$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/40bb1b4d-5dfa-347c-9634-126e31726d54.roa File: 40bb1b4d-5dfa-347c-9634-126e31726d54.roa (raw, json) Hash identifier: L7xxuzvNg3rlbNQDWr9yqcXzlsLwt/TDK0UW33jNTQc= Subject key identifier: 7E:9C:25:E8:79:EA:70:6D:8E:59:6C:43:A1:0F:4E:0D:C4:4B:F4:54 Certificate issuer: /CN=239e2a72-9347-4316-9be7-20bdf6512711 Certificate serial: 010D0C9F4328584B2CEB35A7859CE18A50095800 Authority key identifier: C7:00:5A:76:42:60:11:9F:ED:7A:6F:7F:67:94:62:64:EC:2D:6B:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/40bb1b4d-5dfa-347c-9634-126e31726d54.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 64236 IP address blocks: 2604:1740::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/239e2a72-9347-4316-9be7-20bdf6512711.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/239e2a72-9347-4316-9be7-20bdf6512711.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:eb:35:a7:85:9c:e1:8a:50:09:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=239e2a72-9347-4316-9be7-20bdf6512711 Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=42fd42f3-c73e-4038-99ac-02db3c918451 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:35:4e:ae:1c:b9:db:05:a7:10:81:34:49:f6: 00:85:45:17:70:85:ea:f6:11:8b:40:84:19:96:07: 46:e5:69:9e:ee:72:5e:e2:d4:88:04:bb:85:fc:0f: 82:75:fe:fb:af:19:39:16:bb:b8:9a:61:ad:6e:f6: 97:6e:4a:01:83:8b:40:86:b3:76:62:32:37:f1:b9: ae:11:1c:a7:9c:c9:80:d9:06:bd:1d:7d:53:58:3b: ef:ee:81:2d:63:ab:ae:c8:9f:2d:e4:51:9b:7a:f9: b5:44:ea:50:88:6f:87:af:8d:f5:84:e3:a4:23:0b: af:2a:e8:9d:7f:0f:c9:5a:58:5a:36:6a:4f:84:75: 98:04:1f:fb:4d:d5:c2:e6:32:ac:0c:ec:76:26:33: c3:9d:79:86:26:dc:0e:39:ae:47:60:4e:af:6f:59: 33:07:91:a0:c3:17:af:53:af:1d:b3:80:8a:c1:3a: d9:88:ac:7f:ab:fe:3f:22:31:92:5b:31:71:e3:3a: 7b:1a:95:79:84:69:f3:fc:eb:cc:44:47:4f:66:08: cf:ba:7b:f9:69:3a:11:97:f5:b6:2b:eb:ff:28:bf: 40:a8:41:a8:d5:0f:8d:d5:24:d3:8c:d4:39:94:2d: a9:f2:cc:b0:42:19:22:1c:2e:51:09:e6:4c:34:50: e8:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:9C:25:E8:79:EA:70:6D:8E:59:6C:43:A1:0F:4E:0D:C4:4B:F4:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/40bb1b4d-5dfa-347c-9634-126e31726d54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/239e2a72-9347-4316-9be7-20bdf6512711.crl X509v3 Authority Key Identifier: keyid:C7:00:5A:76:42:60:11:9F:ED:7A:6F:7F:67:94:62:64:EC:2D:6B:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711.cer sbgp-ipAddrBlock: critical IPv6: 2604:1740::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:a0:ae:7b:44:46:f3:86:58:d0:75:09:b4:b8:92:d8:5c:2e: 20:dd:9d:b0:d9:0d:9d:a5:53:cb:6f:3f:84:07:ac:48:f2:56: 0a:18:f7:c1:12:99:85:68:13:e5:2d:e3:da:cf:dd:fd:3b:a7: cf:6f:ee:64:83:8e:2d:e5:2c:cf:78:34:4b:97:5a:0a:4c:e5: c7:6d:1a:ca:ac:ed:28:83:3b:14:cd:f1:05:3f:d2:e5:77:e6: 3b:02:d0:71:8d:50:82:e5:7a:c8:d3:b7:78:03:dd:e7:87:b6: 0d:97:d2:f2:d1:04:e0:58:6b:52:6b:71:64:be:f0:29:28:44: 7c:93:47:77:e7:9d:81:53:e9:70:6c:e0:d6:66:99:13:42:76: 32:cc:72:22:2d:44:32:e3:08:61:19:53:f9:4c:07:dc:38:79: 7e:ed:ef:47:22:45:a1:28:77:8a:91:f0:f2:2f:42:f2:53:b5: 7d:4b:30:04:fe:b6:a4:b0:33:3d:3f:90:c7:3d:71:20:9d:e9: 71:fb:0b:30:ba:f2:6f:4f:84:bc:29:9c:c6:30:28:54:b7:1e: b2:4e:72:86:86:97:a6:66:4e:68:cb:3a:55:68:9c:77:99:64: f3:87:e3:68:4e:1c:e9:5b:6b:1e:f8:d5:91:16:bd:d7:bd:55: 6d:18:bc:a5 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEss6zWnhZzhilAJWAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjM5ZTJhNzItOTM0Ny00MzE2LTliZTctMjBiZGY2NTEy NzExMB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk NDJmZDQyZjMtYzczZS00MDM4LTk5YWMtMDJkYjNjOTE4NDUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDVOrhy52wWnEIE0SfYAhUUXcIXq9hGLQIQZ lgdG5Wme7nJe4tSIBLuF/A+Cdf77rxk5Fru4mmGtbvaXbkoBg4tAhrN2YjI38bmu ERynnMmA2Qa9HX1TWDvv7oEtY6uuyJ8t5FGbevm1ROpQiG+Hr431hOOkIwuvKuid fw/JWlhaNmpPhHWYBB/7TdXC5jKsDOx2JjPDnXmGJtwOOa5HYE6vb1kzB5Ggwxev U68ds4CKwTrZiKx/q/4/IjGSWzFx4zp7GpV5hGnz/OvMREdPZgjPunv5aToRl/W2 K+v/KL9AqEGo1Q+N1STTjNQ5lC2p8sywQhkiHC5RCeZMNFDopQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFH6cJeh56nBtjllsQ6EPTg3ES/RUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yMzll MmE3Mi05MzQ3LTQzMTYtOWJlNy0yMGJkZjY1MTI3MTEvNDBiYjFiNGQtNWRmYS0z NDdjLTk2MzQtMTI2ZTMxNzI2ZDU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjM5ZTJhNzItOTM0Ny00MzE2LTli ZTctMjBiZGY2NTEyNzExLzIzOWUyYTcyLTkzNDctNDMxNi05YmU3LTIwYmRmNjUx MjcxMS5jcmwwHwYDVR0jBBgwFoAUxwBadkJgEZ/tem9/Z5RiZOwta1QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yMzllMmE3Mi05MzQ3LTQzMTYtOWJlNy0yMGJk ZjY1MTI3MTEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQXQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBHoK57REbzhljQdQm0uJLYXC4g3Z2w2Q2dpVPLbz+EB6xI8lYKGPfB EpmFaBPlLePaz939O6fPb+5kg44t5SzPeDRLl1oKTOXHbRrKrO0ogzsUzfEFP9Ll d+Y7AtBxjVCC5XrI07d4A93nh7YNl9Ly0QTgWGtSa3FkvvApKER8k0d3552BU+lw bODWZpkTQnYyzHIiLUQy4whhGVP5TAfcOHl+7e9HIkWhKHeKkfDyL0LyU7V9SzAE /raksDM9P5DHPXEgnelx+wswuvJvT4S8KZzGMChUtx6yTnKGhpemZk5oyzpVaJx3 mWTzh+NoThzpW2se+NWRFr3XvVVtGLyl -----END CERTIFICATE-----Generated at Mon Oct 20 16:14:06 2025 by rpki-client