$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/f85e5abc-3d60-36c5-863e-b7fef14de2d0.roa File: f85e5abc-3d60-36c5-863e-b7fef14de2d0.roa (raw, json) Hash identifier: ysXI0UoQzsmCfCZH9aW2Lb+RZwFKO20VUd+4z5GThK8= Subject key identifier: 4B:31:7A:86:E0:5C:A3:50:D6:7D:0D:15:D9:24:79:0A:4B:80:D6:D9 Certificate issuer: /CN=5c19a246-d9fa-481a-a4d7-010af8c132b3 Certificate serial: 010D0C9F4328584B821E21441912D088659BCB80 Authority key identifier: 18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/f85e5abc-3d60-36c5-863e-b7fef14de2d0.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 398395 IP address blocks: 2606:fc40:40::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1e:21:44:19:12:d0:88:65:9b:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c19a246-d9fa-481a-a4d7-010af8c132b3 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=b4ac16b9-44fb-4d91-a4c4-f81ccdb078fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:a2:c4:3e:19:dd:28:04:1c:39:02:ff:e9:a3: 07:5b:c7:87:6d:df:94:da:02:c3:2d:fd:57:20:eb: 9b:4a:79:22:3f:28:56:78:02:78:a2:ce:f3:5d:ed: 09:9e:2d:c8:ef:7d:a7:ff:eb:d5:39:85:b8:ea:e2: 42:04:0e:2f:9d:5b:35:da:0b:2e:f5:51:55:de:bc: 9d:b7:24:bc:62:0a:38:20:c9:05:f6:5f:4b:e8:b0: 48:62:06:c9:0a:70:b7:43:88:ee:a9:50:8e:ac:61: 84:53:7c:b0:d8:6a:ba:0e:b6:ec:f5:e7:65:fd:01: 03:5c:87:d2:17:78:e1:f2:31:1a:57:95:34:16:f3: c9:b3:1c:02:b1:51:d3:2e:01:95:b1:39:16:0c:3c: a6:5a:34:92:fc:68:9a:36:1f:c9:f3:31:0d:69:f9: 2c:cf:d4:a6:dd:3d:d5:d1:d3:e8:ec:c1:3a:d6:24: b7:16:c4:1b:45:86:e6:54:21:dc:92:0a:ca:fb:38: 42:a2:08:92:74:b5:a9:5a:16:fc:4a:37:8e:93:d3: b5:ec:ba:83:c0:a0:58:d0:67:f6:c7:d4:07:f9:95: d9:bf:41:df:24:2e:36:fe:2b:8b:a9:29:d0:d3:6b: d3:c1:4c:dd:6a:36:2c:54:93:25:e1:24:41:c6:8b: 7b:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:31:7A:86:E0:5C:A3:50:D6:7D:0D:15:D9:24:79:0A:4B:80:D6:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/f85e5abc-3d60-36c5-863e-b7fef14de2d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl X509v3 Authority Key Identifier: keyid:18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer sbgp-ipAddrBlock: critical IPv6: 2606:fc40:40::/42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:50:c5:58:41:fe:80:f7:88:36:c7:77:fa:49:c4:1e:7a:5d: ba:93:eb:67:2b:31:0f:ee:5e:20:9c:46:e7:e5:77:39:31:5a: 28:13:19:88:19:48:bd:56:64:f5:1a:47:50:31:7a:10:23:e3: 6c:f7:e3:5f:3b:20:32:60:67:30:13:91:e8:07:1f:57:f0:ba: 45:ef:d1:24:5e:51:cf:cd:80:ff:5c:b1:be:6e:42:db:37:46: 3e:88:1e:2d:40:0b:a9:fb:d4:3c:25:77:54:b8:e4:04:02:48: 5d:fe:2b:2a:13:0a:d5:62:f7:4d:28:a2:a5:32:4b:ac:66:96: 6f:1a:cd:bc:6f:b5:93:f4:9a:65:e3:cc:b4:94:26:9d:88:fd: 05:c3:98:bf:b0:31:4b:ec:d5:91:42:5a:aa:d3:fa:36:8a:97: 70:7b:2f:b5:bf:3a:04:c5:9f:60:ed:5f:f4:46:47:0a:74:87: e4:e2:b5:38:3f:17:05:a0:12:50:80:e3:55:65:a4:6b:d7:0b: 1a:46:d7:78:28:37:d1:8d:f3:67:ec:51:a4:44:ae:00:4c:b4: 2d:ea:37:98:f5:d5:b2:a0:cf:2c:68:30:84:c1:ea:a0:ad:ee: 13:6b:a6:1e:72:69:ea:69:d3:3a:54:01:e8:bb:5b:7b:00:e9: 63:0b:35:8d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuCHiFEGRLQiGWby4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWMxOWEyNDYtZDlmYS00ODFhLWE0ZDctMDEwYWY4YzEz MmIzMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk YjRhYzE2YjktNDRmYi00ZDkxLWE0YzQtZjgxY2NkYjA3OGZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4aLEPhndKAQcOQL/6aMHW8eHbd+U2gLDLf1X IOubSnkiPyhWeAJ4os7zXe0Jni3I732n/+vVOYW46uJCBA4vnVs12gsu9VFV3ryd tyS8Ygo4IMkF9l9L6LBIYgbJCnC3Q4juqVCOrGGEU3yw2Gq6Drbs9edl/QEDXIfS F3jh8jEaV5U0FvPJsxwCsVHTLgGVsTkWDDymWjSS/GiaNh/J8zENafksz9Sm3T3V 0dPo7ME61iS3FsQbRYbmVCHckgrK+zhCogiSdLWpWhb8SjeOk9O17LqDwKBY0Gf2 x9QH+ZXZv0HfJC42/iuLqSnQ02vTwUzdajYsVJMl4SRBxot7WwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEsxeobgXKNQ1n0NFdkkeQpLgNbZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81YzE5 YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBhZjhjMTMyYjMvZjg1ZTVhYmMtM2Q2MC0z NmM1LTg2M2UtYjdmZWYxNGRlMmQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNWMxOWEyNDYtZDlmYS00ODFhLWE0 ZDctMDEwYWY4YzEzMmIzLzVjMTlhMjQ2LWQ5ZmEtNDgxYS1hNGQ3LTAxMGFmOGMx MzJiMy5jcmwwHwYDVR0jBBgwFoAUGBmr0BGL/MK+/l1zc0BDuuWTrnAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81YzE5YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBh ZjhjMTMyYjMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGJgb8QABA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAlQxVhB/oD3iDbHd/pJxB56XbqT62crMQ/uXiCcRufldzkxWigT GYgZSL1WZPUaR1AxehAj42z34187IDJgZzATkegHH1fwukXv0SReUc/NgP9csb5u Qts3Rj6IHi1AC6n71Dwld1S45AQCSF3+KyoTCtVi900ooqUyS6xmlm8azbxvtZP0 mmXjzLSUJp2I/QXDmL+wMUvs1ZFCWqrT+jaKl3B7L7W/OgTFn2DtX/RGRwp0h+Ti tTg/FwWgElCA41VlpGvXCxpG13goN9GN82fsUaRErgBMtC3qN5j11bKgzyxoMITB 6qCt7hNrph5yaepp0zpUAei7W3sA6WMLNY0= -----END CERTIFICATE-----Generated at Mon Oct 20 04:58:00 2025 by rpki-client