$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4/c4e19c46-1665-3ce1-9921-99462b0247f9.roa File: c4e19c46-1665-3ce1-9921-99462b0247f9.roa (raw, json) Hash identifier: ZEekyJFF6yT+c4l4Hdp9E+r06n4jLdXnpE6+7lQi4QM= Subject key identifier: 62:70:9C:63:E5:D5:E5:D8:7F:4D:28:C1:A5:93:AF:8C:48:18:1C:A9 Certificate issuer: /CN=0cb53f01-b9a4-4a01-b384-1d40f55687b4 Certificate serial: 010D0C9F4328584B92DCF7B56F44F8844022F680 Authority key identifier: 78:EA:5F:6A:38:38:95:7B:48:29:A0:B1:4B:35:98:07:F9:10:6C:EA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4/c4e19c46-1665-3ce1-9921-99462b0247f9.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 8002 IP address blocks: 2001:458::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4/0cb53f01-b9a4-4a01-b384-1d40f55687b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4/0cb53f01-b9a4-4a01-b384-1d40f55687b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dc:f7:b5:6f:44:f8:84:40:22:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0cb53f01-b9a4-4a01-b384-1d40f55687b4 Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=403a3b28-81cd-4673-b2e2-054faca09855 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:be:ba:1d:48:63:dd:18:ea:94:d5:22:5d:1d: 85:02:1c:bb:90:02:d2:83:61:f4:9d:af:66:96:bb: 88:dd:48:82:b5:45:c5:1a:ca:32:e1:66:9b:d0:cb: 65:6d:5b:97:47:e0:76:be:28:74:ea:09:bd:c6:c9: 08:2f:08:4b:0d:16:13:b5:b3:dd:86:e5:d2:26:72: 7c:2c:ba:e2:54:ba:7e:c0:e7:5a:d8:9b:7b:1e:b8: 1c:7f:fc:be:82:46:0f:37:10:62:a7:8f:14:08:83: 00:0c:f1:24:aa:57:be:ec:93:d6:ae:d7:f8:24:66: 21:b6:47:96:c1:2d:06:22:6b:66:f0:15:d3:4b:a2: 42:fe:4a:9d:c6:42:02:91:3f:6e:38:66:cf:af:d4: b2:db:72:5d:c6:ed:82:3e:b2:94:f9:46:8b:7c:7d: ab:b4:31:ee:e0:8e:d7:4a:35:78:66:5a:68:2f:c9: e0:b7:83:a2:8d:f7:03:23:c8:8f:ed:d5:24:39:4c: 5b:b0:1e:3e:ae:4b:ea:07:58:2d:a5:4b:53:9f:c3: db:27:fb:61:ff:51:a3:ed:6a:e0:b4:79:b2:a1:cc: ad:a3:1e:a0:50:9e:4b:35:85:f0:1c:54:89:2f:07: e2:b2:5e:10:99:52:bb:ac:84:8e:c8:37:36:99:6e: 7e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:70:9C:63:E5:D5:E5:D8:7F:4D:28:C1:A5:93:AF:8C:48:18:1C:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4/c4e19c46-1665-3ce1-9921-99462b0247f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4/0cb53f01-b9a4-4a01-b384-1d40f55687b4.crl X509v3 Authority Key Identifier: keyid:78:EA:5F:6A:38:38:95:7B:48:29:A0:B1:4B:35:98:07:F9:10:6C:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4.cer sbgp-ipAddrBlock: critical IPv6: 2001:458::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:e8:34:cf:0b:c4:19:9c:4c:02:74:42:e4:77:98:d7:90:1b: c5:37:b9:54:a3:2a:9b:6d:63:13:7c:a2:c5:b0:87:2b:87:97: 09:84:79:64:9a:0a:07:85:07:23:74:dd:ac:e9:fa:44:16:27: da:cc:1e:2b:9a:5b:a2:f5:e7:8a:1c:ac:57:90:9f:12:7f:22: cb:fd:6d:08:e0:ce:70:6e:00:9d:3f:6f:a3:2b:b3:d8:ce:a1: 22:a3:d8:80:61:22:04:cf:82:3b:b3:a1:ee:14:7c:15:3b:c0: 81:17:08:39:64:e5:37:ff:56:51:d9:a5:b2:cf:3d:d4:f3:52: 05:82:58:b3:60:f2:94:69:65:2b:07:61:86:8c:af:5c:57:44: 2c:a1:b9:9a:96:2f:58:f6:45:e6:b9:e5:e0:92:33:0b:63:1a: f5:04:da:26:84:d2:1f:95:25:ec:b8:ae:c4:96:41:ef:57:f3: d9:85:e8:c0:95:56:e2:26:49:9a:7a:1c:b5:6c:15:84:45:da: 89:99:51:a1:70:58:1c:f7:17:21:92:ca:7c:06:4a:ce:da:7c: 29:19:c8:8f:d5:6f:cf:c9:28:c1:e4:af:c5:c2:f3:fe:79:a7: 1c:0b:06:55:25:46:aa:4f:75:4c:47:1b:f6:7e:63:04:9b:d5: 3f:d9:4b:7a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEuS3Pe1b0T4hEAi9oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGNiNTNmMDEtYjlhNC00YTAxLWIzODQtMWQ0MGY1NTY4 N2I0MB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk NDAzYTNiMjgtODFjZC00NjczLWIyZTItMDU0ZmFjYTA5ODU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmb66HUhj3RjqlNUiXR2FAhy7kALSg2H0na9m lruI3UiCtUXFGsoy4Wab0MtlbVuXR+B2vih06gm9xskILwhLDRYTtbPdhuXSJnJ8 LLriVLp+wOda2Jt7Hrgcf/y+gkYPNxBip48UCIMADPEkqle+7JPWrtf4JGYhtkeW wS0GImtm8BXTS6JC/kqdxkICkT9uOGbPr9Sy23Jdxu2CPrKU+UaLfH2rtDHu4I7X SjV4ZlpoL8ngt4OijfcDI8iP7dUkOUxbsB4+rkvqB1gtpUtTn8PbJ/th/1Gj7Wrg tHmyocytox6gUJ5LNYXwHFSJLwfisl4QmVK7rISOyDc2mW5+oQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGJwnGPl1eXYf00owaWTr4xIGBypMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8wY2I1 M2YwMS1iOWE0LTRhMDEtYjM4NC0xZDQwZjU1Njg3YjQvYzRlMTljNDYtMTY2NS0z Y2UxLTk5MjEtOTk0NjJiMDI0N2Y5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMGNiNTNmMDEtYjlhNC00YTAxLWIz ODQtMWQ0MGY1NTY4N2I0LzBjYjUzZjAxLWI5YTQtNGEwMS1iMzg0LTFkNDBmNTU2 ODdiNC5jcmwwHwYDVR0jBBgwFoAUeOpfajg4lXtIKaCxSzWYB/kQbOowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8wY2I1M2YwMS1iOWE0LTRhMDEtYjM4NC0xZDQw ZjU1Njg3YjQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAEEWDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCP6DTPC8QZnEwCdELkd5jXkBvFN7lUoyqbbWMTfKLFsIcrh5cJhHlk mgoHhQcjdN2s6fpEFifazB4rmlui9eeKHKxXkJ8SfyLL/W0I4M5wbgCdP2+jK7PY zqEio9iAYSIEz4I7s6HuFHwVO8CBFwg5ZOU3/1ZR2aWyzz3U81IFglizYPKUaWUr B2GGjK9cV0Qsobmali9Y9kXmueXgkjMLYxr1BNomhNIflSXsuK7ElkHvV/PZhejA lVbiJkmaehy1bBWERdqJmVGhcFgc9xchksp8BkrO2nwpGciP1W/PySjB5K/FwvP+ eaccCwZVJUaqT3VMRxv2fmMEm9U/2Ut6 -----END CERTIFICATE-----Generated at Mon Oct 20 10:08:03 2025 by rpki-client