0:81: 8c:33:22:10:6b:25:e9:05:84:72:55:d0:06:58:09:e5:9c:90: ae:25:1d:d5:6b:b4:2f:b7:2c:31:61:32:81:92:4b:ed:05:80: c3:02:91:79:14:fd:cc:1a:ed:3f:37:cb:46:4c:d7:aa:7e:9d: f6:25:ed:e9:2b:52:df:1f:15:86:7f:e5:bf:2a:2e:83:fa:f9: 1e:b9:1a:29:96:c9:28:a9:c5:21:af:e9:a4:7c:6a:69:b3:11: 96:da:15:35:01:98:bb:14:39:09:c6:5e:c0:69:b0:70:d1:93: 56:6b:3b:77:5b:a2:7a:1e:68:14:d0:e2:52:b1:a7:fb:90:85: f0:a4:b6:f4 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEujnTleFb3P5YotjYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjM5ZTJhNzItOTM0Ny00MzE2LTliZTctMjBiZGY2NTEy NzExMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk NGRjYjU4ZTYtMDFlZS00NGUxLTk4YzktZTRkOThlZjI5NWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUg3U8kygCHVFi5JezDE8bDD15/W/B3SstBL X8SUtm3xbnJhA9zUF/HIx1gM3HFMGiD4giHMDQwyyC3SLJ41a2rXG6aez64VT6Si 5O7TuXKKM96aQk37aBo9W4WTniOZqMLLQMdMcZGA/RIR2AeyZ0RvtOqAsYURE39I Q19XAFYbJNJbvlB8NvYl4UxdUlIc9b5mwsYJ74YsAjNUAp146Od6LfJrtp+lAFOL gpp5a2e5JW0NNytQrX0N5GmDa9lk1M74CRY4TV2TxCkCJyZt4z33zGBc3kzBZ0S2 Z0xUETDjOqsF8Ts3/X/ROjPXWOoF1FP/I02fyGWjuiDEZufN/QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMQBdQCLDLoA4fWaRd6atLuvnh2yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yMzll MmE3Mi05MzQ3LTQzMTYtOWJlNy0yMGJkZjY1MTI3MTEvNDBiYjFiNGQtNWRmYS0z NDdjLTk2MzQtMTI2ZTMxNzI2ZDU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjM5ZTJhNzItOTM0Ny00MzE2LTli ZTctMjBiZGY2NTEyNzExLzIzOWUyYTcyLTkzNDctNDMxNi05YmU3LTIwYmRmNjUx MjcxMS5jcmwwHwYDVR0jBBgwFoAUxwBadkJgEZ/tem9/Z5RiZOwta1QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yMzllMmE3Mi05MzQ3LTQzMTYtOWJlNy0yMGJk ZjY1MTI3MTEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQXQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB4P3KBEY2vI/p26qmwalOIfADSD1vKIdGOFwYBrHOMWLCk+pziCAlc hC66yLj74opf9jz5ad8XLX630jXf3ruEbcsVMZdCTRIhT3yTQNGYpXFuR6seIBEl I6GCHVhAR3IZ1XzL/6hexHIpkN3Eu2x8iXFV0wIIa3915RY58IGMMyIQayXpBYRy VdAGWAnlnJCuJR3Va7QvtywxYTKBkkvtBYDDApF5FP3MGu0/N8tGTNeqfp32Je3p K1LfHxWGf+W/Ki6D+vkeuRoplskoqcUhr+mkfGppsxGW2hU1AZi7FDkJxl7AabBw 0ZNWazt3W6J6HmgU0OJSsaf7kIXwpLb0 -----END CERTIFICATE-----Generated at Wed Nov 5 05:09:08 2025 by rpki-client