$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/0ec5dc92-60dd-3a61-b89c-f705dbad6162.roa File: 0ec5dc92-60dd-3a61-b89c-f705dbad6162.roa (raw, json) Hash identifier: GlkXXcxHpdA0D7FHS+KPz0dr0kRTLNb2wwa699kmuIA= Subject key identifier: 6B:CB:C9:A3:47:44:23:BA:E4:7B:A4:DC:D6:7F:5D:55:88:CF:F4:94 Certificate issuer: /CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf Certificate serial: 010D0C9F4328584B540C669C0F7035FD208EDA00 Authority key identifier: D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/0ec5dc92-60dd-3a61-b89c-f705dbad6162.roa Signing time: Sat 27 Sep 2025 01:00:33 +0000 ROA not before: Sat 27 Sep 2025 01:00:33 +0000 ROA not after: Fri 26 Dec 2025 02:00:33 +0000 asID: 4213 IP address blocks: 2604:4040::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:54:0c:66:9c:0f:70:35:fd:20:8e:da:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf Validity Not Before: Sep 27 01:00:33 2025 GMT Not After : Dec 26 02:00:33 2025 GMT Subject: CN=da054293-256f-4d65-a25a-1ba166f43e4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:61:2d:f2:9e:8f:18:59:6d:f1:61:c1:9b:74: 7e:fd:4b:31:0a:5f:d6:d1:81:4f:b7:f3:dd:38:3f: c6:84:e6:27:10:8a:e0:9a:08:d9:c1:c4:26:b3:39: 71:95:3e:b4:37:14:e5:b6:90:34:ba:39:a9:10:95: 77:5c:2a:53:5c:48:c3:2f:a3:65:02:18:3b:db:7e: e4:54:1b:72:55:4c:0b:33:9e:df:10:cc:65:9a:14: 36:97:c4:53:ab:7e:f6:e7:0e:69:4e:6f:3d:bb:ac: a5:a6:f6:47:ed:15:d0:3e:dd:67:06:66:68:c9:6c: 2d:85:84:22:d3:e9:a7:82:1c:2d:ec:f0:94:4c:ab: 9a:57:43:c5:6e:9b:55:34:cc:eb:d8:b1:d9:5e:ce: 52:6b:0b:c5:4a:cd:1d:9b:f9:15:73:bf:61:d7:ab: 8e:38:04:68:3c:7f:8e:23:60:ea:ae:64:b3:c5:f0: 6c:9d:6e:de:17:ee:47:a8:30:00:6c:8d:cc:4d:73: 5f:0f:b7:35:e6:bd:7e:f4:7d:dd:ca:83:54:96:fc: f9:c0:80:1c:3d:63:8d:da:d2:d7:fa:f8:eb:c7:c2: 32:e3:61:97:d9:e5:40:5b:de:5a:27:53:cc:60:35: 3b:fb:43:a3:5a:54:28:f5:ff:b4:aa:4b:5c:1f:d4: 49:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:CB:C9:A3:47:44:23:BA:E4:7B:A4:DC:D6:7F:5D:55:88:CF:F4:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/0ec5dc92-60dd-3a61-b89c-f705dbad6162.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl X509v3 Authority Key Identifier: keyid:D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer sbgp-ipAddrBlock: critical IPv6: 2604:4040::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:8a:73:90:34:e9:31:7f:4e:0e:5e:24:0a:d5:bb:e9:c6:64: 84:85:81:57:06:59:78:ff:0d:0d:ba:8d:39:f5:1a:43:b3:84: 48:12:b6:db:04:af:95:9f:0c:dd:66:6d:17:f3:84:1a:46:d9: fc:bb:81:8c:a2:ce:17:d7:2b:0c:6b:a4:ac:b1:9d:5e:d5:93: c0:68:99:34:28:58:4a:7f:61:5f:8c:e4:4a:9f:57:d7:67:4a: 5f:cc:4d:fd:2a:38:8b:84:d1:db:bc:1f:60:3f:dd:7f:6c:bb: d4:04:72:93:5f:50:55:a7:94:9a:67:dc:c0:68:d4:4d:ef:46: b0:94:2b:d2:b9:6d:b8:8a:f2:11:45:f3:a4:32:b7:76:63:02: 54:6e:fa:c4:6c:67:ab:6f:37:bd:18:9e:07:d6:ea:52:2c:12: 4c:98:df:e9:8d:05:f3:fc:70:61:ae:fa:62:fb:42:80:80:76: c3:df:2a:37:55:53:cb:67:ef:d2:50:2f:41:83:e3:0e:d2:0b: 5d:55:cd:86:b6:d8:e4:17:17:31:59:39:81:54:f1:12:82:d6: 42:9e:98:3c:4f:82:f9:70:b1:5c:96:b5:38:c9:5b:fd:f1:3c: e4:f8:79:3a:2e:fa:8b:59:ed:cd:b0:98:32:bc:5d:0d:dc:ce: 24:79:b3:93 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtUDGacD3A1/SCO2gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGMxZTU2NTAtNTliNy00YWNiLWIwZGUtMGI0ZmJhYWYz ZWJmMB4XDTI1MDkyNzAxMDAzM1oXDTI1MTIyNjAyMDAzM1owLzEtMCsGA1UEAxMk ZGEwNTQyOTMtMjU2Zi00ZDY1LWEyNWEtMWJhMTY2ZjQzZTRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2Et8p6PGFlt8WHBm3R+/UsxCl/W0YFPt/Pd OD/GhOYnEIrgmgjZwcQmszlxlT60NxTltpA0ujmpEJV3XCpTXEjDL6NlAhg7237k VBtyVUwLM57fEMxlmhQ2l8RTq3725w5pTm89u6ylpvZH7RXQPt1nBmZoyWwthYQi 0+mnghwt7PCUTKuaV0PFbptVNMzr2LHZXs5SawvFSs0dm/kVc79h16uOOARoPH+O I2DqrmSzxfBsnW7eF+5HqDAAbI3MTXNfD7c15r1+9H3dyoNUlvz5wIAcPWON2tLX +vjrx8Iy42GX2eVAW95aJ1PMYDU7+0OjWlQo9f+0qktcH9RJ2QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGvLyaNHRCO65Huk3NZ/XVWIz/SUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YzFl NTY1MC01OWI3LTRhY2ItYjBkZS0wYjRmYmFhZjNlYmYvMGVjNWRjOTItNjBkZC0z YTYxLWI4OWMtZjcwNWRiYWQ2MTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNGMxZTU2NTAtNTliNy00YWNiLWIw ZGUtMGI0ZmJhYWYzZWJmLzRjMWU1NjUwLTU5YjctNGFjYi1iMGRlLTBiNGZiYWFm M2ViZi5jcmwwHwYDVR0jBBgwFoAU2CuWzcI45A4X+nr1FMJWYJ3ScdwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80YzFlNTY1MC01OWI3LTRhY2ItYjBkZS0wYjRm YmFhZjNlYmYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgRAQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCIinOQNOkxf04OXiQK1bvpxmSEhYFXBll4/w0Nuo059RpDs4RIErbb BK+VnwzdZm0X84QaRtn8u4GMos4X1ysMa6SssZ1e1ZPAaJk0KFhKf2FfjORKn1fX Z0pfzE39KjiLhNHbvB9gP91/bLvUBHKTX1BVp5SaZ9zAaNRN70awlCvSuW24ivIR RfOkMrd2YwJUbvrEbGerbze9GJ4H1upSLBJMmN/pjQXz/HBhrvpi+0KAgHbD3yo3 VVPLZ+/SUC9Bg+MO0gtdVc2GttjkFxcxWTmBVPESgtZCnpg8T4L5cLFclrU4yVv9 8Tzk+Hk6LvqLWe3NsJgyvF0N3M4kebOT -----END CERTIFICATE-----Generated at Mon Oct 20 19:07:10 2025 by rpki-client